Free Designing Cisco Enterprise Networks (300-420 ENSLD) Exam 300-420 Exam Practice Test

Prior to establishing full-mesh iPsec tunnels in a typical Cisco SD-WAN deployment, which mechanism do WAN Edge routers use to exchange Key information for data plane encryption?

• They use vSmart controllers as key exchange servers.
• They use vManage as a key exchange server.
• They use IKEv2 when exchanging keys with each other.
• They use vBond as a key exchange server.

A global organization with several branches hired a network architect to design an overlay VPN solution. The branches communicate with each other frequently. The customer expects to add more branches in the future. To meet the customer's security requirements, the architect plans to provide traffic protection using dynamic IPsec tunnels. Which solution should the architect choose?

• DMVPN
• EasyVPN
• GETVPN
• L2TP

A customer's current Layer 2 infrastructure is running Spanning Tree 802.1d, and all configuration changes are manually implemented on each switch. An architect must redesign the Layer 2 domain to achieve these goals:reduce the impact of topology changesreduce the time spent on network administrationreduce manual configuration errorsWhich two solutions should the architect include in the new design? (Choose two.)

• Implement Rapid PVST+ instead of STP.
• Implement MST instead of STP.
• Use VTP to propagate VLAN information and to prune unused VLANs.
• Configure broadcast and multicast storm control on all switches.
• Configure dynamic trunking protocol to propagate VLAN information.

A client is moving to Model-Driven Telemetry and requires periodic updates. What must the network architect consider with this design?

• Updates that contain changes within the data are sent only when changes occur.
• Empty data subscriptions do not generate empty update notifications.
• Periodic updates include a full copy of the data that is subscribed to.
• The primary push update is sent immediately and cannot be delayed.

A customer reports that each time a networking component fails, OSPF recalculates the backup path, with causes a short outage. Which solution must the customer implement to improve this situation?

• Aggressive OSPF timers
• LFA FRR
• Incremental SPF
• BFD

When a network is designed using IS-IS protocol, which two circuit types are supported? (Choose two.)

• nonbroadcast multiaccess
• multiaccess
• point-to-multipoint
• nonbroadcast
• point-to-point

What is the purpose of a control plane node in a Cisco SD-Access network fabric?

• to maintain the endpoint database and mapping between endpoints and edge nodes
• to detect endpoints in the fabric and inform the host tracking database of EID-to-fabric-edge node bindings
• to identify and authenticate endpoints within the network fabric
• to act as the network gateway between the network fabric and outside networks

An architect is creating a migration strategy for a large organization in which the choice made by the application between IPv6 and IPv4 is based on the DNS request. Which migration strategy does the architect choose?

• AFT for public web presence
• host-initiated tunnels
• dual stack
• site-to-site IPv6 over IPv4 tunnels

An engineer is designing a BGP network for a large customer. To permit efficient scaling, the BGP domain is split into clusters. Which peering solution should be used between the route reflectors in different clusters for the BGP routes to be propagated appropriately?

• The route reflectors should be made dents of each other.
• The route reflectors should be nonclients with regards to each other.
• The route reflectors should not have any kind of BGP peering.
• The route reflectors should have peering through another nonclient router.

Which QoS feature responds to network congestion by dropping lower priority packets?

• CBWFQ
• tail drop
• WRED
• strict priority