mcAfee Secure Website
23

Cisco 300-420 Bundle

Exam Code: 300-420

Exam Name Designing Cisco Enterprise Networks (ENSLD)

Certification Provider: Cisco

Corresponding Certification: CCNP Enterprise

300-420 Training Materials $25.00

Reliable & Actual Study Materials for 300-420 Exam Success

The Latest 300-420 Exam Questions as Experienced in the Actual Test!

  • 24
    Questions & Answers

    300-420 Questions & Answers

    416 Questions & Answers

    Includes questions types found on actual exam such as drag and drop, simulation, type in, and fill in the blank.

  • 25
    300-420 Video Course

    300-420 Training Course

    75 Video Lectures

    Based on Real Life Scenarios which you will encounter in exam and learn by working with real equipment.

exam =32

Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests

Guarantee

Satisfaction Guaranteed

Pass4sure has a remarkable Cisco Candidate Success record. We're confident of our products and provide no hassle product exchange. That's how confident we are!

99.3% Pass Rate
Total Cost: $164.98
Bundle Price: $139.98

Purchase Individually

  • exam =34
    Questions & Answers

    Questions & Answers

    416 Questions

    $124.99
    exam =35
  • exam =37
    300-420 Video Course

    Training Course

    75 Video Lectures

    $39.99

Cisco 300-420 Practice Test 10

Question 90

An enterprise network design must address this condition: A campus plans an ordinary IPv4 /27 for a voice VLAN with seventy active phones and expects enough usable addresses after adding a default gateway. Which analysis best identifies the architectural gap?

  1. A /15 covers two consecutive aligned /16 networks and the selected /15 omits 10.66.0.0/16 while including unintended space.
  2. A flat random allocation from the /48 wastes the opportunity for site-level hierarchy and complicates growth and route summarization.
  3. An IPv4 /27 ordinarily has only thirty usable host addresses, so it cannot accommodate the stated phones and gateway.
  4. Randomly scattered branch subnets prevent region-level summarization and make routing and change control unnecessarily complex.

Explanation

Correct Answer

C:

The relevant principle is: An IPv4 /27 ordinarily has only thirty usable host addresses, so it cannot accommodate the stated phones and gateway. A valid architectural response is: Allocate a suitably sized /25 or larger subnet after accounting for network, broadcast, gateway and expected device growth. The expected evidence is: An address-capacity calculation supports all phones plus gateway, and address allocation tests show no unexpected lease exhaustion.

Incorrect Answers

A:

A /15 covers two consecutive aligned /16 networks and the selected /15 omits 10.66.0.0/16 while including unintended space. “Create aligned aggregates that cover actual component prefixes and validate binary prefix boundaries and the destination routing behavior” would remedy that alternative situation, but it would not correct the present issue: an IPv4 /27 ordinarily has only thirty usable host addresses, so it cannot accommodate the stated phones and gateway.

B:

“Reserve logical per-site prefixes within the /48, allocate appropriate /64 LANs and maintain documented room for subnets and future services” is the supported response when a flat random allocation from the /48 wastes the opportunity for site-level hierarchy and complicates growth and route summarization. Here the decisive response is “Allocate a suitably sized /25 or larger subnet after accounting for network, broadcast, gateway and expected device growth”, so that different intervention does not meet the stated requirement.

D:

Randomly scattered branch subnets prevent region-level summarization and make routing and change control unnecessarily complex. “Reserve contiguous region-sized address blocks, allocate branch VLSM prefixes inside each block and summarize only reachable ranges at distribution boundaries” applies to that other condition. The reported evidence is a campus plans an ordinary IPv4 /27 for a voice VLAN with seventy active phones and expects enough usable addresses after adding a default gateway; this alternative would address the wrong dependency.

Question 91

During acceptance of a proposed enterprise topology, the reviewers observe: A corporation connects twice to one upstream AS and wants to suggest a preferred entry point to that neighbor, yet edits only routing metrics inside its own OSPF core. What verification result demonstrates the proposed fix works?

  1. The upstream chooses the intended link when its policy compares MED, while failover still works on link loss.
  2. Internal routers select the preferred exit under healthy conditions and shift correctly when its route disappears.
  3. New iBGP clients receive required routes through either reflector and remain connected during single-reflector maintenance.
  4. External looking-glass observations indicate the intended preference where upstream policy allows, without losing reachability.

Explanation

Correct Answer

A:

This directly validates BGP med neighboring exit choice: Internal OSPF cost does not communicate an intended interconnect preference to the neighboring autonomous system. The linked design intervention is: Use supported BGP MED where appropriate, coordinate the provider's comparison behavior and keep resilient alternate exits. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

B:

AS-path prepending mainly affects remote path selection; outbound path preference within the local AS is commonly controlled with local preference. “Set governed BGP local preference on inbound routes from the preferred provider, with consistent internal propagation” would remedy that alternative situation, but it would not correct the present issue: internal OSPF cost does not communicate an intended interconnect preference to the neighboring autonomous system.

C:

“Introduce redundant route reflectors with appropriate client hierarchy and loop-prevention identifiers” is the supported response when conventional iBGP full mesh grows quadratically and becomes costly to configure, observe and recover. Here the decisive response is “Use supported BGP MED where appropriate, coordinate the provider's comparison behavior and keep resilient alternate exits”, so that different intervention does not meet the stated requirement.

D:

Local preference is not exported between autonomous systems, so changing it cannot directly govern external networks' inbound selection. “Apply approved outbound AS-path prepending on the less-preferred transit and check provider acceptance and alternate routing” applies to that other condition. The reported evidence is a corporation connects twice to one upstream AS and wants to suggest a preferred entry point to that neighbor, yet edits only routing metrics inside its own OSPF core; this alternative would address the wrong dependency.

Question 92

A regional network architect receives this requirement: A network has existing IS-IS IPv4 reachability and adds IPv6-only applications, but the design assumes IPv4 reachability automatically creates IPv6 forwarding information. What verification result demonstrates the proposed fix works?

  1. IPv6 routes appear in the intended table and application probes succeed without relying on IPv4-only fallback.
  2. Query propagation to spokes is reduced and branch traffic converges within the intended service recovery target.
  3. Intended neighbors re-form after key rollout while an unconfigured or invalidly keyed test router cannot join the domain.
  4. SPF paths reflect approved link costs under normal and failure cases with no accidental preference for slower WAN links.

Explanation

Correct Answer

A:

This directly validates is-is dual-stack address-family strategy: Protocol adjacency and IPv4 routes do not alone establish correct IPv6 reachability, interface addressing or address-family support. The linked design intervention is: Implement supported IS-IS IPv6 reachability with interface family configuration and consistent topology preferences. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

B:

Unbounded EIGRP query scope and nontransit spokes can prolong active route computation across a large topology. “Declare eligible nontransit branches as EIGRP stubs and summarize at appropriate aggregation points with verified alternate paths” would remedy that alternative situation, but it would not correct the present issue: protocol adjacency and IPv4 routes do not alone establish correct IPv6 reachability, interface addressing or address-family support.

C:

“Deploy supported IS-IS authentication with coordinated algorithms and keys and restrict peers to intended segments” is the supported response when an unprotected adjacency trust boundary can admit unauthorized IS-IS control messages into a routing domain. Here the decisive response is “Implement supported IS-IS IPv6 reachability with interface family configuration and consistent topology preferences”, so that different intervention does not meet the stated requirement.

D:

Mixed or unsuitable metric styles can undermine consistent path-cost planning and overflow the intended metric range. “Standardize supported wide-metric design and audit interface cost policies across participating IS-IS devices” applies to that other condition. The reported evidence is a network has existing IS-IS IPv4 reachability and adds IPv6-only applications, but the design assumes IPv4 reachability automatically creates IPv6 forwarding information; this alternative would address the wrong dependency.

Question 93

During acceptance of a proposed enterprise topology, the reviewers observe: A provider WAN policy places a broad match-any business group before a specific real-time collaboration class, so important voice traffic gets generic treatment. Which design decision resolves the stated requirement?

  1. Run controlled traffic tests and inspect class and queue counters, delay and drop statistics end to end.
  2. Refine class-map criteria and supported policy evaluation to classify the real-time flows before generic groups.
  3. Create degraded-mode QoS and application admission policy based on backup capacity and essential services.
  4. Reserve suitable queue and burst tolerance based on codec behavior, media priority and empirically observed peak load.

Explanation

Correct Answer

B:

The design gap is: Traffic classification order and policy constructs can cause broad conditions to overshadow intended more-specific class handling. The recommended correction is: Refine class-map criteria and supported policy evaluation to classify the real-time flows before generic groups. Validate it through: Sample flows match the intended class counters and receive tested queue treatment under link congestion.

Incorrect Answers

A:

That change concerns qos validation with actual queue counters, where A syntactically installed QoS policy does not establish that actual applications match intended classes or receive required forwarding treatment. The reported issue instead stems from: Traffic classification order and policy constructs can cause broad conditions to overshadow intended more-specific class handling.

C:

That change concerns qos oversubscription during backup, where Policy percentages alone do not preserve service if critical aggregate traffic exceeds reduced failover link capacity. In this question the necessary remedy is “Refine class-map criteria and supported policy evaluation to classify the real-time flows before generic groups”, which this alternative does not provide.

D:

That change concerns video traffic burst and jitter buffer design, where Average throughput can hide instantaneous bursts and delay variation that disrupt real-time media even when link utilization seems moderate. The observed condition is a provider WAN policy places a broad match-any business group before a specific real-time collaboration class, so important voice traffic gets generic treatment; this mechanism addresses another problem.

Question 94

During a Cisco enterprise architecture review, the team finds: An edge router shares eBGP-learned routes with internal iBGP peers, but remote clients cannot resolve the unchanged external next-hop address. Which measured observation confirms the intended architecture?

  1. Internal routers select the preferred exit under healthy conditions and shift correctly when its route disappears.
  2. External looking-glass observations indicate the intended preference where upstream policy allows, without losing reachability.
  3. The upstream chooses the intended link when its policy compares MED, while failover still works on link loss.
  4. All internal clients install the intended route with resolvable next hops and controlled failover remains intact.

Explanation

Correct Answer

D:

This directly validates BGP next hop self across ibgp: iBGP typically preserves the external next hop, which must be reachable through the internal routing infrastructure. The linked design intervention is: Provide appropriate next-hop-self policy or valid internal reachability for external BGP next hops with loop-free forwarding. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

A:

AS-path prepending mainly affects remote path selection; outbound path preference within the local AS is commonly controlled with local preference. “Set governed BGP local preference on inbound routes from the preferred provider, with consistent internal propagation” would remedy that alternative situation, but it would not correct the present issue: IBGP typically preserves the external next hop, which must be reachable through the internal routing infrastructure.

B:

“Apply approved outbound AS-path prepending on the less-preferred transit and check provider acceptance and alternate routing” is the supported response when local preference is not exported between autonomous systems, so changing it cannot directly govern external networks' inbound selection. Here the decisive response is “Provide appropriate next-hop-self policy or valid internal reachability for external BGP next hops with loop-free forwarding”, so that different intervention does not meet the stated requirement.

C:

Internal OSPF cost does not communicate an intended interconnect preference to the neighboring autonomous system. “Use supported BGP MED where appropriate, coordinate the provider's comparison behavior and keep resilient alternate exits” applies to that other condition. The reported evidence is an edge router shares eBGP-learned routes with internal iBGP peers, but remote clients cannot resolve the unchanged external next-hop address; this alternative would address the wrong dependency.

Question 95

An enterprise network design must address this condition: An enterprise places voice, video, backups and database replication in one strict-priority class, and ordinary business applications starve during a site backup. What is the most relevant cause of the design failure?

  1. Trusting unvalidated endpoint DSCP markings allows unauthorized traffic to consume preferential network resources.
  2. Per-flow IntServ state scales differently from aggregated DiffServ classes and can become operationally expensive for large multi-site deployments.
  3. An oversized or unbounded strict-priority queue can consume interface capacity and deny adequate service to other classes.
  4. Policing enforces a rate by dropping or remarking excess packets, whereas shaping ordinarily smooths outbound bursts using buffers.

Explanation

Correct Answer

C:

The relevant principle is: An oversized or unbounded strict-priority queue can consume interface capacity and deny adequate service to other classes. A valid architectural response is: Reserve low-latency priority treatment for justified real-time traffic with controlled bandwidth and balanced class allocations. The expected evidence is: In a congestion test, voice latency remains within target and business-critical nonvoice flows retain their planned minimum bandwidth.

Incorrect Answers

A:

Trusting unvalidated endpoint DSCP markings allows unauthorized traffic to consume preferential network resources. “Define an appropriate trust boundary and classify or remark traffic at access based on authenticated application and endpoint context” would remedy that alternative situation, but it would not correct the present issue: an oversized or unbounded strict-priority queue can consume interface capacity and deny adequate service to other classes.

B:

“Choose a scalable DiffServ class-based policy where application requirements permit, reserving per-flow mechanisms for justified domains” is the supported response when per-flow IntServ state scales differently from aggregated DiffServ classes and can become operationally expensive for large multi-site deployments. Here the decisive response is “Reserve low-latency priority treatment for justified real-time traffic with controlled bandwidth and balanced class allocations”, so that different intervention does not meet the stated requirement.

D:

Policing enforces a rate by dropping or remarking excess packets, whereas shaping ordinarily smooths outbound bursts using buffers. “Use shaping for traffic that can tolerate buffering and selective policing where a hard ingress contract is needed” applies to that other condition. The reported evidence is an enterprise places voice, video, backups and database replication in one strict-priority class, and ordinary business applications starve during a site backup; this alternative would address the wrong dependency.

Question 96

A network engineering team compares alternatives after discovering: A branch OSPF area has no external-route ASBR but receives unnecessary external LSAs from the backbone and has constrained router memory. What verification result demonstrates the proposed fix works?

  1. Routers retain intra-area reachability and a default path without carrying unnecessary external LSAs.
  2. A simulated ABR outage preserves supported inter-area routes through the remaining valid backbone connection.
  3. The backbone learns intended summaries while an individual branch route change does not trigger unnecessary detailed inter-area flooding.
  4. Candidate external routes select the intended exit after internal path costs change, with no unplanned long-haul detours.

Explanation

Correct Answer

A:

This directly validates ospf stub area external lsa control: A normal area floods external routing information that stub-capable branches may not need when a default route is sufficient. The linked design intervention is: Choose a supported stub-area design consistently across the area and ensure the ABR provides an appropriate default route. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

B:

OSPF hierarchical inter-area connectivity depends on a stable backbone design and resilient area border connectivity. “Design redundant ABRs with valid backbone area connectivity and deterministic cost preferences for inter-area paths” would remedy that alternative situation, but it would not correct the present issue: a normal area floods external routing information that stub-capable branches may not need when a default route is sufficient.

C:

“Allocate summarizable ranges and apply appropriate ABR area range configuration with complete component-route validation” is the supported response when a fragmented area-address plan and missing ABR inter-area summarization cause avoidable detailed LSAs to propagate. Here the decisive response is “Choose a supported stub-area design consistently across the area and ensure the ABR provides an appropriate default route”, so that different intervention does not meet the stated requirement.

D:

External Type 2 cost behavior does not account for internal cost in the same way as Type 1 when external metrics differ. “Select E1 or E2 route treatment to reflect the required exit preference, testing both external and internal metrics” applies to that other condition. The reported evidence is a branch OSPF area has no external-route ASBR but receives unnecessary external LSAs from the backbone and has constrained router memory; this alternative would address the wrong dependency.

Question 97

A campus and WAN design workshop reports: An engineer advertises 10.64.0.0/15 to summarize 10.64.0.0/16 and 10.66.0.0/16, causing traffic for one site to be routed outside its intended aggregation boundary. Which measured observation confirms the intended architecture?

  1. Both intended /16 destinations use valid summaries while test addresses outside the owned ranges are not falsely advertised.
  2. Applications in both sites reach their intended peers without ambiguous next-hop selection, and tests confirm no accidental cross-tenant translation.
  3. An address-capacity calculation supports all phones plus gateway, and address allocation tests show no unexpected lease exhaustion.
  4. New sites can consume predictable nonoverlapping /64s, and routing summaries reflect approved sites without covering unrelated destinations.

Explanation

Correct Answer

A:

This directly validates ipv4 summarization boundary alignment: A /15 covers two consecutive aligned /16 networks and the selected /15 omits 10.66.0.0/16 while including unintended space. The linked design intervention is: Create aligned aggregates that cover actual component prefixes and validate binary prefix boundaries and the destination routing behavior. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

B:

Overlapping address spaces are ambiguous to ordinary destination-based routing and require unique addressing or deliberate translation boundaries. “Choose a phased renumbering design or carefully scoped NAT between the overlapping domains with clear DNS and application dependencies” would remedy that alternative situation, but it would not correct the present issue: a /15 covers two consecutive aligned /16 networks and the selected /15 omits 10.66.0.0/16 while including unintended space.

C:

“Allocate a suitably sized /25 or larger subnet after accounting for network, broadcast, gateway and expected device growth” is the supported response when an IPv4 /27 ordinarily has only thirty usable host addresses, so it cannot accommodate the stated phones and gateway. Here the decisive response is “Create aligned aggregates that cover actual component prefixes and validate binary prefix boundaries and the destination routing behavior”, so that different intervention does not meet the stated requirement.

D:

A flat random allocation from the /48 wastes the opportunity for site-level hierarchy and complicates growth and route summarization. “Reserve logical per-site prefixes within the /48, allocate appropriate /64 LANs and maintain documented room for subnets and future services” applies to that other condition. The reported evidence is an engineer advertises 10.64.0.0/15 to summarize 10.64.0.0/16 and 10.66.0.0/16, causing traffic for one site to be routed outside its intended aggregation boundary; this alternative would address the wrong dependency.

Question 98

During a Cisco enterprise architecture review, the team finds: A branch selects two MPLS circuits from the same provider that terminate in one local trench and claims the resulting design is carrier diverse. Which measured observation confirms the intended architecture?

  1. Cloud-bound application traffic follows the intended dedicated connection and tested failure falls back to a safe approved path.
  2. A controlled interbranch session forms its authorized direct tunnel and delay drops without bypassing encryption.
  3. A single conduit or provider failure leaves one verified independent WAN path available for business-critical flows.
  4. The hub lists the registered spoke and protected branch routing sessions establish over the intended tunnel.

Explanation

Correct Answer

C:

This directly validates sd wan edge last mile diversity: Logical dual-circuit contracts may share a physical access path and suffer a common-cause outage. The linked design intervention is: Choose WAN edge circuits with validated last-mile, provider and facility diversity where the service recovery target requires it. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

A:

An encrypted Internet overlay does not provide the same private carrier connectivity, SLA and traffic-engineering options as a qualified dedicated cloud circuit. “Compare direct cloud private interconnect with managed Internet VPN based on security, bandwidth, route exchange and service commitments” would remedy that alternative situation, but it would not correct the present issue: logical dual-circuit contracts may share a physical access path and suffer a common-cause outage.

B:

“Use a supported DMVPN phase and NHRP routing design that safely establishes eligible spoke-to-spoke tunnels” is the supported response when a purely hub-and-spoke forwarding policy can add latency and load when the DMVPN design is intended to allow direct spoke shortcuts. Here the decisive response is “Choose WAN edge circuits with validated last-mile, provider and facility diversity where the service recovery target requires it”, so that different intervention does not meet the stated requirement.

D:

Dynamic spoke resolution needs correct NHRP network ID, authentication, hub mapping and reachable tunnel source rather than only a live Internet connection. “Align supported NHRP and tunnel registration settings and verify the hub can map the spoke's current public transport address” applies to that other condition. The reported evidence is a branch selects two MPLS circuits from the same provider that terminate in one local trench and claims the resulting design is carrier diverse; this alternative would address the wrong dependency.

Question 99

A network engineering team compares alternatives after discovering: An OSPF transport remains physically up during a middle-network failure and the route takes too long to reconverge using default Hello and dead timers. Which acceptance result best proves the design meets its requirement?

  1. BFD declares a controlled transit failure and the routed path shifts within the approved restoration target.
  2. New iBGP clients receive required routes through either reflector and remain connected during single-reflector maintenance.
  3. An adjacency reaches full state without an unnecessary DR election and recovers normally after link flap.
  4. The provider receives only authorized public routes while sensitive internal address space is absent from advertised-routes output.

Explanation

Correct Answer

A:

This directly validates ospf bfd rapid failure detection: Layer 1 carrier state may not reveal a downstream path failure and slow neighbor detection extends blackhole time. The linked design intervention is: Deploy supported BFD for the intended OSPF peers, validate timers against platform capacity and test false-positive risk. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

B:

Conventional iBGP full mesh grows quadratically and becomes costly to configure, observe and recover. “Introduce redundant route reflectors with appropriate client hierarchy and loop-prevention identifiers” would remedy that alternative situation, but it would not correct the present issue: layer 1 carrier state may not reveal a downstream path failure and slow neighbor detection extends blackhole time.

C:

“Use supported point-to-point OSPF network type consistently on both sides where the physical design permits” is the supported response when default broadcast OSPF network behavior can elect designated routers even when the topology is only a two-router link. Here the decisive response is “Deploy supported BFD for the intended OSPF peers, validate timers against platform capacity and test false-positive risk”, so that different intervention does not meet the stated requirement.

D:

Unrestricted BGP export policy exposes destinations not authorized for upstream announcement and risks routing leaks. “Apply explicit approved outbound prefix filters at the eBGP boundary and validate maximum prefix expectations” applies to that other condition. The reported evidence is an OSPF transport remains physically up during a middle-network failure and the route takes too long to reconverge using default Hello and dead timers; this alternative would address the wrong dependency.

Question 100

During a Cisco enterprise architecture review, the team finds: A border advertises a BGP aggregate for several site prefixes but after one internal site is withdrawn, the advertised summary still attracts traffic to its unavailable block. Which measured observation confirms the intended architecture?

  1. Healthy component prefixes remain reachable while the withdrawn site's traffic follows a documented safe failure behavior.
  2. IPv6 packets pass between intended tunnel endpoints while the provider core still carries IPv4 encapsulation.
  3. The forwarding table contains the intended eligible next hops and multiple flows distribute without unintended packet duplication.
  4. During a controlled restart, eligible forwarding continuity is maintained without retaining stale blackholed routes past limits.

Explanation

Correct Answer

A:

This directly validates BGP aggregate summary discard behavior: BGP aggregation can hide component failures and attract traffic for unreachable portions of the summarized prefix. The linked design intervention is: Choose an aggregate policy with reviewed component-route dependencies, conservative discard behavior and correct reachability design. Results concerning another subsystem do not prove this requirement.

Incorrect Answers

B:

An IPv4-only underlay cannot natively carry IPv6 forwarding without an overlay or other transition capability. “Use a supported IPv6-over-IPv4 tunnel with correct endpoint reachability, encapsulation security and effective MTU” would remedy that alternative situation, but it would not correct the present issue: BGP aggregation can hide component failures and attract traffic for unreachable portions of the summarized prefix.

C:

“Evaluate path attributes and supported multipath settings, then choose a design that preserves deterministic failover” is the supported response when BGP additional paths must satisfy supported multipath eligibility rules and configured maximum-path policy to share traffic. Here the decisive response is “Choose an aggregate policy with reviewed component-route dependencies, conservative discard behavior and correct reachability design”, so that different intervention does not meet the stated requirement.

D:

Graceful restart depends on both peers' supported capabilities and bounded stale-route handling, not merely a routing session name. “Enable and verify supported graceful restart with sensible stale timers and failover safeguards where appropriate” applies to that other condition. The reported evidence is a border advertises a BGP aggregate for several site prefixes but after one internal site is withdrawn, the advertised summary still attracts traffic to its unavailable block; this alternative would address the wrong dependency.