[UPDATED 2023] Free Cisco 300-420 Exam Questions Self-Assess Preparation
300-420 Free Sample Questions to Practice One Year Update
NEW QUESTION 101
Drag and drop the characteristics from the left onto the Yang model they describe on the right.
Select and Place:
Answer:
Explanation:
NEW QUESTION 102
Refer to the exhibit.
EIGRP has been configured on all links. The spoke nodes have been configured as EIGRP stubs, and the WAN links to R3 have higher bandwidth and lower delay than the links to R4. When a link failure occurs at the R1-R2 link, what happens to traffic on R1 that is destined for a subnet attached to R2?
- A. R1 load-balances across the paths through R3 and R4 to reach R2
- B. R1 has no route to R2 and drops the traffic
- C. R1 forwards the traffic to R3, but R3 drops the traffic
- D. R1 forwards the traffic to R3 in order to reach R2
Answer: B
NEW QUESTION 103
Drag and drop the descriptions from the left onto the corresponding VPN types on the rights.
Answer:
Explanation:
NEW QUESTION 104
An infrastructure team is concerned about the shared memory utilization of a device, and for this reason, they need to monitor the device state. Which solution limits impact on the device and provides the required data?
- A. IPFIX
- B. static telemetry
- C. on-change subscription
- D. periodic subscription
Answer: C
Explanation:
Explanation
There are two types of subscriptions: periodic and on-change. With periodic subscription, data is streamed out to the destination at the configured interval. It continuously sends data for the lifetime of that subscription.
With on-change, data is published only when a change in the data occurs such as when an interface or OSPF neighbor goes down.
https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide/streaming-telemetry
NEW QUESTION 105
Refer to the exhibit.
An architect must design a solution that uses the direct link between R1 and R2 for traffic from 10.10.10.0/24 toward network 10.10.20.0/24. Which solution should the architect include in the design?
- A. Configure the OSPF cost of the link to a value lower than 30.
- B. Place the link into area 2 and install a new link between R1 and R2 in area 0.
- C. Lower the Administrative Distance for OSPF area 0.
- D. Configure the link to provide multiarea adjacency.
Answer: A
NEW QUESTION 106 
Refer to the exhibit. All routers currently reside in OSPF area 0. The network manager recently used R1 and R2 as aggregation routers for remote branch locations and R3 and R4 for aggregation routers for remote office locations. The network has since been suffering from outages, which are causing frequent SPF runs. To enhance stability and introduce areas to the OSPF network with the minimal number of ABRs possible, which two solutions should the network manager recommend? (Choose two.)
- A. a new OSPF area for R1 and R2 connections, with R5 and R6 as ABRs
- B. a new OSPF area for R3 and R4 connections,with R3 and R4as ABRs
- C. a new OSPF area for R1, R2, R3, and R4 connections, with R1, R2, R3, and R4 as ABRs
- D. a new OSPF area for R3 and R4 connections,with R5 and R6as ABRs
- E. a new OSPF area for R1 and R2 connections,with R1 and R2as ABRs
Answer: A,D
NEW QUESTION 107
Which two statements about VRRP object tracking are true? (Choose two)
- A. A VRRP group can track only one object at a time
- B. The VRRP interface priority must be manually configured by the administrator
- C. The priority of a VRRP device can change in accordance with the up or down status of a VRRP object
- D. VRRP supports only interce tracking
- E. VRRP can track the status of interfaces and routes
Answer: C
NEW QUESTION 108
An organization is designing a detailed QoS plan that limits bandwidth to specific rates. Which two parameters are supported be the traffic policing feature? (Choose two.)
- A. bursting
- B. marking
- C. shaping
- D. conforming
- E. violating
Answer: B,C
Explanation:
Section: Network Services
NEW QUESTION 109 
Refer to the exhibit. A customer needs to apply QoS to the network management traffic passing through the GigabitEthernet0/2 interface. All eight queuing classes are in use, so the new requirement must be integrated into the existing policy. Which solution must the customer choose?
- A. Mark traffic to DSCP CS5 and assign it to the SIGNALLING class. Then, baseline existing queue sizes to determine if additional bandwidth can be provisioned to the SIGNALLING class.
- B. Mark the traffic to DSCP CS2 and assign it to the ROUTING class Then, baseline existing queue sizes to determine if additional bandwidth can be provisioned to the ROUTING class
- C. Mark the traffic to DSCP CS4 and assign it to the SIGNALLING class. Then, prioritize traffic within the class.
- D. Mark the traffic to DSCP CS6 and assign it to the ROUTING class Then, prioritize traffic within the class.
Answer: B
NEW QUESTION 110
Drag and drop the descriptions from the left onto the Cisco SD-WAN component they describe on the right.
Answer:
Explanation:
NEW QUESTION 111
Refer to the exhibit.
EIGRP has been configured on all links. The spoke nodes have been configured as EIGRP stubs, and the WAN links to R3 have higher bandwidth and lower delay than the links to R4. When a link failure occurs at the R1-R2 link, what happens to traffic on R1 that is destined for a subnet attached to R2?
- A. R1 has no route to R2 and drops the traffic
- B. R1 load-balances across the paths through R3 and R4 to reach R2
- C. R1 forwards the traffic to R3, but R3 drops the traffic
- D. R1 forwards the traffic to R3 in order to reach R2
Answer: D
NEW QUESTION 112 
Refer to the exhibit. Area 10 is a regular OSPF area and networks 10.1.1.0/24 and 172.16.1.0/24 are internal.
Which design provides optimal routing between both networks when the link between routers C and E fails?
- A. Create a tunnel between routers E and F in area 10.
- B. Make area 10 a not-so-stubby area.
- C. Create an OSPF virtual link between routers E and F.
- D. Move the link between routers C and D to area 10.
Answer: D
Explanation:
Section: Advanced Addressing and Routing Solutions
Explanation/Reference:
NEW QUESTION 113
An architect is creating a migration strategy for a large organization in which the choice made by the application between IPv6 and IPv4 is based on the DNS request. Which migration strategy does the architect choose?
- A. site-to-site IPv6 over IPv4 tunnels
- B. dual stack
- C. AFT for public web presence
- D. host-initiated tunnels
Answer: B
NEW QUESTION 114
Refer to the exhibit.
A network engineer must improve the current IS-IS environment. The Catalyst switch is equipped with dual supervisors. Each time a stateful switchover occurs, the network experiences unnecessary route recomputation.
Which solution addresses this issue if the upstream router does not understand graceful restart messaging?
- A. Enable NSR on the switch.
- B. Configure ISIS aggressive timers on both devices.
- C. Enable NSF on the switch.
- D. Enable IS-IS remote LFA FRR on both devices.
Answer: C
NEW QUESTION 115
In what mode does an LWAPP-enabled access point operate?
- A. lightweight mode
- B. WGB
- C. ad hoc mode
- D. autonomous mode
Answer: A
Explanation:
Lightweight access point protocol (LWAPP)-enabled access points operate in lightweight mode. LWAPP is a protocol used to allow centralized management of APs. The management components are removed from the APs, and a WLAN controller provides a single point of management. This controller coordinates WLAN access, managing the load on the APs and user movement between APs. Upon starting, an LWAPP-enabled access point must obtain an IP address. It can then discover the controller using DHCP, DNS, or a subnet broadcast. When multiple wireless controllers are detected by an AP, it chooses to associate with the controller that has the fewest existing associated APs.
Individually configured APs that operate without central management are operating in autonomous mode. This would be the opposite of lightweight mode, which is made possible by LWAPP. Autonomous access points can be upgraded to lightweight. If they are upgraded, they will only function in conjunction with a WLAN controller.
Moreover, when an autonomous access point is upgraded to lightweight, the console port only provides read access to the unit.
Characteristics that autonomous and lightweight access points have in common:
Both support Power over Ethernet (PoE)
Both can use a Cisco Secure Access Control server (ACS) for security
A wireless gateway bridge (WGB) is used to connect a computer without a wireless network card to a wireless network, but not separate WLANs. The WGB can connect up to eight computers to a WLAN. The WGB connects to the root AP through a wireless interface.
Ad hoc is a WLAN mode used for peer-to-peer connectivity. Ad hoc mode allows wireless-enabled computers to communicate with each other without having an AP involved.
Objective:
Layer 2 Technologies
Sub-Objective:
Configure and verify other LAN switching technologies
References:
Cisco > Support > Product Support > Wireless > Cisco Aironet 1200 Series > Reference Guides > Technical References > Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode Cisco > Support > Technology Support > Wireless/Mobility > Wireless, LAN (WLAN) > Design > Design Technotes > Cisco Wireless Devices Association Matrix
NEW QUESTION 116
A router running ISIS is showing high CPU and bandwidth utilization. An engineer discovers that the router is configured as L1/L2 and has L1 and L2 neighbors. Which step optimizes the design to address the issue?
- A. Disable the default behavior of advertising the default route on the L1/L2 router
- B. Configure each interface as either L1 or L2 circuit type
- C. Make this router a DIS for each of the interfaces
- D. Configure the router to be either L1 or L2
Answer: B
Explanation:
Section: Advanced Addressing and Routing Solutions
Explanation/Reference:
NEW QUESTION 117
Refer to the exhibit. An engineer is designing a BGP solution for a client that peers with ISP1 for full Internet connectivity and with ISP2 for direct exchange of routes for several third parties. Which action, when implemented on the edge routers, enables the client network to reach the Internet through ISP1?
- A. Apply route filtering such that the client advertises only routes originated from its own AS.
- B. Run an eBGP session within different VRFs for each ISP.
- C. Advertise a default route for downstream routers within the client network.
- D. Apply the AS-path prepend feature for ISP2.
Answer: C
NEW QUESTION 118
Refer to the exhibit.
Refer to the exhibit. All routers currently reside in OSPF area 0. The network manager recently used R1 and R2 as aggregation routers for remote branch locations and R3 and R4 for aggregation routers for remote office locations. The network has since been suffering from outages, which are causing frequent SPF runs. To enhance stability and introduce areas to the OSPF network with the minimal number of ABRs possible, which two solutions should the network manager recommend? (Choose two.)
- A. a new OSPF area for R1 and R2 connections, with R5 and R6 as ABRs
- B. a new OSPF area for R3 and R4 connections, with R3 and R4 as ABRs
- C. a new OSPF area for R1 and R2 connections, with R1 and R2 as ABRs
- D. a new OSPF area for R1, R2, R3, and R4 connections, with R1, R2, R3, and R4 as ABRs
- E. a new OSPF area for R3 and R4 connections, with R5 and R6 as ABRs
Answer: A,E
NEW QUESTION 119
Drag and drop the characteristics from the left onto the configuration protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION 120 
Refer to the exhibit. An architect is designing a BGP solution to connect a remote branch to a service provider.
There are several prefixes within the branch that the company does not want to be advertised to the internet.
Which solution should the architect use to accomplish this?
- A. Attach the No-Export community with the prefixes to exclude
- B. Set the BGP Internet community for all prefixes.
- C. Implement the NOPEER community.
- D. Use the BGP No-Advertise community for the prefixes to exclude.
Answer: A
NEW QUESTION 121
A company's security policy requires that all connections between sites be encrypted in a manner that does not require maintenance of permanent tunnels. The sites are connected through a private MPLS-based service that uses a dynamically changing key and spoke-to-spoke communication. Which type of transport encryption must be used in this environment?
- A. GRE VPN
- B. GETVPN
- C. DMVPN
- D. standard IPsec VPN
Answer: B
NEW QUESTION 122
Drag and drop the properties from the left onto the protocols they describe on the right.
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/166/b_166_programmability_cg/ b_166_programmability_cg_chapter_01011.html
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/169/b_169_programmability_cg/ configuring_yang_datamodel.html
NEW QUESTION 123
A company needs to increase access port capacity on one floor of a building. They want to leverage the existing catalyst access switch. There is no problem with uplink bandwidth capacity. However, no additional uplinks can be added because no ports are available on the distribution switches. Which solution must the company choose to provide additional access ports?
- A. Stackwise
- B. Etherchannel
- C. VSS
- D. VDC
Answer: A
NEW QUESTION 124
A branch office has a primary L3VPN MPLS connection back to the main office and an IPSEC VPN tunnel that serves as backup. Which design ensures that data is sent over the backup connection only if the primary MPLS circuit is down?
- A. Use static routes tied to an IP SLA to prefer the primary path while a floating static route points to the backup connection.
- B. Use EIGRP to establish a neighbor relationship with the main office via L3VPN MPLS and the IPSEC VPN tunnel.
- C. Use OSPF with a passive-interface
- D. Use BGP with the multipath feature enabled to force traffic via the primary path when available.
Answer: A
NEW QUESTION 125
......
Certification Path
To earn the CCNP Enterprise certification, the applicant first needs to take one core exam that is 350-401. It mainly focuses on one's knowledge related to network assurance, automation, security, infrastructure, architecture, and virtualization.
Once aced that test, the candidate can choose the concentration exam from the set of six options, and Cisco 300-420 is one of them. Moreover, by passing this exam, you are qualified for the Cisco Certified Specialist – Enterprise Design certification. The rest of the offered tests focus on advanced routing and services, designing and implementing wireless networks, SD-WAN, and automation solutions.
Real exam questions are provided for CCNP Enterprise tests, which can make sure you 100% pass: https://www.test4cram.com/300-420_real-exam-dumps.html
Download 300-420 exam with Cisco 300-420 Real Exam Questions: https://drive.google.com/open?id=113ek29uITH85HRcZiSX8o5-0ozOi4fN3