2025 Updated Verified Pass 300-420 Study Guides & Best Courses
Ultimate Guide to the 300-420 - Latest Edition Available Now
Cisco 300-420 exam covers a range of topics related to enterprise network design, including network automation, network security, advanced routing and switching technologies, and network virtualization. 300-420 exam consists of 60-70 multiple-choice and simulation questions and must be completed within 90 minutes. Candidates must score at least 750 out of 1000 points to pass the exam.
NEW QUESTION # 14
Refer to the exhibit.
Refer to the exhibit. Customers report low video quality and delays when having point-to-point telepresence video calls between the two locations. An architect must optimize a design so that traffic follows the same path for egress and ingress traffic flows. Which technique optimizes the design?
- A. Configure route leaking on the router in area 1.
- B. Configure the high metric on the router in area 4.
- C. Configure route leaking on the router in area 2.
- D. Configure route filter on the router in area 4.
Answer: B
NEW QUESTION # 15
An architect must design an IPv6 migration solution for a corporation with remote offices to support:
- The customer has IPv4 peering with their service provider.
- IPv6 users need access to IPv4 and IPv6 resources.
- Existing content providers will migrate to IPv6 in the next two
years.
- Users will be migrated in a phase-by-phase approach.
Which migration solution must the architect choose?
- A. NAT64
- B. NAT46
- C. tunneling
- D. dual-stack
Answer: D
NEW QUESTION # 16
Refer to the exhibit. Where must an architect plan for route summarization for the topology?
- A. from the core toward the aggregation and the access toward the aggregation
- B. from the aggregation toward the core and the aggregation toward the access
- C. from the aggregation toward the access and the access toward the aggregation
- D. from the core toward the aggregation and the aggregation toward the core
Answer: B
NEW QUESTION # 17
An engineer is designing a Layer 3 campus network running EIGRP between the core, aggregation, and access layers. The access layer switches will be connected to the aggregation layer using Layer 3 copper connections.
The engineer wants to improve convergence time for access layer switch failures. Which technique must the design include?
- A. EIGRP summarization from access to aggregation layer
- B. enabling BFD for EIGRP on the access layer uplinks
- C. EIGRP summarization from core to aggregation layer
- D. reducing the EIGRP Hello / Hold timer values
Answer: B
NEW QUESTION # 18
An organization is designing a detailed QoS plan that limits bandwidth to specific rates. Which two parameters are supported be the traffic policing feature? (Choose two.)
- A. bursting
- B. shaping
- C. marking
- D. violating
- E. conforming
Answer: B,C
Explanation:
Section: Network Services
NEW QUESTION # 19
An architect is creating a migration strategy for a large organization in which the choice made by the application between IPv6 and IPv4 is based on the DNS request. Which migration strategy does the architect choose?
- A. dual stack
- B. site-to-site IPv6 over IPv4 tunnels
- C. host-initiated tunnels
- D. AFT for public web presence
Answer: A
NEW QUESTION # 20
In an SD-WAN architecture, which methods are used to bootstrap a vEdge router?
- A. DHCP options or manual configuration
- B. vManage or DNS records
- C. DNS records or DHCP options
- D. ZTP or manual configuration
Answer: D
NEW QUESTION # 21 
Refer to the exhibit. An engineer must design an automatic failover solution. The solution should allow HSRP to detect a WAN 1 failure and initiate an automatic failover, making router R2 the active HSRP router. Which two solutions should the engineer choose? (Choose two.)
- A. use IP source routing
- B. Implement PBR on router R1
- C. use a floating static route
- D. Implement IP SLA on router R1
- E. Implement Enhanced Object Tracking on router R1
Answer: D,E
NEW QUESTION # 22
Refer to the exhibit.
An engineer must design a WAN solution so that ISP-1 is always preferred over ISP-2. The path via ISP-2 is considered as a backup and must be used only when the path to ISP-1 is down. Which solution must the engineer choose?
- A. R1:
- Routes advertised to ISP-1: 5x AS-path prepend
- Routes received from ISP-1: LOW local-preference
- Routes advertised to R2: community NO-ADVERTISE
- Routes received from R2: no action
R2:
- Routes advertised to ISP-2: 0x AS-path prepend
- Routes received from ISP-2: HIGH local-preference
- Routes advertised to R1: community NO-EXPORT
- Routes received from R1: no action - B. R1:
- Routes advertised to ISP-1: 0x AS-path prepend
- Routes received from ISP-1: HIGH local-preference
- Routes advertised to R2: no action
- Routes received from R2: community NO-EXPORT
R2:
- Routes advertised to ISP-2:5x AS-path prepend
- Routes received from ISP-2: LOW local-preference
- Routes advertised to R1: community NO-ADVERTISE
- Routes received from R1: no action - C. R1:
- Routes advertised to ISP-1: 0x AS-path prepend
- Routes received from ISP-1: LOW local-preference
- Routes advertised to R2: community NO-ADVERTISE
- Routes received from R2: no action
R2:
- Routes advertised to ISP-2: 5x AS-path prepend
- Routes received from ISP-2: HIGH local-preference
- Routes advertised to R1: no action
- Routes received from R1: community NO-ADVERTISE - D. R1:
- Routes advertised to ISP-1: 0x AS-path prepend
- Routes received from ISP-1: HIGH local-preference
- Routes advertised to R2: community NO-EXPORT
- Routes received from R2: no action
R2:
- Routes advertised to ISP-2: 5x AS-path prepend
- Routes received from ISP-2: LOW local-preference
- Routes advertised to R1: no action
- Routes received from R1: no action
Answer: D
NEW QUESTION # 23
Refer to the exhibit.
EIGRP has been configured on all links. The spoke nodes have been configured as EIGRP stubs, and the WAN links to R3 have higher bandwidth and lower delay than the links to R4. When a link failure occurs at the R1-R2 link, what happens to traffic on R1 that is destined for a subnet attached to R2?
- A. R1 forwards the traffic to R3, but R3 drops the traffic
- B. R1 has no route to R2 and drops the traffic
- C. R1 load-balances across the paths through R3 and R4 to reach R2
- D. R1 forwards the traffic to R3 in order to reach R2
Answer: B
NEW QUESTION # 24
Which two steps can be taken to improve convergence in an OSPF network? (Choose two.)
- A. Use Bidirectional Forwarding Detection
- B. Tune OSPF parameters
- C. Span the same IP network across multiple areas.
- D. Merge all the areas into one backbone area
- E. Make all non-backbone areas stub areas
Answer: B,E
Explanation:
Section: Advanced Addressing and Routing Solutions
NEW QUESTION # 25
An engineer is working for a large cable TV provider that requires multiple sources streaming video on different channels using multicast with no rendezvous point. Which multicast protocol meets these requirements?
- A. PIM-SM
- B. BIDIR-PIM
- C. PIM-SSM
- D. any-source multicast
Answer: B
Explanation:
Section: Network Services
NEW QUESTION # 26
Drag and drop the characteristics from the left onto the correct telemetry mode on the right.
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/iosxr/asr9000/telemetry/b-telemetry-cg-asr9000-61x/b-telemetry-cgasr9000-
61x_chapter_010.html#id_36445
NEW QUESTION # 27
An engineer must design a VPN solution for a company that has multiple branches connecting to a main office.
What are two advantages of using DMVPN instead of IPsec tunnels to accomplish this task? (Choose two.)
- A. greater scalability
- B. support for anycast gateway
- C. lower traffic overhead
- D. dynamic spoke-to-spoke tunnels
- E. support for AES 256-bit encryption
Answer: A,D
Explanation:
Section: WAN for Enterprise Networks
NEW QUESTION # 28
An engineer must design a QoS solution for a customer that is connected to an ISP over a 1Gbps link with a 100Mbps CIR. The ISP aggressively drops all traffic received over which is causing numerous TCP retransmissions. The customer is not using any RTP applications but wants to maximize bandwidth usage up to the CIR. Which QoS solution engineer choose?
- A. Queuing
- B. Policing
- C. Policer with markdown
- D. Traffic shaping
Answer: D
Explanation:
https://www.cisco.com/c/en/us/support/docs/quality-of-service-qos/qos-policing/19645- policevsshape.html
NEW QUESTION # 29
Refer to the exhibit. A network engineer must design a BGP solution based on:
- The route reflector must have one or more direct physical connections to the core routers (R3 and R4).
- The route reflector must have full redundancy and avoid a single
point of failure.
- R2 to R1 link utilization is 90%, and the remaining links are less
than 50% utilized.
Which two solutions must the design include? (Choose two.)
- A. Configure R4 to be a client of R1 and R3.
- B. Configure R3 to be a client of R2 and R4.
- C. Configure R5 to be a client of R3 and R4
- D. Configure R2 to be a client of R1 and R4.
- E. Configure R1 to be a client of R2 and R4.
Answer: A,B
Explanation:
We want to try and centralize our Route Reflector, in this example all routers qualify to be Route Reflectors because they have at least 1 link connected to R3/R4 the core Routers.
- We want to try avoid link between R1 and R2 because it's caping at 90%.
- Answer A uses the link that's 90%
- Answer B is not a centralize location, R5 is way down there.
- Answer C utilize the link that's at 90%
- D & E both have redundancy and do not use the link that has 90% and it's centralized.
NEW QUESTION # 30
Instructions
The main screen consists of two parts; the Main scenario and the Topology tabs. The main scenario describes TSHOOT.com test bed. The Topology tabs allow you to display the appropriate and select the trouble ticket.
To complete the item, you will first need to familiarize yourself with the TSHOOT.com test bed by clicking on the master scenario first and then the topologies tabs. Once you are familiar with the test bed and the topologies, you should start evaluating the trouble ticket. You will be presented with a Trouble Ticket scenario that will describe the fault condition. You will need to determine on which device the fault condition is located, to which technology the fault condition is related, and the solution to each trouble ticket. This will be done by answering three questions.
Ticket Selection
To begin, click on the Ticket on the Topology tabs.
Please note. Some of the questions will require you to use the scroll bar to see all options.
Fault Isolation
Read the ticket scenario to understand the fault condition.
Open the appropriate topology, based upon the ticket scenario.
Open the console of the desired device by clicking on that device in the topology, based upon your troubleshooting methodology.
Use the supported show, ping and trace commands to begin your fault isolation process.
Move to other devices as need by clicking on those devices within the topology.
Fault Identification
The trouble ticket will include three questions that you will need to answer:
1. Which device contains the fault
2. Which technology the fault condition is related to
3. What is the solution to the issue
To advance to the next question within the ticket click on "Next Question".
When you click "DONE", the trouble ticket will turn RED and will no longer be accessible.
You may also use the "Previous Question" button to review questions within that specific ticket.
To complete a trouble ticket, answer all three questions and click "DONE". This will store your response to the questions. Do not click on "DONE" unless you have answered all questions within the ticket.
Item Completion
Click the NEXT button on the bottom of the screen once a ticket is RED. This action moves you to the next item.
Scenario
The company has created the test bed network shown in the layer 2 and layer 3 topology exhibits.
This network consists of four routers, two layer 3 switches and two layer 2 switches.
In the IPv4 layer 3 topology, R1, R2, R3, and R4 are running OSPF with an OSPF process number 1.
DSW1, DSW2 and R4 are running EIGRP with an AS of 10. Redistribution is enabled where necessary.
R1 is running a BGP AS with a number of 65001. This AS has an eBGP connection to AS 65002 in the ISP's network. Because the company's address space is in the private range, R1 is also providing NAT translations between the inside (10.1.0.0/16 & 10.2.0.0/16) networks and the outside (209.65.200.0/24) network.
ASW1 and ASW2 are layer 2 switches.
NTP is enabled on all devices with 209.65.200.226 serving as the master clock source.
The client workstations receive their IP address and default gateway via R4's DHCP server. The default gateway address of 10.2.1.254 is the IP address of HSRP group 10 which is running on DSW1 and DSW2.
In the IPv6 layer 3 topology R1, R2, and R3 are running OSPFv3 with an OSPF process number 6. DSW1, DSW2 and R4 are running RIPng process name RIP_ZONE. The two IPv6 routing domains, OSPF 6 and RIPng are connected via GRE tunnel running over the underlying IPv4 OSPF domain. Redistribution is enabled where necessary.
Recently the implementation group has been using the test bed to do a 'proof-of-concept' on several implementations. This involved changing the configuration on one or more of the devices. You will be presented with a series of trouble tickets related to issues introduced during these configurations.
The implementation group has been using the test bed to do a 'proof-of-concept' that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing schemes, DHCP services, NTP services, and FHRP services, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address.
Use the supported commands to isolate the cause of this fault and answer the following questions.
The fault condition is related to which technology?
- A. Switch Virtual Interface
- B. Access Vlans
- C. NTP
- D. Loop Prevention
- E. Port Security
- F. VLAN ACL / Port ACL
- G. Switch-to-Switch Connectivity
Answer: G
Explanation:
Steps need to follow as below:-1.When we check on client 1 & Client 2 desktop we are not receiving DHCP address from R4Ipconfig ----- Client will be getting 169.X.X.X2.On ASW1 port Fa1/0/ 1 & Fa1/0/2 access port VLAN 10 was assigned which is using IPaddress 10.2.1.0/24Sh run ------- & check for running config of int fa1/0/1 & fa1/0/2====================================================interface FastEthernet1/0/1switchport mode accessswitchport access vlan 10interface FastEthernet1/0/2switchport mode accessswitchport access vlan 10
3.We need to check on ASW 1 trunk port the trunk Po13 & Po23 were receiving VLAN 20 &200 but not VLAN
10 so that switch could not get DHCP IP address and was failing to reach IPaddress of Internet4.
Change required:
On ASW1 below change is required for switch-to-switch connectivity..int range portchannel13,portchannel23switchport trunk allowed vlan noneswitchport trunk allowed vlan 10,200
NEW QUESTION # 31 
Refer to the exhibit. A customer experienced an unexpected network outage when the link between R1 and R2 went down. An architect must design a solution to ensure network continuity in the event the link fails again.
Which solution should the design include?
- A. Make Area 0 L2-only
- B. Make R3 an L1L2 router
- C. Make R31 an L1 router.
- D. Make R11 an L2 router.
Answer: B
NEW QUESTION # 32
An engineer is designing an EIGRP network for a small branch site where there is only one Layer 3 router. The engineer wants the router to advertise the local LAN network to remote EIGRP neighbors without sending any unnecessary multicast messages on the local LAN. Which action should the engineer take?
- A. Advertise the local LAN subnet as a stub network
- B. Use a static default route for this site instead of EIGRP
- C. Redistribute the local LAN network using the redistribute connected command
- D. Advertise the local LAN using the network command and the passive-interface feature
Answer: D
Explanation:
Section: Advanced Addressing and Routing Solutions
NEW QUESTION # 33
An engineer is designing a BGP solution supporting a VXLAN environment over a Layer 3 IPv4 network fabric with these requirements:
- provide Layer 2 adjacency
- allow VM migration of workloads between sites
- IGP is OSPF
Which BGP address family must the engineer choose?
- A. L2VPN EVPN
- B. L2VPN VPLS-VPWS
- C. IPv4 unicast
- D. VPNv4
Answer: A
NEW QUESTION # 34
Drag and drop the descriptions from the left onto the corresponding VPN types on the rights.
Answer:
Explanation:
NEW QUESTION # 35
An engineer is designing a QoS policy that queues excess packets for later transmission.
Which mechanism must be included in the design?
- A. shaping
- B. WRED
- C. RED
- D. policing
Answer: A
Explanation:
https://www.cisco.com/c/en/us/support/docs/quality-of-service-qos/qos-policing/19645- policevsshape.html
NEW QUESTION # 36
Refer to the exhibit. An architect must design an IP addressing scheme for a multisite network connected via a WAN transit. The campus site must accommodate 12,000 devices and the branch sites must accommodate 1,000 devices. Which address scheme optimizes network device resources, contains convergence events to the different blocks of the network, and ensures future growth of the network?
- A. * Campus: 10.0.0.0/10
Branch1: 10.64.0.0/10
Branch2: 10.128.0.0/10 - B. * Campus: 10.0.0.0/18
Branch1: 10.0.192.0/21
Branch2: 10.0.200.0/21 - C. * Campus: 10.0.0.0/20
Branch1: 10.0.64.0/21
Branch2: 10.0.128.0/21 - D. * Campus: 10.0.0.0/16
Branchi: 10.255.0.0/20
Branch2: 10.255.16.0/20
Answer: B
NEW QUESTION # 37
An engineer is working with NETCONF and Cisco NX-OS based devices. The engineer needs a YANG model that supports a specific feature relevant only to Cisco NX-OS. Which model must the engineer choose?
- A. IETF
- B. IEEE
- C. OpenConfig
- D. Native
Answer: A
NEW QUESTION # 38
A network engineer is redesigning a company's QoS solution. The company is currently using IP Precedence, but the engineer plans to move to DiffServ. It is important that the new solution provide backward compatibility with the current solution. Which technology should the design include?
- A. default per hop behavior
- B. expedited forwarding
- C. assured forwarding
- D. class selector code points
Answer: D
Explanation:
FiffServ is backward compatible with IP Precedence (Ip-Precedence uses the 3 most signifcant bits of the ToS byte, whereas Diffserve uses the fost significant six bits - which includ the ones from IP precedence).
NEW QUESTION # 39
......
Dumps MoneyBack Guarantee - 300-420 Dumps Approved Dumps: https://pass4sure.actual4cert.com/300-420-pass4sure-vce.html