Cisco CCNP Enterprise 300-420 Questions & Answers

• Question 161:

  Which component of Cisco SD-Access integrates with Cisco DNA Center to perform policy segmentation and enforcement through the use of security group access control lists and security group tags?

  A. Cisco Application Policy Infrastructure Controller Enterprise Module

  B. Cisco Network Data Platform

  C. Cisco Identity Services Engine

  D. Cisco TrustSec

  Correct Answer: C

• Question 162:

  What is the role of a control-plane node in a Cisco SD-Access architecture?

  A. fabric device that connects wired endpoints to the SD-Access fabric

  B. map system that manages endpoint to device relationships

  C. fabric device that connects APs and wireless endpoints to the SD-Access fabric

  D. map system that manages External Layer 3 networks

  Correct Answer: B

  Reference: https://netaavi.com/my-blog-1/f/overview-of-sda-fabric-solution

• Question 163:

  Refer to the exhibit. All routers currently reside in OSPF area 0. The network manager recently used R1 and R2 as aggregation routers for remote branch locations and R3 and R4 for aggregation routers for remote office locations. The network has since been suffering from outages, which are causing frequent SPF runs. To enhance stability and introduce areas to the OSPF network with the minimal number of ABRs possible, which two solutions should the network manager recommend? (Choose two.)

  

  \

  A. a new OSPF area for R1 and R2 connections, with R1 and R2 as ABRs

  B. a new OSPF area for R3 and R4 connections, with R5 and R6 as ABRs

  C. a new OSPF area for R3 and R4 connections, with R3 and R4 as ABRs

  D. a new OSPF area for R1, R2, R3, and R4 connections, with R1, R2, R3, and R4 as ABRs

  E. a new OSPF area for R1 and R2 connections, with R5 and R6 as ABRs

  Correct Answer: BE

• Question 164:

  How is internet access provided to a WAN edge router that is connected to a MPLS transport link?

  A. OMP advertises a default route from a WAN Edge router that is connected to the MPLS and internet transport networks

  B. Internet access must be provided at the WAN Edge router through either a 4G/5G link or local Internet circuit

  C. An extranet must be provided in the MPLS transport network to allow private traffic to reach the public internet

  D. TLOC extensions are used to route traffic to a WAN Edge router that is connected to the Internet transport network

  Correct Answer: D

• Question 165:

  Which two routing protocols allow for unequal cost load balancing? (Choose two.)

  A. EIGRP

  B. IS-IS

  C. BGP

  D. OSPF

  E. RIPng

  Correct Answer: AC

• Question 166:

  A network engineer must segregate three interconnected campus networks using IS-IS routing. A two-layer hierarchy must be used to support large routing domains and to avoid more specific routes from each campus network being advertised to other campus network routers automatically. Which two actions does the engineer take to accomplish this segregation? (Choose two.)

  A. Designate two IS-IS routers as BDR routers at the edge of each campus, and configure one BDR for all Level 1 routers and one BDR for all Level 2 routers.

  B. Designate two IS-IS routers from each campus to act as Level 1/Level 2 backbone routers at the edge of each campus network.

  C. Assign the same IS-IS NET value for each campus, and configure internal campus routers with Level 1/ Level 2 routing.

  D. Utilize different MTU values for each campus network segment. Level 2 backbone routers must utilize a larger MTU size of 9216.

  E. Assign a unique IS-IS NET value for each campus, and configure internal campus routers with Level 1 routing.

  Correct Answer: BE

• Question 167:

  Which two options can you use to configure an EIGRP stub router? (Choose two)

  A. summary-only

  B. receive-only

  C. external

  D. summary

  E. totally-stubby

  F. not-so-stubby

  Correct Answer: BD

• Question 168:

  At which layer does Cisco Express Forwarding use adjacency tables to populate addressing information?

  A. Layer4

  B. Layer 2

  C. Layer 1

  D. Layer 3

  Correct Answer: B

• Question 169:

  A network administrator is troubleshooting a DMVPN setup between the hub and the spoke. Which action should the administrator take before troubleshooting the IPsec configuration?

  A. Verify the GRE tunnels.

  B. Verify ISAKMP.

  C. Verify NHRP.

  D. Verify crypto maps.

  Correct Answer: A

• Question 170:

  Which two routing protocols allow for unequal cost load balancing? (Choose two.)

  A. EIGRP

  B. IS-IS

  C. BGP

  D. OSPF

  E. RIPng

  Correct Answer: AC