Cisco CCNP Enterprise 300-420 Questions & Answers

• Question 261:

  DRAG DROP

  Drag and drop the characteristics from the left onto the correct telemetry mode on the right.

  Select and Place:

  

  Correct Answer:

  

  In a dial-in mode, the destination initiates a session to the router and subscribes to data to be streamed. Dial-in mode is supported over gRPC in only 64-bit platforms

  In a dial-out mode, the router initiates a session to the destinations based on the subscription. All 64-bit IOS XR platforms (except for NCS 6000 series routers) support gRPC and TCP protocols. All 32-bit IOS XR platforms support only TCP.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/iosxr/asr9000/telemetry/b-telemetry-cg-asr9000-61x/b-telemetry-cg-asr9000-61x_chapter_010.html#id_36445

• Question 262:

  DRAG DROP

  Drag and drop the properties from the left onto the protocols they describe on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/166/b_166_programmability_cg/b_166_programmability_cg_chapter_01011.html https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/169/b_169_programmability_cg/configuring_yang_datamodel.html

• Question 263:

  What is a feature of the SaaS subscription model?

  A. lower initial costs

  B. web connection not required

  C. autonomy and control over hardware

  D. access to industrial-strength storage and computing power

  Correct Answer: A

• Question 264:

  Which security functionality does gRPC provide?

  A. enabling RC6 data-level encryption with CRC check

  B. mandatory encryption of data at rest using the AES and RSA protocols

  C. implementing secure server-client tunnels with RSA 2048 cipher encryption

  D. supporting secure communication between network devices and control systems using TLS and HTTPS

  Correct Answer: D

• Question 265:

  When differentiating between IETF, OpenConfig, and Cisco native YANG models, how does the use of containers differ?

  A. IETF and Cisco native models use one container for operational data and another container for configuration data, and OpenConfig uses a single container for operational data and configuration data.

  B. OpenConfig uses one container for operational data and another container for configuration data, and IETF and Cisco native models use a single container for operational data and configuration data.

  C. Cisco native models use one container for operational data and another container for configuration data, and OpenConfig and IETF use a single container for operational data and configuration data.

  D. IETF and Cisco native models use a single container for operational data and configuration data, and OpenConfig uses one container for operational data and another container for configuration data.

  Correct Answer: A

  Reference: https://blogs.cisco.com/developer/which-yang-model-to-use

• Question 266:

  Which protocol runs between the vSmart controllers and between the vSmart controllers and the vEdge routers, and unifies all control plane functions under a single protocol umbrella?

  A. OMP

  B. OSPF

  C. IKE

  D. VRRP

  E. BGP

  Correct Answer: A

• Question 267:

  Which two statements regarding Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two.)

  A. Only authorized controllers are allowed to communicate back to the vEdge router after the vEdge router establishes connections with the controllers.

  B. By default, integrated IDS'IPS on inside and (WAN) side interfaces.

  C. The vEdge routers run on hardened Linux operating systems.

  D. In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.

  E. Open Certificate Authority and automated enrollment feature.

  Correct Answer: AD

• Question 268:

  Which is a benefit of a cloud-based SD-WAN deployment?

  A. instant scale

  B. security never an issue

  C. might be required for compliance with industry standards

  D. controller availability never an issue

  E. agility of change dependent only on your own internal IT processes

  Correct Answer: A

• Question 269:

  Which Cisco product were incorporated into Cisco ISE between ISE releases 2.0 and 2.3?

  A. Cisco ESA

  B. Cisco ASA

  C. Cisco ACS

  D. Cisco WSA

  Correct Answer: C

• Question 270:

  Which Cisco product supports SD-Access and specifically built to address new challenges faced by enterprises?

  A. CSRv virtual router

  B. ASR 1000-HX

  C. Catalyst 6807-XL w/ Sup6T and C6800 10G line cards

  D. Catalyst 9500

  E. ISR 4221

  F. Nexus 7700 w/ Sup2E and M3 line cards

  Correct Answer: D