Cisco CCNP Enterprise 300-420 Questions & Answers

• Question 311:

  Which AES mode should be used in a Cisco SD-WAN environment that includes multicast applications?

  A. Electronic Code Book (ECB)

  B. Cipher Feedback (CFB)

  C. Cipher Block Chaining (CBC)

  D. Galois/Counter Mode (GCM)

  Correct Answer: D

• Question 312:

  

  Refer to the exhibit. An engineer must connect the IPv6 island to the IPv4-only network to provide IPv6 hosts access to file servers and DNS services in the IPv4 network. Which NAT should the engineer choose?

  A. stateless NAT66

  B. stateful NAT66

  C. dynamic NAT-PT

  D. static NAT-PT

  Correct Answer: C

• Question 313:

  An engineer is designing a QoS solution for a campus. The design must guarantee real-time traffic delivery during congestion, minimize the bandwidth consumption for possible virus or worm attacks, and reduce flooding of excessive traffic during times of congestion. Which two solutions must the engineer select? (Choose two.)

  A. Create a policing policy to drop excessive traffic and a strict queue for real-time traffic

  B. Apply queuing on the distribution to core links

  C. Create a scavenger queue for excessive traffic and a strict queue for real-time traffic

  D. Apply queuing on the access to distribution links

  E. Create a shaping policy to drop excessive traffic and a strict queue for real-time traffic

  Correct Answer: CD

• Question 314:

  

  Refer to the exhibit. An engineer proposed this solution for a company that requires a loop-free, Layer 2 network design. The network will run 802.1w, and all links will be 1 Gbps. If all interfaces are up as point-to-point adjacencies, what are the expected port end states based on the design?

  A. Eth1/2 on SW3 and SW4 will be in an Altn BLK state

  B. Eth1/3 on SW2 and SW3 will be in an Altn BLK state

  C. Eth1/2 on SW2 and SW3 will be in a Desg FWD state

  D. Eth1/1 on SW1 and SW2 will be in a Root FWD state

  Correct Answer: A

• Question 315:

  What are two purposes of the RPF check in multicast routing? (Choose two.)

  A. to ensure that multicast packets are forwarded if they arrived on the interface used to route traffic back to the source address

  B. to ensure that multicast packets are forwarded if they arrived on the interface used to route traffic to the destination address

  C. to ensure that multicast packets are dropped if they arrived on the interface used to route traffic to the destination address

  D. to ensure that multicast packets are dropped if they arrived on the interface used to route traffic back to the source address

  E. to ensure that multicast packets, no matter the interface they arrived on are forwarded out all interfaces

  Correct Answer: AC

• Question 316:

  A customer requires QoS to support multimedia conferencing over MPLS. The network architect chooses to use per-hop behavior. Which solution must the architect use to classify and mark traffic traveling between branch sites?

  A. BW Queue with DSCP AF3

  B. BW Queue and DSCP WRED with DSCP AF4

  C. BW Queue and DSCP WRED with DSCP AF3

  D. BW Queue with DSCP AF4

  Correct Answer: D

• Question 317:

  Which two functions is the Cisco SD-Access Border Node responsible for? (Choose two.)

  A. Map users to a virtual network

  B. Advertise EID subnets

  C. Route and transport IP traffic

  D. Act as an anycast Layer 3 gateway

  E. Act as a LISP proxy tunnel router

  Correct Answer: BE

• Question 318:

  An engineer must establish a direct connection between two remote offices. The new connection must be established using a logical path, share a common broadcast domain, connect over private WAN, and have as little overhead as possible. Which technology must the engineer choose?

  A. GRE

  B. L2VPN

  C. GET VPN

  D. IPsec

  Correct Answer: B

• Question 319:

  A customer plans to deploy WoL in the enterprise with these high-level design requirements:

  DHCP services must be available

  Clients BIOS settings must be set for WoL

  Clients get IP addresses once online

  Spanning-tree PortFast is enabled on the Layer 2 switches

  Which two solutions must the customer select to have a successful deployment? (Choose two.)

  A. IP directed broadcast and forward-protocol must be enabled on all the SVI or routed interfaces where the client subnets reside

  B. IP directed broadcast and forward-protocol must be disabled on all the SVI or routed interfaces where the client subnets reside

  C. IP helper-addresses for the client ranges must be disabled on the SVI or routed interface where the WoL server subnet resides

  D. IP helper-addresses for the WoL server must be enabled on the SVI or routed interface where the client subnets reside

  E. IP helper-addresses for the client ranges must be enabled on the SVI or routed interface where the WoL server subnet resides

  Correct Answer: AD

• Question 320:

  Refer to the exhibit.

  

  An engineer is designing a hierarchical ISIS solution for an enterprise customer with these requirements:

  Users in areas 25 and 55 send and receive traffic from both backbone areas.

  Link flaps in areas 35 and 45 must not impact other areas.

  Routers will double within the next 12 months in areas 35 and 45.

  Which design must the engineer select?

  A. A series routers Level 2, B series routers Level 2, and C series routers Level 1 B. A series routers Level 1/2, B series routers Level 1/2, and C series routers Level 1/2

  C. A series routers Level 1/2, B series routers Level 2, and C series routers Level 2

  D. A series routers Level 1, B series routers Level 1/2, and C series routers Level 2

  Correct Answer: D