Cisco CCNP Enterprise 300-420 Questions & Answers

• Question 331:

  

  Refer to the exhibit. A network administrator plans to announce the site subnets to the WAN using route summarization instead of announcing every subnet. What is the smallest summary route that should be used to encompass all subnets at the site?

  A. 2001:DB8:ABCD:0003::/60

  B. 2001:DB8:ABCD::/60

  C. 2001:DB8:ABCD::/64

  D. 2001:DB8::/32

  Correct Answer: B

• Question 332:

  

  Refer to the exhibit. A customer is planning to onboard three new VPN partner connections in the data center. The new subnets must not overlap with the existing data center network, and the subnet size must not be bigger than necessary. The customer dedicated 10.1.8.0/21 for this design. How must the subnets be divided to meet these requirements?

  A. Partner-A: 10.1.11.0/25 Partner-B: 10.1.12.0/22 Partner-C: 10.1.11.128/27

  B. Partner-A: 10.1.12.0/25 Partner-B: 10.1.13.0/22 Partner-C: 10.1.12.128/26

  C. Partner-A: 10.1.11.0/25 Partner-B: 10.1.13.0/23 Partner-C: 10.1.11.128/27

  D. Partner-A: 10.1.11.0/24 Partner-B: 10.1.13.0/23 Partner-C: 10.1.12.128/26

  Correct Answer: A

• Question 333:

  What are two characteristics of a migration from an IP-VPN service to a Cisco SD-WAN architecture? (Choose two.)

  A. distributed control plane

  B. increased security

  C. increased scalability

  D. centralized application policies

  E. increased solution complexity

  Correct Answer: CD

• Question 334:

  What are two advantages of the Cisco SD-WAN technology? (Choose two.)

  A. easier deployment

  B. improved application experience

  C. optimized cloud connectivity

  D. consistent connectivity

  E. proactive network management

  Correct Answer: BC

  Reference: https://www.cisco.com/c/en/us/solutions/enterprise-networks/sd-wan/what-is-sd-wan.html#~benefits

• Question 335:

  Which feature of Cisco SD-WAN Secure Direct Cloud Access divides user traffic into different zones and VPNs or VRFs?

  A. application-awareness routing

  B. perimeter control

  C. centralized data policy

  D. secure segmentation

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-security-policy-design-guide.html

• Question 336:

  Refer to the exhibit.

  

  Which process does the Ethernet LMI protocol follow that is defined by the MEF 16 Technical Specification?

  A. broadcasts multicast network routes from the CE to the PE

  B. notifies the CE of the availability state of a configured EVC

  C. communicates ENI and EVC attributes to the CE

  D. broadcasts to all subnets from the CE when an EVC is added

  Correct Answer: B

  Reference: https://www.mef.net/resources/mef-16-ethernet-local-management-interface/

• Question 337:

  An engineer is designing a networking solution to allow two hosts to communicate—one host located within the company A network and the other within the company B network. The two companies have no other plans for future additional connections. Both companies want to use a single secure and encrypted internet connection, and the configuration must be as simple as possible. Which network solution must the engineer choose?

  A. policy-based IPsec tunnel with static routing

  B. routed IPsec tunnel with OSPF routing

  C. MPLS VPN provided service with BGP routing

  D. single DMVPN with EIGRP routing

  Correct Answer: A

• Question 338:

  An architect is designing a connectivity solution for a customer's two small branch offices. The customer wants a cost-effective design, no routing overhead, and some down time during the year is acceptable. Which connectivity solution must the architect choose?

  A. single-homed

  B. dual multihomed

  C. single multihomed

  D. dual-homed

  Correct Answer: A

• Question 339:

  An architect is designing a network for an enterprise site. The design must use an active/backup design for the WAN. It must guarantee the SLA for several applications regardless of which connection is used. Which deployment model should the architect choose?

  A. hybrid WAN using MPLS VPN and internet VPN from two separate ISPs

  B. MPLS WAN from two separate ISPs

  C. internet WAN from two separate ISPs

  D. hybrid WAN using MPLS VPN and internet VPN from a single ISP

  Correct Answer: B

• Question 340:

  Refer to the exhibit.

  

  Which two points in the network must an engineer configure the ports for explicit trust when using a DiffServ model?

  A. B and E

  B. F and G

  C. A and D

  D. C and D

  Correct Answer: B