300-420 practice questions 111–120

1. Question 111 · 359 in bank

   

   Refer to the exhibit. An engineer is designing a redistribution solution for a customer. The customer recently acquired another company and decided to Integrate the new network running RIPv1 with the company's existing network. Which redistribution technique must the engineer select to ensure the multipoint two-way redistribution does not cause routing loops?

   • Adistribute-lists inbound under the EIGRP process denying RIPv1 learned prefixes
   • Bdistribute-lists inbound under the RIPv1 process denying EIGRP learned prefixes
   • Cdistribute-lists outbound under the EIGRP process denying RIPv1 learned prefixes
   • Ddistribute-lists outbound under the RIPv1 process denying EIGRP learned prefixes

   Show answer

   Answer: A

   Explanation

   I think that the key point is knowing where to put the config. For instance, if it was on R2 and R3, both R2 and R3 would be redistributing the rip route for . What you want to do is block that route that is being received from R4 and R5 and being redistributed back into R2 and R3. I think is like the following question: https://www.examtopics.com/discussions/cisco/view/85755-exam-300-410-topic-1-question-235-discussion/

   Source: Adapted from community discussion — dgonzalezexamtopics

   Next question

2. Question 112 · 359 in bank

   

   Refer to the exhibit. A network engineer with an employee ID: 4433:77:420 must design a BGP solution based on these conditions: • Traffic sessions occur between the branches and the data center. • Branch B has limited resources to process routing updates. • HQ must filter out all prefixes from branch A to R4. Which outbound route filtering (ORF) solution must the engineer choose?

   • AUse a prefix list with the 10.10.10.0/24 subnet for ORF on R5.
   • BUse a prefix list with the 10.10.10.0/24 subnet for ORF on R2
   • CUse a prefix list with the 192.168.10.0/24 subnet for ORF on R2.
   • DUse a prefix list with the 192.168.10.0/24 subnet for ORF on R4.

   Show answer

   Answer: B

   Explanation

   From R5 to R4 passing through R2 only 2 options. And the prefix list allowing source subnet to go outbound. For me, also B

   Source: Adapted from community discussion — dgonzalezexamtopics

   Next question

3. Question 113 · 359 in bank

   Which function does the Cisco SD-Access intermediate node perform?

   • AAct as an anycast Layer 3 gateway.
   • BMap users to a virtual network.
   • CRoute and transport IP traffic.
   • DAct as LISP proxy tunnel router.

   Show answer

   Answer: C

   Explanation

   C is correct. "Intermediate nodes simply route and transport IP traffic between the devices operating in fabric roles." Reference: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html

   Source: Adapted from community discussion — Lungful

   References

   • Cisco documentation

   Next question

4. Question 114 · 359 in bank

   In a Cisco SD-Access fabric, which node facilitates connectivity between the fabric and networks external to the fabric?

   • Aintermediate
   • Bedge
   • Ccontrol plane
   • Dborder

   Show answer

   Answer: D

   Explanation

   Border Node The fabric border nodes serve as the gateway between the SD-Access fabric site and the networks external to the fabric. The border node is responsible for network virtualization interworking and SGT propagation from the fabric to the rest of the network.

   Source: Adapted from community discussion — J2J2J2J

   Next question

5. Question 115 · 359 in bank

   Which information update is earned by OMP and enables the Cisco SD-WAN to build a secure overlay fabric on top of any public or private transport without regard for the actual link IP?

   • ATLOC
   • BRLOC
   • CDTLS
   • DLISP PITR

   Show answer

   Answer: A

   Explanation

   A TLOC route represents a WAN link that serves as a tunnel endpoint and is uniquely identified by {System-IP, Color, Encapsulation}. Note that the System IP address is used instead of the interface IP address as an identifier for a TLOC route. That’s because the interface IP can change at any given moment. Using the fixed System-IP ensures that the TLOC can be uniquely identified at all times irrespective of any interface IP changes. This is very important because an OMP route (vRoute) has a next-hop pointing to a TLOC. This separation of information allows TLOC routes to be updated with new parameters without having to invalidate the dependent vRoutes. If a vEdge router has multiple transport interfaces connected to different WAN providers, as shown in figure 7, a TLOC route is created and advertised for each WAN interface. DTLS or TLS provides communication privacy between Cisco SD-WAN devices in the network, using the Advanced Encryption Standard (AES-256) encryption algorithm to encrypt all control traffic sent over the connections

   Source: Adapted from community discussion — CKL_SG

   References

   • Cisco documentation

   Next question

6. Question 116 · 359 in bank

   Which WAN connectivity technology is optimal for edge computing compared to others and why?

   • ADue to high bandwidth, separation and security, and proximity to the data center network, DWDM is the optimal WAN technology for edge computing compared to 4G/5G connectivity, which offers native separation and security with close proximity to the data center.
   • BDue to low latency, high bandwidth, and closest proximity to the user, 4G/5G connectivity is the optimal WAN technology for edge computing compared to L3 VPN MPLS connectivity, which offers native separation and security with close proximity to the data center.
   • CDue to low cost, high bandwidth, low latency, and closest proximity to the edge of the network, Mero Ethernet is the optimal WAN technology for edge computing compared to MPLS, which offers native separation and security with close proximity to the data center.
   • DDue to low latency, high bandwidth, and closest proximity to the user, L3 VPN MPLS connectivity is the optimal WAN technology for edge computing compared to 4G/5G connectivity, which offers native separation and security with close proximity to the data center.

   Show answer

   Answer: C

   Explanation

   C ==> Metro-E (medium-High, for Meropolitan Area Network (close (smaller than WAN)) vs MPLS (offers native traffic segmentation) So.. C

   Source: Adapted from community discussion — cerifyme85

   Next question

7. Question 117 · 359 in bank

   

   Refer to the exhibit. An architect must design an IP addressing scheme for a multisite network connected via a WAN transit. The campus site must accommodate 12,000 devices, and the branch sites must accommodate 1,000 devices. Which address scheme optimizes network device resources, contains convergence events to the different blocks of the network, and ensures the network's future growth?

   • Aג€¢ Campus: 10.0.0.0/18 ג€¢ Branch1: 10.0.192.0/21 ג€¢ Branch2: 10.0.200.0/21
   • Bג€¢ Campus: 10.0.0.0/16 ג€¢ Branch1: 10.255.0.0/20 ג€¢ Branch2: 10.255.16.0/20
   • Cג€¢ Campus: 10.0.0.0/10 ג€¢ Branch1: 10.64.0.0/10 ג€¢ Branch2: 10.128.0.0/10
   • Dג€¢ Campus: 10.0.0.0/20 ג€¢ Branch1: 10.0.64.0/21 ג€¢ Branch2: 10.0.128.0/21

   Show answer

   Answer: A

   Next question

8. Question 118 · 359 in bank

   What is the purpose of a TLOC extension in a Cisco SD-WAN network fabric?

   • Ato facilitate WAN Edge router redundancy within a site
   • Bto identify the physical interface where a WAN Edge router connects to the WAN transport network
   • Cto expand the number of colors that are potentially applied to a network transport interface
   • Dto aggregate multiple physical Interfaces into a single logical interface

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

9. Question 119 · 359 in bank

   DRAG DROP - Drag and drop the types of WAN connectivity from the left onto the connectivity use cases on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 120 · 359 in bank

    An engineer must design a management network for a customer's enterprise network. The design must: • provide the ability to grant and revoke access privileges • allow only protocols SSH, NTP, FTP, and SNMP • restrict access to management interfaces Which solution must the engineer choose to meet the requirements?

    • Ain-band
    • BmGRE
    • Cout-of-band
    • Denterprise internal private

    Show answer

    Answer: C

    Explanation

    Hard to know The Management Plane Protection (MPP) feature can be used to limit remote management sessions to specific trusted interfaces only. This is very useful when a router connects a trusted network to an untrusted network such as the Internet. MPP applies to all management protocols, such as SSH, HTTPS, and SNMP. This feature is configured using the management-interface command in the control pane. This command can be repeated to enable the same or a different set of protocols on other interfaces. One key restriction of this feature is that it cannot be applied to an out-of-band management interface (also called a dedicated management interface), if the device has one. Example 2-12 shows the usage of this command. https://www.ciscopress.com/articles/article.asp?p=2928193&seqNum=2#:~:text=The%20Management%20Plane%20Protection%20(MPP,SSH%2C%20HTTPS%2C%20and%20SNMP.

    Source: Adapted from community discussion — Marinheiro

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-420 practice, question 111. 359 questions available.