Designing Cisco Enterprise Networks (ENSLD)359 questions across 36 pages are complete and free, with no account or card.
359 questions in this bank
Free access · progress saved on this device
Which feature provides the capability for intra-VN traffic filtering and control within the Cisco SD-Access architecture?
Answer: C
Answer is C. Software-defined segmentation is seamlessly integrated using Cisco TrustSec® technology, providing micro-segmentation for groups within a virtual network using scalable group tags (SGTs).
Source: Adapted from community discussion — beskar
Refer to the exhibit. An engineer working for a telecommunication company with an employee ID: 1234:56:789 is calculating STP scalability for switches to ensure that the numbers are below the maximum supported value for STP logical ports. How many logical interfaces are active for switch A?
Answer: C
Calculating the Active Logical Ports When designing a large data center using extended Layer 2 VLAN topologies, it is necessary to calculate the spanning tree logical and virtual ports in advance to ensure that spanning tree operates with optimal convergence and stability characteristics. trunks on the switch * active VLANs on trunks + number of non-trunking interfaces on the switch 2 Trunks * 100 Vlans + 2 = 202 Active Logical Interfaces
Source: Adapted from community discussion — CKL_SG
DRAG DROP - Drag and drop the descriptions from the left onto the categories they apply to on the right.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Per the ENSLD 300-420 book, page 278-279... Metro Ethernet should be "same technology that is used in the LAN" and "bandwidth increased dynamically without installing new equipment".
Source: Adapted from community discussion — Soggyt74
Prior to establishing full-mesh IPsec tunnels in a typical Cisco SD-WAN deployment, which mechanism do WAN Edge routers use to exchange key information for data plane encryption?
Answer: A
Which feature minimizes TLOC connections and reduces strain on the vSmart controller in an SD-WAN architecture?
Answer: B
Refer to the exhibit. A network administrator plans to announce the site subnets to the WAN using route summarization instead of announcing every subnet. What is the smallest summary route that should be used to encompass all subnets at the site?
Answer: B
A /60 prefix length creates an IPv6 range of: 2001:0db8:abcd:0000:0000:0000:0000:0000 through 2001:0db8:abcd:000f:ffff:ffff:ffff:ffff This also allows for 16 subnets using a /64 prefix length, which will accommodate this situation.
Source: Adapted from community discussion — Based_Engineer
Refer to the exhibit. A customer is planning to onboard three new VPN partner connections in the data center. The new subnets must not overlap with the existing data center network, and the subnet size must not be bigger than necessary. The customer dedicated 10.1.8.0/21 for this design. How must the subnets be divided to meet these requirements?
Answer: A
A is the closest answer but I dont get it. For Partner A a /25 wont work, but just barely. 126 users total... a /25 gives you 128 IPs, 2 reserved for network and broadcast (10.1.11.0 and 10.1.11.127) 1 for gateway (let's say 10.11.1.1) so down to 125 usable IPs. 1 User is getting hosed and replaced as a gateway. D works for Partner A however Partner B overlaps with Partner C. 10.1.13.0/23 is not a valid network ID as in a /23 every even-network is a correct ID 10.1.12.0/23 10.1.14.0/23 10.1.16.0/23 etc B is wrong because Partner Bs network overlaps with A and D.. a /22 is again every-even network divisible whole by 4. So 10.1.12.0 to 10.1.15.255 C is wrong because Partner B doesnt allow enough addresses. /23 is 512 IPs, 2 for broadcast/network, so down to 510. The scenario asks for 511. so you need an entire /22 to cover this.
Source: Adapted from community discussion — mgiuseppe86
Refer to the exhibit. An engineer is designing an OSPF network for a client. Requirements dictate that the routers in Area 1 should receive all routes belonging to the network, including EIGRP, except the ones that originated in the RIP domain. Which action should the engineer take?
Answer: A
Area 1 is attached to EIGRP, so , It could not be a stub area. NSSA could be an external route and I think that the best option es A.
Source: Adapted from community discussion — Eddy1608
In a multicast network, which condition must be met for an RPF check to be performed on the RP address?
Answer: D
D. The PIM router or multilayer switch has a shared-tree state. In a multicast network, the Reverse Path Forwarding (RPF) check is performed to ensure that multicast traffic flows along the optimal path and to prevent loops. When a PIM router or multilayer switch has a shared-tree state, it means that it is using a shared distribution tree with a Rendezvous Point (RP) at its root. In this case, the RPF check is performed on the RP address to ensure that multicast packets are being received from the correct upstream path toward the RP.
Source: Adapted from community discussion — SpicyMochi
How do IETF, OpenConfig, and Cisco native YANG models differ when used to configure the same feature on an infrastructure device?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-420 practice, question 131. 359 questions available.
Version 1.0.0. How we source questions