Designing Cisco Enterprise Networks (ENSLD)359 questions across 36 pages are complete and free, with no account or card.
359 questions in this bank
Free access · progress saved on this device
DRAG DROP - Drag and drop the elements from the left onto the functions they perform in the Cisco SD-WAN architecture on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Which method does Cisco SD-WAN use to avoid fragmentation issues?
Answer: A
A company is using OSPF between its HQ location and a branch office. HQ is assigned area 0 and the branch office is assigned area 1. The company purchases a second branch office, but due to circuit delays to HQ, it decides to connect the new branch office to the existing branch office as a temporary measure. The new branch office is assigned to area 2. Which OSPF configuration enables all three locations to exchange routes?
Answer: B
Area 0 must connect to all other areas. When the network design goes against that practice we have to use virtual links to configure the connecting area as a transit area. Answer is B
Source: Adapted from community discussion — Benzzyy
DRAG DROP - Drag and drop the descriptions from the left onto the corresponding WAN connectivity types and categories on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
A global organization with several branches hired a network architect to design an overlay VPN solution. The branches communicate with each other frequently. The customer expects to add more branches in the future. To meet the customer's security requirements, the architect plans to provide traffic protection using dynamic IPsec tunnels. Which solution should the architect choose?
Answer: A
DRAG DROP - Drag and drop the descriptions from the left onto the corresponding VPN types on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
A customer requests a VPN solution to connect multiple sites with the company headquarters. All the sites use the same IP subnet. The engineer plans to use VPLS. Which solution must the engineer include in the design?
Answer: C
I'm going with C. The question states all sites use the same subnet... while answer "B" states [... NAT to hide overlapping subnetS ...]. To me this just doesn't sound correct because there is only 1 subnet in question and that answer uses the plural form of that word, also the question uses the words "must include" and you can absolutely get this working without any NAT involved if you treat it simply as a Layer2 extension (just don't have overlapping IPs). "C" sounds more correct here because yeah if you use a VPLS circuit to extend a broadcast domain obviously you need to tag that traffic with a VLAN before you can even send it into the VPLS circuit.
Source: Adapted from community discussion — jzzmth
An ISP provides Layer 3 VPN service over MPLS to a customer with four branches and multiple CE routers at each branch. To exchange the routes that are learned from the CE routers, which BGP address family should the ISP activate among the PE routers?
Answer: C
http://www.mplsvpn.info/2009/11/difference-between-address-family-ipv4.html " In short we can say that ipv4 address-family is being used for customers and vpnv4 address-family is used by SP core. "
Source: Adapted from community discussion — Reinier_veen
In the SD-WAN underlay network, which WAN Edge VPN ID is defined as the transport VPN and is used to carry control traffic?
Answer: A
A company's security policy requires that all connections between sites be encrypted in a manner that does not require maintenance of permanent tunnels. The sites are connected through a private MPLS-based service that uses a dynamically changing key and spoke-to-spoke communication. Which type of transport encryption must be used in this environment?
Answer: A
Standard IPsec VPN isn't correct because it is not dynamic. It is a permanent VPN tunnel solution. The requirements state that "does not require maintenance of permanent tunnels" DMVPN isn't correct because it is by design, a Hub and Spoke Architecture. The requirements state "spoke to spoke communication" GRE VPN isn't correct because a GRE VPN doesn't encrypt to secure the packets during transport. The requirements state "all connections between sites be encrypted" GETVPN is correct because it is the only one listed that is a "tunnel-less VPN". The requirements state "does not require maintenance of permanent tunnels.
Source: Adapted from community discussion — iLikeHamburgers
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-420 practice, question 11. 359 questions available.
Version 1.0.0. How we source questions
