300-420 practice questions 291–300

1. Question 291 · 359 in bank

   A large chain of stores currently uses MPLS-based T1 lines to connect their stores to their data center. An architect must design a new solution to improve availability and reduce costs while keeping these considerations in mind: ✑ The company uses multicast to deliver training to the stores. ✑ The company uses dynamic routing protocols and has implemented QoS. ✑ To simplify deployments, tunnels should be created dynamically on the hub when additional stores open. Which solution should be included in this design?

   • AVPLS
   • BGET VPN
   • CDMVPN
   • DIPsec

   Show answer

   Answer: C

   Explanation

   i think its C , because of the third requirement : ✑ To simplify deployments, tunnels should be created dynamically on the hub when additional stores open.

   Source: Adapted from community discussion — mazinhoo

   Next question

2. Question 292 · 359 in bank

   A network engineer must connect two sites across a public network using a secure tunneling technology that supports multicast traffic. Which technology should be selected?

   • AIPsec
   • BGRE
   • CPPTP
   • DGRE over IPsec

   Show answer

   Answer: D

   Next question

3. Question 293 · 359 in bank

   A branch office has a primary L3VPN MPLS connection back to the main office and an IPSEC VPN tunnel that serves as backup. Which design ensures that data is sent over the backup connection only if the primary MPLS circuit is down?

   • AUse EIGRP to establish a neighbor relationship with the main office via L3VPN MPLS and the IPSEC VPN tunnel.
   • BUse BGP with the multipath feature enabled to force traffic via the primary path when available.
   • CUse static routes tied to an IP SLA to prefer the primary path while a floating static route points to the backup connection.
   • DUse OSPF with a passive-interface command on the backup connection.

   Show answer

   Answer: C

   Explanation

   C - Because it states the backup is an "IPSEC VPN tunnel" so we can't run a dynamic routing protocol over it which rules out A, B and D.

   Source: Adapted from community discussion — python_tamer

   Next question

4. Question 294 · 359 in bank

   Which solution allows overlay VNs to communicate with each other in an SD-WAN Architecture?

   • AExternal fusion routers can be used to map VNs to VRFs and selectively route traffic between VRFs.
   • BGRE tunneling can be configured between fabric edges to connect one VN to another.
   • CSGTs can be used to permit traffic from one VN to another.
   • DRoute leaking can be used on the fabric border nodes to inject routes from one VN to another.

   Show answer

   Answer: A

   Explanation

   The CCNP Enterprise Design ENSLD 300-420 Official Cert Guide mentions, "A Fusion router is used to allow endpoints in different VNs to communicate with each other", it also states "vEdge routers are responsible for establishing the network fabric and forwarding traffic; they bring up IPsec and GRE tunnels between sites...vEdge routers establish a control channel to vSmart controllers and IPsec tunnels to other vEdge devices to form the overlay network". If I understand correctly, I think "vEdge Routers" do the mapping of VN's to VRF's not "Fusion Routers". Fusion Routers acts as the next-hop to a VN. I'm swayed towards "B" as the correct answer.

   Source: Adapted from community discussion — Ranx01

   Next question

5. Question 295 · 359 in bank

   An architect is designing a network for an enterprise site. The design must use an active/backup design for the WAN. It must guarantee the SLA for several applications regardless of which connection is used. Which deployment model should the architect choose?

   • Ahybrid WAN using MPLS VPN and internet VPN from two separate ISPs
   • BMPLS WAN from two separate ISPs
   • Cinternet WAN from two separate ISPs
   • Dhybrid WAN using MPLS VPN and internet VPN from a single ISP

   Show answer

   Answer: B

   Next question

6. Question 296 · 359 in bank

   Select 2

   What are two benefits of designing an SD-WAN network fabric with direct Internet access implemented at every site? (Choose two.)

   • AIt decreases latency to applications hosted by public cloud service provider.
   • BIt decreases latency on Internet circuits.
   • CIt increases the speed of delivery of site deployments through zero-touch provisioning.
   • DIt increases the total available bandwidth on Internet circuits.
   • EIt alleviates network traffic on MPLS circuits.

   Show answer

   Answer: AC

   Explanation

   I agree with A and E. From OCG states "With DIA, Internet-bound traffic or public cloud traffic from the branch is routed directly to the Internet, avoiding the latency involved in tunneling Internet-bound traffic to a central site." This corresponds to answer A. And then "Benefits of using DIA include reduced bandwidth consumption, latency, and costs (thanks to offloading Internet traffic from the private WAN circuit)." Meaning that basically offloads internet traffic from the MPLS (private WAN) and routed directly to DIA. SD-WAN cannot increase by itself, only ISP can do that.

   Source: Adapted from community discussion — ccnproute1

   References

   • Cisco documentation

   Next question

7. Question 297 · 359 in bank

   Which routes does the overlay management protocol advertise in an SD-WAN overlay?

   • Aunderlay, MPLS, and overlay
   • Bprimary, backup, and load-balanced
   • Cprefix, TLOC, and service
   • DInternet, MPLS, and backup

   Show answer

   Answer: C

   Explanation

   vEdge routers advertise three types of routes via the Overlay Management Protocol (OMP) to the vSmart controllers: OMP routes: prefixes learned at the local site via connected interfaces, static routes, and dynamic routing protocols (such as OSPF, EIGRP, and BGP) running on the service side of the vEdge. TLOC routes advertise Transport Locators of the connected WAN transports, along with additional attributes such as public and private IP addresses, color, TLOC preference, site ID, weight, tags, and encryption keys. Service routes advertise embedded network services such as firewalls and IPS that are connected to the vEdge local-site network. https://www.networkacademy.io/ccie-enterprise/sdwan/omp-overview#:~:text=OMP%20routes%3A%20OMP%20Routes%2C%20also,service%20side%20of%20the%20vEdge.

   Source: Adapted from community discussion — bccabrera

   Next question

8. Question 298 · 359 in bank

   A network solution is being designed for a company that connects to multiple Internet service providers. Which Cisco proprietary BGP path attribute will influence outbound traffic flow?

   • ALocal Preference
   • BMED
   • CWeight
   • DAS Path
   • ECommunity

   Show answer

   Answer: C

   Explanation

   Weight is Cisco proprietary and is the first decision of all path attributes to influence outbound traffic on a singular router. Weight is non-transitive and will only influence routes as they leave that device.

   Source: Adapted from community discussion — Benzzyy

   Next question

9. Question 299 · 359 in bank

   What is one function of the vSmart controller in an SD-WAN deployment?

   • Aorchestrates vEdge and cEdge connectivity
   • Bresponsible for the centralized control plane of the SD-WAN network
   • Cprovides centralized network management and a GUI to monitor and operate the SD-WAN overlay
   • Dprovides a data-plane at branch offices to pass traffic through the SD-WAN network

   Show answer

   Answer: B

   Next question

10. Question 300 · 359 in bank

    In an SD-WAN architecture, which methods are used to bootstrap a vEdge router?

    • ADHCP options or manual configuration
    • BvManage or DNS records
    • CZTP or manual configuration
    • DDNS records or DHCP options

    Show answer

    Answer: C

    Explanation

    My mistake - as we are talking about vEdge routers - the only 2x options are manual config or ZTP - refer to: ZTP or manual configuration https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-wan-edge-onboarding-deploy-guide-2020nov.pdf

    Source: Adapted from community discussion — luisjuradoledesma

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-420 practice, question 291. 359 questions available.