2026 Realistic Verified 300-420 exam dumps Q&As - 300-420 Free Update
Use Real 300-420 Dumps - 100% Free 300-420 Exam Dumps
Cisco 300-420 exam covers topics such as advanced addressing and routing solutions, advanced enterprise campus networks, WAN, security services, network services, and SDA. 300-420 exam focuses on testing the candidates' knowledge and skills in designing, planning, and implementing complex enterprise-level networks. Successful candidates will be able to design and implement secure, scalable, and reliable enterprise networks that meet the business requirements of their organizations. The Cisco 300-420 exam is a challenging exam that requires a deep understanding of networking concepts, protocols, and technologies.
NEW QUESTION # 146
Drag and drop the elements from the left onto the YANG models where they and used on the right.
Answer:
Explanation:
Explanation
Diagram Description automatically generated
NEW QUESTION # 147
Which design element should an engineer consider when multicast is included in a Cisco SD-Access architecture?
- A. Rendezvous points must be used in a PIM SSM deployment.
- B. Multicast clients reside in the underlay, and the multicast source is outside the fabric or in the overlay.
- C. Multicast traffic is transported in the overlay and the EID space for wired and wireless clients.
- D. PIM SSM must run in the underlay.
Answer: C
Explanation:
When multicast is included in a Cisco SD-Access architecture, the architect must account for multicast transport in the overlay for endpoint traffic. Cisco SD-Access separates the underlay, which provides IP connectivity between fabric nodes, from the overlay, which carries user endpoint traffic in the endpoint identifier space. For wired and wireless clients, multicast traffic is transported as part of the overlay service rather than treating clients as underlay participants. That is why the correct design element is that multicast traffic is transported in the overlay and EID space for both wired and wireless clients. PIM SSM does not have to run in the underlay for this purpose, and multicast clients do not simply reside in the underlay. The statement about RPs being required in an SSM deployment is also wrong because source-specific multicast is specifically designed to avoid the traditional RP model. In a fabric design, multicast requirements affect border behavior, receiver placement, replication mode, wireless integration, and policy boundaries. Reference topics: Cisco SD-Access multicast, overlay forwarding, EID space, wired and wireless fabric clients.
NEW QUESTION # 148
An architect must design a plan to manage the enterprise network devices. The design must accommodate that:
- not all network devices have a dedicated management interface
- all IP-enabled interfaces on all devices must be reachable
- encryption must be used with all devices which have support
Which solution must the architect choose?
- A. KYM server
- B. out-of-band
- C. in-band
- D. terminal server
Answer: C
Explanation:
In-band management uses the production network to reach device interfaces, which fits environments where some devices do not have dedicated management ports. It allows all IP- enabled interfaces to be reachable, and secure protocols such as SSH and HTTPS can be used where supported to encrypt management access.
NEW QUESTION # 149
Which two steps can be taken to improve convergence in an OSPF network? (Choose two.)
- A. Use Bidirectional Forwarding Detection
- B. Merge all the areas into one backbone area
- C. Span the same IP network across multiple areas.
- D. Make all non-backbone areas stub areas
- E. Tune OSPF parameters
Answer: D,E
NEW QUESTION # 150
An engineer is working for a large cable TV provider that requires multiple sources streaming video on different channels using multicast with no rendezvous point.
Which multicast protocol meets these requirements?
- A. PIM-SM
- B. BIDIR-PIM
- C. any-source multicast
- D. PIM-SSM
Answer: D
Explanation:
PIM-SSM is suitable for when well-known sources exist within the local PIM domain and for broadcast applications. Also, PIM-SSM eliminates the RPs and shared trees.
NEW QUESTION # 151
An infrastructure team is concerned about the shared memory utilization of a device, and for this reason, they need to monitor the device state. Which solution limits impact on the device and provides the required data?
- A. on-change subscription
- B. IPFIX
- C. static telemetry
- D. periodic subscription
Answer: A
Explanation:
There are two types of subscriptions: periodic and on-change. With periodic subscription, data is streamed out to the destination at the configured interval. It continuously sends data for the lifetime of that subscription.
With on-change, data is published only when a change in the data occurs such as when an interface or OSPF neighbor goes down. https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide
/streaming-telemetry
NEW QUESTION # 152
A company's security policy requires that all connections between sites be encrypted in a manner that does not require maintenance of permanent tunnels. The sites are connected through a private MPLS-based service that uses a dynamically changing key and spoke-to-spoke communication. Which type of transport encryption must be used in this environment?
- A. GRE VPN
- B. GETVPN
- C. DMVPN
- D. standard IPsec VPN
Answer: B
NEW QUESTION # 153
Which topology within a network underlay eliminates the need for first hop redundancy protocols while improving fault tolerance, increasing resiliency, and simplifying the network?
- A. Layer 2 topology
- B. logical fabric topology
- C. routed access topology
- D. virtualized topology
Answer: C
Explanation:
A routed access topology is the underlay design that removes the normal need for first-hop redundancy protocols. In a traditional Layer 2 access design, end hosts usually rely on HSRP, VRRP, or GLBP at the distribution layer because the default gateway is shared across redundant distribution switches. In a routed access design, the Layer 3 boundary is pushed down to the access layer. The access switch routes toward the distribution layer using point-to-point routed links, so uplink failures are handled by the routing protocol instead of spanning tree and first-hop redundancy. Cisco campus design guidance highlights routed access as a way to improve convergence, avoid Layer 2 loop exposure across uplinks, and simplify resiliency by using equal-cost routed paths. Virtualized topology is too broad and does not inherently remove FHRP. A Layer 2 topology normally increases dependence on STP and gateway redundancy. A logical fabric topology is not the generic underlay topology described by the question. The correct choice is therefore routed access. Reference topics: routed access campus, Layer 3 access, FHRP elimination, routed underlay resiliency.
NEW QUESTION # 154 
Refer to the exhibit. A network engineer must design a highly available OSPF solution based on these requirements:
* Traffic disruptions caused by link or node failures in Area-1 must be resolved in milliseconds.
* In the event of a failure, traffic must switch to another path without waiting for the OSPF dead interval.
Which fault detection solution must the engineer choose?
- A. Enable IP SLA tracking for each OSPF peer.
- B. Utilize BFD and tune the BFD timers to 100 ms.
- C. Tune the SPF delay and the OSPF LSA interval timers to 100 ms.
- D. Decrease SPF timers to 100 ms.
Answer: B
Explanation:
BFD with tuned timers is the correct fault-detection solution when OSPF traffic must fail over in milliseconds and cannot wait for the OSPF dead interval. Cisco describes Bidirectional Forwarding Detection as a lightweight mechanism that detects forwarding-path failures rapidly and notifies the routing protocol. OSPF can then bring down the adjacency and switch to an alternate route without waiting for the normal hello and dead timer process. Tuning SPF delay or LSA timers improves the control-plane calculation phase after OSPF has learned about a failure, but it does not provide the fastest failure detection by itself. IP SLA tracking can detect reachability problems, but it is not the standard per-neighbor OSPF millisecond detection mechanism.
Decreasing SPF timers alone does not solve the requirement to avoid waiting for the dead interval. Therefore, BFD with appropriate 100 ms timers is the correct design choice. Reference topics: OSPF high availability, BFD, fast failure detection, dead interval avoidance, subsecond convergence.
NEW QUESTION # 155 
Refer to the exhibit. An architect must design a solution to connect bank site A with bank site B and support:
* network operation center monitoring end-to-end L3VPN and L2VPN traffic
* company adding thousands of routes in the next two years
Which two BGP solutions must the design include? (Choose two.)
- A. Establish full mesh IBGP peering with ail routers in different IGP domains.
- B. Apply BGP policies on all routers to filter out ABR and PE loopback IP addresses.
- C. Transport site routes using a BGP VPNv4 address family on the PE routers.
- D. Redistribute different IGP domain routes in a BGP IPv4 routing instance.
- E. Connect multiple IGP'LDP domains using a BGP IPv4 unicast family on the ABR.
Answer: A,C
NEW QUESTION # 156
Drag and drop the descriptions from the left onto the corresponding VPN types on the rights.
Answer:
Explanation:
NEW QUESTION # 157
Which QoS feature responds to network congestion by dropping lower priority packets?
- A. CBWFQ
- B. WRED
- C. tail drop
- D. strict priority
Answer: B
NEW QUESTION # 158
Which two considerations must be made regarding the overlay network for a Cisco SD-Access architecture?
(Choose two.)
- A. Overlapping IP addresses across different overlay networks should be used to conserve IP addresses
- B. SGTs should be used for data plane isolation and microsegmentation
- C. Virtual networks should be used for data plane isolation only
- D. Virtual networks should be used for microsegmentation
- E. Overlapping IP addresses across different overlay networks should be avoided for operational simplicity
Answer: B,E
NEW QUESTION # 159
Refer to the exhibit. AS65533 and AS65530 are announcing a partial Internet routing table as well as their IP subnets. An architect must create a design that ensures AS64512 become a transit AS. Which filtering solution must the architect choose?
- A. Maximum-prefix
- B. No-advertise
- C. Next-hop
Answer: A
NEW QUESTION # 160
A large chain of stores currently uses MPLS-based T1 lines to connect their stores to their data center. An architect must design a new solution to improve availability and reduce costs while keeping these considerations in mind:
* The company uses multicast to deliver training to the stores.
* The company uses dynamic routing protocols and has implemented QoS.
* To simplify deployments, tunnels should be created dynamically on the hub when additional stores open.
Which solution should be included in this design?
- A. IPsec
- B. VPLS
- C. DMVPN
- D. GET VPN
Answer: C
Explanation:
DMVPN is the correct design because it satisfies all of the stated branch requirements without requiring manually built static tunnels for every store. Cisco DMVPN uses multipoint GRE with NHRP and IPsec to create a scalable hub-and-spoke overlay, and later phases allow dynamic spoke-to-spoke tunnels when branch- to-branch traffic is required. GRE supports multicast and dynamic routing protocols, while IPsec supplies encryption across the lower-cost WAN transport. This fits the requirement to deliver multicast training, use dynamic routing, preserve QoS markings and policy behavior, and simplify future branch additions because new spokes can register dynamically with the hub. VPLS would provide Layer 2 multipoint service, but it is typically a provider-delivered service and does not meet the secure dynamic VPN requirement as directly.
GET VPN is efficient for private MPLS environments, but it does not create dynamic GRE tunnels from the hub for new stores. Static IPsec is secure but operationally poor at scale and does not natively carry multicast without an overlay. Therefore, the design should include DMVPN. Reference topics: DMVPN, mGRE, NHRP, IPsec protection, multicast over VPN.
NEW QUESTION # 161
A router running ISIS is showing high CPU and bandwidth utilization. An engineer discovers that the router is configured as L1/L2 and has L1 and L2 neighbors. Which step optimizes the design to address the issue?
- A. Configure each interface as either L1 or L2 circuit type
- B. Disable the default behavior of advertising the default route on the L1/L2 router
- C. Make this router a DIS for each of the interfaces
- D. Configure the router to be either L1 or L2
Answer: A
NEW QUESTION # 162
Which two best practices must be followed when designing an out-of-band management network? (Choose two.)
- A. Ensure that the management network is a backup to the data network
- B. Ensure network isolation
- C. Back up data using the management network
- D. Facilitate network integration
- E. Enforce access control
Answer: B,E
Explanation:
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/SAFE_RG/SAFE_rg/chap9.html
NEW QUESTION # 163
......
Pass 300-420 exam Updated 457 Questions: https://certificationsdesk.examslabs.com/Cisco/CCNP-Enterprise/best-300-420-exam-dumps.html