試験合格保証付きのCCNP Enterprise 300-420試験問題集 [Q48-Q65]

試験合格保証付きのCCNP Enterprise 300-420試験問題集

Cisco 300-420日常練習試験は2025年最新のに更新された377問あります

質問 # 48
Drag and drop the descriptions from the left onto the corresponding VPN types on the rights.

正解：

解説：

質問 # 49
In a cisco SD-Access brownfield deployment scenario, which configuration deployment must be taken with Cisco DNA center?

A. LAN automation
B. Subnet stretching
C. Automated UNDERLAY
D. Manual underlay

正解：A

質問 # 50
Refer to the exhibit.

Refer to the exhibit. The connection between SW2 and SW3 is fiber and occasionally experiences unidirectional link failure. An architect must optimize the network to reduce the change of layer2 forwarding loops when the link fails. Which solution should the architect include?

A. Utilize loop guard on SW2
B. Utilize root guard on SW1.
C. Utilize 8PDU filter on SW3.
D. Utilize BPDU guard on SW1

正解：A

質問 # 51
Which Cisco vEdge router offers 20 Gb of encrypted throughput?

A. Cisco vEdge 100
B. Cisco vEdge 5000
C. Cisco vEdge 1000
D. Cisco vEdge 2000

正解：B

質問 # 52

Refer to the exhibit. An architect must design a solution to connect bank site A with bank site B and support:
* network operation center monitoring end-to-end L3VPN and L2VPN traffic
* company adding thousands of routes in the next two years
Which two BGP solutions must the design include? (Choose two.)

A. Apply BGP policies on all routers to filter out ABR and PE loopback IP addresses.
B. Establish full mesh IBGP peering with ail routers in different IGP domains.
C. Redistribute different IGP domain routes in a BGP IPv4 routing instance.
D. Transport site routes using a BGP VPNv4 address family on the PE routers.
E. Connect multiple IGP'LDP domains using a BGP IPv4 unicast family on the ABR.

正解：B、D

質問 # 53
Drag and Drop Question
Drag and drop the properties from the left onto the protocols they describe on the right.

正解：

解説：

Explanation:
https://www.cisco.com/c/en/us/td/docs/ios-
xml/ios/prog/configuration/166/b_166_programmability_cg/b_166_programmability_cg_chapter_0
1011.html
https://www.cisco.com/c/en/us/td/docs/ios-
xml/ios/prog/configuration/169/b_169_programmability_cg/ configuring_yang_datamodel.html

質問 # 54
Exhibit:

A. Make R31 an L1 router.
B. Make R11 an L2 router.
C. Make R3 an L1L2 router.
D. Make Area 0 L2-only.

正解：C

解説：
ENSLD 300-420 cert guide page 117. When creating a backbone there should never be L1 routers between (L2 only, or) L1/L2 routers.

質問 # 55
How many host addresses are available with a Class B network with the default mask?

A. 65,536
B. 64,QQQ
C. 65,534
D. 63,998

正解：C

質問 # 56
An engineer is designing a QoS policy that queues excess packets for later transmission. Which mechanism must be included in the design?

A. WRED
B. policing
C. RED
D. shaping

正解：D

質問 # 57
What are two valid scaling techniques when an EIGRP network is designed that consists of more than 1000 routers? (Choose two.)

A. Use the distribute-list command to filter routes
B. Implement multiple EIGRP autonomous systems
C. Use structured hierarchical topology with route summarization
D. Modify delay parameters on the links
E. Used sub-second timers

正解：B、C

解説：
Section: Advanced Addressing and Routing Solutions

質問 # 58
Prior to establishing full-mesh IPsec tunnels in a typical Cisco SD-WAN deployment, which mechanism do WAN Edge routers use to exchange key information for data plane encryption?

A. They use vSmart controllers as key exchange servers.
B. They use vManage as a key exchange server.
C. They use vBond as a key exchange server.
D. They use IKEv2 when exchanging keys with each other.

正解：A

解説：
Cisco SD-WAN uses vSmart controllers as key exchange servers to establish and manage IPsec tunnels between WAN Edge routers. The vSmart controllers generate and distribute cryptographic keys to the WAN Edge routers, which are then used to encrypt and decrypt traffic over the IPsec tunnels.
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security- book.pdf

質問 # 59
An engineer is designing a multicast network for a financial application Most of the multicast sources also receive multicast traffic (many-to-many deployment model). To better routing tables, the design must not use source trees. Which multicast protocol satisfies these requirements?

A. PIM-SM
B. BIRDIR-PIM
C. PIM-SSM
D. MSDP

正解：B

質問 # 60
Drag and drop the characteristics from the left onto the correct telemetry mode on the right.

正解：

解説：

Explanation

In a dial-in mode, the destination initiates a session to the router and subscribes to data to be streamed. Dialin mode is supported over gRPC in only 64-bit platforms In a dial-out mode, the router initiates a session to the destinations based on the subscription. All 64-bit IOS XR platforms (except for NCS 6000 series routers) support gRPC and TCP protocols. All 32-bit IOS XR platforms support only TCP.

質問 # 61
An engineer is looking for a standards-driven YANG model to manage a multivendor network environment. Which model must the engineer choose?

A. Native
B. OpenConfig
C. IEEE NETCONF
D. IETF

正解：D

質問 # 62
An architect is creating a migration strategy for a large organization in which the choice made by the application between IPv6 and IPv4 is based on the DNS request. Which migration strategy does the architect choose?

A. AFT for public web presence
B. site-to-site IPv6 over IPv4 tunnels
C. host-initiated tunnels
D. dual stack

正解：D

解説：
Section: Advanced Addressing and Routing Solutions

質問 # 63
Refer to the exhibit. A customer is planning to onboard three new VPN partner connections in the data center. The new subnets must not overlap with the existing data center network, and the subnet size must not be bigger than necessary. The customer dedicated 10.1.8.0/21 for this design. How must the subnets be divided to meet these requirements?