https://www.braindump2go.com/300-420.html https://www.braindump2go.com/300-420.html https://www.braindump2go.com/300-420.html QUESTION 335 Refer to the exhibit. An architect must design an OSPF solution for an enterprise customer. The design must meet these requirements: - Limit the link flap impact to Area-1 and Area-2. - Any link failure must have minimal impact on voice and video traffic Which two OSPF solutions must the architect include in the design? (Choose two.) A. Enable manual route summarization and configure all nonbackbone areas as stub networks B. Ad vertise default routes from the backbone to nonbackbone areas C. Reduce the frequency of DR and BDR elections https://www.braindump2go.com/300-420.html D. Increase hello and hold timers E. Tune LSA and SPF throttling timers Answer: AE QUESTION 336 Which two LISP components are required in the Cisco SD-Access fabric control plane node? (Choose two.) A. Proxy ETR B. Engress Tunnel Router C. Map - Server D. Map - Resolver E. Ingres Tunnel Router Answer: CD QUESTION 337 Which AES mode should be used in a Cisco SD-WAN environment that includes multicast applications? A. Electronic Code Book (ECB) B. Cipher Feedback (CFB) C. Cipher Block Chaining (CBC) D. Galois/Counter Mode (GCM) Answer: D QUESTION 338 Refer to the exhibit. An engineer must connect the IPv6 island to the IPv4-only network to provide IPv6 hosts access to file servers and DNS services in the IPv4 network. Which NAT should the engineer choose? A. stateless NAT66 B. stateful NAT66 C. dynamic NAT - PT D. static NAT - PT Answer: C QUESTION 339 An engineer is designing a QoS solution for a campus. The design must guarantee real-time traffic delivery during congestion, minimize the bandwidth consumption for possible virus or worm attacks, and reduce flooding of excessive traffic during times of congestion. Which two solutions must the engineer select? (Choose two.) A. Create a policing policy to drop excessive traffic and a strict queue for real - time traffic B. Apply queuing on the distribution to core links C. Create a scavenger queue for excessive traffic and a strict que ue for real - time traffic D. Apply queuing on the access to distribution links E. Create a shaping policy to drop excessive traffic and a strict queue for real - time traffic Answer: CD QUESTION 340 Refer to the exhibit. An engineer proposed this solution for a company that requires a loop-free, Layer 2 network design. The network will run 802.1w, and all links will be 1 Gbps. If all interfaces are up as point-to-point adjacencies, what are the expected port end states https://www.braindump2go.com/300-420.html based on the design? A. Eth1/2 on SW3 and SW4 will be in an Altn BLK state B. Eth1/3 on SW2 and SW3 will be in an Altn BLK state C. Eth1/2 on SW2 and SW3 will be in a Desg FWD state D. Eth1/1 on SW1 and SW2 will be in a Root FWD state Answer: A QUESTION 341 What are two purposes of the RPF check in multicast routing? (Choose two.) A. to ensure that multicast packets are forwarded if they arrived on the interface used to route traffic back to the source address B. to ensure that multicast packets are forwarded if they arrived on the interface used to route traffic to the destination address C. to ensure that multicast packets are dropped if they arrived on the interface used to route traffic to the destination address D. to ensure that multicast packets are dropped if they arrived on the interface used to route traffic back to the source address E. to ensure that multicast packets, no matter the interface they arrived on are forwarded out all interfaces Answer: AC QUESTION 342 A customer requires QoS to support multimedia conferencing over MPLS. The network architect chooses to use per-hop behavior. Which solution must the architect use to classify and mark traffic traveling between branch sites? A. BW Queue with DSCP AF3 B. BW Queue and DSCP WRED with DSCP AF4 C. BW Queue and DSCP WRED with DSCP AF3 D. BW Queue with DSCP AF4 Answer: B QUESTION 343 Which two functions is the Cisco SD-Access Border Node responsible for? (Choose two.) A. Map users to a virtual network B. Advertise EID subnets C. Route and transport IP traf fic D. Act as an anycast Layer 3 gateway E. Act as a LISP proxy tunnel router Answer: BE QUESTION 344 An engineer must establish a direct connection between two remote offices. The new connection must be established using a logical https://www.braindump2go.com/300-420.html path, share a common broadcast domain, connect over private WAN, and have as little overhead as possible. Which technology must the engineer choose? A. GRE B. L2VPN C. GET VPN D. IPsec Answer: B QUESTION 345 A customer plans to deploy WoL in the enterprise with these high-level design requirements: - DHCP services must be available - Clients BIOS settings must be set for WoL - Clients get IP addresses once online - Spanning-tree PortFast is enabled on the Layer 2 switches Which two solutions must the customer select to have a successful deployment? (Choose two.) A. IP directed broadcast and forward - protocol must be enabled on all the SVI or routed interfaces where the client subnets reside B. IP directed broadcast and forward - protocol must be disabled on all the SVI o r routed interfaces where the client subnets reside C. IP helper - addresses for the client ranges must be disabled on the SVI or routed interface where the WoL server subnet resides D. IP helper - addresses for the WoL server must be enabled on the SVI or r outed interface where the client subnets reside E. IP helper - addresses for the client ranges must be enabled on the SVI or routed interface where the WoL server subnet resides Answer: AE Explanation: https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/91672-catl3-wol-vlans.html QUESTION 347 Refer to the exhibit. Due to budget constraints, a customer decided to purchase WAN routers with one LAN and one WAN interface per device. There is a requirement to connect the three sites to ensure high availability without buying additional WAN links. Which design deployment must the customer choose? A. dual - homed full mesh B. single - homed full mesh C. single - homed hub - and - spoke D. dual - homed hub - and - spoke Answer: C QUESTION 348 In Cisco SD-Access, virtual networks create segmentation that allows for separation of users and resources. How is this type of segmentation described? A. stretched B. micro C. macro D. inter - VN Answer: C https://www.braindump2go.com/300-420.html QUESTION 349 What is the purpose of service routes in OMP updates? A. define the remote management information B. specify routes toward a centralized orchestration plane C. describe underlay transport information D. indicate services that are enabled for service insertion Answer: D QUESTION 350 Refer to the exhibit. A company specializing in VoD content creation has two offices in a separate multicast domain connected by a WAN link. BGP communication has been established between the offices. Clients are inside the LAN in each office. In AS5373, R2 has been selected as RP. What must the network architect design to deliver VoD content to clients in AS65773? A. PIM SSM B. PIM ASM with BSR C. MSDP D. PIM ASM with Auto - RP Answer: C QUESTION 351 A network architect is enabling TV services in the LAN. The source will be streaming to the 239.1.1.1 group IP address. Dense mode is not allowed in the network. Multicast has already been enabled on all network devices in the LAN segment. Which action must the architect take to finalize the design? A. Enable PIM SSM. B. Enable PIM Auto - RP. C. Enable PIM Anycast RP. D. Enable PIM BSR. Answer: A QUESTION 352 Refer to the exhibit. An architect is designing an ISIS solution with these requirements: - The backbone area will grow to 50 routers in the next 12 months. - Routers A1 and A2 must avoid suboptimal routing. - Summarization and route-leaking should be allowed in areas 49.002 and 49.003. Which solution must the architect select? https://www.braindump2go.com/300-420.html A. area 49.000 L2, area 49.001 L1, area 49.002 L1, and area 4 9.003 L1 B. area 49.000 L1, area 49.001 L2, area 49.002 L2, and area 49.003 L2 C. area 49.000 L1, area 49.001 L1, area 49.002 L2, and area 49.003 L2 D. area 49.000 L2, area 49.001 L2, area 49.002 L1, and area 49.003 L1 Answer: C QUESTION 353 What is the purpose of a border node in a Cisco SD-Access fabric? A. expand a network B. perform traffic encapsulation and de - encapsulation C. connect devices to a network D. perform network virtualization Answer: B QUESTION 354 Refer to the exhibit. An engineer must ensure that the QoS design guarantees bandwidth for the applications, and an application can request a particular type of service to support its delay requirements. Which solution must the engineer select? A. Diffserv with RSVP B. Diffserv w ith DSCP C. IntServ with DSCP D. IntServ with RSVP Answer: D QUESTION 355 A company wants to switch from static routing to a dynamic routing protocol to ease the administrative and operational overhead. The network topology is hub and spoke, and the branches use DMVPN back to the hub with two 10-Mbps internet connections. The branch routers are multivendor and have limited memory and CPU resources. Which routing protocol and design solution meets the requirements? A. eBGP with the hub routers set up a s route reflectors B. EIGRP with branch routers as stub routers and variance enabled C. ISIS with the hub and spoke routers configured in two different areas D. OSPF with the hub in area 0 and branch routers in stub areas with ECMP Answer: B https://www.braindump2go.com/300-420.html QUESTION 356 Refer to the exhibit. A company has some offices that are connected via dark fiber in New York. A network architect must optimize the network design based on the EIGRP routing protocol. The network has hierarchical addressing between 10 and 12 routers in each office. Routing convergence time must be at the minimum. What must the network architect do to reduce the query range? A. Implement network summarization on edge routers. B. Configure route filtering on non - edge routers. C. Configure stub are as on non - edge routers. D. Use different EIGRP processes on edge routers. Answer: A QUESTION 357 A company requested that an architect propose a new IPv4 and IPv6 deployment strategy. The company wants a solution that is straightforward, with no information hiding or forwarding overhead. Which solution meets these requirements? A. GRE tunnels B. LISP C. NAT64 D. dual - stack Answer: D QUESTION 358 An engineer working for a service provider with an employee ID: 4859:86:437 must design a solution to provide remote connectivity over the public internet. The design must: - securely connect multiple remote sites to the central site - provide redundant paths to the central site - allow auto path selection based on failure and connection quality - support IP multicast - minimal configuration at remote sites Which solution must the engineer choose? A. MPLS provided service with BGP B. full mesh ISIS with GRE tunnels and IPsec C. dual DMVPN with EIGRP routing D. full mesh OSPF with IPsec tunnels Answer: C QUESTION 359 Refer to the exhibit. An architect must design a resilient gateway solution based on these requirements: - VLAN 10 and VLAN 11 support voice and video applications. - Link and node failures must have minimal impact on traffic. - Provide protection against false hello packets. - Support IPv6. Which solution must the architect choose? https://www.braindump2go.com/300-420.html A. GLBP with IP SLA tracking B. HSRP version 2 with MD5 authentication C. VRRP version 2 with object tracking D. VRRP version 2 with authentication Answer: B QUESTION 360 A customer has several remote sites connected with their headquarters through microwave links. An engineer must propose a backup WAN solution based on these conditions: - A physical WAN solution is not available for most of the sites. - The customer has a limited budget and a short time frame for implementation. - The backup link will have low bandwidth requirements. - Users will tolerate a WAN outage of up to 2 hours. Which backup WAN link type should the engineer recommend? A. 802.15. 1 Bluetooth B. LTE C. 802.16 WiMAX D. laser link Answer: B QUESTION 361 A company requires a private WAN design that allows remote sites to connect to HQ. The design must ensure that: - traffic is always encrypted - forwarding overhead is reduced - management of security is centralized - multicast traffic is supported Which technology must the company select? A. IPsec P2P B. mGRE C. DMVPN Phase 3 D. GET VPN Answer: D Explanation: While DMVPN Phase 3 is a strong contender, GET VPN is the optimal choice because it eliminates tunnel encapsulation overhead, centralizes security, and efficiently supports multicast - aligning perfectly with the stated requirements. https://www.braindump2go.com/300-420.html QUESTION 362 An architect is designing how the company will manage the infrastructure of a large data center. The company wants to group device types for security reasons and mitigate DoS attacks. The company also wants to ensure that access to the rest of the production network is not possible if one device is compromised on the management plane. Which solution must the architect choose? A. out - of - band Ethernet B. out - of - band dial - up circuit C. in - band Ethernet D. in - band dial - up circuit Answer: A QUESTION 363 Refer to the exhibit. An architect is designing a Layer 2 network for a customer. The network will use the spanning-tree protocol. During a link failure between SW1 and SW2, the fastest possible convergence time is desired. Which solution must the architect select? A. UplinkFast B. PortFast C. BackboneFast D. Loop Guard Answer: A QUESTION 364 A customer is undergoing a WAN re-architecture and wants to design QoS policies for remote sites that have low bandwidth. What must be considered to have CBWFQ configured in the parent and child policies in an end-to-end QoS design? A. Traffic policing is required in the child policy. B. CBWFQ is only supported in the child policy. C. CBWFQ is only supported in the parent policy. D. Traffic shaping is required in the parent policy. Answer: A QUESTION 365 When is it advisable to provide dedicated control plane nodes within a Cisco SD-Access design? A. in a small deployment where border nodes are not required B. when there is a requirement for frequent roaming of endpoints across fabric edge nodes https://www.braindump2go.com/300-420.html C. in designs without Cisco DN A Center D. in a design where fabric edge nodes are unable to provide control plane functionality Answer: B QUESTION 366 An architect must design a QoS model for a business-critical application that is delay-sensitive and requires high bandwidth. The company's head office hosts the application, and DMVPN tunnels protected with IPsec provide connectivity between the head office and branches. Which solution must the architect choose? A. DiffServ B. RSVP C. IntServ D. WRED Answer: C Explanation: Guaranteed QoS: IntServ (Integrated Services) provides per-flow guarantees, which is ideal for business-critical, delay-sensitive, and high-bandwidth applications that need strict QoS. RSVP signaling: IntServ uses RSVP to reserve resources explicitly for each flow, ensuring the application receives the bandwidth and low delay it requires. High priority: IntServ is best suited when precise and strict QoS is needed, even though it may require more resources and isn't as scalable as DiffServ. QUESTION 367 Which element in a Cisco SD-WAN architecture maintains a centralized routing table? A. vManage NMS B. vSmart Controller C. WAN Edge router D. vBond Orchestrator Answer: B QUESTION 368 Refer to the exhibit. A network architect is preparing a network design based on the EIGRR. Routers are connected using a cat6a cable type and the inter-router connection speed is limited to 10 Mbps due to distance. During the pilot phase, a DUAL-3-SIA error message is visible. Which action must the engineer take to create a stable design? A. Configure STUB area on R4. B. Enable poison reverse on R4. C. Disable split horizon on R1. D. Create a summary route on R2. Answer: D Explanation: The DUAL-3-SIA error in EIGRP typically indicates a stuck-in-active state, which occurs when a router is unable to find a route to the destination within the expected timeframe. This can be caused by various factors, such as network instability, misconfigurations, or inefficient routing information. Considering that the DUAL-3-SIA error usually happens because of route instability or excessive route updates, creating a summary route on R2 can help simplify the routing table and stabilize the design. https://www.braindump2go.com/300-420.html QUESTION 369 A company wants to switch from static routing to a dynamic routing protocol to ease the administrative and operational overhead. The network topology is hub and spoke, and the branches use DMVPN back to the hub using two 100 Mbps internet connections. Both links must be used due to spikes in traffic, and routing must take traffic utilization of the links into account. Also, the branch routers have limited memory and CPU resources. Which routing protocol and design solution must the company choose? A. ISIS with the hub and spoke routers configured in two different areas B. EIGRP wi th branch routers as stub routers using ECMP C. iBGP with the hub routers set up as route reflectors and branches set up as clients D. OSPF deployed in area 0 with branch routers connecting from area 1 Answer: B QUESTION 370 What is an advantage of using model-driven telemetry in the network? A. It uses interrupt - driven polling to pull data at regular intervals. B. It uses MIB models to structure the data that are well known in the industry. C. It uses JSON encoding and is compatible with a wide var iety of tools on the market. D. Telemetry obtains data by parsing the CLI output from show commands. Answer: C QUESTION 371 In a Cisco SD-Access fabric, which node is equivalent to an access layer switch in a traditional three-tier campus network design? A. edge node B. border node C. intermediate node D. control plane node Answer: A QUESTION 372 What is the purpose of the fabric control plane in a Cisco SD-Access architecture? A. create and resolve endpoint - to - location mapping B. create a tran sit node with BGP route reflector functionality C. extend multiple subnets to one RLOC D. create, propagate, and enforce GBAC policies in the fabric Answer: A QUESTION 373 A network engineer must design a multicast solution based on these requirements: - interactive communication - must not use source trees - users must register - 100 multicast sources Which solution must the company choose? A. any - source multicast B. MSDP C. BIDIR - PIM D. PIM - DM Answer: C https://www.braindump2go.com/300-420.html