McAfee Secure

Cisco 300-420 Bundle

Exam Code: 300-420

Exam Name Designing Cisco Enterprise Networks (ENSLD)

Certification Provider: Cisco

Corresponding Certification: CCNP Enterprise

Cisco 300-420 Bundle $25.00

100% Cisco 300-420 Guaranteed Success With Testking Training Materials

Get Real 300-420 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

  • Questions & Answers

    300-420 Questions & Answers

    416 Questions & Answers

    The ultimate exam preparation tool, Questions & Answers mirrors the actual 300-420 exam while allowing you to hone and measure every aspect of your test-taking ability.

  • 300-420 Video Course

    300-420 Training Course

    75 Video Lectures

    300-420 Video Course is developed by Cisco Professionals to help you pass the 300-420 exam.

    Description

    This course will improve your knowledge and skills required to pass Designing Cisco Enterprise Networks (ENSLD) exam.

Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Total Cost: $164.98
Bundle Price: $139.98

Purchase Individually

  • Questions & Answers

    Questions & Answers

    416 Questions

    $124.99
  • 300-420 Video Course

    Training Course

    75 Video Lectures

    $39.99

Cisco 300-420 Practice Test 8

Question 70

In a technical design review: During a predeployment review for a university backbone, the team discovers this design gap: a router being drained for maintenance continues drawing transit traffic through its IS-IS adjacency. An approval gate requires both a measurable acceptance check and a durable prevention control. Which technical principle BEST explains the design decision?

  1. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information.
  2. IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction.
  3. The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists.
  4. Contiguous nonoverlapping prefixes can be summarized at a network boundary, reducing routing-table complexity.

Explanation

Correct Answer

C:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The correct engineering response is: Use an appropriate IS-IS overload-bit maintenance procedure before removing the router from transit service. The observable check is: Other nodes stop using the device as transit while its required management or local reachability remains verified. The university backbone acceptance record also captures this result.

Incorrect Answers

A:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The offered choice instead concerns a different principle: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. Those technical conditions are not interchangeable.

B:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The offered choice instead concerns a different principle: IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. Those technical conditions are not interchangeable.

D:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The offered choice instead concerns a different principle: Contiguous nonoverlapping prefixes can be summarized at a network boundary, reducing routing-table complexity. Those technical conditions are not interchangeable.

Question 71

An engineering reviewer needs objective proof for the following: During a predeployment review for a university backbone, the team discovers this design gap: a router being drained for maintenance continues drawing transit traffic through its IS-IS adjacency. An approval gate requires both a measurable acceptance check and a durable prevention control. Which acceptance observation BEST establishes the intended result?

  1. The computed best paths follow documented metrics and traffic returns across an available intended path.
  2. Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.
  3. Access routers retain area-local link-state information and still reach remote areas via the L1/L2 boundary.
  4. Other nodes stop using the device as transit while its required management or local reachability remains verified. The university backbone acceptance record also captures this result.

Explanation

Correct Answer

D:

Other nodes stop using the device as transit while its required management or local reachability remains verified. The university backbone acceptance record also captures this result. The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists.

Incorrect Answers

A:

IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. In the case being tested, the IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The necessary acceptance evidence is: Other nodes stop using the device as transit while its required management or local reachability remains verified. The university backbone acceptance record also captures this result.

B:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. In the case being tested, the IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The necessary acceptance evidence is: Other nodes stop using the device as transit while its required management or local reachability remains verified. The university backbone acceptance record also captures this result.

C:

IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. In the case being tested, the IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The necessary acceptance evidence is: Other nodes stop using the device as transit while its required management or local reachability remains verified. The university backbone acceptance record also captures this result.

Question 72

The change advisory board sees a repeat risk in this case: During a predeployment review for a university backbone, the team discovers this design gap: a router being drained for maintenance continues drawing transit traffic through its IS-IS adjacency. An approval gate requires both a measurable acceptance check and a durable prevention control. Which preventive design control MOST DIRECTLY addresses this specific risk?

  1. Adopt a controlled IS-IS maintenance runbook with pre-drain and restoration checks. Apply the same control to the university backbone rollout checklist.
  2. Version-control metric policy and inspect SPF changes during circuit upgrades.
  3. Define stable IS-IS area boundaries and test failure behavior at each L1/L2 transition.
  4. Standardize key rotation and restrict routing adjacency interfaces.

Explanation

Correct Answer

A:

Adopt a controlled IS-IS maintenance runbook with pre-drain and restoration checks. Apply the same control to the university backbone rollout checklist. This control targets the underlying design risk. The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The follow-up acceptance check remains: Other nodes stop using the device as transit while its required management or local reachability remains verified. The university backbone acceptance record also captures this result.

Incorrect Answers

B:

IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. The repeat risk here is different: the IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. A directly relevant preventive control is: Adopt a controlled IS-IS maintenance runbook with pre-drain and restoration checks. Apply the same control to the university backbone rollout checklist.

C:

IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. The repeat risk here is different: the IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. A directly relevant preventive control is: Adopt a controlled IS-IS maintenance runbook with pre-drain and restoration checks. Apply the same control to the university backbone rollout checklist.

D:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The repeat risk here is different: the IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. A directly relevant preventive control is: Adopt a controlled IS-IS maintenance runbook with pre-drain and restoration checks. Apply the same control to the university backbone rollout checklist.

Question 73

A design team must resolve this enterprise network problem: An IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. Which action MOST DIRECTLY meets the stated design requirement?

  1. Use deliberate IS-IS metrics aligned to both directions of the design and verify bidirectional reachability.
  2. Keep access routers in Level 1 and use appropriate Level 1-2 routers for interarea connectivity.
  3. Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.
  4. Use suitable /31 IPv4 addressing on compatible point-to-point links rather than a /24 on each link.

Explanation

Correct Answer

C:

Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface. This action addresses the stated design problem. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A practical confirmation is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.

Incorrect Answers

A:

IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. The actual fault is governed by a different mechanism: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The needed response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.

B:

IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. The actual fault is governed by a different mechanism: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The needed response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.

D:

RFC 3021 /31s can use both addresses on point-to-point links without ordinary network and broadcast host reservations. The actual fault is governed by a different mechanism: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The needed response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.

Question 74

The design record describes this issue: An IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. Which technical principle BEST explains the design decision?

  1. IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone.
  2. The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists.
  3. Dual stack runs both protocol families natively; it does not translate IPv4 packets into IPv6 packets.
  4. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information.

Explanation

Correct Answer

D:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The correct engineering response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface. The observable check is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.

Incorrect Answers

A:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The offered choice instead concerns a different principle: IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. Those technical conditions are not interchangeable.

B:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The offered choice instead concerns a different principle: the IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. Those technical conditions are not interchangeable.

C:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The offered choice instead concerns a different principle: Dual stack runs both protocol families natively; it does not translate IPv4 packets into IPv6 packets. Those technical conditions are not interchangeable.

Question 75

After designing a change for the following scenario: An IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. Which acceptance observation BEST establishes the intended result?

  1. Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.
  2. Other nodes stop using the device as transit while its required management or local reachability remains verified.
  3. Access routers retain area-local link-state information and still reach remote areas via the L1/L2 boundary.
  4. The installed route shows eligible multiple next hops and traffic distribution stays within the link capacity plan.

Explanation

Correct Answer

A:

Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information.

Incorrect Answers

B:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. In the case being tested, Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The necessary acceptance evidence is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.

C:

IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. In the case being tested, Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The necessary acceptance evidence is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.

D:

BGP multipath requires compatible selected paths under the platform’s path-equivalence rules; mere coexistence of peers is not enough. In the case being tested, Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The necessary acceptance evidence is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.

Question 76

A preventive architecture review covers this situation: An IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. Which preventive design control MOST DIRECTLY addresses this specific risk?

  1. Adopt a controlled IS-IS maintenance runbook with pre-drain and restoration checks.
  2. Standardize key rotation and restrict routing adjacency interfaces.
  3. Define stable IS-IS area boundaries and test failure behavior at each L1/L2 transition.
  4. Enforce a single approved EIGRP metric profile via configuration validation.

Explanation

Correct Answer

B:

Standardize key rotation and restrict routing adjacency interfaces. This control targets the underlying design risk. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The follow-up acceptance check remains: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail.

Incorrect Answers

A:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces.

C:

IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces.

D:

A mismatch in EIGRP K-values prevents neighbor compatibility for route exchange. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces.

Question 77

A new campus or WAN review presents this constraint: During a predeployment review for a logistics division, the team discovers this design gap: an IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. An approval gate requires both a measurable acceptance check and a durable prevention control. Which action MOST DIRECTLY meets the stated design requirement?

  1. Use an appropriate IS-IS overload-bit maintenance procedure before removing the router from transit service.
  2. Use deliberate IS-IS metrics aligned to both directions of the design and verify bidirectional reachability.
  3. Use a structured site and VLAN hierarchy with separate /64 segments within the organization’s larger allocation.
  4. Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.

Explanation

Correct Answer

D:

Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface. This action addresses the stated design problem. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A practical confirmation is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.

Incorrect Answers

A:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The actual fault is governed by a different mechanism: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The needed response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.

B:

IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. The actual fault is governed by a different mechanism: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The needed response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.

C:

Hierarchical IPv6 prefix planning supports route summarization and stable per-link /64 subnets. The actual fault is governed by a different mechanism: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The needed response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface.

Question 78

For this Cisco ENSLD design case: During a predeployment review for a logistics division, the team discovers this design gap: an IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. An approval gate requires both a measurable acceptance check and a durable prevention control. Which technical principle BEST explains the design decision?

  1. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information.
  2. IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction.
  3. IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone.
  4. BGP paths require a reachable next hop in the forwarding plane; distributing the prefix alone is not sufficient.

Explanation

Correct Answer

A:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The correct engineering response is: Enable supported IS-IS adjacency authentication and restrict the physical or logical peer surface. The observable check is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.

Incorrect Answers

B:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The offered choice instead concerns a different principle: IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. Those technical conditions are not interchangeable.

C:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The offered choice instead concerns a different principle: IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. Those technical conditions are not interchangeable.

D:

Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The offered choice instead concerns a different principle: BGP paths require a reachable next hop in the forwarding plane; distributing the prefix alone is not sufficient. Those technical conditions are not interchangeable.

Question 79

During acceptance testing for this network design: During a predeployment review for a logistics division, the team discovers this design gap: an IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. An approval gate requires both a measurable acceptance check and a durable prevention control. Which acceptance observation BEST establishes the intended result?

  1. Other nodes stop using the device as transit while its required management or local reachability remains verified.
  2. Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.
  3. The computed best paths follow documented metrics and traffic returns across an available intended path.
  4. Access routers retain area-local link-state information and still reach remote areas via the L1/L2 boundary.

Explanation

Correct Answer

B:

Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information.

Incorrect Answers

A:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. In the case being tested, Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The necessary acceptance evidence is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.

C:

IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. In the case being tested, Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The necessary acceptance evidence is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.

D:

IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. In the case being tested, Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The necessary acceptance evidence is: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.

Question 80

Operations wants to avoid recurrence of this design flaw: During a predeployment review for a logistics division, the team discovers this design gap: an IS-IS link is connected to a neighboring organization and unauthorized routers could establish routing adjacencies. An approval gate requires both a measurable acceptance check and a durable prevention control. Which preventive design control MOST DIRECTLY addresses this specific risk?

  1. Define stable IS-IS area boundaries and test failure behavior at each L1/L2 transition.
  2. Adopt a controlled IS-IS maintenance runbook with pre-drain and restoration checks.
  3. Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist.
  4. Version-control metric policy and inspect SPF changes during circuit upgrades.

Explanation

Correct Answer

C:

Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist. This control targets the underlying design risk. Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. The follow-up acceptance check remains: Only expected authenticated IS-IS peers form adjacencies and unauthorized join attempts fail. The logistics division acceptance record also captures this result.

Incorrect Answers

A:

IS-IS Level 1 routers maintain area topology while Level 2 provides the interarea backbone. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist.

B:

The IS-IS overload bit discourages other routers from selecting the device as intermediate transit when a valid alternative exists. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist.

D:

IS-IS shortest-path selection is based on configured link-state costs, which may differ by direction. The repeat risk here is different: Routing protocol authentication helps prevent unauthenticated devices from injecting link-state information. A directly relevant preventive control is: Standardize key rotation and restrict routing adjacency interfaces. Apply the same control to the logistics division rollout checklist.