« 返回题库列表拥有CCNP 300-420考试的相关资料,包括历年真题和备考材料。适用于思科企业网络领域的考生。SPOTO提供相关服务。
轻松应对那些具有挑战性的任务
300-420使用思博网络提供的全面练习测试和免费考试资料来准备ENSARI考试。我们的考试服务非常不错。
丢弃/删除该练习册包含了数百道实际场景中的试题,涵盖了高级路由、校园网络、广域网、安全、网络服务以及SDA等相关内容。这些试题模拟了真实的考试环境,而详细的答案解析则有助于加深你的理解。通过定期使用我们的练习册进行练习,你将能够更好地应对各种考试挑战。
在线历年真题以及像考试模拟器这样的备考工具,都能帮助提升你的自信心,让你更好地应对考试。不要让300-420的认证证书被随机因素所左右——利用思博网络精心设计的历年真题和答案,你就能在第一次尝试时就成功通过考试。
问题 #1
Which two characteristics apply to firewall transparent mode operations in a firewall solution design? (Choose two.)
A. Changes in the existing IP addressing and subnets are required
B. The firewall can participate actively on spanning tree.
C. Multicast traffic can traverse the firewall.
D. OSPF adjacencies can be established through the firewall
E. The firewall acts like a router hop in the network.
问题 #2
The Layer 3 control plane is the intelligence over the network that steers traffic toward its intended destination. Which two techniques can be used in service provider-style networks to offer a more dynamic, flexible, controlled, and secure control plane design? (Choose two.)
A. access control lists
B. firewalls
C. QoS policy propagation with BGP
D. remote black-holing trigger
E. prefix lists
问题 #3
A customer migrates from a traditional Layer 2 data center network into a new SDN-based. spine-and-leaf VXLAN EVPN data center within the same location. The networks are joined to enable host migration at Layer 2 Which activity should be completed each time a legacy network is migrated?
A. The migrated VLAN should be pruned from the Layer 2 interconnects.
B. The migrated network should have a VXLAN VNID configured within the new network.
C. The migrated network should be advertised to the EVPN network as a Type 2 network.
D. The migrated network should be added to the EVPN BGP routing.
问题 #4
Which two features are advantages of SD-WAN compared to MPLS-based connectivity? (Choose two.)
A. uses FEC constructs for traffic forwarding, thereby improving efficiency
B. separates infrastructure and policy
C. uses policy-based forwarding of real-time traffic with less complexity
D. unifies the WAN backbone
E. manages failures through backup links
问题 #5
What is a characteristic of a secure cloud architecture model?
A. limited access to job function
B. dedicated and restricted workstations
C. multi-factor authentication
D. software-defined network segmentation
问题 #6
Company XYZ was not satisfied with the reconvergence time OSPF is taking. BFD was implemented to try to reduce the reconvergence time, but the network is still experiencing delays when having to reconverge. Which technology will improve the design?
A. OSPF fast hellos
B. BFD echo
C. Change the protocol to BGP
D. Change the OSPF hello and dead intervals
问题 #7
A business customer deploys workloads in the public cloud. Now the customer network faces governance issues with the flow of IT traffic and must ensure the security of data and intellectual property. Which action helps to identify the issue for further resolution?
A. Set up a secure tunnel from customer routers to ensure that traffic is protected as it travels to the cloud service providers.
B. Send IPFIX telemetry data from customer routers to a centralized collector to identify traffic to cloud service providers
C. Build a zone-based firewall policy on Internet edge firewalls that collects statistics on traffic sent to cloud service providers
D. Apply workload policies that dictate the security requirements to the workloads that are placed in the cloud.
问题 #8
For Company XYZ Bangkok is using ECMP to reach the 172 20 2 0/24 network The company wants a design that would allow them to forward traffic from 172 16 2 0/24 toward 172 20 2 0/24 via the Singapore router as the preferred route The rest of the traffic should continue to use ECMP Which technology fulfills this design requirement?
A. policy-based routing
B. route summarization
C. unequal-cost load balancing using variance
D. LFA
问题 #9
The SD-WAN architecture is composed of separate orchestration management, control, and data planes Which activity happens at the orchestration plane?
A. automatic onboarding of the SD-WAN routers into the SD-WAN overlay
B. decision-making process on where traffic flows
C. packet forwarding
D. central configuration and monitoring
问题 #10
Company XYZ has two routing domains in their network, EIGRP and OSPF. The company wants to provide full reachability between the two domains by implementing redistribution on a router running both protocols. They need to design the redistribution in a way that the OSPF routers will see link costs added to external routes. How must the redistribution strategy be designed for this network?
A. Redistribute using metric type 2 into OSPF.
B. Redistribute using metric type 1 into OSPF.
C. Redistribute using metric type 1 into EIGRP.
D. Redistribute using metric type 2 into EIGRP.
问题 #11
Which technology is an open-source infrastructure automation tool that automates repetitive tasks for users who work in networks such as cloud provisioning and intraservice orchestration?
A. Ansible
B. Contrail
C. Java
D. Jinja2
问题 #12
The major business applications of an enterprise are largely monolithic and hard-coded As part of a major modernization and overhaul of the applications the goal is to move to a modular and containerized application architecture mode At the same time decoupling from the hardware is desired to move to an on-demand provisioning However the CyberOps team mandated that the final architecture must provide the same security levels as an air-gapped data center. Which cloud architecture meets these requirements?
A. laaS
B. private cloud
C. PaaS
D. hybrid cloud
E. public cloud
问题 #13
Company XYZ must design a strategy to protect their routers from DoS attacks, such as traffic destined to the router's own route processor, using separate control plane categories. Which two capabilities can be used to achieve this requirement? (Choose two.)
A. Control Plane Protection using queue thresholding on the transit subinterface
B. Control Plane Protection using port filtering on the transit subinterface
C. Control Plane Protection using port filtering on the main interface
D. Control Plane Protection using queue thresholding on the host subinterface
E. Control Plane Protection using port filtering on the host subinterface
问题 #14
Which action must be taken before new VoIP systems are implemented on a network to ensure that the network is ready to handle the traffic?
A. Evaluate bandwidth utilization and connection quality
B. Enable special requirements such as direct DID lines on pickup
C. Make recommendations to limit the size of the half-open session table on routers
D. Check if anomaly detection is enabled for SIP and H.323 on Layer 3 devices
问题 #15
What are two examples of components that are part of an SDN architecture? (Choose two.)
A. software plane
B. control plane
C. application plane
D. management plane
E. network plane
问题 #16
When an SDN-based model is used to transmit multimedia traffic, which aspect should an architect consider while designing the network?
A. QoE estimation
B. security
C. traffic patterns
D. flow forwarding
问题 #17
Which extensions to GRE tunneling provide session tracking and in-order packet delivery in exchange for additional state stored in tunnel endpoints?
A. GRE Protocol Type and Checksum extension fields.
B. GRE Version and Reserved0 extension fields.
C. No extension fields are available in the GRE header to track session data and packet sequences.
D. GRE Key and Sequence number extensions.
问题 #18
What are two descriptions of network optimization? (Choose two.)
A. maintain high availability
B. proactive network management
C. network redesign
D. network health maintenance
E. identify network requirements
问题 #19
A business requirement stating that failure of WAN access for dual circuits into an MPLS provider for a Data Centre cannot happen due to related service credits that would need to be paid has led to diversely routed circuits to different points of presence on the providers network? What should a network designer also consider as part of the requirement?
A. Provision of an additional MPLS provider
B. Out of band access to the MPLS routers
C. Ensuring all related remote branches are dual homed to the MPLS network
D. Dual PSUs & Supervisors on each MPLS router
问题 #20
What are two advantages of controller-based networks versus traditional networks? (Choose two.)
A. the ability to have forwarding tables at each device
B. more flexible configuration per device
C. more consistent device configuration
D. programmatic APIs that are available per device
E. the ability to configure the features for the network rather than per device
问题 #21
An architect designs a multi-controller network architecture with these requirements: Achieve fast failover to control traffic when controllers fail. Reduce connectivity loss and enable smart recovery to improve the SDN survivability. Improve connectivity by adding path diversity and capacity awareness for controllers. Which control plane component of the multi-controller must be built to meet the requirements?
A. control node reliability
B. controller stale consistency
C. control path reliability
D. controller clustering
问题 #22
Which two possible drawbacks should you consider when introducing Network Functions Virtualization in a network design? (Choose two)
A. Bandwidth utilization increases
B. Traffic flows are suboptimal
C. High-end routers are required to support NFV
D. OpenFlow must be supported in the network
E. An SDN orchestration layer is required to support NFV