Question 1

A branch office has a primary L3VPN MPLS connection back to the main office and an IPSEC VPN tunnel that serves as backup. Which design ensures that data is sent over the backup connection only if the primary MPLS circuit is down?

Options :

A : Use EIGRP to establish a neighbor relationship with the main office via

B : L3VPN MPLS and the IPSEC VPN tunnel.

C :

Use BGP with the multipath feature enabled to force traffic via the primary path when available.

D :

Use static routes tied to an IP SLA to prefer the primary path while a floating static route points to the backup connection.

E : Use OSPF with a passive-interface command on the backup connection.

Answer: D

Question 2

An engineer must design a solution to connect a customer to the Internet. The solution will include a Layer 3 circuit with a CIR of 50 Mbps from the service provider. The hand-off from the provider's switch to the customer's router is 1Gbps. Which solution should the engineer include to prevent potential issues with choppy voice traffic?

Options :

A : Reduce the bandwidth of the connection to the router.

B : Implement hierarchical QoS with a parent policing policy.

C : Implement hierarchical QoS with a parent shaping policy.

D : Add a bandwidth statement to the router interface.

Answer: C

Question 3

What is the purpose of a control plane node in a Cisco SD-Access network fabric?

Options :

A : to maintain the endpoint database and mapping between endpoints and edge nodes

B :

to detect endpoints in the fabric and inform the host tracking database of EID-to-fabric-edge node bindings

C : to identify and authenticate endpoints within the network fabric

D : to act as the network gateway between the network fabric and outside networks

Answer: B

Question 4

Which feature minimizes TLOC connections and reduces strain on the vSmart controller in an SD-WAN architecture?

Options :

A : control-direction

B : affinity

C : color

D : control-connections

Answer: B

Question 5

Which component of Cisco SD-Access integrates with Cisco DNA Center to perform policy segmentation and enforcement through the use of security group access control lists and security group tags?

Options :

A : Cisco Application Policy Infrastructure Controller Enterprise Module

B : Cisco Network Data Platform

C : Cisco Identity Services Engine

D : Cisco TrustSec

Answer: D

Higher Test Marks with Free Online 300-420 Exam Practice

Buying Options: