Oct-2025 300-420 Study Material, Preparation Guide and PDF Download
Free 300-420 Certification Sample Questions with Online Practice Test
Cisco 300-420 exam is part of the Cisco Certified Network Professional (CCNP) Enterprise certification track, which is one of the most popular and sought-after certifications in the networking industry. The CCNP Enterprise certification is designed for network professionals who want to advance their career in enterprise networking and demonstrate their expertise in designing, implementing, and troubleshooting complex network solutions.
NEW QUESTION # 55
Refer to the exhibit. An engineer must design an address translation solution to provide internet connectivity for the corporate network. The design is restricted to the 172.16.168.0/22 subnet.
Which solution must the engineer choose?
- A. stateful NAT66
- B. stateless NAT66
- C. stateless NAT64
- D. stateful NAT64
Answer: D
NEW QUESTION # 56
Refer to the exhibit. A customer requires maximum uptime for the data plane between R1 and R3 running OSPF. Which solution must the design include for high availability if the routing process on R2 requires maintenance?
- A. nonstop forwarding on R3 only
- B. nonstop forwarding on R1 and R3
- C. graceful restart on all routers
- D. BFD on all routers
Answer: C
NEW QUESTION # 57
An engineer must design an addressing plan for a small business using a single /24 network. Each department must have its own subnet. Drag and drop the subnets from the left onto the departments requirements that they fulfill on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION # 58
Which two statements describes Cisco SD-Access? (Choose two.)
- A. an overlay for the wired infrastructure in which traffic is tunneled via a GRE tunnel to a mobility controller for policy and application visibility
- B. software-defined segmentation and policy enforcement based on user identity and group membership
- C. programmable overlays enabling network virtualization across the campus
- D. a collection of tools and applications that are a combination of loose and tight coupling
- E. an automated encryption/decryption engine for highly secured transport requirements
Answer: B,C
NEW QUESTION # 59
A network engineer must optimize a campus OSPF deployment Currently each time a type 1 or type 2 LSA is generated within an area, the OSPF process must recompute the entire SPT Which solution improves the recomputation process?
- A. BFD
- B. SPF
- C. iSPF
- D. PRC
Answer: A
NEW QUESTION # 60
A network engineer must design an MSDP multicast solution to provide RP resilience in a network with two separate domains. Also, multicast sources and receivers must register with the local RP. Which solution must the engineer choose?
- A. Configure the RP priority with the same value, and traffic will route to the closest RP
- B. Configure the RP group ranges to split the multicast traffic, and traffic will route to the longest match
- C. Configure the RP has value to 0, and traffic will route to the closest RP
- D. Configure the RP loopback interface with the same IP address/32, and traffic will route to the closest RP
Answer: D
Explanation:
Two or more RPs are configured with the same IP address (for example, 10.0.0.1) on loopback interfaces. The loopback address should be configured with a 32-bit mask. All the downstream routers are configured so that they know that 10.0.0.1 is the IP address of their local RP. IP routing automatically selects the topologically closest RP for each source and receiver.
https://www.cisco.com/c/en/us/td/docs/ios/solutions_docs/ip_multicast/Phase_1/mcstmsdp/mcst_ p1.html
NEW QUESTION # 61
Exhibit:
- A. Make Area 0 L2-only.
- B. Make R31 an L1 router.
- C. Make R11 an L2 router.
- D. Make R3 an L1L2 router.
Answer: D
Explanation:
ENSLD 300-420 cert guide page 117. When creating a backbone there should never be L1 routers between (L2 only, or) L1/L2 routers.
NEW QUESTION # 62
A client is moving to Model-Driven Telemetry and requires periodic updates.
What must the network architect consider with this design?
- A. Updates that contain changes within the data are sent only when changes occur.
- B. The primary push update is sent immediately and cannot be delayed.
- C. Empty data subscriptions do not generate empty update notifications.
- D. Periodic updates include a full copy of the data that is subscribed to.
Answer: A
NEW QUESTION # 63
An engineer is designing a QoS policy that queues excess packets for later transmission. Which mechanism must be included in the design?
- A. WRED
- B. shaping
- C. policing
- D. RED
Answer: B
NEW QUESTION # 64 
Refer to the exhibit. An engineer is designing an OSPF network for a client. Requirements dictate that the routers in Area 1 should receive all routes belonging to the network, including EIGRP, except the ones originated in the RIP domain. Which action should the engineer take?
- A. Make area 1 a standard OSPF area.
- B. Make area 1 a NSSA.
- C. Make area 1 a stub.
- D. Make the area 1 routers part of area 0.
Answer: B
Explanation:
NEW QUESTION # 65
Refer to the exhibit. The full EIGRP routing table is advertised throughout the network. Currently, users experience data loss when any one link in the network fails. An architect optimizes the network to reduce the impact when a link fails. Which solution should the architect include in the design?
- A. Run BFD on the inter links between EIGRP neighbors.
- B. Summarize the access layer networks from the aggregation layer toward the core layer.
- C. Reduce the default EIGRP hello interval and hold time.
- D. Summarize the access layer networks from each access layer switch toward the aggregation layer.
Answer: A
NEW QUESTION # 66
Refer to the exhibit.
EIGRP has been configured on all links. The spoke nodes have been configured as EIGRP stubs, and the WAN links to R3 have higher bandwidth and lower delay than the links to R4. When a link failure occurs at the R1-R2 link, what happens to traffic on R1 that is destined for a subnet attached to R2?
- A. R1 has no route to R2 and drops the traffic
- B. R1 forwards the traffic to R3 in order to reach R2
- C. R1 forwards the traffic to R3, but R3 drops the traffic
- D. R1 load-balances across the paths through R3 and R4 to reach R2
Answer: A
Explanation:
Explanation
The EIGRP stub routing feature will prevent the remote device from advertising core routes back to the distribution devices. Routes learned by the remote device from Distribution 1 will not be advertised to Distribution 2. Therefore, Distribution 2 will not use the remote device as a transit for traffic destined to the network core
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_eigrp/configuration/15-mt/ire-15-mt-book/ire-eigrp-s
NEW QUESTION # 67
What is a benefit of using VRRPv3 as compared to VRRPv2?
- A. VRRPv3 supports stateful switchover
- B. VRRPv3 supports preemption
- C. VRRPv3 supports authentication
- D. VRRPv3 supports IPv4 and IPv6
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp_fhrp/configuration/15-e/fhp-15-e- book/VRRPv3-Protocol-Support.html
NEW QUESTION # 68
How is end-to-end microsegmentation enforced in a Cisco SD-Access architecture?
- A. 5-tuples and ACLs are used to permit or deny traffic.
- B. VLANs are used to segment traffic at Layer 2.
- C. VRFs are used to segment traffic at Layer 3.
- D. SGTs and SGTACLs are used to control access to various resources.
Answer: D
NEW QUESTION # 69 
Refer to the exhibit A network administrator plans to announce the site subnets to the WAN using route summarization instead of announcing every subnet. What is the smallest summary route that should be used to encompass all subnets at the site?
- A. 2001:DB8:ABCD::760
- B. 2001 DB8 ABCD /64
- C. 2001:DB8::732
- D. 2001:DB8:ABCD:0003::/60
Answer: A
NEW QUESTION # 70
Refer to the exhibit.
An architect is designing a network for a customer supporting a Wake-on-LAN application. Which solution must the architect choose?
- A. spanning-tree uplinkfast on SW2
- B. spanning-tree uplinkfast on SW1
- C. IP directed-broadcasts on R2
- D. IP directed-broadcasts on R1
Answer: C
Explanation:
"IP directed broadcast" must be supported on the last router to the destination subnet. Since the sleeping PC's dont have IP adresses, the machines must be calles awake by broadcast that behaves like an unicast untill they reach the destination network. There the directed broadcast is handled like a proper broadcast to wake all WOL machines.
https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/91672-catl3-wol-vlans.
html
NEW QUESTION # 71
What following parameters for the EIGRP authentication need to match in order for EIGRP neighbors to establish a neighbor relationship?
- A. The neighbors must be on common subnet (all IGPs follow this rule).
- B. If authentication is used both: the key number, the password, and the date/time.
- C. Autonomous System number.
- D. K-Values
Answer: B
NEW QUESTION # 72
An engineer is working for a large cable TV provider that requires multiple sources streaming video on different channels using multicast with no rendezvous point.
Which multicast protocol meets these requirements?
- A. PIM-SSM
- B. BIDIR-PIM
- C. any-source multicast
- D. PIM-SM
Answer: A
Explanation:
PIM-SSM is suitable for when well-known sources exist within the local PIM domain and for broadcast applications. Also, PIM-SSM eliminates the RPs and shared trees.
NEW QUESTION # 73
Drag and drop the properties from the left onto the protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION # 74
An engineer working for a service provider with an employee ID 4598.48.606 prepared several designs for a traditional campus network. The design must allow the deployment on the same VXLAN to any switch at the access layer and must support:
* Fast convergence
* High availability
* Resilience
Which design must be selected?
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: B
NEW QUESTION # 75
A company must automate a set of complex changes aligned with DR testing in the network. These changes are specific, and the DR playbook will be adjusted in the future. The playbook has diverse routing and switching assets in scope as well as multiple vendor and hardware platforms. A developer will create a thin, web front-end microservice and integrate with an Open daylight controller to push changes to the network.
Which YANG model should be used?
- A. Use a single native vendor YANG model to minimize development time
- B. Use an open YANG model to allow the reuse of code and standardize the implementation across platforms
- C. Use multiple native vendor YANG models to provide code consistency.
- D. Develop an individualized YANG model to minimize development resources and time to market.
Answer: B
NEW QUESTION # 76
A customer's current Layer 2 infrastructure is running Spanning Tree 802.1d, and all configuration changes are manually implemented on each switch. An architect must redesign the Layer 2 domain to achieve these goals:
* reduce the impact of topology changes
* reduce the time spent on network administration
* reduce manual configuration errors
Which two solutions should the architect include in the new design? (Choose two.)
- A. Configure broadcast and multicast storm control on all switches.
- B. Configure dynamic trunking protocol to propagate VLAN information.
- C. Implement Rapid PVST+ instead of STP.
- D. Implement MST instead of STP.
- E. Use VTP to propagate VLAN information and to prune unused VLANs.
Answer: A,E
Explanation:
Section: Advanced Enterprise Campus Networks
NEW QUESTION # 77
An engineer is designing an EIGRP network for a small branch site where there is only one Layer
3 router. The engineer wants the router to advertise the local LAN network to remote EIGRP neighbors without sending any unnecessary multicast messages on the local LAN.
Which action should the engineer take?
- A. Use a static default route for this site instead of EIGRP
- B. Redistribute the local LAN network using the redistribute connected command
- C. Advertise the local LAN using the network command and the passive-interface feature
- D. Advertise the local LAN subnet as a stub network
Answer: C
Explanation:
The requirement is simply to advertise the network but NOT send MC traffic on the local LAN. For this you have to make it a passive interface. There are no requirements stated to make it a stub.
NEW QUESTION # 78
Drag and drop the characteristics from the left onto the YANG modules they describe on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION # 79
Which two statements describe source trees in a multicast environment? (Choose two.)
- A. Source trees guarantee the minimum amount of network latency for forwarding multicast traffic
- B. Source trees can create suboptimal paths between the source and the receivers
- C. Source trees use a single common root placed at some chosen point in the network
- D. Source trees can introduce latency in packet delivery
- E. Source trees create an optimal path between the source and the receivers
Answer: A,E
Explanation:
Section: Network Services
NEW QUESTION # 80
......
300-420 Certification Study Guide Pass 300-420 Fast: https://vcetorrent.passreview.com/300-420-exam-questions.html