300-420 Practice Test

A network engineer must connect two sites across a public network using a secure tunneling technology that supports multicast traffic. Which technology must be chosen?

A.

IPsec

B.

GRE

C.

PPTP

D.

GRE over IPsec

Refer to the exhibit

A network engineer must improve the current IS-IS environment. The Catalyst switch is
equipped with dual supervisors. Each time a stateful switchover occurs, the network
experiences unnecessary route recomputation. Which solution addresses this issue if the
upstream router does not understand graceful restart messaging?

A.

Enable IS-IS remote LFA FRR on both devices.

B.

Enable NSR on the switch.

C.

Enable NSF on the switch.

D.

Configure ISIS aggressive timers on both devices.

An engineer must design a VPN solution for a company that has multiple branches
connecting to a main office. What are two advantages of using DMVPN instead of IPsec tunnels to accomplish this task? (Choose
two.)

A.

support for AES 256-bit encryption

B.

greater scalability

C.

support for anycast gateway

D.

lower traffic overhead

E.

dynamic spoke-to-spoke tunnels

A company is planning to open two new branches and allocate the
2a01:c30:16:7009::3800/118 IPv6 network for the region. Each branch should have the
capacity to accommodate maximum of 200 hosts. Which two networks should the company
use? (Choose two.)

A.

2a01:0c30:0016:7009::3a00/120

B.

2a01:0c30:0016:7009::3b00/121

C.

2a01:0c30:0016:7009::3a80/121

D.

2a01:0c30:0016:7009::3b00/120

E.

2a01:0c30:0016:7009::3c00/120

Refer to the exhibit. AS65533 and AS65530 are announcing a partial Internet routing table
as well as their IP subnets. An architect must create a design that ensures AS64512
become a transit AS. Which filtering solution must the architect choose?

A.

Maximum-prefix

B.

No-advertise

C.

Next-hop

D.

No Export