DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free Cisco 300-420 ENSLD Practice Questions 2026 Part1 | Cisco Designing

Are you preparing for the Cisco 300-420 certification exam? SPOTO offers the Cisco 300-420 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams

Question #1
An engineer must design a VPN solution for a company that has multiple branches connecting to a main office. What are two advantages of using DMVPN instead of IPsec tunnels to accomplish this task? (Choose two.)
A. support for AES 256 - bit encryption
B. greater scalability
C. support for anycast gateway
D. lower traffic overhead
E. dynamic spoke - to - spoke tunnels
View answer
Correct Answer: BE

View The Updated 300-420 Exam Questions

SPOTO Provides 100% Real 300-420 Exam Questions for You to Pass Your 300-420 Exam!

Question #2
Which method will filter routes between EIGRP neighbors within the same autonomous system?
A. distribute-list
B. policy-based routing
C. leak-map
D. route tagging
View answer
Correct Answer: A
Question #3
An architect is designing a network solution for a customer. The network is IPv6-only with 1000 hosts. The design must provide external access to up to 10 concurrent IPv6 hosts to allow communication with legacy IPv4 devices on an adjacent network. The customer set aside 10 IPv4 addresses to allow for one-to-one communication between hosts. Which solution must the architect select?
A. static NAT-PT
B. dynamic NPTv6
C. stateful NAT64
D. dynamic NAT-PT
View answer
Correct Answer: C
Question #4
Which feature must be incorporated into the campus LAN design to enable Wake on LAN?
A. dynamic ARP Inspection Snooping on layer 2 devices
B. directed broadcasts on layer 3 devices
C. proxy ARP on layer 3 devices
D. DHCP Snooping on layer 2 devices
View answer
Correct Answer: B
Question #5
An enterprise customer has these requirements end - to - end QoS for the business - critical applications and VoIP services based on CoS marking. flexibility to offer services such as IPv6 and multicast without any reliance on the service provider. support for full - mesh connectivity at Layer 2. Which WAN connectivity option meets these requirements?
A. VPWS
B. MPLS VPN
C. DMVPN
D. VPLS
View answer
Correct Answer: D
Question #6
Refer to the exhibit. An architect must design a solution to connect the two ASs. To optimize bandwidth, the design will implement load sharing between router R6 and router R1. Which solution should the design include?
A. Use update-source to specify the Loopback interface
B. Use next-hop-self attributes only for routes that are learned from eBGP peers
C. Configure the eBGP TTL to support eBGP multihop
D. Use maximum-paths to install multiple paths in the routing table
View answer
Correct Answer: D
Question #7
A network engineer must design a multicast solution to prevent the spoofing of multicast streams and ensure efficient bandwidth utilization. The network will be merged with another multicast domain in the future, and the merge must require minimum effort. Which two solutions meet the customer requirements? (Choose two.)
A. PIM-SSM
B. IGMPv3
C. IGMPv2
D. PIM-SM
E. MSDP
View answer
Correct Answer: AB
Question #8
Refer to the exhibit. An architect must create a stable and scalable EIGRP solution for a customer. The design must:conserve bandwidth, memory, and CPU processingprevent suboptimal routingavoid any unnecessary queriesWhich two solutions must the architect select? (Choose two.)
A. route summarization
B. prefix lists
C. distribute lists
D. stub routing
E. static redistribution
View answer
Correct Answer: AD
Question #9
Refer to the exhibit.An engineer must design an address translation solution to provide internet connectivity for the corporate network. The design is restricted to the 172.16.168.0/22 subnet. Which solution must the engineer choose?
A. stateful NAT66
B. stateless NAT64
C. stateless NAT66
D. stateful NAT64
View answer
Correct Answer: D
Question #10
A company requires a private WAN design that allows remote sites to connect to HQ. The design must ensure that:
A. IPsec P2P
B. mGRE
C. DMVPN Phase 3
D. GET VPN
View answer
Correct Answer: C
Question #11
A customer with an IPv4 only network topology wants to enable IPv6 connectivity while preserving the IPv4 topology services. The customer plans to migrate IPv4 services to the IPv6 topology, then decommission the IPv4 topology. Which topology supports these requirements?
A. ual stack
B. VPE
C. to4
D. AT64
View answer
Correct Answer: A
Question #12
A customer's environment includes hosts that support IPv6-only. Several of these hosts must communicate with a public web server that has only IPv4 domain name resolution. Which solution should the customer use in this environment?
A. utilize NAT64 to translate the addresses
B. implement NAT44 at the edge of the customer network
C. use 6to4 and a tunnel to translate the addresses
D. implement 6PE to resolve hostname resolution
View answer
Correct Answer: A
Question #13
An engineer is designing an EIGRP network for a small branch office site where there is only one Layer 3 router. The engineer wants the router to advertise the local LAN network to remote EIGRP neighbors without sending any unnecessary multicast messages on the local LAN. Which action should the engineer take?
A. Use a static default route for this site instead of EIGRP
B. Advertise the local LAN using the network command and the passive-interface feature
C. Redistribute the local LAN network using the redistribute connected command
D. Advertise the local LAN subnet as a stub network
View answer
Correct Answer: B
Question #14
An engineer is designing a WAN solution for a customer with teams in different branch locations that need to communicate The teams also need to access enterprise applications hosted in the data center and the cloud The customer also must provide guests with connectivity to the internet only, and the internet gateway is located in the data center Which solution must the engineer choose?
A. WAN connectivity from a different service provider for guests
B. firewall placed in data center that fitters any traffic from guests
C. MPLS Layer 3 VPN with one VRF for corporate access and a separate VRF for guests
D. MPLS Layer 3 VPN with a separate VRF for each branch location
E. Reveal Answer
View answer
Correct Answer: C
Question #15
Refer to the exhibit.A network engineer is designing a network for AS100. The design should ensure that all traffic enters AS100 via link 1 unless there is a network failure. In the event of a failure, link 2 should function as the path for incoming traffic. Which solution should the design include?
A. Modify the next-hop attribute on R3
B. Use AS-Path prepending on R3
C. Modify the next-hop attribute on R4
D. Use AS-Path prepending on R4
View answer
Correct Answer: D
Question #16
An enterprise customer has these requirements:end-to-end QoS for the business-critical applications and VoIP services based on CoS marking.flexibility to offer services such as IPv6 and multicast without any reliance on the service provider.support for full-mesh connectivity at Layer 2.Which WAN connectivity option meets these requirements?
A. VPWS
B. MPLS VPN
C. DMVPN
D. VPLS
View answer
Correct Answer: D
Question #17
Which design consideration should be observed when EIGRP is configured on Data Center switches?
A. Perform manual summarization on all Layer 3 interfaces to minimize the size of the routing table
B. Prevent unnecessary EIGRP neighborships from forming across switch virtual interfaces
C. Lower EIGRP hello and hold timers to their minimum settings to ensure rapid route reconvergence
D. Configure multiple EIGRP autonomous systems to segment Data Center services and applications
View answer
Correct Answer: A
Question #18
A network solution is being designed for a company that connects to multiple Internet service providers. Which Cisco proprietary BGP path attribute will influenceoutbound traffic flow?
A. Local Preference
B. MED
C. Weight
D. AS Path
E. Community
View answer
Correct Answer: C
Question #19
What are two valid scaling techniques when an EIGRP network is designed that consists of more than 1000 routers? (Choose two.)
A. Use structured hierarchical topology with route summarization
B. Used sub-second timers
C. Use the distribute-list command to filter routes
D. Modify delay parameters on the links
E. Implement multiple EIGRP autonomous systems
View answer
Correct Answer: AE
Question #20
Which consideration must be taken into account when using the DHCP relay feature in a Cisco SD-Access Architecture?
A. DHCP-relay must be enabled on fabric edge nodes to provide the correct mapping of DHCP scope to the local anycast gateway
B. A DHCP server must be enabled on the border nodes to allow subnets to span multiple fabric edges
C. DHCP servers must support Cisco SD-Access extensions to correctly assign IPs to endpoints in an SD-Access fabric with anycast gateway
D. DHCP Option-82 must be enabled to map the circuit IP option to the access fabric node where the DHCP discover originated
E. Reveal Answer
View answer
Correct Answer: D
Question #21
Refer to the exhibit. Which route filtering technique is required within AS64514 to ensure that BGP prefixes originating locally are not accepted from AS64512 or AS64513?
A. o prefix-list or as-path access-list filtering technique is to be applied to each neighbor, either inbound or outbound
B. prefix-list matching the locally originated prefixes attached to a deny route-map statement, with the route-map applied to each neighbor inbound
C. n as-path access-list matching the originating AS number attached to a deny route-map statement, with route-map applied to each neighbor inbound
D. n as-path access-list matching the originating AS number attached to a deny route-map statement, with route-map applied to each neighbor outbound
View answer
Correct Answer: C
Question #22
What is an advantage of designing an out-of-band network management solution?
A. n the event of a production network outage, network devices can still be managed
B. here is no separation between the production network and the management network
C. n the event of a production network outage, it can be used as a backup network path
D. t is less expensive than an in-band management solution
View answer
Correct Answer: A
Question #23
A company wants to deploy IPv6 within its existing network infrastructure. All current infrastructure equipment supports IPv6, and the company wants a migration strategy that must not require purchasing additional equipment. The plan must keep operational management costs low, support IPv6 multicast, and allow applications to migrate using DNS. Which strategy must the company choose?
A. hybrid ISATAP tunnel model
B. hybrid manual tunnel model
C. dual-stack model
D. service block model
View answer
Correct Answer: C
Question #24
Which feature must be incorporated into the campus LAN design to enable Wake on LAN?
A. dynamic ARP Inspection Snooping on layer 2 devices
B. directed broadcasts on layer 3 devices
C. proxy ARP on layer 3 devices
D. DHCP Snooping on layer 2 devices
View answer
Correct Answer: B
Question #25
When a network is designed using IS-IS, which two circuit types are supported? (Choose two.)
A. nonbroadcast multiaccess
B. multiaccess
C. point-to-multipoint
D. nonbroadcast
E. point-to-point
View answer
Correct Answer: BE
Question #26
Refer to the exhibit. An engineer is designing a routing solution for a customer. The design must ensure that a failure of network 10.1.0.0/24, 10.1.2.0/24, 10.2.1.0/24, or 10.2.3.0/24 does not impact the core. It also requires fast convergence time during any link failover in the core or access networks.Which solution must the engineer select?
A. nable FRR for the connected networks of routers A and C
B. nable summarization on routers A and C
C. nable graceful restart on routers A and C
D. dd aggregation layer between core and access networks
View answer
Correct Answer: A
Question #27
Refer to the exhibit.An engineer is designing an OSPF solution with these requirements:NMS server will manage R5 and R6.Upon failure of R1, all NMS traffic should be routed through R4. Upon failure of the link between R5 and R6, all traffic destined for 10.6.6.6 should be routed through R4.Which solution must the engineer choose?
A. Redistribute OSPF process 1 into process 2 on R1 and R4
B. Advertise 172
C. Apply static routes on R2 and R3 with IP SLA tracking toward R5 and R6
D. Enable the default-information originate command with a higher metric on R2 to R1
View answer
Correct Answer: A
Question #28
Which method will filter routes between EIGRP neighbors within the same autonomous system?
A. distribute-list
B. policy-based routing
C. leak-map
D. route tagging
E. Reveal Answer
View answer
Correct Answer: A
Question #29
An architect must develop a campus network solution that includes:logically segmented and isolated networksability to communicate between network segments when requiredsupport for overlapping IP addresseswidely available technologies to avoid purchasing specialized equipmentWhich solution must the architect select?
A. VSS with IGP
B. 802
C. vPC with HSRP
D. VRF-Lite with OSPF
View answer
Correct Answer: D
Question #30
When a network is designed using IS-IS, which two circuit types are supported? (Choose two.)
A. nonbroadcast multiaccess
B. multiaccess
C. point-to-multipoint
D. nonbroadcast
E. point-to-point
View answer
Correct Answer: BE
Question #31
Which design consideration must be made when using IPv6 overlay tunnels?
A. Overlay tunnels that connect isolated IPv6 networks are considered a final IPv6 network architecture
B. Overlay tunnels should only be considered as a transition technique toward a permanent solution
C. Overlay tunnels should be configured only between border devices and require only the IPv6 protocol stack
D. Overlay tunneling encapsulates IPv4 packets in IPv6 packets for delivery across an IPv6 infrastructure
View answer
Correct Answer: B
Question #32
Refer to the exhibit. Refer to the exhibit. Area 10 is a regular OSPF area and networks 10.1.1.0/24 and 172.16.1.0/24 are internal. Which design provides optimal routing between both networks when the link between routers C and E fails?
A. AMove the link between routers C and D to area 10
B. BCreate an OSPF virtual link between routers E and F
C. CCreate a tunnel between routers E and F in area 10
D. DMake area 10 a not-so-stubby area
View answer
Correct Answer: A
Question #33
Refer to the exhibit.A network engineer must improve the current IS-IS environment. The Catalyst switch is equipped with dual supervisors. Each time a stateful switchover occurs, the network experiences unnecessary route recomputation. Which solution addresses this issue if the upstream router does not understand graceful restart messaging?
A. Enable IS-IS remote LFA FRR on both devices
B. Enable NSR on the switch
C. Enable NSF on the switch
D. Configure ISIS aggressive timers on both devices
View answer
Correct Answer: B
Question #34
A customer with an IPv4 only network topology wants to enable IPv6 connectivity while preserving the IPv4 topology services. The customer plans to migrate IPv4 services to the IPv6 topology, then decommission the IPv4 topology. Which topology supports these requirements?
A. dual stack
B. 6VPE
C. 6to4
D. NAT64
View answer
Correct Answer: A
Question #35
A network solution is being designed for a company that connects to multiple Internet service providers. Which Cisco proprietary BGP path attribute will influence outbound traffic flow?
A. Local Preference
B. MED
C. Weight
D. AS Path
E. Community
View answer
Correct Answer: C
Question #36
Which protocol is deployed through LAN automation to build node-to-node underlay adjacencies in SDA?
A. IS-IS
B. LISP
C. OSPF
D. VXLAN
View answer
Correct Answer: A
Question #37
A company is running BGP on a single router, which has two connections to the same ISP. Which BGP feature ensures traffic is load balanced across the twolinks to the ISP?
A. Multihop
B. Multipath Load Sharing
C. Next-Hop Address Tracking
D. AS-Path Prepending
View answer
Correct Answer: B
Question #38
A company is running BGP on a single router, which has two connections to the same ISP. Which BGP feature ensures traffic is load balanced across the two links to the ISP?
A. Multihop
B. Multipath Load Sharing
C. Next-Hop Address Tracking
D. AS-Path Prepending
View answer
Correct Answer: B
Question #39
When a network is designed using IS-IS, which two circuit types are supported? (Choose two.)
A. onbroadcast multiaccess
B. ultiaccess
C. oint-to-multipoint
D. onbroadcast
E. oint-to-point
View answer
Correct Answer: BE
Question #40
A company is planning to open two new branches and allocate the 2a01:c30:16:7009::3800/118 IPv6 network for the region. Each branch should have the capacity to accommodate a maximum of 200 hosts. Which two networks should the company use? (Choose two.)
A. 2a01:0c30:0016:7009::3a00/120
B. 2a01:0c30:0016:7009::3b00/121
C. 2a01:0c30:0016:7009::3a80/121
D. 2a01:0c30:0016:7009::3c00/120
E. 2a01:0c30:0016:7009::3b00/120
View answer
Correct Answer: AE
Question #41
Refer to the exhibit. Refer to the exhibit. A network engineer must design a BGP solution based on: The route reflector must have one or more direct physical connections to the core routers (R3 and R4). The route reflector must have full redundancy and avoid a single point of failure. R2 to R1 link utilization is 90%. and the remaining links are less than 50% utilized. Which two solutions must the design Include? (Choose two.)
A. AConfigure R1 to be a client of R2 and R4
B. BConfigure R2 to be a client of R1 and R4
C. CConfigure R3 to be a client of R2 and R4
D. DConfigure R4 to be a client of R1 and R3
E. EConfigure R5 to be a client of R3 and R4
View answer
Correct Answer: BE
Question #42
An engineer is designing a network for a customer running a wireless network with a common VLAN for all APs. The customer is experiencing unicast flooding in the Layer 2 network between the aggregation and access layers. The customer wants to reduce the flooding and improve convergence time. Which solution meets these requirements?
A. Migrate all APs to a common Layer 2 access layer switch and run Layer 3 from the aggregation layer to all remaining access layer switches
B. Align HSRP primary and STP root bridges and reduce ARP timers to match CAM timers on the aggregation layer switches
C. Migrate to a Layer 3 access campus design if the APs can run on separate VLANs
D. Align HSRP primary and STP root bridges if the APs cannot run on separate VLANs
E. Reveal Answer
View answer
Correct Answer: D
Question #43
A company wants to switch from static to dynamic routing. The branches use DMVPN back to the hub using two internet connections. One internet connection speed is 10 Mbps, and the other is 100 Mbps. All locations use Cisco routers; however, the branch routers have limited memory and CPU resources. Which routing protocol and design solution must the company choose for optimal traffic forwarding during peak traffic times?
A. OSPF deployed in area 0 with branch routers connected back via virtual links
B. EIGRP with branch routers as stub routers and variance enabled
C. ISIS with the hub and spoke routers configured in two different areas
D. iBGP with the hub routers set up as route reflectors
View answer
Correct Answer: B
Question #44
A company wants to deploy IPv6 within its existing network infrastructure. All current infrastructure equipment supports IPv6, and the company wants a migration strategy that must not require purchasing additional equipment. The plan must keep operational management costs low, support IPv6 multicast, and allow applications to migrate using DNS. Which strategy must the company choose?
A. hybrid ISATAP tunnel model
B. hybrid manual tunnel model
C. dual-stack model
D. service block model
View answer
Correct Answer: C
Question #45
Which design consideration should be observed when EIGRP is configured on Data Center switches?
A. Perform manual summarization on all Layer 3 interfaces to minimize the size of the routing table
B. Prevent unnecessary EIGRP neighborships from forming across switch virtual interfaces
C. Lower EIGRP hello and hold timers to their minimum settings to ensure rapid route reconvergence
D. Configure multiple EIGRP autonomous systems to segment Data Center services and applications
View answer
Correct Answer: B
Question #46
Refer to the exhibit. An engineer is designing a multicampus Layer 3 infrastructure using EIGRP as the routing protocol. The design must provide quick replies to queries in the event of a downlink, prevent unnecessary queries, and ensure that traffic does not unnecessarily transit the access layer. Which two actions must the engineer take for the network design? (Choose two.)
A. Configure core layer switches as stub routers
B. Configure access layer and core layer switches as stub routers
C. Configure distribution layer switches to summarize routes to the core layer
D. Configure access layer switches as stub routers
E. Configure access layer switches to summarize routes to the distribution layer
View answer
Correct Answer: CD
Question #47
Refer to the exhibit. A customer requires maximum uptime for the data plane between R1 and R3 running OSPF. Which solution must the design include for high availability if the routing process on R2 requires maintenance?
A. FD on all routers
B. onstop forwarding on R3 only
C. raceful restart on all routers
D. onstop forwarding on R1 and R3
View answer
Correct Answer: C
Question #48
An engineer is designing a networking solution to allow two hosts to communicate-one host located within the company A network and the other within the company B network. The two companies have no other plans for future additional connections. Both companies want to use a single secure and encrypted internet connection, and the configuration must be as simple as possible. Which network solution must the engineer choose?
A. PLS VPN provided service with BGP routing
B. olicy-based IPsec tunnel with static routing
C. ingle DMVPN with EIGRP routing
D. outed IPsec tunnel with OSPF routing
View answer
Correct Answer: B
Question #49
An architect is designing a network solution for a customer. The network is IPv6-only with 1000 hosts. The design must provide external access to up to 10 concurrent IPv6 hosts to allow communication with legacy IPv4 devices on an adjacent network. The customer set aside 10 IPv4 addresses to allow for one-to-one communication between hosts. Which solution must the architect select?
A. static NAT-PT
B. dynamic NPTv6
C. stateful NAT64
D. dynamic NAT-PT
View answer
Correct Answer: C
Question #50
A company wants to deploy IPv6 within its existing network infrastructure. All current infrastructure equipment supports IPv6, and the company wants a migration strategy that must not require purchasing additional equipment. The plan must keep operational management costs low, support IPv6 multicast, and allow applications to migrate using DNS. Which strategy must the company choose?
A. hybrid ISATAP tunnel model
B. hybrid manual tunnel model
C. dual-stack model
D. service block model
View answer
Correct Answer: C

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us