300-320 Exam - ARCH Designing Cisco Network Service Architectures

certleader.com

P.S. Virtual 300-320 bible are available on Google Drive, GET MORE: https://drive.google.com/open?id=1m2hy4cRc4wvEGEt6al4pag1GuO4GSG6M


New Cisco 300-320 Exam Dumps Collection (Question 5 - Question 14)

Question No: 5

Design QoS (traffic regulation mechanisms ? )(Choose Two)

A. Classification

B. Shaping

C. Policing

D. Queuing

Answer: B,C


Question No: 6

An engineer is designing a new data center network so that the topology maintains fewer uplinks to the aggregation layer to reduce STP processing requirements. What data center topology meets the RFP requirements?

A. mesh

B. top of rack

C. star

D. end of row

Answer: D


Question No: 7

About DDOS attack .What you can do on device to block DDOS attack ?

A. Policy map

B. ACL

C. Control plane policy

D. Used zoned firewall on router

Answer: C


Question No: 8

What is the result of a successful RFP check?

A. The packet is dropped because it arrived on the interface used to route traffic back to the source address.

B. The packet is forwarded because it arrived on the interface used to route traffic back to the source address.

C. The packet is forwarded because it arrived on the interface used to route traffic to the destination address.

D. The packet is dropped because it arrived on the interface used to route traffic to the destination address.

Answer: A


Question No: 9

Which router device group summarizes for WAN sites on which level?

A. Core

B. Distribution

C. Access-layer within campus

D. Distribution in data center

E. WAN edge

Answer: A


Question No: 10

A network consultant is designing an enterprise network that includes an IPsec headend termination device. Which two capabilities are the most important to consider when assessing the headend deviceu2021s scalability? (Choose two.)

A. bandwidth capabilities

B. packets per second processing capability

C. CPU capabilities

D. number of tunnels that can be aggregated

E. memory capabilities

Answer: B,D


Question No: 11

You use 2x ISPs for the internet connectivity. How could you avoid your internal network to become a transit area (Choose two)?

A. accept all routes from ISPs inbound

B. advertise all routes outbound

C. filter internal routes inbound

D. filter internal routes outbound

E. use just one ISP

Answer: A,D

Explanation:

When connecting to multiple exit points from your AS and peering with multiple ISPs, there is a danger that by misconfiguration, you advertise routes that are received from one ISP to the other ISP. Your AS can become a transit area for Internet traffic of other networks, which can cost you money and resources. You can easily avoid this situation by advertising only your assigned address space to all

adjacent ISPs (also, you can advertise only your local AS and filter out the other ASs using BGP AS-path filter).

From a design point of view, this model (Multi-homing with Two ISPs) requires careful design consideration. For example, to avoid making the enterprise network as a transit AS/path for the two external ISPs (for example, ISP1 and ISP2), it is recommended that you always announce only your PI address space to the ISPs you are directly connected to. If, by mistake, you advertise routes that are received from ISP1 to ISP2, and ISP2u2021s policy is not restrictive enough, your AS will start to participate in the Internet traffic exchange (become a transit AS). In addition, if AS X, as shown in Figure 5-23, decided that the path to ISP1 from AS X is shorter through your network (via ISP2), it will start sending traffic that is destined for ISP1 to your router. Your router will happily route the traffic to ISP1, but the problem is that this extra traffic might leave your users with no bandwidth for themselves and, as a result, it will impact the overall user experience. Also, this situation raises a high security concern, because external traffic from an unknown network, traffic that could be malicious, will be using your corporate network as a transit path. Therefore, you, as the network designer, need to ensure that only the enterprise-owned PI address range is announced, combined with AS PATH filtering to permit only routes originating from the enterprise local AS to be advertised.

To prevent your network from becoming a transit AS, make sure that you advertise only your own PI address space to both ISPs by using outbound route filtering, BGP AS-PATH filtering, or a combination of both.


Question No: 12

How to choose the root bridge in the spanning-tree?

A. Highest MAC address

B. Lowest Mac address

Answer: B

Explanation: Lower priority means it is preferred compared to a higher. The priority is set in multiples of 4096. If there is a tie in priority then the lowest MAC address willdetermine whichbridge becomes theroot. To select the path to theroot the cost to theroot is

calculated


Question No: 13

NAC: Simple access control at user and device contextual level. Which features are needed ? (Choose Two)

A. secure access control

B. TrustSec

C. ISE

D. NAC agent

Answer: C,D


Question No: 14

An engineer is designing a multi cluster bgp network, each cluster has 2 RRs and 4 RR clients which 2 options must be considered?

A. Clients from all clusters should peer with all RRs

B. All route reflectors should be non client peers & topology partially meshed

C. All RRs must be non client peers in a fully meshed topology

D. Clients must not peer with IBGP speakers outside the client router

E. Clients should peer with at least one other client outside itu2021s cluster

Answer: C,D


100% Renewal Cisco 300-320 Questions & Answers shared by Dumpscollection, Get HERE: http://www.dumpscollection.net/dumps/300-320/ (New 406 Q&As)