300-420 Practice Test

300-420 Practice Test practice questions, page 12 of 17, with answer review and explanations.

Question 56

How is end-to-end microsegmentation enforced in a Cisco SD-Access architecture?

  1. VLANs are used to segment traffic at Layer 2.
  2. 5-tuples and ACLs are used to permit or deny traffic.
  3. SGTs and SGTACLs are used to control access to various resources.
  4. VRFs are used to segment traffic at Layer 3.

Question 57

Which two border nodes are available in the Cisco SD-Access architecture? (Choose two.)

  1. extended border
  2. edge border
  3. internal border
  4. anywhere border
  5. intermediate border

Question 58

Which control-plane protocol is used to map an endpoint to a location in a Cisco SD-Access network?

  1. FabricPath
  2. IS-IS
  3. LISP
  4. MP-BGP

Question 59

Which feature is required for graceful restart to recover from a processor failure?

  1. Cisco Express Forwarding
  2. Virtual Switch System
  3. Stateful Switchover
  4. Bidirectional Forwarding Detection

Question 60

An architect is designing a network that will utilize the spanning tree protocol to ensure a loop-free topology. The network will support an engineering environment where it is necessary for end-users to connect their own network switches for testing purposes. Which feature should the architect include in the design to ensure the spanning-tree topology is not affected by these rogue switches?

  1. BPDU Skew Detection
  2. BPDU guard
  3. loop guard
  4. root guard