- 4.9/5.0
- 318 Questions
- Updated on: 25-May-2026
- Designing Cisco Enterprise Networks (ENSLD)
- 23185 Prepared
Free Cisco 300-420 Practice Questions 2026 | Designing Cisco Enterprise Networks (ENSLD)
Refer to the exhibit.
An architect must design an IGP solution for an enterprise customer. The design must
support:
Physical link flaps should have minimal impact.
Access routers should converge quickly after a link failure.
Which two ISIS solutions should the architect include in the design? (Choose two.)
A.
Use BGP to IS-IS redistribution to advertise all Internet routes in the Level 1 area.
B.
Advertise the IS-IS interface and loopback IP address toward the Internet and data center.
C.
Reduce SPF and PRC intervals to improve convergence time.
D.
Configure all access and aggregate routers to establish Level 1 / Level 2 adjacencies across the network.
E.
Configure access routers to establish a Level 1 adjacency and aggregate routers to establish a Level 1 / Level 2 adjacency.
Reduce SPF and PRC intervals to improve convergence time.
D.
Configure all access and aggregate routers to establish Level 1 / Level 2 adjacencies across the network.
How is sub-second failure of a transport link detected in a Cisco SD-WAN network?
A.
Hellos are sent between the WAN Edge routers and the vSmart controller.
B.
BFD runs on the IPsec tunnels between WAN Edge routers.
C.
BGP is used between WAN Edge routers and the vSmart controller.
D.
Link state change messages are sent between vSmart controllers.
BFD runs on the IPsec tunnels between WAN Edge routers.
Refer to the exhibit.
Which solution decreases the EIGRP convergence time?
A.
Enable subsecond timers
B.
Increase the hold time value
C.
Increase the dead timer value
D.
Enable stub routing on the spokes
Enable stub routing on the spokes
Drag and drop the components in a Cisco SD-Access architecture from the left onto their
descriptions on the right.

An engineer must propose a solution for a campus network that includes the capability to
create multiple Layer 3 virtual networks. Each network must have its own addressing
structure and routing table for data forwarding. The solution must be scalable to support
hundreds of virtual networks and allow simple configuration and management with minimal
administrative overhead. Which solution does the engineer recommend?
A.
hop-by-hop EVN
B.
multihop MPLS core
C.
multihop IPsec tunneling
D.
hop-by-hop VRF-Lite
hop-by-hop EVN
An engineer is looking for a standards-driven YANG model to manage a multivendor network environment. Which model must the engineer choose?
A.
Native
B.
OpenConfig
C.
IETF
D.
IEEE NETCONF
IETF
A customer requests a VPN solution to connect multiple sites with the company
headquarters. All the sites use the same IP subnet. The engineer plans to use VPLS. Which solutions must the engineer include in the design?
A.
802.1Q connectivity on the LAN side of the CE
B.
route exchange with the service provider
C.
address translation to hide overlapping subnets
D.
different VLANs on each site
802.1Q connectivity on the LAN side of the CE
What is the purpose of a Cisco SD-Access underlay network?
A.
to abstract IP-based connectivity from physical connectivity
B.
to emulate LAN segments to transport Layer 2 frames over a Layer 3 network
C.
to establish physical connectivity between switches and routers
D.
to provide virtualization by encapsulating network traffic over IP tunnels
to establish physical connectivity between switches and routers
Which two border nodes are available in the Cisco SD-Access architecture? (Choose two.)
A.
extended border
B.
edge border
C.
internal border
D.
anywhere border
E.
intermediate border
internal border
D.
anywhere border
Explanation: There are 3 types of border nodes in SD-Access:
External. Default exit from fabric with no specific routes injection
Internal. Gateway only for a set of networks, such as shared services prefixes
Anywhere. Combination of external and internal functionality
A network administrator is troubleshooting a DMVPN setup between the hub and the
spoke. Which action should the administrator take before troubleshooting the IPsec
configuration?
A.
Verify the GRE tunnels.
B.
Verify ISAKMP.
C.
Verify NHRP.
D.
Verify crypto maps.
Verify the GRE tunnels.
| Page 11 out of 32 Pages |