Cisco 300-420 Designing Cisco Enterprise Networks (ENSLD) Online Training
Cisco 300-420 Online Training
The questions for 300-420 were last updated at Oct 23,2025.
- Exam Code: 300-420
- Exam Name: Designing Cisco Enterprise Networks (ENSLD)
- Certification Provider: Cisco
- Latest update: Oct 23,2025
What is the role of a control-plane node in a Cisco SD-Access architecture?
- A . fabric device that connects wired endpoints to the SD-Access fabric
- B . map system that manages endpoint to device relationships
- C . fabric device that connects APs and wireless endpoints to the SD-Access fabric
- D . map system that manages External Layer 3 networks
Refer to the exhibit.

An architect must design an IPv6 migration solution for an enterprise customer to support these requirements:
* Clients will transition to the new IPv6 network, which provides NAT64 and IPv6 DNS resolution services, using the same DNS name that points to the IPv4 address.
* The service provider will create a client-facing IPv6 interface with a new IPv6 virtual address that points to the same IPv4 DNS server.
* The service provider will support clients that use global IPv6 addresses and encapsulate IPv4 packets into IPv6 tunnels.
Which two migration solutions must the architect choose? (Choose two.)
- A . Use dual-stack lite from the MPLS network to the IGR.
- B . Use IPv6 tunneling from the devices to the core MPLS network.
- C . Use dual-stack lite from the devices to the core MPLS network.
- D . Use NAT44/64 from the MPLS network to the IGR.
- E . Use NAT44/64 from the devices to the core MPLS network.
DRAG DROP
Drag and drop the properties from the left onto the Cisco SD-WAN components that perform them on the right.

Which topology within a network underlay eliminates the need for first hop redundancy protocols while improving fault tolerance, increasing resiliency, and simplifying the network?
- A . virtualized topology
- B . routed access topology
- C . Layer 2 topology
- D . logical fabric topology
Which two border nodes are available in the Cisco SD-Access architecture? (Choose two.)
- A . extended border
- B . edge border
- C . internal border
- D . anywhere border
- E . intermediate border
An engineer uses Postman and YANG to configure a router with:
✑ OSPF process ID 200
✑ network 172.16.10.128/26 enabled for Area 0
Which get-config reply verifies that the model set was designed correctly?
A)

B)

C)

D)

- A . Option A
- B . Option B
- C . Option C
- D . Option D
A company uses cloud-based applications for voice and video calls, file sharing, content sharing, and messaging. During business hours, these applications randomly become slow and unresponsive. However, other applications work smoothly with the current applied QoS polices.
Which solution must the company choose to resolve the issue?
- A . Identify the applications with NBAR2 and allocate the required bandwidth accordingly.
- B . Identify the port used by each application and apply a minimum bandwidth guarantee.
- C . Identify the applications and reserve the required bandwidth on the perimeter routers.
- D . Identify the application ports, create groupings, and rate-limit the required bandwidth.
An engineer must design a large Layer 2 domain that contains hundreds of switches and VLANs.
The engineer’s primary goals are to:
• Efficiently utilize the bandwidth of all links
• Avoid Layer 2 loops
• Cause minimal impact on switch CPU and memory
Which technology should the engineer include in the design?
- A . PVST+
- B . Rapid PVST+
- C . MST
- D . RSTP
An engineer is designing a multicast network for a financial application Most of the multicast sources also receive multicast traffic (many-to-many deployment model). To better routing tables, the design must not use source trees.
Which multicast protocol satisfies these requirements?
- A . BIRDIR-PIM
- B . PIM-SM
- C . MSDP
- D . PIM-SSM
Refer to the exhibit.

An architect reviews the low-level design of a company’s enterprise network and advises optimizing the STP convergence time.
Which functionality must be to Gi1/0/1-10 to follow the architect’s recommendation?
- A . PortFast
- B . root guard
- C . UplinkFast
- D . BPDU guard