New 2020 CCNP 300-420 ENSLD exam questions from PassLeader 300-420 dumps! Welcome to download the newest PassLeader 300-420 VCE and PDF dumps: https://www.passleader.com/300-420.html (326 Q&As –> 375 Q&As)
P.S. Free 2020 CCNP 300-420 ENSLD dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=1INcKy4jXdE0a_xC8B0uLBCOaSIHPdc1R
NEW QUESTION 286
Which protocol runs between the vSmart controllers and between the vSmart controllers and the vEdge routers, and unifies all control plane functions under a single protocol umbrella?
A. OMP
B. OSPF
C. IKE
D. VRRP
E. BGP
Answer: A
NEW QUESTION 287
Which two statements regarding Cisco SD-WAN vEdge routers can mitigate DoS attacks against the infrastructure? (Choose two.)
A. Only authorized controllers are allowed to communicate back to the vEdge router after the vEdge router establishes connections with the controllers.
B. By default, integrated IDS’IPS on inside and (WAN) side interfaces.
C. The vEdge routers run on hardened Linux operating systems.
D. In case of direct Internet access, the only traffic allowed back is the traffic matching the state table entries on the vEdge router.
E. Open Certificate Authority and automated enrollment feature.
Answer: AD
NEW QUESTION 288
Which is a benefit of a cloud-based SD-WAN deployment?
A. instant scale
B. security never an issue
C. might be required for compliance with industry standards
D. controller availability never an issue
E. agility of change dependent only on your own internal IT processes
Answer: A
NEW QUESTION 289
Which Cisco product were incorporated into Cisco ISE between ISE releases 2.0 and 2.3?
A. Cisco ESA
B. Cisco ASA
C. Cisco ACS
D. Cisco WSA
Answer: C
NEW QUESTION 290
Which Cisco product supports SD-Access and specifically built to address new challenges faced by enterprises?
A. CSRv virtual router.
B. ASR 1000-HX.
C. Catalyst 6807-XL w/ Sup6T and C6800 10G line cards.
D. Catalyst 9500.
E. ISR 4221.
F. Nexus 7700 w/ Sup2E and M3 line cards.
Answer: D
NEW QUESTION 291
Which Cisco vEdge router offers 20 Gb of encrypted throughput?
A. Cisco vEdge 2000
B. Cisco vEdge 100
C. Cisco vEdge 5000
D. Cisco vEdge 1000
Answer: C
NEW QUESTION 292
Which are the three focus areas for reinventing the WAN? (Choose three.)
A. Execution
B. Centralized Device Authentication
C. Secure Elastic Connectivity
D. Application Quality of Experience
E. Cloud First
F. Operations
Answer: CDE
NEW QUESTION 293
Which two statements are true regarding SD-WAN demonstrations? (Choose two.)
A. As a Cisco SD-WAN SE you should you should spend your time learning about the technology rather than contributing to demo innovation.
B. Use demonstrations primarily for large opportunities and competitive situations.
C. During a demo, you should consider the target audience and the desired outcome.
D. During a demo, you should demonstrate and discuss what the team considers important details.
E. There is a big difference between demos that use a top down approach and demos that use a bottom up approach.
Answer: CE
NEW QUESTION 294
Which two statements are true regarding Cisco ISE? (Choose two.)
A. The number of logs that ISE can retain is determined by your disk space.
B. ISE supports IPv6 downloadable ACLs.
C. In two-node standalone ISE deployments, failover must be done manually.
D. ISE supports up to 100 Policy Services Nodes.
E. ISE can detected endpoints whose addresses have been translated via NAT.
F. In distributed deployments, failover from primary to secondary Policy Administration Nodes happens automatically.
Answer: AB
NEW QUESTION 295
What are three ways in which Cisco ISE learns information about devices? (Choose three.)
A. network servers the device has accessed
B. traffic generated by the device
C. RADIUS attributes
D. RPC mechanism via HTTPS
E. SMTP agents
F. user authentication to the ISE
Answer: BCF
NEW QUESTION 296
Which element of the Cisco SD-WAN architecture facilitates the functions of controller discovery and NAT traversal?
A. vSmart controller
B. vBond orchestrator
C. vManage
D. vEdge
Answer: B
NEW QUESTION 297
Which three ways are SD-Access and ACI Fabric similar? (Choose three.)
A. use of Virtual Network IDs
B. use of Endpoint Groups
C. use of group policy
D. use of Scalable Group Tags
E. focus on user endpoints
F. use of overlays
Answer: ACF
NEW QUESTION 298
Which is a function of the Proactive Insights feature of Cisco DNA Center Assurance?
A. enabling you to quickly view all of the contextual information related to a single user
B. generating synthetic traffic to perform tests that raise awareness of potential network issues
C. enabling you to see the complete path of packets from the client to the end application
D. pointing out where the most serious issues are happening in the network
Answer: B
NEW QUESTION 299
Which option will help build your customers platform during the discovery phase?
A. detailed design
B. high-level design
C. PO
D. POV report
E. business case
Answer: E
NEW QUESTION 300
Which two Cisco ISE features provide benefits to our customers? (Choose two.)
A. enables them to set traffic encryption across the network
B. helps them accelerate application deployment and delivery
C. helps them stop and contain real-time threats
D. provides network access control
Answer: CD
NEW QUESTION 301
Which two statements describes Cisco SD-Access? (Choose two.)
A. software-defined segmentation and policy enforcement based on user identity and group membership
B. an overlay for the wired infrastructure in which traffic is tunneled via a GRE tunnel to a mobility controller for policy and application visibility
C. an automated encryption/decryption engine for highly secured transport requirements
D. programmable overlays enabling network virtualization across the campus
E. a collection of tools and applications that are a combination of loose and tight coupling
Answer: AD
NEW QUESTION 302
Which two activities should occur during an SE’s discovery process? (Choose two.)
A. Gathering information about the current state of the customer s network environment.
B. Working with the customer to develop a reference architecture.
C. Mapping Cisco innovation to customer s needs.
D. Referencing the PPDIOO model to effectively facilitate the discussion.
E. Establishing credibility with the customer.
Answer: AE
NEW QUESTION 303
Which three key differentiators that DNA Assurance provides that our competitors are unable to match? (Choose three.)
A. Network time travel.
B. Support for Overlay Virtual Transport.
C. Apple Insights.
D. Proactive approach to guided remediation.
E. On-premise and cloud-base analytics.
F. VXLAN support.
Answer: ACD
NEW QUESTION 304
What are the three foundational elements required for the new operational paradigm? (Choose three.)
A. application QoS
B. policy-based automated provisioning of network
C. multiple technologies at multiple OSI layers
D. assurance
E. centralization
F. fabric
Answer: BDF
NEW QUESTION 305
Which two primary categories are displayed on the overall health page of the assurance component in the Cisco DNA Center? (Choose two.)
A. Client
B. Wired
C. Access-Distribution
D. Core
E. Network
F. Server
Answer: AE
NEW QUESTION 306
Which are two advantages of a “one switch at a time” approach to integrating SD-Access into an existing brown field environment? (Choose two.)
A. appropriate for campus and remote site environments
B. allows simplified roll back
C. involves the least risk of all approaches
D. opens up many new design and deployment opportunities
E. ideal for protecting recent investments while upgrading legacy hardware
F. allows simplified testing prior to cutover
Answer: AE
NEW QUESTION 307
Which three options focus of the current digital business era? (Choose three.)
A. IoT scale
B. Human scale
C. automation
D. virtualized services
E. connectivity
F. centralized enterprise and web applications
Answer: ACD
NEW QUESTION 308
What is the easiest way to enable SD-Access for all your remote sites after you have your campus SD-Access fabric up and running?
A. Treat all the sites as one fabric domain and use the traditional physical network as the underlay.
B. Use a separate fabric domain for each site and use the traditional physical network as the underlay.
C. Use a separate fabric domain for each site and use SD-WAN as the underlay.
D. Treat all the sites as one fabric domain and use SD-WAN as the underlay.
Answer: A
NEW QUESTION 309
What should you do If you are looking at a strategic win with a customer and the customer wants to examine Cisco ISE for longer than a few weeks?
A. Set them up with an account on a Cisco UCS server that hosts ISE.
B. Set them up with a dCloud account.
C. Provide them with a downloadable POV kit.
D. Point them to our dCloud demo library.
E. Give them some of our flash files that can be played on any browser.
F. Give them our ISE YouTube videos.
Answer: C
NEW QUESTION 310
Which node enables Cisco ISE to share contextual information on a device with Cisco Stealthwatch?
A. Monitoring and Troubleshooting Node
B. Inline Posture Node
C. pXGrid Controller
D. Policy Administration Node
Answer: C
NEW QUESTION 311
Which two options are primary functions of Cisco ISE? (Choose two.)
A. enforcing endpoint compliance with network security policies
B. enabling WAN deployment over any type of connection
C. automatically enabling, disabling or reducing allocated power to certain devices
D. providing information about every device that touches the network
E. providing encryption for any type of mobile devices
F. allocating cloud resources
Answer: AD
NEW QUESTION 312
Which two activities should occur during an SE’s demo process? (Choose two.)
A. asking the customer to provide network drawings or white board the environment for you
B. highlighting opportunities that although not currently within scope would result in lower operational costs and complexity
C. identifying which capabilities require demonstration
D. determining whether the customer would like to dive deeper during a follow-up
E. leveraging a company such as Complete Communications to build a financial case
Answer: BD
NEW QUESTION 313
Which two options help you sell Cisco ISE? (Choose two.)
A. Downplaying the value of pxGrid as compared to RESTful APIs.
B. Explaining ISE support for 3rd party network devices.
C. Showcasing the entire ISE feature set.
D. Referring to TrustSec as being only supported on Cisco networks.
E. Discussing the importance of custom profiling.
Answer: BC
NEW QUESTION 314
Which are two Cisco recommendations that demonstrates SDA? (Choose two.)
A. Focus on business benefits.
B. Be sure you explain the major technologies such as VXLAN and LISP in depth.
C. Show the customer how to integrate ISE into DNA Center at the end of the demo.
D. Keep the demo at a high level.
E. Use the CLI to perform as much of the configuration as possible.
Answer: AD
NEW QUESTION 315
Which feature is supported on the Cisco vEdge platform?
A. single sign-on
B. IPv6 transport (WAN)
C. license enforcement
D. 2-factor authentication
E. reporting
F. non-Ethernet interfaces
Answer: B
NEW QUESTION 316
What statement is true regarding the current time in Enterprise Networking history?
A. advent of IoT
B. technology pace of change
C. pervasive use of mobile devices
D. advent of cloud computing
Answer: B
NEW QUESTION 317
Which two statements are true regarding Cisco ISE? (Choose two.)
A. Without integration with any other product ISE can track the actual physical location of a wireless endpoint as it moves.
B. ISE can provide data about when a specific device connected to the network.
C. ISE plays a critical role in SD-Access.
D. The major business outcomes of ISE are enhanced user experience and secure VLAN segmentation.
E. An ISE deployment requires only a Cisco Access Control System appliance.
Answer: BC
NEW QUESTION 318
How would Cisco ISE handle authentication for your printer that does not have a supplicant?
A. ISE would not authenticate the printer as printers are not subject to ISE authentication.
B. ISE would authenticate the printer using 802.1X authentication.
C. ISE would authenticate the printer using MAB.
D. ISE would authenticate the printer using web authentication.
E. ISE would authenticate the printer using MAC RADIUS authentication.
Answer: C
NEW QUESTION 319
Which two Cisco ISE use cases typically involve the highest level of implementation complexity? (Choose two.)
A. Asset visibility.
B. Device management.
C. Software-defined segmentation.
D. Software-defined access.
E. Guest and wireless access.
Answer: CD
NEW QUESTION 320
Which component of the SD-Access fabric is responsible for communicating with networks that are external to the fabric?
A. border nodes
B. control plane nodes
C. intermediate nodes
D. edge nodes
Answer: A
NEW QUESTION 321
What are two characteristics of a migration from an IP-VPN service to a Cisco SD-WAN architecture? (Choose two.)
A. distributed control plane
B. increased security
C. increased scalability
D. centralized application policies
E. increased solution complexity
Answer: CD
NEW QUESTION 322
What does the fabric data plane leverage in SD-Access Architecture?
A. LISP protocol to resolve endpoint-to-location mapping.
B. IS-IS protocol to exchange link-state routing information.
C. MAC-in-IP encapsulation method to transport of the Layer 2 frame.
D. BGP protocol to advertise endpoint prefixes outside of the fabric.
Answer: C
NEW QUESTION 323
……
New 2020 CCNP 300-420 ENSLD exam questions from PassLeader 300-420 dumps! Welcome to download the newest PassLeader 300-420 VCE and PDF dumps: https://www.passleader.com/300-420.html (326 Q&As –> 375 Q&As)
P.S. Free 2020 CCNP 300-420 ENSLD dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=1INcKy4jXdE0a_xC8B0uLBCOaSIHPdc1R
