Ensurepass
2017 June Cisco Official New Released 300-320 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/300-320.html

Designing Cisco Network Service Architectures (ARCH)

QUESTION 71

Refer to the exhibit. A customer requires a web application implementation, but the web server has communication only to the application server and users, and the database server has communication only to the application server. What firewall design is the best fit for this scenario?

 

clip_image002

 

A.

transparent mode with the servers on the same subnet

B.

routed mode with three security zones

C.

transparent mode with three security zones

D.

routed mode with two security zones

 

Correct Answer: B

 

 

QUESTION 72

What is the recommended subnet between two sites that have a point-to-point connection to conserve IP addresses?

 

A.

255.255.255.0

B.

255.255.252.0

C.

255.255.255.252

D.

255.255.255.240

 

Correct Answer: C

 

 

QUESTION 73

Which VPN technology is tunnel-less?

 

A.

GET VPN

B.

DMVPN

C.

MPLS

D.

IPsec VPN

 

Correct Answer: A

 

 

QUESTION 74

Which of these is a recommended practice with trunks?

 

A.

use ISL encapsulation

B.

use 802.1q encapsulation

C.

set ISL to desirable and auto with encapsulation negotiate to support ISL protocol negotiation

D.

use VTP server mode to support dynamic propagation of VLAN information across the network

 

Correct Answer: B

 

 

QUESTION 75

What are three primary components in IS-IS fast convergence? (Choose three.)

 

A.

event propagation

B.

LSP flooding

C.

fast hellos

D.

matching MTUs

E.

updating RIB and FIB

F.

SPF calculation

 

Correct Answer: AEF

 

 

QUESTION 76

Which part of the Layer 3 header is used to identify a flow in NetFlow but it is not used for NBAR?

 

A.

source port

B.

ToS

C.

protocol type

D.

source IP

 

Correct Answer: B

 

 

QUESTION 77

Which statement about data center access layer design modes is correct?

 

A.

The access layer is the first oversubscription point in a data center design.

B.

The data center access layer provides the physical-level connections to the server resources and only operates at Layer 3.

C.

When using a Layer 2 looped design, VLANs are not extended into the aggregation layer.

D.

When using a Layer 3 design, stateful services requiring Layer 2 connectivity are provisioned from the aggregation layer.

 

Correct Answer: A

 

 

QUESTION 78

To which switch or switches should you provide redundant links in order to achieve high availability with reliable fast convergence in the enterprise campus?

 

A.

to a core switch running Cisco NSF and SSO from redundant distribution switches connected with a Layer 2 link

B.

to a core switch running Cisco NSF and SSO from redundant distribution switches connected with a Layer 3 link

C.

to two core switches from redundant distribution switches connected with a Layer 2 link

D.

to two core switches from redundant distribution switches connected with a Layer 3 link

E.

to two core switches running Cisco NSF and SSO from two redundant distribution switches running Cisco NSF and SSO

 

Correct Answer: D

 

 

QUESTION 79

Which technology extends Layer 2 LANs over any network that supports IP?

 

A.

OTV

B.

VSS

C.

vPC

D.

VLAN

 

Correct Answer: A

 

 

QUESTION 80

Which protocol is used in an in-band network and why?

 

A.

UDP, because it is connectionless

B.

SSH, because the username and password are encrypted

C.

Telnet, because the username and password are sent in clear

D.

MSDP, because it uses TCP as its transport protocol

 

Correct Answer: B

100% Free Download!
—Download Free Demo:300-320 Demo PDF
100% Pass Guaranteed!
—Download 2017 Ensurepass 300-320 Full Exam PDF and VCE Q&As:389
—Get 10% off your purchase! Copy it:TJDN-947R-9CCD [2017.06.01-2017.06.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE