1.1 Explain the Different Design Principles Used in an Enterprise Network 350-401 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A network administrator is configuring gateway redundancy on a pair of switches. The requirement is that both switches should be able to forward traffic for different VLANs to make use of both devices, rather than having one switch idle. Which FHRP should be used to achieve this?

   • AHSRP with preemption enabled
   • BVRRP with multiple virtual routers
   • CHSRP with multiple HSRP groups on the same interface
   • DGLBP with multiple active virtual forwarders
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A small branch office with 40 users is being redesigned. The network team wants to reduce equipment costs while still providing redundant paths and default gateway redundancy for the access switches. The branch has two access switches that will connect to the upstream network. Which design approach best meets these requirements?

   • AImplement SD-Access fabric with fabric edge nodes and a control plane node to provide redundancy.
   • BUse a single access switch with dual uplinks to the WAN router and rely on the router for gateway redundancy.
   • CCollapse the core and distribution functions into the two access switches, and configure HSRP between them for gateway redundancy.
   • DDeploy a 3-tier design with separate distribution and core switches, and use HSRP on the distribution switches.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A campus core switch has dual supervisors. The network team wants to ensure that a supervisor failover does not disrupt the default gateway for users. They are considering enabling SSO and also configuring HSRP between the core switch and another core switch. Which statement is correct about this design?

   • ANeither SSO nor HSRP is needed because the switch has dual supervisors.
   • BSSO alone is sufficient to maintain the default gateway during a supervisor failover.
   • CSSO and HSRP together provide both stateful supervisor failover and gateway redundancy.
   • DHSRP alone is sufficient to maintain the default gateway during a supervisor failover.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is moving some workloads to a public cloud and wants to extend its on-premises network into the cloud. They need a secure, encrypted connection over the internet, but they also want to avoid the cost of a dedicated private connection. Which connectivity option should they use?

   • ASD-WAN with a cloud on-ramp
   • BSite-to-site IPsec VPN
   • CCloud provider's native firewall service
   • DDirect peering with the cloud provider
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   An enterprise runs critical applications in a public cloud and wants to connect its on-premises data center to the cloud with a private, low-latency connection. They also want to ensure that if the primary connection fails, traffic can still flow over the internet as a backup. Which connectivity design should be used?

   • AUse only a dedicated private connection and rely on the cloud provider's internal redundancy.
   • BUse a VPN over the internet as the primary connection and a second VPN as backup.
   • CUse multiple VPN tunnels over the internet to different cloud regions.
   • DUse a dedicated private connection (such as Azure ExpressRoute or AWS Direct Connect) as the primary path and an IPsec VPN over the internet as the backup.
   Reveal Solution Discussion Select an answer first