2.4 Design Stable, Secure, and Scalable Routing Deployments 500-220 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is using BGP to connect its Meraki MX to a service provider. The service provider is advertising a default route and a few specific routes. The company wants to use the specific routes for normal traffic and the default route as a backup. However, they are concerned about the security of the BGP session. What is the best way to secure the BGP session and ensure the routing policy is enforced?

   • ADisable BGP and use static routes for the specific networks.
   • BConfigure BGP authentication (MD5) on the MX and use a route filter to accept only the specific routes.
   • CUse a firewall rule to block BGP traffic from unknown sources.
   • DConfigure the MX to use a higher local preference for the specific routes.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A large enterprise is migrating from a legacy WAN to Meraki SD-WAN. They have 100 branch offices, each with a Meraki MX. The branches are currently using OSPF to connect to the data center. The network team wants to simplify the routing design and reduce the routing table size on the branch MXs. They are considering using auto-VPN and route summarization. What is the best way to implement this migration?

   • AMigrate the branches to auto-VPN and configure the data center MXs to advertise a default route to the branches.
   • BUse a combination of OSPF and auto-VPN, with OSPF for the data center and auto-VPN for the branches.
   • CKeep OSPF on the branch MXs and configure route summarization on the data center routers.
   • DConfigure static routes on the branch MXs for the data center subnets.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which design practice is most directly aimed at preventing route flapping in a routing deployment?

   • AUsing a single routing protocol throughout the network
   • BImplementing route summarization to reduce the number of prefixes advertised
   • CIncreasing the hello interval on all routing adjacencies
   • DConfiguring route dampening to suppress unstable routes
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is connecting its Meraki MX to a third-party data center using BGP. The data center is advertising a default route and a few specific routes. The security team wants to ensure that the MX only accepts the specific routes and does not accept the default route, to prevent the MX from sending all traffic to the data center. What is the best way to achieve this?

   • AConfigure the MX to use a higher local preference for the specific routes.
   • BSet the MX's BGP weight for the specific routes to a higher value.
   • CDisable BGP and use static routes for the specific networks.
   • DConfigure a route filter on the MX to deny the default route and permit the specific routes.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has two Meraki MX appliances at its headquarters, each connected to a different ISP. The MXs are configured in a warm-spare pair. The branch offices connect back to the HQ via auto-VPN. The network team wants to ensure that if the primary MX at HQ fails, the branch offices can still reach the internet and the data center with minimal disruption. What is the most effective way to achieve this?

   • AUse a single MX at HQ with two WAN uplinks and rely on the ISP failover.
   • BPlace the two HQ MXs in a layer 3 mode and run OSPF between them and the branch offices.
   • CHave the branch offices configure two separate VPN tunnels, one to each HQ MX, and use a floating static route to fail over.
   • DConfigure the warm-spare pair to use Virtual IP (VIP) for the VPN termination, and ensure the spare MX has the same configuration.
   Reveal Solution Discussion Select an answer first