Campus LAN Design JN0-1103 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which access control mechanism provides per-user authentication and authorization at the network edge, often using RADIUS?

   • AMAC address filtering
   • BPort security with sticky MAC
   • CVLAN access control lists (VACLs)
   • D802.1X
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company is designing a campus network with multiple buildings. They want to use a consistent IP addressing scheme that allows for easy route summarization. Which IP addressing design should they use?

   • AUse private IP addresses only, without any summarization
   • BUse the same IP subnet for all VLANs in a building
   • CUse a hierarchical IP addressing scheme where each building is assigned a contiguous block of subnets
   • DUse a different IP subnet for each VLAN, with no summarization
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A large enterprise is redesigning its campus network to support multiple departments that require strict traffic isolation. The network team wants to use EVPN-VXLAN to provide segmentation. Which benefit of EVPN-VXLAN directly addresses this requirement?

   • AIt allows multiple isolated Layer 2 segments (VXLANs) to be carried over a shared IP fabric
   • BIt provides Layer 2 connectivity across Layer 3 boundaries using VXLAN encapsulation
   • CIt automatically encrypts all traffic between departments
   • DIt eliminates the need for VLANs by using MAC addresses only
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A small company with 200 users is designing a new campus network. They have a limited budget and do not expect significant growth. The network team wants to minimize cost while still providing a scalable design. Which modular design approach is most appropriate?

   • ATwo-tier design with access switches connected directly to a collapsed core/distribution layer
   • BMesh design where every switch connects to every other switch
   • CSingle access switch with no core or distribution layer
   • DThree-tier design with separate core, distribution, and access layers
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A network architect is designing a campus network for a financial institution. The network must be highly available, with no single point of failure, and must also be cost-effective. The architect is considering using link aggregation (LAG) between access and distribution switches. Which design consideration is most important?

   • ALAG should be used only at the core layer to reduce cost
   • BLAG is not necessary if the access switch has redundant power supplies
   • CLAG should be configured with links to two different distribution switches to provide both link and switch redundancy
   • DLAG provides redundancy by combining multiple physical links into a single logical link, but it does not protect against a switch failure
   Reveal Solution Discussion Select an answer first