Advanced Enterprise Campus Networks (25%)

ENSLD · 75 questions

• A university is deploying SD-Access across three buildings with 800 wired users. Endpoints must connect inside virtual networks, external and DC traffic must exit efficiently, and endpoint location must resolve centrally. Which SD-Access fabric role assignment best meets these requirements?
• A retailer connects three large campuses in a metro area, each with dual core routers and a requirement for sub-second convergence, clear failure domains, and summarized routes between sites. Links are dark fiber with ample bandwidth. Which multicampus Layer 3 topology design best satisfies fast convergence and containment?
• A two-building enterprise campus uses Cisco distribution switches as default gateways, and hosts in the same VLAN report one uplink idles while the other congests during peak backups. The manager requires active use of both gateways with automatic failover and prefers a Cisco-proprietary first-hop protocol. Which first-hop redundancy choice should the designer select to balance load and resilience?
• A hospital is deploying SD-Access with wireless infusion pumps roaming between floors, a fusion router to the data center, and a need for a central host database. The design must keep endpoints on the fabric while handling external connectivity and endpoint location. Which SD-Access fabric role assignment satisfies those needs?
• A university core uses dual-supervisor Catalyst switches carrying voice and research traffic that cannot tolerate control-plane resets during an active supervisor failure. The design requires continuous forwarding and peer routers to retain adjacencies. Which graceful restart and NSF/SSO mechanism best delivers hitless supervisor failover?
• A university core uses two chassis switches with dual supervisors and dual power, but failover testing shows brief gateway outages when the first-hop redundancy protocol reconverges. The design team wants deterministic gateway behavior and simpler spanning-tree topology without changing end-host addressing. Which platform abstraction approach removes the need for a separate first-hop redundancy protocol?
• A healthcare system deploys SD-Access across a hospital and two clinics, requiring wired endpoints to authenticate at access switches, reach servers in the data center, and resolve endpoint locations for roaming users. Which SD-Access fabric role assignment should the designer document for edge, border, and control plane functions?
• A logistics campus uses routed access with OSPF to distribution where voice and scanners need sub-second rerouting around a failed fiber link. Hello timers alone react too slowly and create false positives when tuned aggressively. Which BFD design for fast failure detection best satisfies rapid yet stable detection?
• A financial campus core with dual supervisors needs software upgrades and supervisor failures to occur without dropping BGP and OSPF adjacencies or interrupting trading traffic. The operations team requires continuous forwarding during control-plane switchover and peer cooperation for route recovery. Which high-availability mechanism enables hitless supervisor failover for routing protocols?
• A downtown headquarters has dual distribution switches with HSRP today, but failover tuning and dual control planes cause spanning-tree complexity. The refresh offers switch virtualization so the pair can operate as one logical node with one control plane. Which platform abstraction should the designer choose to simplify high availability and remove the FHRP need?
• A manufacturer built an SD-Access fabric where roaming scanners keep their IP addresses while moving between warehouses, but large video flows must stay on efficient paths. The design must use the native SD-Access control and data planes and separate endpoint location from packet forwarding. Which LISP control plane and VXLAN data plane interaction best delivers mobility?
• A retail chain deploys SD-Access across stores and needs endpoint mobility without changing IP addresses, plus large Layer 2 extension across the campus without flooding everywhere. Which statement correctly describes the LISP control plane and VXLAN data plane roles in that fabric?
• A large campus is migrating distribution-to-access links to Layer 3 with ECMP, but OSPF timers take over a second to detect neighbor loss, causing voice drops during fiber cuts. The team needs sub-second detection without excessive hello overhead and seamless integration with routing reconvergence. Which failure detection design accelerates recovery in this routed access network?
• A large campus core has dual supervisors per chassis and cannot tolerate multi-second outages or routing reconvergence during a supervisor switch, yet maintenance windows are shrinking. The design must keep forwarding and neighbor adjacencies intact across failover. Which high-availability mechanism should the designer select for hitless supervisor failover?
• A hospital campus expands to 12 buildings with 180 VLANs where a single spanning-tree instance causes large failure domains and suboptimal roots. Uplinks need deterministic forwarding and faster recovery. Which STP scalability and root placement design using RSTP versus MST best optimizes convergence?
• A healthcare system is choosing an SD-Access underlay for a new hospital with 1,500 ports, tight timelines, and a small operations team. The underlay must provide routed reachability for the fabric overlay with minimal manual tuning. Which underlay choice best balances automation and control?
• A university campus is deploying SD-Access across five buildings with mobile users who roam between switches. The design requires a single IP subnet to span sites, host mobility without changing IP addresses, and separation of endpoint identity from location. Which SD-Access fabric mechanism provides host tracking and mobility with overlay tunneling?
• A university is building a new 6-building campus with identical fiber links and no legacy routing to preserve, and the team wants Cisco Catalyst Center to discover switches and bring up the routed foundation with minimal CLI. Which underlay choice achieves rapid automated LAN provisioning for the SD-Access fabric?
• A university is moving residence halls to SD-Access, students roam between APs, IT wants wireless clients in the same fabric virtual networks as wired users, and operations must stay centralized. Which fabric wireless design role for Cisco Catalyst Center meets these mobility requirements?
• A 600-bed hospital is extending its SD-Access campus to clinical mobile carts that roam between floors. Policy must follow each wireless client, roaming must stay seamless inside the fabric, and IT wants centralized lifecycle control for switches, routers, and wireless. Which fabric wireless design aligns with Cisco Catalyst Center's role?
• A university campus has 80 access switches in one STP domain, experiences slow convergence and high BPDU load, needs deterministic root placement at the distribution layer and wants fewer instances than per-VLAN spanning tree. Which STP scalability and root placement design with RSTP versus MST best fits the requirement?
• A large campus uses routed access with dual EIGRP uplinks from each access switch to distribution, and video conferencing drops for seconds when a fiber fails because hello timers detect loss slowly. The links are point-to-point fiber with sub-second convergence required. Which BFD design for fast failure detection in routed access best meets the convergence goal?
• A university access layer has frequent student moves, unmanaged hubs causing unidirectional link issues, and edge ports taking 30 seconds to forward after reboots. Uplinks need sub-second failover without Layer 2 loops. Which fast-convergence design stabilizes edge access while preserving loop protection?
• A hospital network team is designing SD-Access underlay for a new campus with limited routing expertise, a greenfield IP transport need, and a desire for fast automated bring-up managed from the controller. The core must still allow custom MTU and protocols if needed later. Which underlay choice balances automation with future flexibility?
• A manufacturing floor has frequent endpoint moves, redundant uplinks from access to distribution, and a history of outages from accidental loops when contractors connect unmanaged switches. Which fast convergence design using PortFast, uplink equivalents and loop guard best balances speed and safety?
• A financial firm on SD-Access must separate retail banking, trading, and guest access, enforce distinct policies for contractors within banking, and keep segmentation scalable without adding VLANs per group. Which macrosegmentation approach with scalable groups meets these isolation needs?
• A university campus has 180 VLANs across five distribution blocks, slow convergence after uplink flaps, and heavy BPDU processing with PVST running a spanning tree per VLAN. CPU is high and root placement is inconsistent. Which STP scalability and root placement design using RSTP versus MST best stabilizes the campus?
• A resort expands SD-Access to outdoor pools and villas, needing wireless clients to roam without reauthentication, enforce the same segmentation as wired guests, and let staff provision SSIDs centrally. Which fabric wireless and Catalyst Center design should the designer propose for policy and automation?
• A hospital campus suffers STP reconvergence outages where a single distribution link failure isolates VLANs, and dual-homed servers flap during upgrades. Cabling cannot be fully recabled to routed links everywhere. Which loop-free campus design minimizes STP scope while keeping dual-homing resilience?
• A university campus must isolate student, faculty, research, and IoT traffic into separate policy domains while allowing granular access between labs and printers inside each domain. Which scalable group and virtual network design achieves macro- and microsegmentation together?
• An automotive supplier has a 4000-endpoint headquarters campus plus two factories that must keep switching locally if the WAN fails, keep OT and IT policies independent, and share only select VNs between locations while preserving SGT-based policy end to end. Which SD-Access fabric site design addresses multisite scale and transit needs?
• A university is refreshing 40 access closets with dual uplinks to distribution, 800 user ports for PCs and IP phones, and a history of outages when a fiber uplink flap caused loops. Edge ports must come up fast without waiting for STP, while uplinks must block loops if BPDUs stop arriving. Which Layer 2 convergence safeguard should the designer specify to satisfy fast edge bring-up and loop protection?
• A university is rebuilding a three-tier campus with 40 closets, VLANs confined to each closet, dual-homed access switches, and a mandate for no STP-blocked uplinks with subsecond failover using ECMP. Which loop-free campus topology best meets these routed-access goals?
• A manufacturer operates a headquarters plus three distant plants connected over private WAN. Each plant has local IT, unique security policy, 2,500 endpoints, and must survive WAN outages with local forwarding while sharing select services. Which SD-Access fabric site design handles autonomous sites with shared transit?
• A logistics company builds one SD-Access fabric in its headquarters with only two border routers, needing to hand off corporate VNs to its data center, provide Internet and MPLS exits, and advertise a default route into the fabric. Which border node design fits this consolidated edge requirement?
• A school refreshes 48-port access switches for classrooms with VoIP phones, 30W pan-tilt cameras, and PCs needing after-hours Wake-on-LAN from a management VLAN. Power circuits are limited and night power-save is desired. Which PoE budget and Wake-on-LAN switch design fits the constraints?
• A hospital SD-Access design must keep clinical devices, staff IT, and building automation strictly separated with distinct address pools and policies, while still allowing granular user roles within each area. Leadership wants minimal policy sprawl and clear macro boundaries. Which scalable group and virtual network approach should the designer propose for this segmentation goal?
• A hospital campus suffers STP reconvergence delays and blocked redundant links between access and core, requiring active-active uplinks, sub-second failover for imaging traffic, and no spanning-tree loops across buildings. Which loop-free campus topology should the designer specify to remove STP blocking while keeping redundancy?
• A university is refreshing a 48-port access floor for 28 PoE+ IP phones, 10 PoE+ cameras and 24 overnight PCs needing Wake-on-LAN after power outages. The design must power all endpoints concurrently, keep sleeping PCs reachable for magic packets, and restore power quickly after a switch reload. Which PoE budget and Wake-on-LAN switch design meets all requirements?
• A regional headquarters has 1,500 endpoints, an on-premises server farm with internal subnets, and a single Internet edge needing a default route. Only two high-end switches are budgeted for border duties and both must survive a single failure. Which border node design delivers internal and external connectivity on resilient devices?
• A financial trading floor adds unmanaged conference-room switches and public-facing kiosks, with risks of rogue STP roots, accidental loops, MAC flooding, and VLAN hopping. Strict uptime and auditability are required. Which Layer 2 security mix best hardens the access edge?
• A large campus SD-Access deployment will support 8000 endpoints, 40 virtual networks, roaming wireless users, and two data-center exits. The design must keep host tracking responsive and survive a node failure without fabric-wide outage. Which control plane node placement and scale approach should the designer recommend?
• A university runs a 4000-user main campus in Austin, a 500-user research park 40 km away with its own policy domain, and a small European office over Internet VPN with high latency. Each location must survive control-plane isolation while keeping consistent access policy. Which fabric site and transit design best meets scalability and survivability needs?
• A financial campus has open lobby ports, a strict core-as-root STP hierarchy, contractors plugging unmanaged switches, and a need to contain lateral traffic between departments. Which Layer 2 security control set best enforces this switched-access protection goal?
• A high school plans 48-port access switches for classrooms with 30 PoE phones and cameras per closet, future density growth, and nightly Wake-on-LAN to power lab PCs for patching. Budget limits power supplies and heat load matters. Which PoE and Wake-on-LAN design should the designer specify for reliable power and night operations?
• A regional hospital is deploying SD-Access across two buildings with an on-site data center hosting known EHR subnets and a separate internet and merger partner link with unknown routes. The design must keep internal subnet handoff separate from default-route internet handoff for policy control. Which border node design supports this internal and external separation requirement?
• A university with 6,000 endpoints plans a two-site SD-Access fabric with redundant border and edge nodes, requiring fast endpoint roaming and resilient host tracking database lookups if a site link fails. Which control plane node placement supports resilient host tracking for this SD-Access fabric design?
• A university has two large campus blocks linked to a routed core over dual 10G fibers. The design must keep sub-second failure detection, use both links for traffic at all times, and avoid spanning-tree or FHRP dependency between blocks. Which convergence and load-sharing design best meets these inter-block requirements?
• Two university campus blocks connect over diverse 10G routed links with similar delay, carrying voice and research traffic that must survive a single fiber cut in under a second and use both links. Which convergence and load-sharing design between campus blocks best meets both resiliency and utilization?
• A university opens library study halls where students plug personal switches into wall jacks. The network team reports rogue STP elections, MAC flooding alarms, and a need to block lateral worm traffic between infected laptops in the same VLAN without changing the IP gateway. Which Layer 2 security design best addresses rogue STP and intra-VLAN threats?
• A hospital is adding SD-Access in a building with an existing autonomous wireless controller, strict medical-device roaming requirements, and a desire to keep current APs and controller config while phasing fabric migration. Which wireless integration trade-off guides the choice between over-the-top and fabric wireless for this phased rollout?
• A healthcare campus plans SD-Access for 400 edge switches and 8000 endpoints across a main hospital and two clinics, with redundant data centers and strict uptime for clinical devices. Latency is low, but control signaling must survive a data center loss without re-architecting, and control plane load must be isolated from border forwarding. Which control plane node placement and scale approach meets these resilience needs?
• A university research park uses SD-Access to send lab telemetry multicast to receivers on only four edge nodes a few times per day, with no PIM in the underlay and a desire to avoid enabling multicast routing there. Which multicast-in-fabric design suits this sparse, low-scale requirement?
• A three-campus enterprise sees OSPF instability because every access VLAN is advertised across the core, exposing failures and inflating tables. The design must hide access specifics, advertise only aggregates between campuses, and block rogue routes at borders. Which summarization and filtering design best meets this boundary requirement?
• A manufacturing campus runs SD-Access fabric for wired policy and must add Wi-Fi in warehouses with roaming handled by the existing controllers, fabric policy for corporate SSIDs, and minimal new WLC integration work. Which wireless integration choice balances over-the-top versus fabric wireless trade-offs for this campus?
• A retailer connects three regional campuses to a core over Layer 3, sees full /24 churn from stores leaking everywhere, and needs smaller tables plus loop-free regional isolation. Which route summarization and filtering design at campus boundaries best stabilizes the core?
• A retail chain links two campus blocks via dual Layer 3 core switches with equal fiber paths. Requirements demand subsecond failover if a core link drops, active use of both uplinks for throughput, and no STP dependency between blocks. Which multicampus Layer 3 convergence and load-sharing design best meets resilience goals?
• A hospital group must keep clinical, guest, and research traffic isolated across two campuses with common switches and a shared WAN, while allowing controlled guest Internet breakout only. Which VRF segmentation design best meets this multi-campus isolation requirement?
• A stadium with 15,000 fans needs efficient IPTV delivery in an SD-Access fabric where the zones are separate fabric sites, some of which lack underlay multicast support, and RP reachability varies by zone. Which multicast design chooses head-end versus native forwarding for this fabric?
• A convention center has high-density auditoriums needing seamless roaming and location analytics, plus historic halls where controllers cannot be rewired and guest turnover is extreme. Budget favors reuse where possible but performance cannot suffer in auditoriums. Which wireless choice weighs over-the-top versus fabric wireless trade-offs?
• A university distribution block has two Layer 3 switches serving 400 wired hosts in one VLAN, both with equal-cost uplinks to the core. The design requires automatic gateway failover, continued use of both uplinks during normal operation, and no host-side changes. Which first-hop redundancy choice meets the load-sharing requirement?
• A university has three large campuses linked over Layer 3 cores with OSPF, and a link flap in one building currently floods LSAs everywhere and destabilizes all campuses. Each campus must hide internal topology and advertise only aggregates while blocking rogue subnets at borders. Which route summarization and filtering design best stabilizes the multicampus boundaries?
• A healthcare group connects three campuses over MPLS with shared IT services in the data center. Guest traffic must stay isolated, clinical devices need separate routing tables, and shared services require controlled leaking between tables. Which VRF design achieves campus segmentation with shared services access?
• A university distribution block has two Catalyst gateways serving 800 hosts in one VLAN, requiring subsecond failover and active load sharing across both uplinks. Multivendor firewalls in the VLAN act only as hosts using the virtual gateway address, so only the Catalyst pair participates in first-hop redundancy. Which first-hop redundancy choice best balances load sharing and failover for this VLAN?
• A university SD-Access fabric delivers lecture video to many buildings, with large numbers of concurrent receivers spread across most fabric edge nodes. The routed underlay supports multicast with PIM-SSM, and the design must offload packet replication from the fabric edge and border nodes. Which SD-Access multicast design should the designer choose?
• Two campuses merge after an acquisition, with OSPF on one side and EIGRP on the other, plus two mutual redistribution points for resilience that already created a routing loop for shared data center prefixes. Metrics are incompatible and filtering is absent. Which redistribution design prevents loops while preserving backup paths?
• A two-tier campus core uses two Catalyst chassis with dual 40G interconnects, requiring sub-second gateway and link failover for 1,000 users without tuning FHRP timers. Complexity and dual control planes must be reduced. Which platform abstraction choice removes the need for an FHRP in this design?
• Two hospital campuses connect via a shared WAN where Campus-A runs OSPF and Campus-B runs EIGRP, with mutual redistribution planned on two border routers for resilience. Designers fear loops and suboptimal paths when prefixes are learned from both sides. Which redistribution design best prevents loops while preserving metrics and filtering?
• A manufacturing enterprise has corporate, guest and building-automation traffic across two campuses that must stay segmented end to end with isolated routing tables, controlled route leaking only at a shared firewall, and scalable expansion to a third campus. Which VRF design for segmentation across campuses best meets isolation and growth needs?
• A retail chain will interconnect four large multicampus sites across a metro area requiring subsecond failover, bounded latency for voice, and clean summarization boundaries as new stores are added. Existing daisy-chained links cause cascading outages and unpredictable hop counts. Which multicampus Layer 3 interconnect topology best meets resilience and scaling needs?
• A campus core with dual supervisors must survive a supervisor switchover without dropping OSPF and BGP neighbors or triggering reconvergence during business hours. Stateful failover and protocol continuity are mandatory. Which graceful restart with NSF and SSO design meets the hitless failover requirement?
• A hospital merged networks where Campus A runs OSPF and Building B runs EIGRP, with two distribution switches doing mutual redistribution that recently caused route feedback, suboptimal paths and flapping. Metrics must translate sensibly and loops must be prevented while keeping both protocols. Which redistribution design with loops, metrics and filtering best stabilizes the boundary?
• A manufacturing campus uses all-Cisco Catalyst distribution pairs for office VLANs where one uplink idles in standby, and wired phones need deterministic gateway failover without host changes or multivendor support. Hosts within every VLAN should be spread across both switches behind one virtual IP per VLAN, and tuning for subsecond timers is approved. Which first-hop redundancy choice balances load sharing and simplicity?
• A manufacturing enterprise links four campuses in a metro area with latency-sensitive automation, requiring two-hour repair tolerance, balanced hop counts, and room to add two more sites without redesign. A single hub creates congestion and fate sharing. Which multi-campus interconnect topology optimizes resilience and scale?
• A two-tier campus has dual distribution switches per closet with HSRP timers tuned, but failover still causes voice gaps and STP complexity. Budget allows chassis consolidation. Which platform abstraction choice using StackWise or VSS best simplifies high availability and gateway handling?