300-420 Exam Dumps : Designing Cisco Enterprise Networks

The design must enable IPv6 multi-topology behavior at the appropriate edge routers and move metric handling toward transition support where the current IS-IS network still uses narrow metrics. Multi-topology IS-IS is important during IPv4-to-IPv6 migration because IPv4 and IPv6 reachability do not always exist on identical links at every stage of the migration. If IPv6 follows the IPv4 topology when some devices or paths are not IPv6-ready, traffic can be blackholed. Multi-topology allows independent IPv4 and IPv6 SPF calculations, which prevents IPv6 traffic from being forwarded through IPv4-only portions of the network. The metric-style transition setting is used when migrating from narrow to wide metrics, allowing interoperability while routers are upgraded and the design scales. Because the requirement says IPv6 areas will grow and the current network uses narrow metrics, the selected edge devices must support the IPv6 topology and metric transition behavior shown in the exhibit. Reference topics: IS-IS IPv6, multi-topology IS-IS, narrow metrics, wide metric transition, IPv6 migration, blackhole prevention.

The best answer is to use a single IP address for a static NAT entry that represents the server with a nonoverlapping address. When two companies use overlapping private address space, routing directly between the networks can fail because each side may already have a local route for the same prefix. The requirement is narrow: users in the acquired company need access to one server in Company A, and the design must conserve address space. A static NAT mapping for the server solves the destination overlap problem with one translated address, giving remote users a unique reachable address for that server without renumbering either company. Overload NAT is normally used to translate many inside clients behind one address for outbound access; it is not the most precise solution for publishing one overlapping server. One-to-one NAT for every user wastes addresses and adds operational overhead. Readdressing the acquired company would solve the overlap permanently, but it does not conserve effort or address space. Therefore, a single static NAT entry for the server is the most efficient design.

The selected command is correct because the port is already restricted to one manually learned MAC address, and the requirement is to let the switch dynamically learn the connected endpoint while retaining port-security control. In Cisco Catalyst port security, a static secure MAC address is manually configured, while a sticky secure MAC address is dynamically learned and then added to the running configuration. This design is useful on access ports where the administrator wants the operational convenience of dynamic learning but still wants the switch to enforce the maximum secure-address limit. Once the endpoint MAC is learned, subsequent frames from different source MAC addresses can trigger the configured violation action, such as protect, restrict, or shutdown. The command must therefore enable sticky learning on the secured interface rather than simply changing the maximum, disabling port security, or configuring a normal switching feature. This is an access-layer security function, not a routing or QoS function. Reference topics: Catalyst port security, secure MAC addresses, sticky learning, access port hardening, Layer 2 campus design.