, Question 1
During due diligence for a network merger, you discover that the target
company uses a flat Layer 2 topology with no spanning-tree optimization,
while your organization enforces a hierarchical core-distribution-access model.
Which risk should be prioritized in the integration plan?
A. Increased latency due to additional hops
B. Broadcast domain scalability and convergence instability
C. Higher equipment procurement costs
D. Incompatible VLAN tagging standards
Correct Answer: B - Broadcast domain scalability and
convergence instability
RATIONALE
A flat Layer 2 topology lacks hierarchical segmentation, leading to
large broadcast domains and slow convergence, which are critical
scalability and stability risks. Latency, cost, and VLAN tagging are
secondary or easily remediated compared to fundamental design
flaws.
Question 2
When merging two networks with overlapping RFC 1918 address spaces,
which approach best preserves security policy enforcement and minimizes
re-addressing?
A. Renumber the smaller network entirely
B. Implement NAT at the merger boundary
C. Use VRF-lite to isolate overlapping prefixes
D. Deploy a Layer 2 stretch across sites
Correct Answer: C - Use VRF-lite to isolate overlapping prefixes
Page 2
, RATIONALE
VRF-lite allows isolation of overlapping address spaces while
maintaining separate routing and security policies, avoiding NAT
complexity and re-addressing. NAT can break end-to-end security and
application functionality, while renumbering or Layer 2 stretching
introduce greater risk and downtime.
Question 3
In a post-merger integration, the combined company must comply with GDPR
and CCPA. Which network design decision most directly addresses data
residency and cross-border transfer requirements?
A. Centralizing all data centers in one region
B. Implementing regional segmentation with local data egress controls
C. Using a global anycast DNS strategy
D. Adopting a single global VLAN scheme
Correct Answer: B - Implementing regional segmentation with
local data egress controls
RATIONALE
Regional segmentation with local egress controls ensures data remains
within required jurisdictions and allows enforcement of transfer
policies. Centralization, anycast, or global VLANs do not inherently
satisfy data residency and may violate regulations.
Question 4
Which routing protocol migration strategy is most appropriate when merging
an OSPF domain with an EIGRP domain, given a requirement for minimal
downtime and preservation of existing metrics?
A. Redistribution with administrative distance manipulation
B. Full replacement of EIGRP with OSPF
C. Running both protocols with mutual redistribution and route tagging
Page 3
, D. Using BGP as the sole routing protocol
Correct Answer: C - Running both protocols with mutual
redistribution and route tagging
RATIONALE
Mutual redistribution with route tagging prevents routing loops and
allows gradual migration while preserving metrics. Full replacement
risks downtime, and BGP alone may not preserve metrics or be
immediately feasible.
Question 5
During the merger, the security team must integrate two identity providers
(IdPs) with different SAML assertions. Which approach ensures seamless SSO
and least privilege?
A. Force all users to re-authenticate with the acquiring company's IdP
B. Federate the IdPs using a trust broker and map attributes to roles
C. Maintain separate IdPs with no integration
D. Use LDAP synchronization without attribute mapping
Correct Answer: B - Federate the IdPs using a trust broker and
map attributes to roles
RATIONALE
Federating IdPs via a trust broker enables SSO and allows attribute
mapping for least privilege. Forcing re-authentication disrupts
operations, separate IdPs create silos, and LDAP sync without
mapping may misalign roles.
Question 6
A merger requires integrating two SD-WAN solutions from different vendors.
Which factor is most critical for ensuring policy consistency across the merged
network?
Page 4
During due diligence for a network merger, you discover that the target
company uses a flat Layer 2 topology with no spanning-tree optimization,
while your organization enforces a hierarchical core-distribution-access model.
Which risk should be prioritized in the integration plan?
A. Increased latency due to additional hops
B. Broadcast domain scalability and convergence instability
C. Higher equipment procurement costs
D. Incompatible VLAN tagging standards
Correct Answer: B - Broadcast domain scalability and
convergence instability
RATIONALE
A flat Layer 2 topology lacks hierarchical segmentation, leading to
large broadcast domains and slow convergence, which are critical
scalability and stability risks. Latency, cost, and VLAN tagging are
secondary or easily remediated compared to fundamental design
flaws.
Question 2
When merging two networks with overlapping RFC 1918 address spaces,
which approach best preserves security policy enforcement and minimizes
re-addressing?
A. Renumber the smaller network entirely
B. Implement NAT at the merger boundary
C. Use VRF-lite to isolate overlapping prefixes
D. Deploy a Layer 2 stretch across sites
Correct Answer: C - Use VRF-lite to isolate overlapping prefixes
Page 2
, RATIONALE
VRF-lite allows isolation of overlapping address spaces while
maintaining separate routing and security policies, avoiding NAT
complexity and re-addressing. NAT can break end-to-end security and
application functionality, while renumbering or Layer 2 stretching
introduce greater risk and downtime.
Question 3
In a post-merger integration, the combined company must comply with GDPR
and CCPA. Which network design decision most directly addresses data
residency and cross-border transfer requirements?
A. Centralizing all data centers in one region
B. Implementing regional segmentation with local data egress controls
C. Using a global anycast DNS strategy
D. Adopting a single global VLAN scheme
Correct Answer: B - Implementing regional segmentation with
local data egress controls
RATIONALE
Regional segmentation with local egress controls ensures data remains
within required jurisdictions and allows enforcement of transfer
policies. Centralization, anycast, or global VLANs do not inherently
satisfy data residency and may violate regulations.
Question 4
Which routing protocol migration strategy is most appropriate when merging
an OSPF domain with an EIGRP domain, given a requirement for minimal
downtime and preservation of existing metrics?
A. Redistribution with administrative distance manipulation
B. Full replacement of EIGRP with OSPF
C. Running both protocols with mutual redistribution and route tagging
Page 3
, D. Using BGP as the sole routing protocol
Correct Answer: C - Running both protocols with mutual
redistribution and route tagging
RATIONALE
Mutual redistribution with route tagging prevents routing loops and
allows gradual migration while preserving metrics. Full replacement
risks downtime, and BGP alone may not preserve metrics or be
immediately feasible.
Question 5
During the merger, the security team must integrate two identity providers
(IdPs) with different SAML assertions. Which approach ensures seamless SSO
and least privilege?
A. Force all users to re-authenticate with the acquiring company's IdP
B. Federate the IdPs using a trust broker and map attributes to roles
C. Maintain separate IdPs with no integration
D. Use LDAP synchronization without attribute mapping
Correct Answer: B - Federate the IdPs using a trust broker and
map attributes to roles
RATIONALE
Federating IdPs via a trust broker enables SSO and allows attribute
mapping for least privilege. Forcing re-authentication disrupts
operations, separate IdPs create silos, and LDAP sync without
mapping may misalign roles.
Question 6
A merger requires integrating two SD-WAN solutions from different vendors.
Which factor is most critical for ensuring policy consistency across the merged
network?
Page 4
