Pre-Summer Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: best70

400-007 Cisco Certified Design Expert (CCDE v3.1) Questions and Answers

Questions 4

Company XYZ plans to run OSPF on a DMVPN network. They want to use spoke-to-spoke tunnels in the design. What is a drawback or concern in this type of design?

Options:

A.

Additional host routes will be inserted into the routing tables

B.

Manual configuration of the spokes with the appropriate priority will be needed

C.

There will be split-horizon issue at the hub

D.

Manual configuration of the spoke IP address on the hub will be needed

Buy Now
Questions 5

What are three examples of solution components of the network infrastructure that help enforce security policy compliance on all devices as they seek to access the network and computing resources, thereby limiting damage from emerging security threats such as viruses, worms, and spyware? (Choose three)

Options:

A.

posture agent

B.

network access devices

C.

endpoint security application

D.

management and reporting tools

E.

web filtering devices

F.

audit and decision point servers

Buy Now
Questions 6

While computer networks and sophisticated applications have allowed individuals to be more productive the need to prepare for security threats has increased dramatically A six-step methodology on security incident handling has been adopted by many organizations including service providers enterprises, and government organizations to ensure that organizations are aware of significant security incidents and act quickly to stop the attacker, minimize damage caused, and prevent follow on attacks or similar incidents in the future Drag and drop the actions on the left to the targets on the right in the correct order.

400-007 Question 6

Options:

Buy Now
Questions 7

You were tasked to enhance the security of a network with these characteristics:

A pool of servers is accessed by numerous data centers and remote sites

The servers are accessed via a cluster of firewalls

The firewalls are configured properly and are not dropping traffic

The firewalls occasionally cause asymmetric routing of traffic within the server data center.

Which technology should you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

Options:

A.

Poison certain subnets by adding static routes to Null0 on the core switches connected to the pool of servers.

B.

Deploy uRPF strict mode.

C.

Limit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.

D.

Deploy uRPF loose mode.

Buy Now
Questions 8

The SD-WAN architecture is composed of separate orchestration, management, control, and data planes. Which activity happens at the orchestration plane?

Options:

A.

Automatic onboarding of the SD-WAN routers into the SD-WAN overlay

B.

Decision-making process on where traffic flows

C.

Packet forwarding

D.

Central configuration and monitoring

Buy Now
Questions 9

As more links are added to the network, information and attributes related to the link is added to the control plane, meaning every link that gets added will slow down the convergence of the control plane by some measurable amount of time As a result when additional redundancy is built or added the MTTR will increase too Which risk increases along with the increased MTTR?

Options:

A.

management visibility

B.

slower data plane convergence

C.

overlapping outages

D.

topology change detection

Buy Now
Questions 10

A large defense organization is planning their cloud migration journey, but they have high data sovereignty concerns, major regulation or compliance requirements, and very restrictive SLAs. Which cloud architecture model can be adopted?

Options:

A.

public cloud

B.

hybrid cloud

C.

private cloud

D.

PaaS

E.

laaS

Buy Now
Questions 11

The Layer 3 control plane is the intelligence over the network that steers traffic toward its intended destination Which two techniques can be used in service provider-style networks to offer a more dynamic, flexible, controlled, and secure control plane design? (Choose two.)

Options:

A.

remote black-holing trigger

B.

prefix lists

C.

firewalls

D.

access control lists

E.

QoS policy propagation with BGP

Buy Now
Questions 12

During initial preparations to deploy 802 1x for wired access to their network, a company must ensure that the solution complies with existing internal security policies These policies mandate that every Auth C/Auth Z request must be protected by a tunnel which authenticates both server and clients using their PKI AI the same time, the user authentication phase must be independent of the tunnel Which scheme meets the requirements?

Options:

A.

EAP-MDS

B.

EAP-Fast

C.

EAP-MSCHAPv2

D.

PEAP

Buy Now
Questions 13

multinational corporation with offices in various regions worldwide are looking for a network architecture that provides a balance between low- latency and cost-effectiveness for connecting their offices to the cloud. Which cloud connectivity option is the best fit for this corporation?

Options:

A.

DMVPN

B.

SDWAN SDCI

C.

MPLS direct connect

D.

cloud on-ramp

Buy Now
Questions 14

Which issue poses a challenge for security architects who want end-to-end visibility of their networks?

Options:

A.

Too many overlapping controls

B.

Too many disparate solutions and technology silos

C.

An overabundance of manual processes

D.

A network security skills shortage

Buy Now
Questions 15

400-007 Question 15

Refer to the exhibit Which two design options reduce the size of OSPF database in the shown topology? (Choose two.)

Options:

A.

Loop Free Alternate

B.

type 3 LSA filtering

C.

prefix suppression

D.

Layer 2 link aggregation between core switches

E.

incremental SPF

Buy Now
Questions 16

Which statement about OSPF hub-and-spoke topology is true?

Options:

A.

The DR election is a challenge unless a point-to-point network type is used

B.

The DR and BDR election occurs regardless of the underlying OSPF network type

C.

Traffic does not need to traverse the hub to reach the spokes.

D.

The spoke routers can belong to different areas regardless of the underlying OSPF network type

Buy Now
Questions 17

Refer to the exhibit.

400-007 Question 17

Company XYZ’s BGP topology is as shown in the diagram. The interface on the LA router connected toward the 10.1.5.0/24 network is faulty and is going up and down, which affects the entire routing domain. Which routing technique can be used in the routing policy design so that the rest of the network is not affected by the flapping issue?

Options:

A.

Use route dampening on LA router for the 10.1.5.0/24 network so that it does not get propagated when it flaps up and down

B.

Use route filtering on Chicago router to block the 10.1.5.0/24 network from coming in from the LA router

C.

Use route filtering on LA router to block the 10.1.5.0/24 network from getting propagated toward Chicago and New York

D.

Use route aggregation on LA router to summarize the 10.1.4.0/24, 10.1.5.0/24, 10.1.6.0/24, and 10.1.7.0/24 networks toward Chicago

Buy Now
Questions 18

Over the years, many solutions have been developed to limit control plane state which reduces the scope or the speed of control plane information propagation. Which solution removes more specific information about a particular destination as topological distance is covered in the network?

Options:

A.

Aggregation

B.

Summarization

C.

Back-off timers

D.

Layering

Buy Now
Questions 19

What are two advantages of the Agile project management methodology? (Choose two)

Options:

A.

brief but detailed feedback loops

B.

extensive documentation

C.

well-detailed and reliable budget estimates

D.

creation of shippable enhancements

E.

tight and rigid model

Buy Now
Questions 20

Refer to the exhibit.

400-007 Question 20

For Company XYZ, Bangkok is using ECMP to reach the 172.20.2.0/24 network. The company wants a design that would allow them to forward traffic from 172.16.2.0/24 toward 172.20.2.0/24 via the Singapore router as the preferred route. The rest of the traffic should continue to use ECMP. Which technology fulfills this design requirement?

Options:

A.

policy-based routing

B.

route summarization

C.

unequal-cost load balancing using variance

D.

LFA

Buy Now
Questions 21

Which regulatory compliance element ensures adherence to regulations and improves speed to market, which gives businesses a competitive advantage?

Options:

A.

compliance change management

B.

quality management system

C.

regulatory enhancement process

D.

robust document control

Buy Now
Questions 22

Which two features describe controller-based networking solutions compared to traditional networking solutions? (Choose two.)

Options:

A.

Inflate licensing costs

B.

Reduce network configuration complexity

C.

Provide centralization of primary IT functions

D.

Allow for fewer network failures

E.

Increase network bandwidth usage

Buy Now
Questions 23

risk is a major determining factor in whether a company chooses to go with a public cloud, a private, or a hybrid of both. what are two factors that impact the decision on which cloud service placement model to use? (choose two)

Options:

A.

cross zone redundancy

B.

regulation

C.

organization skills

D.

legacy architectures

E.

data ownership

Buy Now
Questions 24

Drag and drop the multicast protocols from the left onto the current design situation on the right.

400-007 Question 24

Options:

Buy Now
Questions 25

When planning their cloud migration journey, what is crucial for virtually all organizations to perform?

Options:

A.

SASE framework deployment

B.

Optimizing the WAN environment

C.

Assessment of current infrastructure

D.

RPO and RTO calculations duration planning

Buy Now
Questions 26

An IT service provider is upgrading network infrastructure to comply with PCI security standards. The network team finds that 802.1X and VPN authentication based on locally-significant certificates are not available on some legacy phones. Which workaround solution meets the requirement?

Options:

A.

Replace legacy phones with new phones because the legacy phones will lose trust if the certificate is renewed.

B.

Enable phone VPN authentication based on end-user username and password.

C.

Temporarily allow fallback to TLS 1.0 when using certificates and then upgrade the software on legacy phones.

D.

Use authentication-based clear text password with no EAP-MD5 on the legacy phones.

Buy Now
Questions 27

Which aspect of BGP-LS makes it scalable in large network when multiarea topology information must be gathered?

Options:

A.

transmit flow control

B.

TCP-based flow control

C.

open-loop flow control

D.

hardware flow control

Buy Now
Questions 28

As network designer, which option is your main concern with regards to virtualizing multiple network zones into a single hardware device?

Options:

A.

Fate sharing

B.

CPU resource allocation

C.

Congestion control

D.

Security

E.

Bandwidth allocation

Buy Now
Questions 29

In a distributed cloud-native environment, calls to services and cloud resources can fail caused by unanticipated events that will require longer periods of time to resolve. These faults can range in severity from a partial loss of connectivity to the complete failure of a service. In these situations, it ' s pointless for an application to continually retry an operation that is unlikely to succeed. Which pattern can prevent an application from repeatedly trying to execute an operation that ' s likely to fail?

Options:

A.

circuit breaker

B.

bulkhead

C.

fallback

D.

timeout

Buy Now
Questions 30

Which three tools are used for ongoing monitoring and maintenance of a voice and video environment? (Choose three.)

Options:

A.

Flow-based analysis to measure bandwidth mix of applications and their flows

B.

Call management analysis to identify network convergence-related failures

C.

Call management analysis to identify CAC failures and call quality issues

D.

Active monitoring via synthetic probes to measure loss, latency, and jitter

E.

Passive monitoring via synthetic probes to measure loss, latency, and jitter

F.

Flow-based analysis with PTP time-stamping to measure loss, latency, and jitter

Buy Now
Questions 31

: 476

While designing a robust network architecture for a large e-commerce dient that has recently decided to make a global expansion of their cloud-based applications and services a network architect is evaluating cloud connectivity options The top priorities are low-latency and high- throughput connectivity between their on-premises data centers and the cloud providers Which cloud connectivity solution fits in this specific use case?

Options:

A.

cloud On-Ramp

B.

WAN integration

C.

MPLS direct connect

D.

direct connect

Buy Now
Questions 32

Which methodology is the leading lifecycle approach to network design and implementation?

Options:

A.

PPDIOO

B.

Waterfall model

C.

Spiral model

D.

V model

Buy Now
Questions 33

A large enterprise cloud design team is evaluating cloud consumption models. What is an example of a typical PaaS limitation or concern?

Options:

A.

Vendor lock-in

B.

Runtime issues

C.

Lack of control

D.

Multi-tenant security

Buy Now
Questions 34

A legacy enterprise is using a Service Provider MPLS network to connect its head office and branches. Recently, they added a new branch to their network. Due to physical security concerns, they want to extend their existing IP CCTV network of the head office to the new branch, without any routing changes in the network. They are also under some time constraints. What is the best approach to extend the existing IP CCTV network to the new branch, without incurring any IP address changes?

Options:

A.

GRE

B.

EoMPLS

C.

VXLAN

D.

L2TPv3

Buy Now
Questions 35

Which two benefits can software defined networks provide to businesses? (Choose two.)

Options:

A.

Provides additional redundancy

B.

Decentralized management

C.

Reduced latency

D.

Enables innovation

E.

Reduction of OpEx/CapEx

F.

Meets high traffic demands

Buy Now
Questions 36

Company XYZ wants to prevent switch loops caused by unidirectional point-to-point link conditions on Rapid PVST+ and MST. Which technology can be used in the design to meet this requirement?

Options:

A.

STP BPDU Guard

B.

STP Bridge Assurance

C.

MSTP

D.

TRILL

Buy Now
Questions 37

Refer to the exhibit.

400-007 Question 37

Refer to the exhibit. Two data center sites (X and Y) connect to the Internet and each other using a backdoor link. Both advertise the same IP prefix (100.75.10.0/23) to the Internet. Firewalls are behind R1 and R2.

Problem: When users attempt to reach 100.75.10.0/23, the return traffic is routed to Site-Y, regardless of where the session originated. This results in asymmetric traffic and potentially broken sessions due to firewall behavior.

Which design resolves the issue?

Options:

A.

Use BGP MED to influence Site-X return traffic. Change the IP address scheme of both sites.

B.

Change the Site-Y firewall configuration to replicate the Site-X configuration. Advertise the low MED attribute on Site-X to the Internet.

C.

Add a static route toward the Internet on Site-X. Change the DNS policy on Site-Y to block traffic.

D.

Establish control plane peering between edge routers. Have Site-X advertise an IP pool with a longer prefix.

Buy Now
Questions 38

You have been tasked with designing a data center interconnect to provide business continuity. You want to encrypt the traffic over the DCI using IEEE 802.1AE MACsec to prevent the deployment of any firewall or IPS. Which two interconnect technologies support MACsec? (Choose two.)

Options:

A.

EoMPLS

B.

MPLS Layer 3 VPN

C.

DMVPN

D.

GET VPN

E.

KVPLS

Buy Now
Questions 39

Which optimal use of interface dampening on a fast convergence network design is true?

Options:

A.

When occasional flaps of long duration occur

B.

When numerous adjacent flaps of very short duration occur

C.

When the router hardware is slower than the carrier delay down detection

D.

When the switch hardware is faster than the debounce timer down detection

Buy Now
Questions 40

Which three items do you recommend for control plane hardening of an infrastructure device? (Choose three.)

Options:

A.

Routing protocol authentication

B.

SNMPv3

C.

Control Plane Policing

D.

Redundant AAA servers

E.

Warning banners

F.

To enable unused services

Buy Now
Questions 41

An organization is looking to perform a major overhaul on their data center storage infrastructure with a focus on high availability and fault tolerance Which approach will accomplish this?

Options:

A.

Implementing a single storage array with RAID 0 configuration for maximum storage capacity.

B.

Using a clustered storage setup with active-active controllers for load balancing.

C.

Utilizing a distributed storage system with multiple geographically dispersed nodes

D.

Deploying a storage virtualization solution to aggregate multiple storage devices

Buy Now
Questions 42

: 488

The modularity built into the architecture allows flexibility in network design and facilitates implementation and troubleshooting Which solution is difficult to implement manage and troubleshoot especially for large networks?

Options:

A.

functional boundaries

B.

logical core layers

C.

distribution network

D.

hierarchical model

Buy Now
Questions 43

The network team in XYZ Corp wants to modernize their infrastructure and is evaluating an implementation and migration plan to allow integration MPLS-based, Layer 2 Ethernet services managed by a service provider to connect branches and remote offices. To decrease OpEx and improve

response times when network components fail, XYZ Corp decided to acquire and deploy new routers. The network currently is operated over E1 leased lines (2 Mbps) with a managed CE service provided by the telco.

Drag and drop the implementation steps from the left onto the corresponding targets on the right in the correct order.

400-007 Question 43

Options:

Buy Now
Questions 44

The Company XYZ network is experiencing attacks against their router. Which type of Control Plane Protection must be used on the router to protect all control plane IP traffic that is destined directly for one of the router interfaces?

Options:

A.

Control Plane Protection host subinterface

B.

Control Plane Protection main interface

C.

Control Plane Protection transit subinterface

D.

Control Plane Protection CEF-exception subinterface

Buy Now
Questions 45

Your company wants to deploy a new data center infrastructure. Based on the requirements you have chosen VXLAN as encapsulation technology. The customer is concerned about misconfiguration of Layer 2 devices and DC-wide outages caused by Layer 2 loops. What do you answer?

Options:

A.

VXLAN offers native loop avoidance mechanism

B.

Storm Control should be enabled on all ports

C.

VPC+ could prevent L2 loop on access ports

D.

BPDU Guard should be enabled on all VTEP access ports

Buy Now
Questions 46

A business wants to refresh its legacy Frame Relay WAN and consolidate product specialists via video in 200 branches. Which technology should be used?

Options:

A.

DMVPN phase 1 network over the Internet

B.

Layer 3 MPLS VPN hub and spoke

C.

Layer 2 VPLS

D.

Layer 3 MPLS VPN full mesh

Buy Now
Questions 47

: 475

Company XYZ is a large US-based online retailer that is preparing for a major sale scheduled for the holiday season. Large volumes of dynamic workloads are expected, which are time sensitive and seasonal. In anticipation of the surge in data, they are re-architecting their workload management. Which two technical considerations for service placement of workloads should be considered? (Choose two.)

Options:

A.

service level agreement

B.

performance

C.

time to market

D.

workload elasticity

E.

business asset control

Buy Now
Questions 48

: 494 DRAG DROP

The customer ' s network manager asked for some key points to use m a presentation on overlay/underlay features and responsibilities. Drag and drop the features or responsibilities from the left onto the corresponding groups on the right in no particular order.

400-007 Question 48

Options:

Buy Now
Questions 49

What are two top cloud-native security challenges faced by today ' s cloud-oriented organizations? (Choose two.)

Options:

A.

Establishing user roles

B.

Polymorphism

C.

Lack of visibility and tracking

D.

Increased attack surface

E.

User credential validation

Buy Now
Questions 50

: 501

An organization who recently adapted SDWAN has been using CPU intensive policy routing on their new WAN edge device in the HQ to forward traffic to one of its branches which hosts the enterprise firewall What can replace the CPU intensive policy routing?

Options:

A.

induced network segregation

B.

hair-pinning

C.

CSP

D.

network service insertion

Buy Now
Questions 51

What is an advantage of using Agile over Waterfall methodology in the network design lifecycle?

Options:

A.

dosed loop operation

B.

lower total cost

C.

ideal for large projects

D.

reduced risk in the design process

Buy Now
Questions 52

: 485

Traditionally, infrastructure is not managed using code but instead it is managed and provisioned manually which can cause potential issues On the other side, infrastructure as code brings several advantages What is a benefit of infrastructure as code?

Options:

A.

declarative ptpeimes

B.

repeatable deployments

C.

configuration drift

D.

agent monitoring

Buy Now
Questions 53

What are two primary design constraints when a robust infrastructure solution is created? (Choose two.)

Options:

A.

Monitoring capabilities

B.

Project time frame

C.

Staff experience

D.

Component availability

E.

Total cost

Buy Now
Questions 54

Refer to the exhibit.

400-007 Question 54

Which impact of using three or more ABRs between the backbone area and area 1 is true?

Options:

A.

In a large-scale network LSA replication by all ABRs can cause serious scalability issues

B.

Multiple ABRs reduce the CPU processing on each ABR due to splitting prefix advertisement

C.

In a large-scale network multiple ABRs can create microloops

D.

Prefixes from the non-backbone area are advertised by one ABR to the backbone

Buy Now
Questions 55

Company XYZ has two routing domains (EIGRP and OSPF). They want full reachability and need OSPF to see link costs added to external routes. How must redistribution be designed?

Options:

A.

Redistribute using metric type 2 into OSPF.

B.

Redistribute using metric type 1 into OSPF.

C.

Redistribute using metric type 1 into EIGRP.

D.

Redistribute using metric type 2 into EIGRP.

Buy Now
Questions 56

What are two advantages of controller-based networks versus traditional networks? (Choose two.)

Options:

A.

The ability to have forwarding tables at each device

B.

More flexible configuration per device

C.

More consistent device configuration

D.

Programmatic APIs that are available per device

E.

The ability to configure the features for the network rather than per device

Buy Now
Questions 57

A service provider recently migrated to an SD-WAN solution for delivering WAN connections to its customers. One of the main challenges with the SD-WAN deployment is that branch site volume increases every year, which causes management complexity. Which action resolves the issue?

Options:

A.

Implement a scalable network management system to manage all sites.

B.

Adopt a well-structured SD-WAN service management lifecycle model.

C.

Build a service orchestration platform on top of the network controller.

D.

Set up a dedicated team to monitor and provision new customers.

Buy Now
Questions 58

You are using iSCSI to transfer files between a 10 Gigabit Ethernet storage system and a 1 Gigabit Ethernet server. The performance is only approximately 700 Mbps and output drops are occurring on the server switch port. Which action will improve performance in a cost-effective manner?

Options:

A.

Change the protocol to CIFS.

B.

Increase the queue to at least 1 GB

C.

Use a WRED random drop policy

D.

Enable the TCP Nagle algorithm on the receiver

Buy Now
Questions 59

You are designing a network for a branch office. In order to improve convergence time, you are required to use the BFD feature. Which four routing protocols can you use to facilitate this? (Choose four.)

Options:

A.

IS-IS

B.

static

C.

RIP

D.

EIGRP

E.

BGP

Buy Now
Questions 60

Which design benefit of bridge assurance is true?

Options:

A.

It supposes a spanning-tree topology change upon connecting and disconnecting a station on a port

B.

It prevents switched traffic from traversing suboptimal paths on the network.

C.

It allows small, unmanaged switches to be plugged into ports of access switches without the risk of switch loops.

D.

It prevents switch loops caused by unidirectional point-to-point link condition on Rapid PVST+ and MST

Buy Now
Questions 61

An enterprise SDWAN customer based in the US has several branches in Europe Currently branches use the HQ in the US to access both internal and external services over an MPLS arcuit The design team has been tasked to suggest a solution allowing branches to access their cloud-based office productivity tools and services directly Since all their applications and services are hosted in the cloud, the design team has also been asked to come up with a solution, so branches can connect to the cloud directly from the branch as well Which two cost-effective and optimized solutions can be suggested? (Choose two)

cloud onRamp (SaaS)

Options:

A.

DIA

B.

software-defined cloud interconnects

C.

cloud SSO broker

D.

cloud hubs

Buy Now
Questions 62

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

Options:

A.

First-hop router registration to the RP

B.

Multicast client registration to the RP

C.

Multicast source registration to the RP

D.

Transport of all IPv6 multicast traffic

Buy Now
Questions 63

What is a disadvantage of the traditional three-tier architecture model when east-west traffic between different pods must go through the distribution and core layers?

Options:

A.

Low bandwidth

B.

Security

C.

Scalability

D.

High latency

Buy Now
Questions 64

Which MPLS TE design consideration is true?

Options:

A.

MPLS TE replaces LDP and the dependency of the IGP to identify the best path

B.

MPLS TE provides link and node protection

C.

MPLS TE optimizes the routing of IP traffic, given the constraints imposed by backbone capacity and application requirements

D.

MPLS TE requires Layer 3 VPN full-mesh topology deployment

Buy Now
Questions 65

Modem IT departments are more service oriented than they used to be To meet the needs oí their customers. IT departments are spending more time analyzing and documenting their processes for delivering services A focus on processes helps to ensure effective service delivery and to avoid wasted expenditures on technology that doesn ' t provide a needed service What defines frameworks and processes that can help an organization match the delivery of IT services with the business needs of the organization?

Options:

A.

IT Service Management

B.

remedy management

C.

IT helpdesk

D.

service desk monitoring

Buy Now
Questions 66

400-007 Question 66

Reter to the exhibit This network is running OSPF and EIGRP as the routing protocols Mutual redistribution of the routing protocols has been contoured on the appropriate ASBRs The OSPF network must be designed so that flapping routes m EIGRP domains do not affect the SPF runs within OSPF The design solution must not affect the way EIGRP routes are propagated into the EIGRP domains Which technique accomplishes the requirement?

Options:

A.

route summarization on the ASBR interfaces facing the OSPF domain

B.

route summarization on the appropriate ASBRs

C.

route summarization on the appropriate ABRs

D.

route summarization on EIGRP routers connecting toward the ASBR

Buy Now
Questions 67

What is the most important operational driver when building a resilient and secure modular network design?

Options:

A.

Reduce the frequency of failures requiring human intervention

B.

Minimize app downtime

C.

Increase time spent on developing new features

D.

Dependencies on hardware or software that is difficult to scale

Buy Now
Questions 68

A company uses equipment from multiple vendors in a data center fabric to deliver SDN, enable maximum flexibility, and provide the best return on investment. Which YANG data model should be adopted for comprehensive features to simplify and streamline automation for the SDN fabric?

Options:

A.

Proprietary

B.

OpenConfig

C.

Native

D.

IETF

Buy Now
Questions 69

Drag and drop the end-to-end network virtualization elements from the left onto the correct network areas on the right.

400-007 Question 69

Options:

Buy Now
Questions 70

Company XYZ wants to redesign the Layer 2 part of their network to use all uplinks for increased performance, support host reachability with conversational learning, and avoid port-channels. Which other technique can be used?

Options:

A.

TRILL

B.

LISP

C.

MSTP

D.

Switch stack

Buy Now
Questions 71

Which parameter is the most important factor to consider when deciding service placement in a cloud solution?

Options:

A.

Data replication cost

B.

Application structure

C.

Security framework implementation time

D.

Data confidentiality rules

Buy Now
Questions 72

Drag and drop the optical technology design characteristics on the left to the correct optical technologies on the right. Not all options are used

400-007 Question 72

Options:

Buy Now
Questions 73

A network architect is designing a policy where database applications access the internet directly, while other traffic routes through the data center, with dynamic path switching based on performance. Which solution meets these requirements?

Options:

A.

MPLS L3VPN with QoS

B.

Cloud OnRamp for IaaS

C.

Cloud OnRamp for SaaS

D.

MPLS Direct Connect

Buy Now
Questions 74

What is an architectural framework created by ETSI that defines standards to decouple network functions from proprietary hardware-based appliances and have them run in software on standard x86 servers?

Options:

A.

NPIV

B.

NFVIS

C.

NFV

D.

VNF

Buy Now
Questions 75

Which aspect of BGP-LS makes it scalable in large networks when multiarea topology information must be gathered?

Options:

A.

Transmit flow control

B.

Open-loop flow control

C.

Hardware flow control

D.

TCP-based flow control

Buy Now
Questions 76

: 484

Traditionally networks handled static web pages e-mail and routine client/server traffic Today enterprise networks must handle more sophisticated types of network applications that include voice and video Applications place increasing demands on IT infrastructures as they evolve into highly visible services that represent the face of the business to internal and external audiences The large amount and variety of data requires that the modern network be aware of the content earned across it to optimally handle that content. Which service provide this intelligence?

Options:

A.

centralized network services

B.

application networking services

C.

network infrastructure services

D.

modular infrastructure services

Buy Now
Questions 77

which two actions must be taken when assessing an existing wireless network implementation for its readliness to support voice traffic? (choose two)

Options:

A.

Validate antenna settings on APs

B.

Verify that RX level are not above -6WBm.

C.

Analyze typical roaming delays.

D.

Identify frequent TX power changes.

E.

Check for high channel utilization

Buy Now
Questions 78

A company requires an RPO of less than 10 seconds to ensure business continuity. Which technology should be deployed?

Options:

A.

Geographically dispersed data centers with asynchronous replication

B.

A single data center with duplicated infrastructure, dual PSUs, and a UPS

C.

Geographically dispersed data centers with synchronous replication

D.

A single data center with duplicated infrastructure and dual PSUs

Buy Now
Questions 79

A small organization of 20 employees is looking to deliver a network design service for modernizing customer networks to support advanced solutions.

Project scope and weekly progress should be visualized by the management.

Always consider feedback and make changes accordingly during the project.

Should consider flexibility to change scope at any point in time.

Which project methodology meets the requirements and has the least impact on the outcome?

Options:

A.

Scrum

B.

LEAN

C.

Kanban

D.

Six-Sigma

Buy Now
Questions 80

A business invests in SDN and develops its own SDN controller that, due to budget constraints, runs on a single controller. The controller actively places an exclusive lock on the configuration of the devices to ensure it is the only source of changes to the environment. What is the result if the controller fails?

Options:

A.

All device configurations are in read-only mode until the controller is restored.

B.

The control plane is unavailable until the controller is restored.

C.

If a device fails, the configuration backup is unavailable.

D.

Manual changes are only possible until the controller is restored.

Buy Now
Questions 81

The controller has a global view of the network, and it can easily ensure that the network is in a consistent and optimal configuration. Which two statements describe a centralized SDN control path? (Choose two.)

Options:

A.

Scaling of the centralized controller cluster is challenging for services like DHCP and load-balancing.

B.

It is highly-available by design with no single-point-of-failure risks present.

C.

Integrating smart NIC capabilities on the local host level is made easier through REST APIs.

D.

It significantly improves the latency when performing reactive handling of PACKET_IN events.

E.

The centralized controller can support all southbound APIs, which allows for easy integration with legacy equipment.

Buy Now
Questions 82

A rapidly growing e-commerce business with a global customer base needs a robust network design that can support their business-critical operations and ensure low-latency access for their customers around the globe. The IT team is considering different solutions to meet their requirements. Which network design is suitable for these needs?

Options:

A.

Rely on a peer-to-peer network architecture to distribute the workload among customer devices.

B.

Implement a fully on-premises network infrastructure with dedicated servers in different geographic locations.

C.

Utilize a public cloud provider to provide hosting for web servers and databases.

D.

Adopt a hybrid cloud approach, using a mix of public cloud services and private on-premises servers.

Buy Now
Questions 83

: 487

Which layer of the SDN architecture orchestrates how the applications are given the resources available in the network?

Options:

A.

orchestration layer

B.

northbound API

C.

control layer

D.

southbound API

Buy Now
Questions 84

Network changes due to mergers, acquisitions, and divestitures can be highly disruptive if not carefully planned. When an organization sells part of its business, it must detach those parts of the network with minimal risk and downtime.

Which network design approach is appropriate to minimize the impact and risks as the divested parts of the network are detached?

Options:

A.

Redundant design

B.

Modular design

C.

Less complex design

D.

Routed access design

Buy Now
Questions 85

A network hacker is trying to interrupt the transport packet on IPsec. A packet with duplicate sequence numbers is introduced. The customer sends high-priority traffic during this window. Which design parameter should be considered to mitigate this issue?

Options:

A.

Classify and mark duplicate sequence packets.

B.

Enable anti-replay window.

C.

Increase QoS shape policy.

D.

Restrict key operations in the IPsec tunnel.

Buy Now
Questions 86

A network security team uses a purpose-built tool to actively monitor the campus network, applications, and user activity. The team also analyzes enterprise telemetry data from IPFIX data records that are received from devices in the campus network. Which action can be taken based on the augmented data?

Options:

A.

Reduction in time to detect and respond to threats

B.

Integration with an incident response plan

C.

Adoption and improvement of threat-detection response

D.

Asset identification and grouping decisions

Buy Now
Questions 87

Which two factors must be considered for high availability in campus LAN designs to mitigate concerns about unavailability of network resources? (Choose two.)

Options:

A.

Device resiliency

B.

Device type

C.

Network type

D.

Network resiliency

E.

Network size

Buy Now
Questions 88

: 491

Budget is one of the important factors when you design a network Regardless of who controls the budget, one common network design goal is to contain costs Reduced budgets or limited resources often force network designers to select the most affordable solution instead of the best solution Which two elements must be considered when you do ROI analysis for the network design that explains how quickly the new network w ill pay for itself’ (Choose two. )

Options:

A.

improved employee productivity

B.

market segmentation

C.

reduced operational costs

D.

limiting higher revenue potential

E.

state-of-the art technologies

Buy Now
Questions 89

An architect receives a functional requirement for a NAC system from a customer security policy stating that if a corporate Wi-Fi device does not meet current AV definitions, it cannot access the network until updated. Which component should be built into the NAC design?

Options:

A.

Posture assessment with remediation VLAN

B.

Quarantine SGTs

C.

dACLs with SGTs

D.

Quarantine VLAN

Buy Now
Questions 90

A banking customer determines that it is operating POS and POI terminals that are noncompliant with PCI DSS requirements, as it is running TLSv1.0. The customer plans to migrate the terminals to TLSv1.2. What are two requirements to complete the migration? (Choose two.)

Options:

A.

Ensure that strong cryptography is applied for users who have administrative access through networks

B.

Apply strong cryptography and security protocols to safeguard sensitive cardholder data.

C.

Apply strong encryption for transmission of cardholder data across public networks.

D.

Protect all user systems against malware and frequently update antivirus software

E.

Maintain a policy that addresses information security for employees and third parties.

Buy Now
Questions 91

Refer to the exhibit.400-007 Question 91

OSPF is running as the IGP to provide reachability to all AS100 networks. R3 and R4 are the current ABRs at the boundary of OSPF Area 0 and Area 1. Now BGP must be deployed within AS 100 because it will be receiving Internet routes from its eBGP peers (the service provider) connected to R1 and R2. What is an optimal solution for this deployment to configure BGP relationships and redistribute BGP learned routes into OSPF?

Options:

A.

R5 should be configured as a route reflector for R1, R2, R3 and R4. BGP routes must be redistributed at R1 and R2 into OSPF.

B.

Configuration should be set up with R1 and R2, and R3 in one sub-AS, with R4 in another, and redistribution at R1 and R2.

C.

A full mesh should be deployed between all the routers with mutual redistribution to take place at R1 and R2.

D.

R1, R2, R3 and R4 must be set up with a neighbor relationship with R5 only, must not be a route reflector.

Buy Now
Questions 92

A software-defined network exposes an API to the RIB and forwarding engine, allowing off-box control of routing—what SDN model is used?

Options:

A.

Replace

B.

Augmented

C.

Hybrid

D.

Distributed

Buy Now
Questions 93

Before migrating anything to the cloud, what are three cloud readiness assessment steps that are required to perform? (Choose three.)

Options:

A.

Determine the geolocation requirement

B.

Determine the technology obsolescence

C.

Identify the scope and business cases for migration.

D.

Assess infrastructure requirements.

E.

Evaluate available in-house resources

F.

Assess database security requirements

G.

Assess the cloud brokerage solutions

Buy Now
Questions 94

A Service Provider is designing a solution for a managed CE service to a number of local customers using a single CE platform and wants to have logical separation on the CE platform using Virtual Routing and Forwarding (VRF) based on IP address ranges or packet length. Which is the most scalable solution to provide this type of VRF Selection process on the CE edge device?

Options:

A.

Static Routes for Route Leaking

B.

Policy Based Routing

C.

OSPF per VRF Instance

D.

Multi-Protocol BGP

Buy Now
Questions 95

The Company XYZ network requires OSPF dead neighbor detection in a subsecond manner. However, the company network does not support BFD. Which other feature can be used to fulfill the design requirement?

Options:

A.

STP

B.

Fast hello

C.

LFA

D.

DPD

Buy Now
Questions 96

Which two benefits can software-defined networks provide to businesses? (Choose two.)

Options:

A.

Provides additional redundancy

B.

Decentralized management

C.

Reduced latency

D.

Enables innovation

E.

Reduction of OpEx/CapEx

F.

Meets high traffic demands

Buy Now
Questions 97

A multinational enterprise integrates a cloud solution with these objectives:

• Achieve seamless connectivity across different countries and regions

• Extend data center and private clouds into public clouds and provider-hosted clouds

What are two outcomes of deploying data centers and fabrics that interconnect different cloud networks? (Choose two.)

Options:

A.

Enhanced security

B.

Data and network ownership

C.

Ability to place workloads across clouds

D.

Centralized visibility

E.

Unidirectional workload mobility across the cloud

Buy Now
Questions 98

Which two statements describe the usage of the IS-IS overload bit technique? (Choose two.)

Options:

A.

If overload-bit is set on a Level 2 intermediate system, the other Level 2 intermediate systems in the topology will stop using the overloaded IS to forward Level 2 traffic. However, the intermediate system can still forward Level 1 traffic.

B.

It can be set in intermediate systems (IS-IS routers) to prioritize control plane CSNP packets.

C.

It can be used to automatically synchronize the link-state database between Level 1 intermediate systems.

D.

It can be set in intermediate systems (IS-IS routers) to avoid traffic black holes until routing protocols are fully converged after a reload operation.

E.

It can be set in intermediate systems (IS-IS routers) to attract transit traffic from other intermediate systems.

Buy Now
Questions 99

Which design principle improves network resiliency?

Options:

A.

Added load-balancing

B.

Added redundancy

C.

Added confidentiality

D.

Added reliability

Buy Now
Questions 100

: 490

In order to achieve key business objectives, the design team of a hosting provider has identified a series of objectives in their cloud computing environments

•Customer data privacy and protection against external vulnerabilities must be improved.

•Access to sensitive data must be monitored and relevant regulations must be adhered to.

•Use data analyzing to optimize operations and business decision-making

Which step must be take to meet these requirements?

Options:

A.

Reducing rework and empowering data engineers to apply data governance policies more consistently throughout the IT infrastructure.

B.

Expand the ability to capture and store data with manual and well-defined methods of governing data.

C.

Apply data governance policies that depend on role-based access controls

D.

Enhance auditing and reporting capabilities of the design team to reveal authentication and authorization of data access.

Buy Now
Questions 101

A business requirement stating that failure of WAN access for dual circuits into an MPLS provider for a Data Centre cannot happen due to related service credits that would need to be paid has led to diversely routed circuits to different points of presence on the provider’s network. What should a network designer also consider as part of the requirement?

Options:

A.

Provision of an additional MPLS provider

B.

Out of band access to the MPLS routers

C.

Ensuring all related remote branches are dual-homed to the MPLS network

D.

Dual PSUs and Supervisors on each MPLS router

Buy Now
Questions 102

You have been tasked with designing a data center interconnect as part of business continuity. You want to use FCoE over this DCI to support synchronous replication. Which two technologies allow for FCoE via lossless Ethernet or data center bridging? (Choose two.)

Options:

A.

DWDM

B.

EoMPLS

C.

SONET/SDH

D.

Multichassis EtherChannel over Pseudowire

E.

VPLS

Buy Now
Questions 103

Which two features are advantages of SD-WAN compared to MPLS-based connectivity? (Choose two.)

Options:

A.

Uses FEC constructs for traffic forwarding, thereby improving efficiency

B.

Separates infrastructure and policy

C.

Uses policy-based forwarding of real-time traffic with less complexity

D.

Unifies the WAN backbone

E.

Manages failures through backup links

Buy Now
Questions 104

Drag and drop the design characteristics from the left onto the correct network filter techniques on the right. Not all options are used.

400-007 Question 104

Options:

Buy Now
Questions 105

An existing wireless network was designed to support data traffic only. You must now install context-aware services for location tracking. What changes must be applied to the existing wireless network to increase the location accuracy? (Choose two)

Options:

A.

Add access points along the perimeter of the coverage area.

B.

Increase the access point density to create an average inter-access point distance of less than 40 feet or 12.2 meters.

C.

Use directional antennas to provide more cell overlapping.

D.

Install additional access points in monitor mode where the co-channel interference would otherwise be affected.

E.

Fine tune the radio configuration of the access point to have a higher average transmission power to achieve better coverage.

Buy Now
Questions 106

Company XYZ is running a redundant private WAN network using OSPF as the underlay protocol. The current design accommodates for redundancy in the network, but it is taking over 30 seconds for the network to reconverge upon failure. Which technique can be implemented in the design to detect such a failure in a subsecond?

Options:

A.

STP

B.

fate sharing

C.

OSPF LFA

D.

BFD

E.

flex links

Buy Now
Questions 107

What is the key strategy to address scalability challenges In the rapidly evolving digital landscape with resilient designs?

Options:

A.

Mitigate the impact of power outages.

B.

Minimize the distance.

C.

Identify potential bottlenecks.

D.

Optimize resource utilization.

Buy Now
Questions 108

: 482

Even with two different device platforms that support NETCONF or any other common transport method it does not mean they are compatible from a tooling and/or a developer’s perspective What is required to get the compatibility?

Options:

A.

Both devices must use a common data modeling language

B.

Both devices should have vendor-specific interoperability

C.

Both devices must use the same versions of NETCONF

D.

Both devices must support the same NETCONF features

Buy Now
Questions 109

Refer to the table.

400-007 Question 109

A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The solution must provide a single 10G connection between locations and be able to run its own varying QoS profiles without service provider interaction based on the migration stages. All connectivity methods are at 10 Gbps. Which transport technology costs the least if the connectivity is required for just one year?

Options:

A.

MPLS wires only

B.

CWDM over dark fiber

C.

DWDM over dark fiber

D.

Metro Ethernet

Buy Now
Questions 110

A company with an existing multivendor network is moving from 1 G dark fiber to an ISP virtual leased-line solution The company ' s internal security policy states that any traffic traversing a network that is not owned by the company must be encrypted What must be used to meet the requirements?

Options:

A.

IPsec AH

B.

Dynamic Multipoint VPN tunnel

C.

IPsec ESP

D.

GETVPN tunnel

Buy Now
Questions 111

Drag and drop the multicast protocols from the left onto the current design situation on the right.

400-007 Question 111

Options:

Buy Now
Questions 112

Network operators have many options available, from fully centralized to fully distributed control planes, and each approach has its own set of characteristics. Drag and drop the characteristics from the left onto the corresponding approach on the right.

400-007 Question 112

Options:

Buy Now
Questions 113

You are designing an Out of Band Cisco Network Admission Control Layer 3 Real-IP Gateway deployment for a customer. Which VLAN must be trunked back to the Clean Access Server from the access switch?

Options:

A.

authentication VLAN

B.

user VLAN

C.

untrusted VLAN

D.

management VLAN

Buy Now
Questions 114

: 503

As organizations rush to implement AI, many fail to address its ethical considerations Not examining those issues puts an organization at risk of legal violations, loss of customer trust and long-term reputational damage. Which two ethical standards are required in preven ting such pitfalls? (Choose two. )

Options:

A.

data privacy

B.

algorithmic transparency

C.

Al maturity

D.

data silos process automation

Buy Now
Questions 115

What is a web-based model in which a third-party provider hosts applications that are available to customers over the Internet?

Options:

A.

PaaS

B.

SaaS

C.

IaaS

D.

WaaS

Buy Now
Questions 116

Which two statements about MLD snooping are true? (Choose two)

Options:

A.

When MLD snooping is enabled, QoS is automatically enabled

B.

A VLAN can support multiple active MLD snooping queriers, as long as each one is associated to a different multicast group

C.

An MLD snooping querier election occurs when any MLD snooping querier goes down or if there is an IP address change on the active querier

D.

When multiple MLD snooping queriers are enabled in a VLAN, the querier with the lowest IP address in the VLAN is elected as the active MLD snooping querier

Buy Now
Questions 117

What are the two benefits of using northbound APIs in SDN architecture? (Choose two.)

Options:

A.

They provide a way to manage the SDN and configure network policies

B.

They connect the SDN controller to the underlying network devices.

C.

They provide a way for the SDN controller to communicate with network devices

D.

They provide, a way for the SDN to control change management

E.

They connective SDN controller to higher-level management, systems

Buy Now
Questions 118

A consultant needs to evaluate project management methodologies for a new service deployment on the existing network of a customer. The customer wants to be involved in the end-to-end project progress and be provided with frequent updates. The customer also wants the ability to change the requirements if needed, as the project progresses. Which project management methodology should be used?

Options:

A.

Three principles

B.

Phased

C.

Agile

D.

Waterfall

Buy Now
Questions 119

Which two mechanisms avoid suboptimal routing in a network with dynamic mutual redistribution between multiple OSPFv2 and EIGRP boundaries? (Choose two.)

Options:

A.

AD manipulation

B.

Matching OSPF external routes

C.

Route tagging

D.

Route filtering

E.

Matching EIGRP process ID

Buy Now
Questions 120

An Agile for Infrastructure transition often means dismantling traditional IT hierarchies and rebuilding it to align with business objectives and workflows. Organizations are seeing the benefits of using automation tools in the network such as faster, more efficient, and more effective delivery of products and services. Which two components help increase overall productivity and improve company culture? (Choose two.)

Options:

A.

Agile code practices

B.

Infrastructure-as-code

C.

Controlled infrastructure

D.

DevOps practices

E.

Dedicated infrastructure

Buy Now
Questions 121

Your network operations team is deploying Access Control Lists (ACLs) across your Internet gateways. They wish to place an ACL inbound on the Internet gateway interface facing the core network (the " trusted " interface). Which IP address would the ACL need for traffic sourced from the inside interface, to match the source address of the traffic?

Options:

A.

inside global

B.

outside global

C.

inside local

D.

outside local

Buy Now
Questions 122

What are two reasons for a company to prefer a hybrid approach rather than a mixed approach while transitioning to a software-defined network? (Choose two.)

Options:

A.

Mixed approach creates more complexity which makes troubleshooting more difficult

B.

Hybrid approach allows box-by-box transition to spread out the costs

C.

Mixed approach is more palatable to the small-size companies

D.

Hybrid approach allows to deploy portions of the network without impacting performance

E.

Hybrid approach is more palatable to the large-size companies

Buy Now
Questions 123

Which BGP feature provides fast convergence?

Options:

A.

BGP PIC

B.

BGP-EVPN

C.

BGP FlowSpec

D.

BGP-LS

Buy Now
Questions 124

SDN is still maturing. Throughout the evolution of SDN, which two things will play a key role in enabling a successful deployment and avoiding performance visibility gaps in the infrastructure? (Choose two.)

Options:

A.

Rapid on-demand growth

B.

Dynamic real-time change

C.

Falling back to old behaviors

D.

Peer-to-peer controller infrastructure

E.

Integration of device context

Buy Now
Questions 125

Which two statements explain the operation of BFD asynchronous mode? (Choose two.)

Options:

A.

BFD asynchronous mode with echo packets combines the control packets and echo packets into a single packet.

B.

BFD asynchronous mode without echo packets uses control packets, and BFD asynchronous mode with echo packets does not.

C.

BFD asynchronous mode with and without echo packets use control packets.

D.

BFD asynchronous without echo packets has control packets sent back to the originating router, which echoes the control packet to detect failures.

E.

BFD asynchronous mode with echo packets uses separate control packets and echo packets.

Buy Now
Questions 126

While reviewing an existing network design, you are discussing the characteristics of different STP versions. Which protocol minimizes unicast flooding during a Topology Change Notification in a Layer 2 switched network with many VLANs?

Options:

A.

PVRSTP

B.

MST

C.

STP

D.

PVSTP+

Buy Now
Questions 127

Virtualization pose a special challenges for NAC because virtual servers can move around a data center, and the VLAN can change as the servers move. What is an option that can be used to improve security in this condition?

Options:

A.

role-based control

B.

in-band traffic control

C.

application-based security

D.

application-based security

Buy Now
Questions 128

In the wake of a security compromise incident where the internal networks were breached by an outside attacker at the perimeter of the infrastructure, an enterprise is now evaluating potential measures that can help protect against the same type of incident in the future. What are two design options that can be employed? (Choose two)

Options:

A.

microzoning

B.

segmentation

C.

domain fencing

D.

virtualization

E.

microperimeters

Buy Now
Questions 129

Company XYZ connects its sites over a private WAN. Their overlay network is running a DMVPN setup where the headquarters site is the hub. The company is planning on implementing multicast routing on the network. What should be used in the multicast routing design?

Options:

A.

PIM dense mode with RP located at the hub

B.

PIM sparse mode with RP located at each remote site

C.

PIM sparse mode with RP located at the hub

D.

PIM dense mode with RP located at each remote site

Buy Now
Questions 130

The line between security and compliance is easily blurred and is, to a large extent, a moving target Drag and drop each of the requirements on the left to the appropriate section on the right

400-007 Question 130

Options:

Buy Now
Questions 131

: 498

When organizations initially start consuming public cloud services, they often use VPNs over the internet to connect their on-premises applications to the public cloud infrastructure. In which two cases are other connectivity methods a better fit? (Choose two.)

Options:

A.

latency sensitive multimedia streaming

B.

high availability

C.

migration to transit gateway

D.

cost sensitive business applications

E.

desktop-as-a-service using VDI

Buy Now
Questions 132

Which function is performed at the access layer of the three-layer hierarchical network design model?

Options:

A.

Fault isolation

B.

QoS classification and marking boundary

C.

Reliability

D.

Fast transport

E.

Redundancy and load balancing

Buy Now
Questions 133

In large-scale networks controllers needs to be able to process millions of flows per second without compromising the quality of the service What are two actions that must be implemented to address scaling limitations when deploying the network*? (Choose two.)

Options:

A.

Spirt the control logic functions between specialized data plane devices and controllers

B.

Deploy a high-throughput application platform

C.

Delegate work to the forwarding devices to reduce control plane overhead

D.

Deploy high performance controllers to increase the performance of the data plane

E.

Deploy authoritative switches to reduce the amount of controller workloads.

Buy Now
Questions 134

An engineer must design a network for a company that uses OSPF LFA to reduce loops. Which type of loop would be reduced by using this design?

Options:

A.

DTP

B.

Micro loops

C.

STP

D.

REP

Buy Now
Questions 135

A large enterprise is planning a new WAN connection to headquarters. The current dual-homed setup with static routing is not providing consistent resiliency. Users complain when one specific link fails, while failure of the other causes no issues. The organization wants to improve resiliency and ROI.

Which solution should be recommended?

Options:

A.

Implement granular quality of service on the links

B.

Procure additional bandwidth

C.

Use dynamic routing toward the WAN

D.

Add an additional link to the WAN

Buy Now
Questions 136

: 473

A network consists of multiple planes where each plane represents a different area of network operations and cames different types of network traffic Which two statements describe the concepts of assurance in the context of control planes? (Choose two.)

Options:

A.

It is responsible for collecting analyzing, and enforcing policies based on observed data

B.

It primarily deals with configuring system access and network traffic flow policies

C.

It focuses on gathering and analyzing metrics, logs, and traces to infer the health of systems

D.

It executes predefined policies and forwards network traffic

E.

It is the ability to ensure system compliance and reliability under specified conditions

Buy Now
Questions 137

An architect designs a multi-controller network architecture with these requirements:

Achieve fast failover to control traffic when controllers fail.

Yield a short distance and high resiliency in the connection between the switches and the controller.

Reduce connectivity loss and enable smart recovery to improve the SDN survivability.

Improve connectivity by adding path diversity and capacity awareness for controllers.

Which control plane component of the multi-controller must be built to meet the requirements?

Options:

A.

control node reliability

B.

controller stale consistency

C.

control path reliability

D.

controller clustering

Buy Now
Questions 138

A product manufacturing organization is integrating cloud services into their IT solution. The IT team is working on the preparation phase of the implementation approach, which includes the Define Strategy step. This step defines the scope of IT, the application, and the service. What is one topic that should be considered in the Define Strategy step?

Options:

A.

Financial and governance models

B.

Innovate and align with business according to volume

C.

Due diligence and financial scenarios

D.

Contingency exit strategy steps

Buy Now
Questions 139

An external edge router provides connectivity from a service provider to an enterprise. Which two Internet edge best practices meet compliance regulations? (Choose two)

Options:

A.

Implement filtering to control traffic that is sourced from the infrastructure IP space.

B.

Enable and use only secure protocols.

C.

Send logs to a centralized logging collection server.

D.

Implement EBGP to advertise all owned IP blocks.

E.

Use login banners and interface access lists to restrict administrative access to the system.

Buy Now
Questions 140

As a service provider is implementing Strong Access Control Measures, which two of the following PCI Data Security Standard requirements must be met? (Choose two . )

Options:

A.

Assign a unique ID to each person with computer access.

B.

Restrict access to cardholder data to on a need-to-know basis.

C.

Encrypt transmission of cardholder data across open or public networks.

D.

Each location must require validating PCI compliance if business has multiple locations.

E.

Protect stored cardholder data.

Buy Now
Questions 141

SD-WAN can be used to provide secure connectivity to remote offices, branch offices, campus networks, data centers, and the cloud over any type of IP-based underlay transport network. Which two statements describe SD-WAN solutions? (Choose two.)

Options:

A.

SD-WAN networks are inherently protected against slow performance.

B.

Control and data forwarding planes are kept separate.

C.

Improved operational efficiencies result in cost savings.

D.

Solutions include centralized orchestration, control, and zero-touch provisioning.

E.

Solutions allow for variations of commodity and specialized switching hardware.

Buy Now
Questions 142

Which three Cisco products are used in conjunction with Red Hat to provide an NFVi solution? (Choose three.)

Options:

A.

Cisco Prime Service Catalog

B.

Cisco Open Virtual Switch

C.

Cisco Nexus switches

D.

Cisco UCS

E.

Cisco Open Container Platform

F.

Cisco Virtual Network Function

Buy Now
Questions 143

Refer to the exhibit.

400-007 Question 143

The enterprise customer wants to stream one-way video from their head office to eight branch offices using multicast. Their current service provider provides a Layer 3 VPN solution and manages the CE routers, but they do not currently support multicast. Which solution quickly allows this multicast traffic to go through while allowing for future scalability?

Options:

A.

Enable a GRE tunnel between nodes CE1 and CE2

B.

Enable a GRE tunnel between nodes C2 and C4

C.

Enable a GRE tunnel between nodes C1 and C4

D.

Implement hub and spoke MPLS VPN over DMVPN (also known as 2547o DMVPN) between CE1 and CE2

E.

The service provider must provide a Draft Rosen solution to enable a GRE tunnel between nodes PE1 and PE2

Buy Now
Questions 144

Which two characteristics are associated with 802.1s? (Choose two)

Options:

A.

802.1s supports up to 1024 instances of 802.1

B.

802.1s is a Cisco enhancement to 802.1w.

C.

802.1s provides for faster convergence over 802.1D and PVST+.

D.

CPU and memory requirements are the highest of all spanning-tree STP implementations.

E.

802.1s maps multiple VLANs to the same spanning-tree instance.

Buy Now
Questions 145

Company ABC uses IPv4-only. Recently they started deploying new endpoint devices. For operational reasons, IPv6 cannot be disabled on these new endpoint devices. Which security measure prevents the new endpoint from learning an IPv6 prefix from an attacker?

Options:

A.

Source Guard and Prefix Guard

B.

Router Advertisement Guard

C.

Prefix Guard

D.

Secure Neighbor Discovery

Buy Now
Questions 146

400-007 Question 146

Refer to the exhibit. A customer needs to implement a connectivity model by using one active link for inbound and outbound traffic and a second link for backup. The backup link is low speed and is required only during outages of the primary link. Which design solution should be implemented?

Options:

A.

Advertise a longer AS PATH to ISP 2. Increase the MED to ISP 2.

B.

Advertise more specific routes to ISP 1. Increase the local preference attribute of inbound BGP from ISP1.

C.

Advertise less specific routes to ISP 2. Increase the AS PATH inbound from ISP 1.

D.

Advertise a higher local preference to ISP 2. Increase the AS PATH inbound from ISP 1.

Buy Now
Questions 147

Which main IoT migration aspect should be reviewed for a manufacturing plant?

Options:

A.

Sensors

B.

Security

C.

Applications

D.

Wi-Fi Infrastructure

E.

Ethernet Switches

Buy Now
Questions 148

Refer to the exhibit.

400-007 Question 148

There are multiple trees in the Cisco FabricPath. All switches in the Layer 2 fabric share the same view of each tree. Which two concepts describe how the multicast traffic is load-balanced across this topology? (Choose two.)

Options:

A.

A specific (S,G) traffic is not load-balanced

B.

All trees are utilized at the same level of the traffic rate

C.

Every leaf node assigns the specific (S,G) to the same tree

D.

A specific (S,G) multicast traffic is load-balanced across all trees due to better link utilization efficiency

E.

The multicast traffic is generally load-balanced across all trees

Buy Now
Questions 149

Refer to the exhibit.

400-007 Question 149

As part of a redesign project, you must predict multicast behavior. What happens to the multicast traffic received on the shared tree (*,G), if it is received on the LHR interface indicated?

Options:

A.

It is dropped due to an unsuccessful RPF check against the multicast source

B.

It is switched given that no RPF check is performed

C.

It is switched due to a successful RPF check against the routing table

D.

It is dropped due to an unsuccessful RPF check against the multicast receiver.

Buy Now
Exam Code: 400-007
Exam Name: Cisco Certified Design Expert (CCDE v3.1)
Last Update: Jun 3, 2026
Questions: 503

PDF + Testing Engine

$599

Testing Engine

$449

PDF (Q&A)

$399