Refer to the exhibit. An engineer has been asked to redesign the traffic flow toward AS 111 coming from AS 500.Traffic destined to AS 111 network 91 7 0.0/16 should come in via AS 100. while traffic destined to all other networks in AS 111 should continue to use the existing path Which BGP attributes are best suited to control this inbound traffic coming from BGP AS 500 Into the 91.7.0.0/16 network?

Prepend AS path for the 91.7.0.0/16 network and set it for neighbor in AS 200.

Use extended community for the 91.7.0.0/16 network, not advertising it to the bi-lateral peer.

Use local preference on R1 for the networks that AS 500 advertises to AS 111.

Set higher MED for neighbor in AS 100 to influence incoming traffic for the 91. 7.0.0/16 network.

What is a characteristic of a secure cloud architecture model?

dedicated and restricted workstations

software-defined network segmentation

Which best practice ensures data security in the private cloud?

Encrypt data at rest and in transition.

Use IPsec for communication between unsecured network connection

Encrypt data at rest and in transition.

Use the same vendor for consistent encryption.

Anonymize data ownership to comply with privacy rules.

Which three items do you recommend for control plane hardening of an infrastructure device?(Choose three.)

routing protocol authentication

According to the CIA triad principles for network security design, which principle should be priority for a Zero Trust network?

requirement for data-at-rest encryption foe user identification within the VPN termination hardware

requirement for data-in-motion encryption and 2FA authentication

requirement for data-at-rest encryption foe user identification within the VPN termination hardware

categorization of systems, data, and enterprise BYOD assets that are connected to network zones based on individual privacy needs

ensuring that authorized users have high-availability system access from defined zones to defined systems or zones

Refer to the exhibit. OSPF is running as the IGP to provide reachability to all AS100 networks R3 and R4 are the current ABRs at the boundary of OSPF Area0 and Areal Now BGP must be deployed within AS 100 because it will be receiving Internet routes from its eBGP peers (the service provider) connected to R1 and R2 What is an optimal solution for this deployment to configure BGP relationships and redistribute BGP learned routes into OSPF?

R5 should be configured as a route reflector for R1, R2, R3 and R4. BGP routes must be redistributed at R1 and R2 into OSPF.

Configuration should be set up with R1 and R2, and R3 in one sub AS, with and R4 in another, and redistribution at R1 and R2.

A full mesh should be deployed between all the routers with mutual redistribution to take place at R1 and R2.

R1, R2, R3 and R4 must be set up with a neighbor relationship with R5 only must not be a route reflector.

Which two characteristics apply to firewall transparent mode operations in a firewall solution design?(Choose two.)

Multicast traffic can traverse the firewall.

OSPF adjacencies can be established through the firewall

Changes in the existing IP addressing and subnets are required

The firewall can participate actively on spanning tree.

Multicast traffic can traverse the firewall.

OSPF adjacencies can be established through the firewall

The firewall acts like a router hop in the network.

Your company wants to deploy a new data center infrastructure Based on the requirements you have chosen VXLAN as encapsulation technology The customer is concerned about miss-configuration of Layer 2 devices and DC wide outages caused by Layer 2 loops What do you answer?

BPDU Guard should be enabled on all VTEP access ports

VXLAN offers native loop avoidance mechanism

Storm Control should be enabled on all ports

VPC+ could prevent L2 loop on access ports

BPDU Guard should be enabled on all VTEP access ports

Which two statements describe the usage of the IS-IS overload bit technique? (Choose two )

lf overload-bit is set on a Level 2 intermediate system, the other Level 2 intermediate systems in the topology will stop using the overloaded IS to forward Level 2 traffic However, the intermediate system can still forward Level 1 traffic

It can be set in intermediate systems (IS-IS routers) to avoid traffic black holes until routing protocols are fully converged after a reload operation.

lf overload-bit is set on a Level 2 intermediate system, the other Level 2 intermediate systems in the topology will stop using the overloaded IS to forward Level 2 traffic However, the intermediate system can still forward Level 1 traffic

It can be set in intermediate systems (IS-IS routers) to prioritize control plane CSNP packets.

It can be used to automatically synchronize the link-state database between Level 1 intermediate systems

It can be set in intermediate systems (IS-IS routers) to avoid traffic black holes until routing protocols are fully converged after a reload operation.

It can be set in intermediate systems (IS-IS routers) to attract transit traffic from other intermediate systems

Refer to the exhibit. Your company designed a network to allow server VLANs to span all access switches in a data center In the design, Layer 3 VLAN interfaces and HSRP are configured on the aggregation switches Which two features improve STP stability within the network design? (Choose two.)

BPDU guard on the aggregation switch downlinks toward access switches

root guard on the aggregation switch downlinks toward access switches

access switch pairs explicitly determined to be root and backup root bridges

Refer to the exhibit. There are multiple trees in the Cisco FabricPath All switches in the Layer 2 fabric share the same view of each tree. Which two concepts describe how the multicast traffic is load-balanced across this topology? (Choose two )

All trees are utilized at the same level of the traffic rate

A specific (S.G) multicast traffic is load-balanced across all trees due to better link utilization efficiency.

A specific (S.G) traffic is not load-balanced

All trees are utilized at the same level of the traffic rate

Every leaf node assigns the specific (S.G) to the same tree.

A specific (S.G) multicast traffic is load-balanced across all trees due to better link utilization efficiency.

The multicast traffic is generally load-balanced across all trees

A network design includes a long signaling delay in notifying the Layer 3 control plane that an interface has failed Which two of these actions would reduce that delay? (Choose two.)

Reduce the time for the network to reconverge.

Enable lower data link layer recovery systems to have an opportunity to restore the interface

Reduce the time for the network to reconverge.

Increase the notification of interface flaps.

Enable lower data link layer recovery systems to have an opportunity to restore the interface

Which two possible drawbacks should you consider when introducing Network Functions Virtualization in a network design? (Choose two)

High-end routers are required to support NFV

An SDN orchestration layer is required to support NFV

Bandwidth utilization increases

High-end routers are required to support NFV

OpenFlow must be supported in the network

An SDN orchestration layer is required to support NFV

When designing a WAN that will be carrying real-time traffic, what are two important reasons to consider serialization delay? (Choose two )

Serialization delays are variable because they depend on the line rate of the interface and on the type of the packet being serialized.

Serialization delays are variable because they depend only on the size of the packet being serialized

Serialization delays are invariable because they depend only on the line rate of the interface

Serialization delays are variable because they depend on the line rate of the interface and on the type of the packet being serialized.

Serialization delay is the time required to transmit the packet on the physical media.

Serialization delays are variable because they depend only on the size of the packet being serialized

Serialization delay depends not only on the line rate of the interface but also on the size of the packet

Which two aspects are considered when designing a dual hub dual DMVPN cloud topology? (Choose two)

will only work with single-tier headend architecture

recommended for high availability

will only work with single-tier headend architecture

hub sites must connect to both DMVPN clouds

recommended for high availability

spoke-to-spoke traffic will transit the hub unless spokes exchange dynamic routing directly

requires all sites to have dual Internet connections

A green data center is being deployed and a design requirement is to be able to readily scale server virtualization Which IETF standard technology can provide this requirement?

Transparent Interconnection of Lots of Links

While designing a switched topology, in which two options is UplinkFast recommended? (Choose two )

when switches of different spanning-tree types are connected (for example. 802.1d connecting to 802.1w)

when hello timers are changed to more aggressive values

You are using iSCSI to transfer files between a 10 Gigabit Ethernet storage system and a 1 Gigabit Ethernet server The performance is only approximately 700 Mbps and output drops are occurring on the server switch port. Which action will improve performance in a cost-effective manner?

Increase the queue to at least 1 GB

Enable the TCP Nagle algorithm on the receiver

Customer XYZ network consists of an MPLS core. IS-IS running as IGP a pair of BGP route reflectors for route propagation, and a few dozens of MPLS-TE tunnels for specific tactical traffic engineering requirements. The customer's engineering department has some questions about the use of the Overload Bit in the IS-IS networks and how it could be used to improve their current network design.Which two concepts about the Overload Bit are true? (Choose two.)

It can be set on a router during the startup process for a fixed period of time

It can be set on a router until other interacting protocols have signaled convergence.

It can be set on a router during the startup process for a fixed period of time

Networks advertised within the LSPs of the respective node will become unreachable

It forces the midpoint MPLS-TE node to reoptimize the primary tunnels going through the OL node.

It can be set on a router until other interacting protocols have signaled convergence.

It is not recommended on BGP Route Reflectors

You have been tasked with designing a data center interconnect as part of business continuity You want to use FCoE over this DCI to support synchronous replication. Which two technologies allow for FCoE via lossless Ethernet or data center bridging? (Choose two.)

Multichassis EtherChannel over Pseudowire

You are designing a large-scale DMVPN network with more than 500 spokes using EIGRP as the IGP protocol Which design option eliminates potential tunnel down events on the spoke routers due to the holding time expiration?

Increase the hold queue on the tunnel interface of the hub router

Increase the hold queue on the physical interface of the hub router.

Increase the hold queue on the tunnel interface of the spoke routers

Increase the hold queue on the tunnel interface of the hub router

Apply QoS for pak_priority class

Increase the hold queue on the physical interface of the spoke routers.

Refer to the exhibit. A customer runs OSPF with Area 5 between its aggregation router and an internal router When a network change occurs in the backbone. Area 5 starts having connectivity issues due to the SPF algorithm recalculating an abnormal number of times in Area 5 You are tasked to redesign this network to increase resiliency on the customer network with the caveat that Router B does not support the stub area How can you accomplish this task*?

Implement LSA filtering ontheAB, allowing summary routes and preventing more specific routes into Area 5

Increase the bandwidth on the connection between Router A and Router B

Implement LSA filtering ontheAB, allowing summary routes and preventing more specific routes into Area 5

Create a virtual link to Area 0 from Router B to the ABR

Turn on LSA throttling on all devices in Area 5

Set Area 5 to stubby at the ABR anyway

You are tasked to design a QoS policy for a service provider so they can include it in the design of their MPLS core network If the design must support an MPLS network with six classes, and CEs will be managed by the service provider, which QoS policy should be recommended?

map DSCP bits into the Exp field

map IP CoS bits into the IP Precedence field

map flow-label bits into the Exp field

map IP precedence bits into the DSCP field

map DSCP bits into the Exp field

Cisco 400-007 Practice Test 3 - Free Online Exam Prep & Questions

Question 1 / 40

IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches. Which use case is suitable for using IPFIX probes?\

performance monitoring

security

observation of critical links

capacity planning

Comment (0)

Cisco 400-007 Practice Test 3

Question

Cisco 400-007 Practice Tests

Practice Tests