A senior network designer suggests that you should improve network convergence times by reducing BGP timers between your CE router and the PE router of the service provider. Which two factors should you consider to adjust the timer values? (Choose two.)

service provider agreement to support tuned timers

number of routes on the CE router

service provider agreement to support tuned timers

manual updates to the peer groups

service provider scheduling of changes to the PE

number of routes on the CE router

number of VRFs on the PE router

You were tasked to enhance the security of a network with these characteristics:• A pool of servers is accessed by numerous data centers and remote sites• The servers are accessed via a cluster of firewalls• The firewalls are configured properly and are not dropping traffic• The firewalls occasionally cause asymmetric routing of traffic within the server data center.Which technology should you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

Limit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.

Poison certain subnets by adding static routes to Null0 on the core switches connected to the pool of servers.

Limit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.

You are designing a network running both IPv4 and IPv6 to deploy QoS Which consideration is correct about the QoS for IPv4 and IPv6?

IPv6 and IB/4 traffic types can use a single QoS policy to match both protocols

IPv4 and IPv6 traffic types can use use queuing mechanisms such as LLQ, PQ and CQ.

IPv6 packet classification is only available with process switching, whereas IPv4 packet classification is available with both process switching and CEF.

IPv6 and IB/4 traffic types can use a single QoS policy to match both protocols

Different congestion management mechanisms need to be used for IPv4 and IPv6 traffic types

A company plans to use BFD between its routers to detect a connectivity problem inside the switched network. An IPS is transparently installed between the switches. Which packets shold the IPS forward for BFD to work under all circumstances?

IP packets with identical source and destination IP addresses

Fragmented packet with the do-not-fragment bit set

IP packets with broadcast IP source addresses

IP packets with the multicast IP source address

IP packet with the multicast IP destination address

IP packets with identical source and destination IP addresses

IP packets with the destination IP address 0.0.0.0.

A Tier-3 Service Provider is evolving into a Tier-2 Service Provider due to the amount of Enterprise business it is receiving The network engineers are re-evaluating their IP/MPLS design considerations in order to support duplicate/overlapping IP addressing from their Enterprise customers within each Layer3 VPN. Which concept would need to be reviewed to ensure stability in their network?

Assigning unique Route Distinguishers

Assigning unique Route Target ID'S

Assigning unique IP address space for the Enterprise NAT/Firewalls

Assigning unique VRF ID's to each L3VPN

What are two key design principles when using a hierarchical core-distribution-access network model? (Choose two )

A hierarchical network design model aids fault isolation

A hierarchical network design facilitates changes

A hierarchical network design model aids fault isolation

The core layer is designed first, followed by the distribution layer and then the access layer

The core layer provides server access in a small campus.

A hierarchical network design facilitates changes

The core layer controls access to resources for security

A Service Provider is designing a solution for a managed CE service to a number of local customers using a single CE platform and wants to have logical separation on the CE platform using Virtual Routing and Forwarding (VRF) based on IP address ranges or packet length. Which is the most scalable solution to provide this type of VRF Selection process on the CE edge device?

Static Routes for Route Leaking

An MPLS service provider is offering a standard EoMPLS-based VPLS service to Customer A. providing Layer 2 connectivity between a central site and approximately 100 remote sites.Customer A wants to use the VPLS network to carry its internal multicast video feeds which are sourced at the central site and consist of 20 groups at Mbps each. Which service provider recommendation offers the most scalability?

Enable snooping mechanisms on the provider PE routers.

EoMPLS-based VPLS can carry multicast traffic in a scalable manner

Use a mesh of GRE tunnels to carry the streams between sites

Enable snooping mechanisms on the provider PE routers.

Replace VPLS with a Layer 3 MVPN solution to carry the streams between sites

What best describes the difference between Automation and Orchestration?

Automation refers to an automatic process for completing a single task and Orchestration refers to assembling and coordinating a set of tasks and conditions.

Automation describes a hands-off configuration process while Orchestration refers to sets of automation tasks that require the network administrator to coordinate

Automation refers to an automatic process for completing multiple tasks with conditions and Orchestration refers to executing tasks in parallel.

Automation refers to scripting languages (Python. Ansible etc.) and Orchestration refers to commercial products that control configuration deployment

Which actions are performed at the distribution layer of the three-layer hierarchical network design model? (Choose two)

QoS classification and marking boundary

An existing wireless network was designed to support data traffic only. You must now install context Aware services for location tracking changes must be applied to the existing wireless network to increase the location accuracy? (Chose two)

Increase the access point density to create an average inter-access point distance of less than 40 feet or 12.2 meters

Fine tune the radio configuration of the access point to have a higher average transmission power to achieve better coverage

Add access points along the perimeter of the coverage area.

Increase the access point density to create an average inter-access point distance of less than 40 feet or 12.2 meters

Use directional antennas to provide more cell overlapping

Install additional access points in monitor mode where the co-channel interference would otherwise be affected

Fine tune the radio configuration of the access point to have a higher average transmission power to achieve better coverage

Which design benefit of bridge assurance is true?

It prevents switch loops caused by unidirectional point-to-point link condition on Rapid PVST + and MST

It supposes a spanning-tee topology change upon connecting and disconnecting a station on a port

It prevents switched traffic from traversing suboptimal paths on the network.

It allows small, unmanaged switches to be plugged into ports of access switches without the risk of switch loops.

It prevents switch loops caused by unidirectional point-to-point link condition on Rapid PVST + and MST

What advantage of placing the IS-IS layer 2 flooding domain boundary at the core Layer in a threelayer hierarchical network is true?

The Layer 2 domain is contained and more stable

The Layer 1 and Layer 2 domains can easily overlap

It reduces the complexity of the Layer 1 domains

It can be applied to any kind of topology

The Layer 2 domain is contained and more stable

Refer to the exhibit A service provider has a requirement to use Ethernet OAM to detect end-to-end connectivity failures between SP-SW1 and SP- SW2 Which two ways to design this solution are true? (Choose two)

Enable Connectivity Fault Management on the SP switches150

Use upward maintenance endpoints on the SP switches

Enable unicast heartbeat messages to be periodically exchanged between MEPs

Enable Connectivity Fault Management on the SP switches150

Use upward maintenance endpoints on the SP switches

Which design consideration is valid when you contrast fabricPath and trill?

FabricPath permits active-active FHRP and TRILL support anycast gateway.

FabricPath uses IS-IS, but TRILL uses VxLAN

FabricPath permits active-active FHRP and TRILL support anycast gateway.

FabricPath Permits ECMP, but TRILL does not

FabricPath permits active-active mode, but TRILL supports only active-standby mode.

You have been asked to design a remote access VPN solution to support up to 2000 devices. You must ensure that only corporate assets are allowed to connect to the VPN, and users must authenticate to gain access of their based on their user role. Users must use a password that they are already using to access existing applications . A user may not always use the same device to access the VPN. Which two options combined meet the requirements? (Choose two)

Deploy a central authentication directory that users can be authenticated and authorized against

Use local usernames and passwords on the VPN device

Deploy a central authentication directory that users can be authenticated and authorized against

Deploy certificates that are unique to each user

Deploy certificates that are unique to each device

You are designing the routing design for two merging companies that have overlapping IP address space. Which of these must you consider when developing the routing and NAT design?

Global to local NAT translation is done before routing.

Local to global NAT translation is done after routing

Global to local NAT translation is done before routing.

Local to global NAT translation is done before policy-based routing

Global to local NAT translation is done after policy-based routing.

Refer to the exhibit. Company XYZ BGP topology is as shown in the diagram. The interface on the LA router connected toward the 10 1.5.0/24 network is faulty and is going up and down, which affects the entire routing domain. Which routing technique can the network administrator use so that the rest of the network is not affected by the flapping issue?

The LA administrator should use route aggregation to summarize the 10 1 4.0/24, 10 1 5 0/24, 10.1.6.0/24, and 10 1 7 0/24 networks toward Chicago

The LA administrator should use route dampening for the 10.1.5 0/24 network so that it does not get propagated when it flaps up and down.

The LA administrator should use route filtering to block the 10.1.5.0/24 network from getting propagated toward Chicago and New York.

The Chicago administrator should use route filtering to block the 10.1.5.0/24 network from coming in from the LA router.

Company XYZ wants to deploy OSPF. The design plan requires that two OSPF networks be mutually redistributed at multiple locations and ensure end-to-end connectivity to all of the company's networks Which technology can be used to fulfill the requirements while avoiding the creation of routing loops?

Use route maps on ASBRs to filter routes with tags so they are not redistributed.

Create a virtual link between ASBRs.

Change the router ID for both ASBRs.

Redistribute routes as external type 2 routes.

Use route maps on ASBRs to filter routes with tags so they are not redistributed.

Refer to the exhibit. This network is running OSPF as the routing protocol. The internal networks are being advertised in OSPF London and Rome are using the direct link to reach each other although the transfer rates are better via Barcelona Which OSPF design change allows OSPF to calculate the proper costs?

Change the OSPF reference bandwidth to accommodate faster links.

Filter the routes on the link between London and Rome

Change the interface bandwidth on all the links.

Implement OSPF summarisation to fix the issue

Cisco 400-007 Practice Test 4 - Free Online Exam Prep & Questions

Question 1 / 40

Your network operations team is deploying Access Control Lists (ACLs) across your Internet gateways They wish to place an ACL inbound on the Internet gateway interface facing the core network (the "trusted" interface). Which IP address would the ACL need for traffic sourced from the inside interface, to match the source address of the traffic?

inside global

outside global

inside local

outside local

Comment (0)

Cisco 400-007 Practice Test 4

Question

Cisco 400-007 Practice Tests

Practice Tests