Various teams in different organizations within an enterprise are preparing low-level design documents to capture network parameters using a Waterfall project model:• hardware sizing and power consumption• Layer 2 and layer 3 services parameters• configuration of all control plane protocolsInput from relevant stakeholders was captured at the start of the project, and the project scope has been defined based on the parameters above. What impact will it have on documentation and project deliverables if the stakeholders ask to have changes carried out in the network before the information has been captured?

Rework is expected before the delivery.

This provides more opportunity to think outside the box.

Rework is expected before the delivery.

Significant effort and time are required.

This provides a flexible approach to incorporate changes.

A network security team observes phishing attacks on a user machine from a remote location. The organization has a policy of saving confidential data on two different systems using different types of authentication. What is the next step to control such events after the security team verifies all users in Zero Trust modeling?

Ensure trustworthiness of devices.

Enforce risk-based and adaptive access policies.

Assess real-time security health of devices.

Apply a context-based network access control policy for users.

Ensure trustworthiness of devices.

A product manufacturing organization is integrating cloud services into their IT solution The IT team is working on the preparation phase of the implementation approach, which includes the Define Strategy step. This step defines the scope of IT, the application, and the service What is one topic that should be considered in the Define Strategy step?

financial and governance models

innovate and align with business according to volume

due diligence and financial scenarios

contingency exit strategy steps

Company XYZ is revisiting the security design for their data center because they now have a requirement to control traffic within a subnet and implement deep packet inspection Which technology meets the updated requirements and can be incorporated into the design?

zone-based firewall on the Layer 3 device

Hybrid cloud computing allows organizations to like advantage of public and private cloud models Which best practice should organizations follow to ensure data security in the private cloud?

Encrypt data when it is at rest and in motion

Use standard protocols for data transmission over the network.

Encrypt data when it is at rest and in motion

Communicate all data security risks to customers and end users.

Use standard network protocols for data communication between unsecured network connections.

A financial company requires that a custom TCP-based stock-trading application be prioritized over all other traffic for the business due to the associated revenue. The company also requires that VoIP be prioritized for manual trades.Which directive should be followed when a QoS strategy is developed for the business?

The custom application and VoIP must be assigned their own separate priority queue.

Allow VoIP and the custom application to share the same priority queue,

The custom application and VoIP must be assigned their own separate priority queue.

Interleave the custom application with other TCP applications in the same CBWR

Avoid placing the custom application in a CBWFQ queue that contains other

An engineer is designing a DMVPN network where OSPF has been chosen as the routing protocol A spoke-to-spoke 'J<ita propagation model must be set up Which two design considerations must be taken into account? (Choose two )

Configure all the sites as network type broadcast

The hub should be the DR by changing the priority of the spokes to 0.

Configure all the sites as network type broadcast

The network type on all sites should be point-to-multipoint

The network type should be point-to-multipoint for the hub and point-to-point for the spokes.

The hub should be set as the DR by specifying the priority to 255.

The hub should be the DR by changing the priority of the spokes to 0.

Which two characteristics are associated with 802 1s? (Choose two)

802.1s provides for faster convergence over 802 1D and PVST+.

802.1s maps multiple VLANs to the same spanning-tree instance

802.1s supports up to 1024 instances of 802.1

802.1 s is a Cisco enhancement to 802.1w.

802.1s provides for faster convergence over 802 1D and PVST+.

CPU and memory requirements are the highest of all spanning-tree STP implementations.

802.1s maps multiple VLANs to the same spanning-tree instance

Which parameter is the most important factor to consider when deciding service placement in a cloud solution?

security framework Implementation time

An external edge router provides connectivity from a service provider to an enterprise Which two Internet edge best practices meet compliance regulations'? (Choose two )

Enable and use only secure protocols.

Use login banners and interface access lists to restrict administrative access to the system

Implement filtenng to control traffic that is sourced from the infrastructure IP space.

Enable and use only secure protocols.

Send logs to a centralized logging collection server.

Implement EBGP to advertise all owned IP blocks.

Use login banners and interface access lists to restrict administrative access to the system

What are two top cloud-native security challenges faced by today's cloud-oriented organizations?(Choose two )

lack of visibility and tracking

As a network designer you need to support an enterprise with hundreds of remote sites connected over a single WAN network that carries different types of traffic, including VoIP, video, and data applications which of following design considerations will not impact design decision?

Focus on the solution instead of the problem, which helps to reduce downtime duration

The location of the data collection

What direction the data or flows should be metered

Identify traffic types and top talkers over this link

A customer migrates from a traditional Layer 2 data center network into a new SDN-based. spineand- leaf VXLAN EVPN data center within the same location. The networks are joined to enable host migration at Layer 2 Which activity should be completed each time a legacy network is migrated?

The migrated VLAN should be pruned from the Layer 2 interconnects.

The migrated network should have a VXLAN VNID configured within the new network.

The migrated network should be advertised to the EVPN network as a Type 2 network.

The migrated network should be added to the EVPN BGP routing.

The administrator of a small branch office wants to implement the Layer 2 network without running STP The office has some redundant paths Which mechanism can the administrator use to allow redundancy without creating Layer 2 loops?

Use two port channels as Flex links

Use double-sided VPC on both switches

Use two port channels as Flex links

Company XYZ has designed their network to run GRE over IPsec on their Internet-based VPN to connect two sites. Which IPsec tunneling feature can they enable to optimize the data flow while ensuring that the headers contain no duplicate IP addresses?

Transport Mode in IPsec Phase II

Transport Mode in IPsec Phase I

Transport Mode in IPsec Phase II

The controller has a global view of the network, and it can easily ensure that the network is in a consistent and optimal configuration. Which two statements describe a centralized SDN control path? (Choose two.)

Scaling of the centralized controller cluster is challenging for services like DHCP and loadbalancing.

It centralized controller can support all southbound APIs, which allows for easy integration with legacy equipment.

Scaling of the centralized controller cluster is challenging for services like DHCP and loadbalancing.

It is highly-available by design with no single-point-of-failure risks present.

Integrating smart NIC capabilities on the local host level is made easier through rest APIs.

It significantly improves the latency when performing reactive handling of PACKET_IN events.

It centralized controller can support all southbound APIs, which allows for easy integration with legacy equipment.

A business requirement stating that failure of WAN access for dual circuits into an MPLS provider for a Data Centre cannot happen due to related service credits that would need to be paid has led to diversely routed circuits to different points of presence on the providers network? What should a network designer also consider as part of the requirement?

Provision of an additional MPLS provider

Out of band access to the MPLS routers

Ensuring all related remote branches are dual homed to the MPLS network

Dual PSUs & Supervisors on each MPLS router

SDN emerged as a technology trend that attracted many industries to move from traditional networks to SDN. Which challenge is solved by SDN for cloud service providers?

exponential growth of resource-intensive application

need for intelligent traffic monitoring

exponential growth of resource-intensive application

complex and distributed management flow

higher operating expense and capital expenditure

Company XYZ connects its sites over a private WAN. Their overlay network is running a DMVPN setup where the headquarters site is the hub. The company is planning on implementing multicast routing on the network. What should be used in the multicast routing design?

PIM sparse mode with RP located at the hub

PIM dense mode with RP located at the hub

PIM sparse mode with RP located at each remote site

PIM sparse mode with RP located at the hub

PIM dense mode with RP located at each remote site

Which extensions to GRE tunneling provide session tracking and in-order packet delivery in exchange for additional state stored in tunnel endpoints?

GRE Key and Sequence number extensions.

GRE Protocol Type and Checksum extension fields.

GRE Version and Reserved0 extension fields.

No extension fields are available in the GRE header to track session data and packet sequences.

GRE Key and Sequence number extensions.

A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The systems run legacy applications by using hard-codedIP addresses. Which segmentation method is suitable and scalable for the customer?

data center perimeter firewalling

A business invests in SDN and develops its own SDN controller that, due to budget constraints, runs on a single controller. The controller actively places an exclusive lock on the configuration of the devices to ensure it is the only source of changes to the environment. What is the result if the controller fails?

All device configurations are in read-only mode until the controller is restored.

The control plane is unavailable until the controller is restored.

If a device fails, the configuration backup is unavailable-

Manual changes are only possible until the controller is restored

A service provider recently migrated to an SD-WAN solution for delivering WAN connections to its customers. One of the main challenges with the SD-WAN deployment is that branch site volume increases every year, which causes management complexity. Which action resolves the issue?

Adopt a well-structured SD-WAN service management lifecycle model

Implement a scalable network management system to manage all sites.

Adopt a well-structured SD-WAN service management lifecycle model

Build a service orchestration platform on top of the network controller

Set up a dedicated team to monitor and provision new customers

Which two statements describe network automation and network orchestration? (Choose two.)

Network automation does not provide governance or policy management.

Network orchestration is done through programmatic REST APIs enabling automation across devices and management platforms.

Network automation does not provide governance or policy management.

Network automation spans multiple network services, vendors, and environments.

Network orchestration is done through programmatic REST APIs enabling automation across devices and management platforms.

Provisioning network services is an example of network automation.

Network orchestration is used to run single, low-level tasks without human intervention

Company XYZ must design a strategy to protect their routers from DoS attacks, such as traffic destined to the router's own route processor, using separate control plane categories. Which two capabilities can be used to achieve this requirement? (Choose two.)

Control Plane Protection using queue thresholding on the host subinterface

Control Plane Protection using port filtering on the host subinterface

Control Plane Protection using queue thresholding on the transit subinterface

Control Plane Protection using port filtering on the transit subinterface

Control Plane Protection using port filtering on the main interface

Control Plane Protection using queue thresholding on the host subinterface

Control Plane Protection using port filtering on the host subinterface

In the case of outsourced IT services, the RTO is defined within the SL

Which two support terms are often included in the SLA by IT and other service providers? (Choose two.)

Which design solution reduces the amount of IGMP state in the network?

one multicast group address thorough network regardless of IGMP version

A company requires an RPO of less than 10 seconds to ensure business continuity. Which technology should be deployed?

geographically dispersed data centers with synchronous replication

geographically dispersed data centers with asynchronous replication

a single data center with duplicated infrastructure, dual PSUs, and a UPS

geographically dispersed data centers with synchronous replication

a single data center with duplicated infrastructure and dual PSUs

Company XYZ is running BGP as their routing protocol. An external design consultant recommends that TCP path MTU discovery be enabled. Which effect will this have on the network?

It will improve the convergence time.

It will enhance the performance of TCP-based applications.

It will increase the convergence time.

It will improve the convergence time.

It will create a loop free path.

Company XYZ is migrating their existing network to IPv6 and they must plan for Layer 2 and Layer 3 devices Some of the access layer switches do not support IPv6, however, core and distribution switches fully support unicast and multicast routing. The company wants to minimize cost of the migration. Which migration strategy should be used in the design?

Layer 2 switches will not affect the implementation of IPv6. They can be included in the design in their current state.

The access layer switches must support IGMP snooping at a minimum. Any switches that do not support IGM snooping must be replaced.

Upgrade the nonsupporting switches Otherwise, it will cause an issue with the migration.

Layer 2 switches will not affect the implementation of IPv6. They can be included in the design in their current state.

The access layer switches must support DHCPv6. Any switches that do not support DHCPv6 must be replaced.

Cisco 400-007 Practice Test 5 - Free Online Exam Prep & Questions

When an SDN-based model is used to transmit multimedia traffic, which aspect should an architect consider while designing the network?

QoE estimation

security

traffic patterns

flow forwarding

Comment (0)

Cisco 400-007 Practice Test 5

Question

Cisco 400-007 Practice Tests

Practice Tests