VPLS is implemented in a Layer 2 network with 2000 VLANs. What is the primary concern to ensure successful deployment of VPLS?

Flooding is necessary to propagate MAC address reachability information

The underlying transport mechanism

Which design benefit of PortF ast is true?

PortFast does not generate a spanning tree topology change hen a station on a port is connected or disconnected

PortFast disables spanning tree on the port, which puts the port into the forwarding state immediately after it is connected

PortFast allows small, unmanaged switches to be plugged into ports of access switches without risking switch loops

PortFast detects one-way communications on the physical port, which prevents switch loops

PortFast prevents switch loops that are caused by a unidirectional point to point link condition on Rapid PVST+ and MST

PortFast prevents switched traffic from traversing suboptimal paths on the network

You are designing a new Ethernet-based metro-area network for an enterprise customer to connect 50 sites within the same city OSPF will be the routing protocol used. The customer is primarily concerned with IPv4 address conservation and convergence time. Which two combined actions do you recommend? (Choose two)

Use a multipoint Metro-E service for router connections

Use P2P links between routers in a hub-and-spoke design

Use a multipoint Metro-E service for router connections

Use a single address per router for all P2P links

Use P2P links between routers in a hub-and-spoke design

Configure address aggregation at each site router

Determine which OSPF routers will be DR/BDR

Which two statements about MLD snooping are true? (Choose two)

AN MLD snooping querier election occurs when any MLD snooping querier goes down or if there is an IP address change on the active querier.

When multiple MLD snooping queriers are enabled in a VLAN, the querier with the lowest IP address in the VLAN is elected as the active MLD snooping querier.

When MLD snooping is enabled, QoS is automatically enabled.

A VLAN can support multiple active MLD snooping queries, as long as each one is associated to a different multicast group.

AN MLD snooping querier election occurs when any MLD snooping querier goes down or if there is an IP address change on the active querier.

When multiple MLD snooping queriers are enabled in a VLAN, the querier with the lowest IP address in the VLAN is elected as the active MLD snooping querier.

Which option is a fate-sharing characteristic in regards to network design?

A failure of a single element causes the entire service to fail

It protects the network against failures in the distribution layer

It acts as a stateful forwarding device

It provides data sequencing and acknowledgment mechanisms

Which statement about hot-potato routing architecture design is true?

Hot-potato routing is the preferred architecture when connecting to content providers

Hop-potato keeps traffic under the control of the network administrator for longer

OSPF uses hot-potato routing if all ASBRs use the same value for the external metric

Hot-potato routing is prone to misconfiguration as well as poor coordination between two networks

Two enterprise networks must be connected together. Both networks are using the same private IP addresses.The client requests from both sides should be translated using hide NAT (dynamic NAT) with the overload feature to save IF addresses from the NAT pools. Which design addresses this requirement using only one Cisco I OS NAT router for both directions?

Two different NAT pools must be used for the ip nat inside source and the ip nat outside source commands for the overload feature in both directions.

This is not possible, because two Cisco IOS NAT routers are required to do dynamic NAT, with overload in both directions.

The ip nat inside and ip nat outside commands must be configured at the interfaces with the overload option in both directions.

The overload feature is the default and does not have to be configured.

Two different NAT pools must be used for the ip nat inside source and the ip nat outside source commands for the overload feature in both directions.

The Nat Virtual interface must be used to achieve this requirement.

Which two actions minimize the impact of the trusted NMS polling your network, such as high CPU utilization on network devices and network instability? (Choose two.)

Prevent polling of large tables through the use of SNMP OID restnctions

Implement SNMP community restrictions that are associated with an ACL

Prevent polling of large tables through the use of SNMP OID restnctions

Disable unused 01 Ds and MIBs on the NMS systems

Increase the SNMP process priority

Implement SNMP community restrictions that are associated with an ACL

Unload unused MIBs from the network devices

Refer to the exhibit. Refer to the exhibit A customer network design team is planning a migration from a legacy TDM-based L2VPN to an MPLS-based L3VPN Migration is planned in a phased approach:*OSPF backbone Link between HUB A and HUB B sites to be migrated to eBGP*Spoke A2 and Spoke B1 will be migrated to the L3VPNWhich solution design can be considered to avoid routing loops during backbone link migration?

OSPF backbone area advertises summarized routes to hub.

Enable route-filtering on OSPF backbone routers for spoke traffic

Advertise low AD value for transit traffic on hub sites.

OSPF backbone area advertises summarized routes to hub.

Redistribute EIGRP 200 and 300 with low cost into BGP

Network designers often segment networks by creating modules for various reasons Sometimes however a network can be unintentionally segmented For instance, if the only way to connect a remote site to a headquarters or regional site is to connect them both to the public Internet the corporate network is now unintentionally segmented Which of the following option can be used to desegment the network in this situation?

Build virtual networks that pass over the network

Mark traffic for special handling through quality of service

Configure little to no control data plane policy

Block specific sources from reaching specific destinations

You want to add 900 VLANs to the existing 90 VLANs on a data center Which two spanning-tree concerns must you consider? (Choose two )

The diameter of the STP topology is increased.

The PVST+ increases CPU utilization

STP is increased by a factor of 10 convergence time

To add 990 VLANs to the switching hardware reserved VLANs requires you to use extended VLAN

The diameter of the STP topology is increased.

The PVST+ increases CPU utilization

BPDU does not support 990 VLANs

It is often seen that companies pick a cloud vendor solely based on technical preferences without putting enough weight on the business strategies that are driving the cloud initiatives Which strategic requirement may come into play where it is more likely that the decision makers will look to leverage laaS over SaaS or PaaS?

control over the underlying infrastructure

selling products and services globally 24/7

integration with partner or vendor supply chains

control over the underlying infrastructure

speed-to-market is more important for an initiative

As a service provider is implementing Strong Access Control Measures, which two of the following PCI Data Security Standard requirements must be met' (Choose two.)

Assign a unique ID each person with computer access

Restrict access to cardholder data to on a need-to-know basis

Assign a unique ID each person with computer access

Restrict access to cardholder data to on a need-to-know basis

Encrypt transmission of cardholder data across open or public networks

Each location must require validating PCI compliance if business has multiple locations

Which interface between the controller and the networking device enables the two to communicate and allows the controller to program the data plane forwarding tables of the networking device?

application programming interface

A private cloud is accessed over the private IT network infrastructure that is potentially vulnerable to violations, data leaks, and man-in- the-middle attacks. The security team is evaluating the following solutions to address the challenges:*Encrypt data at rest and in transition.*Use strong identity and access management (IAM) capabilities.*Communicate the inherent data security risks to your customers and end-users.Assuming that adoption of a hybrid cloud model is likely to occur within the next 12 months, which two solutions can also help provide protection in a hybrid cloud environment? (Choose two.)

Implement a common protective methodology for the same information at rest or motion at different points of time

Apply cryptographic protocols to secure data transmission over the network

Avoid automating the scanning and remediation of security controls using open-source tooling

Practice SSH network protocols for data communication between unsecured network connections

Implement a common protective methodology for the same information at rest or motion at different points of time

Provide distributed management and visibility across the infrastructure instead of centralized management

Apply cryptographic protocols to secure data transmission over the network

Refer to the exhibit. Two data center siles X and Y are connected with a direct backdoor link with these conditions *Site-specific firewalls are deployed behind the Internet edge routers R1 and R2 *Both sites are advertising the address pool 100 75 10 0/23 toward the internet Site-X finds that Internet traffic returning from user PCs comes back on the Site-Y link Which design resolves the issue?

Use BGP MED to influence Site-X return traffic Change the IP address scheme of both sites.

Change the Site-Y firewall configuration to replicate the Site-X configuration. Advertise the low MED attribute on Site-X to the Internet.

Add a static route toward the Internet on Site-X. Change the DNS policy on Site-Y to block traffic.

Establish control plane peering between edge routers. Have Site-X advertise an IP pool with a longer prefix.

When planning their cloud migration journey what is crucial for virtually all organizations to perform?

assessment of current infrastructure

RPO and RTO calculations duration planning

Backups and mirror-copies of data are an essential part of RPO solutions If a business wants to reduce their CAPEX for disaster recovery, which of the following solutions are applicable?

Migrate parts of or all the infrastructure to the cloud

Perform an annual cyber security assessment or penetration test

Renew backup software annually to get the newest version of the console and stay protected

Migrate parts of or all the infrastructure to the cloud

Build a redundant infrastructure for business continuity / disaster recovery purposes at another location

Refer to the exhibit. Refer to the exhibit Company XYZ is a large enterprise network where the WAN traffic utilizes most of the link. The IT team in the company often reports Stuck-In-Active problems The company is set to acquire another company that will also be running EIGRP and which will connect to the Company XYZ R3 and R4 routers This acquisition could make the issue worse Which design solution solves this problem?

Deploy the EIGRP stub capability on R5 and R6 with the connected and summary options enabled.

Utilize the EIGRP unequal cost load-balancing feature on R5 and R6 to provide an intenm solution

Implement EIGRP Route Flap Dampening

Deploy the EIGRP stub capability on R5 and R6 with the connected and summary options enabled.

Advertise only the default route to R5 and R6. filtering all other routes.

Company XYZ has multiple production units and marketing departments across the region The current network is a mixture of point-to-point links and MPLS Layer 3 VPN service from the provider. The Info-Sec team has suggested to isolate production traffic end-to-end with an encryption over the transport network to comply with the HIPAA standard Which solution must be used in their design if Company XYZ wants a quick roll out''?

IPsec point-to-point tunnels over the MPLS and point-to-point links provide an isolated and encrypted packet end-to-end

GETVPN can be implemented over the MPLS provider which provides a payload encryption without the overhead of the tunnelling

A firewall can be placed centrally to filter out the traffic based on required ports

VRF-Lite can be implemented toward the downstream network and VRF-based tunnels combined with IPsec can be implemented over the service provider

One of the approaches used in cloud bursting scenarios is distributed load-balanced, which operate the workloads in tandem between a public cloud and a data center In which way can the characteristics of distributed load-balancing be described?

Simultaneously provisions cloud resources

Usually uses cloud APIs for communication.

Useful for testing and proof-of-concept projects

Useful for large but temporary cloud deployments

Which two factors must be considered while calculating the RTO? (Choose two )

importance and priority of individual systems

steps needed to mitigate or recover from a disaster

importance and priority of individual systems

maximum tolerable amount of data loss that the organization can sustain

cost of lost data and operations

how often backups are taken and how quickly these can be restored

steps needed to mitigate or recover from a disaster

Company XYZ wants to implement an IPS device to detect and block well-known attacks against their network They want a design solution where all packets that are forwarded to the network are checked against a signature database before being allowed through This check must be done with the minimum effect on performance. Which design is recommended?

Deploy and IPS in front of the firewall in in-line mode

Deploy an IPS behind the firewall in promiscuous mode

Deploy an IPS in front of the firewall in promiscuous mode

Deploy an IPS behind the firewall in in-line mode

Deploy and IPS in front of the firewall in in-line mode

Two routers R1 and R2 are directly connected through an Ethernet link Both routers are running OSPF. OSPF has been registered with BFD and BFD is running in asynchronous mode with the echo function enabled Which two actions occur that are related to the echo function? (Choose two)

BFD control packets are sent at a slower pace because the echo function is enabled

BFD echo packets are sent from forwarding engines along the Layer 2 path to perform detection

BFD control packets are sent at a slower pace because the echo function is enabled

BFD echo packets are sent from forwarding engines along the Layer 2 path to perform detection

BFD control packets are sent at a higher pace because the echo function is enabted

Only BFD control packets are sent from forwarding engines along the Layer 2 path to perform detection

DUMPS BFD sessions at either end actively participate in the forwarding of echo packets

Cisco 400-007 Practice Test 9 - Free Online Exam Prep & Questions

Refer to the exhibit.

Cisco 400-007 image Question 321 118997 10102024233154000000

A new high availability DB sever cluster is installed in the network.

These two servers require high bandwidth and low latency Layer 2 connectivity for database replication.

Which solution supports these requirements?

Become a Premium Member for full access

Unlock Premium Member

Cisco 400-007 Practice Test 9

Question

Cisco 400-007 Practice Tests

Practice Tests