400-007 Dumps Help You Study Objectives

1. During evaluation of migrating current on premises infrastructure to add cloud-based infrastructure, a network planning team must meet three core requirements as they make recommendations on which cloud strategy to adopt going forward

• Technology is changing rapidly, therefore the enterprise must be open to adopting new ways of doing things, and be ready to invest CapEx-funds in the next three years

• Network bandwidth capacity requirements are dynamic and are expected to change over the next year

• If new technologies are to be introduced, operational expenses must be kept at a minimum.

Which cloud strategy meets these requirements?

2. SDN emerged as a technology trend that attracted many industries to move from traditional networks to SDN.

Which challenge is solved by SDN for cloud service providers?

3. An architect receives a business requirement from a CTO that states the RTO and RPO for a new system should be as close as possible to zero.

Which replication method and datacenter technology should be used?

4. Which two statements describe the usage of the IS-IS overload bit technique? (Choose two)

5. An engineer is designing the QoS strategy for Company XYZ. Based on initial analysis, a lot of scavenger type of traffic is traversing the network's 20Mb Internet link toward the service provider. The new design must use a QoS technique that limits scavenger traffic to 2 Mbps, which helps avoid oversubscription of the link during times of congestion.

Which QoS technique can be used to facilitate this requirement?

6. Refer to the exhibit.





An engineer is designing the network for a multihomed customer running in AS 111 does not have any other Ass connected to it.

Which technology is more comprehensive to use in the design to make sure that the AS is not being used as a transit AS?

7. Company XYZ has a hub-and-spoke topology over an SP-managed infrastructure. To measure traffic performance metrics, they implemented IP SLA senders on all spoke CE routers and an IP SLA responder on the hub CE router.

What must they monitor to have visibility on the potential performance impact due to the constantly increasing number of spoke sites?

8. Which two statements describe the hierarchical LAN design model? (Choose two)

9. DRAG DROP

Drag and drop the multicast protocols from the left onto the current design situation on the right.

10. Company XYZ, a global content provider, owns data centers on different continents. Their data center design involves a standard three-layer design with a Layer 3-only core. HSRP is used as the FHRP. They require VLAN extension across access switches in all data centers, and they plan to purchase a Layer 2 interconnection between two of their data centers in Europe.

In the absence of other business or technical constraints, which termination point is optimal for the Layer 2 interconnection?

11. The administrator of a small branch office wants to implement the Layer 2 network without running STP. The office has some redundant paths.

Which mechanism can the administrator use to allow redundancy without creating Layer 2 loops?

12. A business customer deploys workloads in the public cloud. Now the customer network faces governance issues with the flow of IT traffic and must ensure the security of data and intellectual property.

Which action helps to identify the issue for further resolution?

13. Company XYZ wants to secure the data plane of their network.

Which two technologies can be included in the security design? (Choose two)

14. 1.You are designing a network running both IPv4 and IPv6 to deploy QoS.

Which consideration is correct about the QoS for IPv4 and IPv6?

15. Refer to the table.





A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The migration is estimated to take 20 months to complete but might extend an additional 10 months if issues arise. All connectivity options meet the requirements to migrate workloads.

Which transport technology provides the best ROI based on cost and flexibility?

16. Refer to the diagram.





Which solution must be used to send traffic from the foreign wireless LAN controller to theanchor wireless LAN controller?

17. Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services Is true?

18. Customer XYZ network consists of an MPLS core. IS-IS running as IGP a pair of BGP route reflectors for route propagation, and a few dozens of MPLS-TE tunnels for specific tactical traffic engineering requirements. The customer's engineering department has some questions about the use of the Overload Bit in the IS-IS networks and how it could be used to improve their current network design.

Which two concepts about the Overload Bit are true? (Choose two.)

19. Which solution component helps to achieve rapid migration to the cloud for SaaS and public cloud leveraging SD-WAN capabilities?

20. You are designing an Out of Band Cisco Network Admission Control. Layer 3 Real-IP Gateway deployment for a customer.

Which VLAN must be trunked back to the Clean Access Server from the access switch?

21. You are designing the QoS policy for a company that is running many TCP-based applications. The company is experiencing tail drops for these applications. The company wants to use a congestion avoidance technique for these applications.

Which QoS strategy can be used to fulfill the requirement?

22. A network architect must redesign a service provider edge, where multiservice and multitenant PEs are currently present.

Which design feature should be minimized in the new design to achieve reliability?

23. A customer migrates from a traditional Layer 2 data center network into a new SDN-based. spine-and-leaf VXLAN EVPN data center within the same location. The networks are joined to enable host migration at Layer 2.

Which activity should be completed each time a legacy network is migrated?

24. Refer to the table.





A customer investigates connectivity options for a DCI between two production data centers. The solution must provide dual 10G connections between locations with no single points of failure for Day 1 operations. It must also include an option to scale for up to 20 resilient connections in the second year to accommodate isolated SAN over IP and isolated, dedicated replication IP circuits. All connectivity methods are duplex 10 Gbps.

Which transport technology costs the least over two years, in the scenario?

25. Which two actions ensure voice quality in a branch location with a low-speed, high-latency WAN connection? (Choose two.)

26. What are two advantages of controller-based networks versus traditional networks? (Choose two.)

27. Which two features are advantages of SD-WAN compared to MPLS-based connectivity? (Choose two.)

28. Company XYZ needs advice in redesigning their legacy Layer 2 infrastructure.

Which technology should be included in the design to minimize or avoid convergence delays due to STP or FHRP and provide a loop-free topology?

29. An engineer is designing a DMVPN network where OSPF has been chosen as the routing protocol A spoke-to-spoke 'J
Which two designconsiderations must be taken into account? (Choose two)

30. What are two descriptions of network optimization? (Choose two.)

31. A network attacker exploits application flaws to compromise critical systems in the organization with these objectives:

• Obtain sensitive data and export the data out of the network.

• Compromise developer and administrator credentials to potentially

What is the next step after application discovery is completed in Zero Trust networkings

32. Company XYZ has two routing domains in their network, EIGRP and OSPF. The company wants to provide full reachability between the two domains by implementing redistribution on a router running both protocols. They need to design the redistribution in a way that the OSPF routers will see link costs added to external routes.

How must the redistribution strategy be designed for this network?

33. Which technology is an open-source infrastructure automation tool that automates repetitive tasks for users who work in networks such as cloud provisioning and intraservice orchestration?

34. Two routers R1 and R2 are directly connected through an Ethernet link. Both routers are running OSPF over the Ethernet link and OSPF has been registered with BFD. R1 has been set up to transmit BFD at a 50 ms interval, but R2 can receive only at a 100 ms rate due to platform limitations.

What does this mean?

35. Sometimes SDN leverages various overlay networking technologies to create layer(s) of network abstraction.

What describes an overlay network?

36. Which optimal use of interface dampening on a fast convergence network design is true?

37. Which two aspects are considered when designing a dual hub dual DMVPN cloud topology? (Choose two)

38. You are designing a large-scale DMVPN network with more than 500 spokes using EIGRP as the IGP protocol.

Which design option eliminates potential tunnel down events on the spoke routers due to the holding time expiration?

39. Company XYZ must design a strategy to protect their routers from DoS attacks, such as traffic destined to the router's own route processor, using separate control plane categories.

Which two capabilities can be used to achieve this requirement? (Choose two.)

40. Which methodology is the leading lifecycle approach to network design and implementation?

41. Which two control plane policer designs must be considered to achieve high availability? (Choose two.)

42. Which design solution reduces the amount of IGMP state in the network?

43. What is the most important operational driver in building a resilient and secure modular network design?

44. Refer to the exhibit.





There are multiple trees in the Cisco FabricPath All switches in the Layer 2 fabric share the same view of each tree.

Which two concepts describe how the multicast traffic is load-balanced across this topology? (Choose two)

45. Software-defined networking architecture is used for cost-effective, adaptable, and easily manageable applications.

In which two software-defined networks is SDN commonly used? (Choose two.)

46. A network architect in an enterprise is designing a network policy for certain database applications. The goal of the policy is to allow these applications to access the internet directly, whereas other user and network applications that communicate with systems or users outside their own network must be routed through the data center. The focus is on achieving higher availability and a better user experience for the database applications, but switching between different network paths based on performance characteristics must be supported.

Which solution meets these requirements?

47. What best describes the difference between Automation and Orchestration?

48. You have been asked to design a high-density wireless network for a university campus.

Which two principles would you apply in order to maximize the wireless network capacity? (Choose two.)

49. Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to minimize network outages by employing a set of procedures and activities to detect and isolate network issues and the appropriate corrective actions to overcome current issues and prevent them from occurring again.

Which layer accomplishes this design requirement?

50. Which mechanism enables small, unmanaged switches to plug into ports of access switches without risking switch loops?

51. Company XYZ runs OSPF in their network. A design engineer decides to implement hot-potato routing architecture.

How can this implementation be achieved?

52. A financial company requires that a custom TCP-based stock-trading application beprioritized over all other traffic for the business due to the associated revenue. The company also requires that VoIP be prioritized for manual trades.

Which directive should be followed when a QoS strategy is developed for the business?

53. Refer to the exhibit.





A service provider has a requirement to use Ethernet OAM to detect end-to-end connectivity failures between SP-SW1 and SP- SW2.

Which two ways to design this solution are true? (Choose two)

54. Which two impacts of adding the IP event dampening feature to a network design are true? (Choose two.)

55. Your company wants to deploy a new data center infrastructure Based on the requirements you have chosen VXLAN as encapsulation technology. The customer is concerned about miss-configuration of Layer 2 devices and DC wide outages caused by Layer 2 loops.

What do you answer?

56. A multicast network is sing Bidirectional PIM.

Which two combined actions achieve high availability so that two RPs within the same network can act in a redundant manner? (Choose two)

57. Refer to the exhibit.





ACME Mining has four data centers in Santiago. Cape Town. Mumbai, and Beijing, full-mesh connected via a 400 Mb/s EVP-LAN.

They want to deploy a new mission-critical application with theserequirements:

✑ cluster heartbeat 2 Mb/s continuous (250 KB/s)

✑ cluster heartbeat one-way maximum latency 100 ms

These are the current ping tests results between the four data centers:





Which hosting data center pair can host the new application?

58. DRAG DROP

An enterprise wants to migrate an on-premises network to a cloud network, and the design team is finalizing the overall migration process. Drag and drop the options from the left into the correct order on the right.

59. Which design principal improves network resiliency?

60. You have been asked to design a remote access VPN solution to support up to 2000 devices. You must ensure that only corporate assets are allowed to connect to the VPN, and users must authenticate to gain access of their based on their user role. Users must use a password that they are already using to access existing applications. A user may not always use the same device to access the VPN.

Which two options combined meet the requirements? (Choose two)

61. An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh IBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process.

Which design solution is the most cost effective?

62. The Layer 3 control plane is the intelligence over the network that steers traffic toward its intended destination.

Which two techniques can be used in service provider-style networks to offer a more dynamic, flexible, controlled, and secure control plane design? (Choose two.)

63. Refer to the exhibit.





A customer runs OSPF with Area 5 between its aggregation router and an internal router When a network change occurs in the backbone. Area 5 starts having connectivity issues due to the SPF algorithm recalculating an abnormal number of times in Area 5 You are tasked to redesign this network to increase resiliency on the customer network with the caveat that Router B does not support the stub area.

How can you accomplish this task*?

64. How many fully established neighbour relationships exist on an Ethernet with five routers running OSPF as network type broadcast?

65. Company ABC uses IPv4-only. Recently they started deploying new endpoint devices. For operational reasons, IPv6 cannot be disabled on these new endpoint devices.

Which security measure prevents the new endpoint from learning an IPv6 prefix from an attacker?

66. Which BGP feature provides fast convergence?

67. Which three tools are used for ongoing monitoring and maintenance of a voice and video environment? (Choose three.)

68. How can EIGRP topologies be designed to converge as fast as possible in the event of a point-to-point link failure?

69. Which two technologies enable multilayer segmentation? (Choose two.)

70. SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.

Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

71. You are using iSCSI to transfer files between a 10 Gigabit Ethernet storage system and a 1 Gigabit Ethernet server. The performance is only approximately 700 Mbps and output drops are occurring on the server switch port.

Which action will improve performance in a cost-effective manner?

72. Which architecture does not require an explicit multicast signaling protocol, such as PIM or P2MP, to signal the multicast state hop-by-hop, but instead uses a link state protocol to advertise the multicast forwarding state?

73. A healthcare provider discovers that protected health information of patients was altered without patient consent. The healthcare provider is subject to HIPAA compliance and is required to protect PHI data.

Which type of security safeguard should be implemented to resolve this issue?

74. A service provider hires you to design its new managed CE offering to meet these requirements

• The CEs cannot run a routing protocol with the PE

• Provide the ability for equal or unequal ingress load balancing in dual-homed CE scenarios.

• Provide support for IPv6 customer routes

• Scale up to 250.000 CE devices per customer.

• Provide low operational management to scale customer growth.

• Utilize low-end (inexpensive) routing platforms for CE functionality.

Which tunneling technology do you recommend?

75. Which two mechanisms avoid suboptimal routing in a network with dynamic mutual redistribution between multiple OSPFv2 and EIGRP boundaries? (Choose two.)

76. Company XYZ wants to redesign the Layer 2 part of their network and wants to use all available uplinks for increased performance. They also want to have end host reachability supporting conversational learning. However, due to design constraints, they cannot implement port-channel on the uplinks.

Which other technique can be used to make sure the uplinks are in active/active state?

77. A banking customer determines that it is operating POS and POI terminals that are noncompliant with PCI DSS requirements, as it is running TLSv1.0. The customer plans to migrate the terminals to TLSv1.2.

What are two requirements to complete the migration? (Choose two.)

78. Which technology supports antispoofing and does not have any impact on encryption performance regardless of packet size?

79. While designing a switched topology, in which two options is UplinkFast recommended? (Choose two)

80. Refer to the exhibit.





As part of a redesign project, you must predict multicast behavior.

What happens to the multicast traffic received on the shared tree (*,G), if it is received on the LHR interface indicated*?