Cisco CCDE 400-007 Questions & Answers

• Question 101:

  Company XYZ wants to redesign the Layer 2 part of their network and wants to use all available uplinks for increased performance. They also want to have end host reachability supporting conversational learning. However, due to design constraints, they cannot implement port-channel on the uplinks. Which other technique can be used to make sure the uplinks are in active/active state?

  A. TRILL

  B. LISP

  C. MSTP

  D. switch stack

  Correct Answer: A

  TRILL is a layer 2 protocol that enables multipathing and load balancing in the network by allowing multiple parallel paths between switches. This means that traffic can be distributed across all available uplinks, which would increase performance and availability.

• Question 102:

  What is a description of a control plane action?

  A. de-encapsulating and re-encapsulating a packet in a data-link frame

  B. matching the destination MAC address of an Ethernet frame to the MAC address table

  C. matching the destination IP address of an IP packet to the IP routing table

  D. hosts locating routers that reside on attached links using the IPv6 Neighbor Discover Protocol

  Correct Answer: D

  The neighbor discovery process is that part of the control plane that implements the Neighbor Discovery Protocol.

  Bottom of page 40: https://www.juniper.net/documentation/us/en/software/junos/neighbor-discovery/neighbor-discovery.pdf

• Question 103:

  Company ABC uses IPv4-only. Recently they started deploying new endpoint devices. For operational reasons, IPv6 cannot be disabled on these new endpoint devices. Which security measure prevents the new endpoint from learning an IPv6 prefix from an attacker?

  A. Source Guard and Prefix Guard

  B. Router Advertisement Guard

  C. Prefix Guard

  D. Secure Neighbor Discovery

  Correct Answer: B

• Question 104:

  Company XYZ needs advice in redesigning their legacy Layer 2 infrastructure. Which technology should be included in the design to minimize or avoid convergence delays due to STP or FHRP and provide a loop-free topology?

  A. Use switch clustering in the access layer.

  B. Use switch clustering in the core/distribution layer.

  C. Use spanning-tree PortFast.

  D. Use BFD.

  Correct Answer: B

• Question 105:

  Various teams in different organizations within an enterprise are preparing low-level design documents to capture network parameters using a Waterfall project model:

  hardware sizing and power consumption

  Layer 2 and layer 3 services parameters

  configuration of all control plane protocols

  Input from relevant stakeholders was captured at the start of the project, and the project scope has been defined based on the parameters above.

  What impact will it have on documentation and project deliverables if the stakeholders ask to have changes carried out in the network before the information has been captured?

  A. This provides more opportunity to think outside the box.

  B. Rework is expected before the delivery.

  C. Significant effort and time are required.

  D. This provides a flexible approach to incorporate changes.

  Correct Answer: B

  Redo work is expected for whole project, but the situation of the question is more focus on very early stage.

  Waterfall can require that a phase be fully completed before proceeding to the next one, and it's extremely difficult to go back if you miss anything. That means you and your team must check every box before moving on, or there could be a lot of rework needed. This could easily derail your schedule since there are many dependent relationships between tasks—every day of delay is another day added to your overall schedule. https://www.clearpointstrategy.com/blog/waterfall-project-management

• Question 106:

  The network designer needs to use GLOP IP addresses in order to make them unique within their ASN. Which multicast address range should be used?

  A. 232.0.0.0 to 232 255.255.255

  B. H233.0.0 0 to 233.255.255 255

  C. 239000 to 239255255.255

  D. 224000 to 2240.0 255

  Correct Answer: B

• Question 107:

  Your network operations team is deploying Access Control Lists (ACLs) across your Internet gateways They wish to place an ACL inbound on the Internet gateway interface facing the core network (the "trusted" interface). Which IP address would the ACL need for traffic sourced from the inside interface, to match the source address of the traffic?

  A. inside global

  B. outside global

  C. inside local

  D. outside local

  Correct Answer: C

• Question 108:

  Which two factors provide multifactor authentication for secure access to applications and data, no matter where the users are or which devices they are on? (Choose two.)

  A. persona-based

  B. power-based

  C. push-based

  D. possession-based

  E. pull-based

  Correct Answer: CD

• Question 109:

  Company XYZ asks for design recommendations for Layer 2 redundancy. The company wants to prioritize fast convergence and resiliency elements. In the design. Which two technologies are recommended? (Choose two.)

  A. Design MLAG/MC-LAG into the network wherever possible.

  B. Configure DHCP snooping on the switches.

  C. Use root guard.

  D. Use BPDU guard.

  E. Use UniDirectional Link Detection.

  Correct Answer: AC

  UDLD is not related at all.

  Root guard help for root election faster.

  This question is simular with Q111.

• Question 110:

  You want to mitigate failures that are caused by STP loops that occur before UDLD detects the failure or that are caused by a device that is no longer sending BPDUs. Which mechanism do you use along with UDLD?

  A. Root guard

  B. BPDU guard

  C. Loop guard

  D. BPDU filtering

  Correct Answer: C