Cisco CCDE 400-007 Questions & Answers

• Question 111:

  Your company wants to deploy a new data center infrastructure Based on the requirements you have chosen VXLAN as encapsulation technology The customer is concerned about miss-configuration of Layer 2 devices and DC wide outages caused by Layer 2 loops.

  What do you answer?

  A. VXLAN offers native loop avoidance mechanism

  B. Storm Control should be enabled on all ports

  C. VPC+ could prevent L2 loop on access ports

  D. BPDU Guard should be enabled on all VTEP access ports

  Correct Answer: D

• Question 112:

  What is the most important operational driver in building a resilient and secure modular network design?

  A. Dependencies on hardware or software that is difficult to scale

  B. Minimize app downtime

  C. Reduce the frequency of failures requiring human intervention

  D. Increase time spent on developing new features

  Correct Answer: C

  https://www.testpreptraining.com/tutorial/developing-procedures-to-ensure-the-resilience-of-solution-in-production/

• Question 113:

  Which feature is supported by NETCONF but is not supported by SNMP?

  A. distinguishing between configuration data and operational data

  B. taking administrative actions

  C. collecting the status of specific fields

  D. changing the configuration of specific fields

  Correct Answer: A

  "SNMP does not distinguish between configurational and operational data" in page 1: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/datamodels/configuration/xe-16/data-models-xe-16-book/yang-netconf.pdf

• Question 114:

  Organizations that embrace Zero Trust initiatives ranging from business policies to technology infrastructure can reap business and security benefits. Which two domains should be covered under Zero Trust initiatives? (Choose two)

  A. workload

  B. work domain

  C. workplace

  D. workgroup

  E. workspace

  Correct Answer: AC

  Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/esg-zt-workplace-wp.pdf

• Question 115:

  Which DCI technology utilizes a "flood and learn" technique to populate the Layer2 forwarding table?

  A. LISP

  B. OTV

  C. VPLS

  D. EVPN

  Correct Answer: C

• Question 116:

  Which tool automates network implementation activities and shortens the implementation lifecycle?

  A. LISP

  B. Java

  C. Conclusion

  D. Python

  Correct Answer: D

• Question 117:

  A network architect in an enterprise is designing a network policy for certain database applications. The goal of the policy is to allow these applications to access the internet directly, whereas other user and network applications that communicate with systems or users outside their own network must be routed through the data center. The focus is on achieving higher availability and a better user experience for the database applications, but switching between different network paths based on performance characteristics must be supported.

  Which solution meets these requirements?

  A. MPLS L3VPN with QoS

  B. Cloud onRamp for laaS

  C. Cloud onRamp for SaaS

  D. MPLS direct connect

  Correct Answer: C

  https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/sd- wan/nb-06-cloud-onramp-saas-faq-cte-en.html

• Question 118:

  Company XYZ is designing their network using the three-layer hierarchical model. At which layer must the QoS design classify or mark the traffic?

  A. access

  B. core

  C. collapsed core

  D. distribution

  Correct Answer: A

• Question 119:

  Company XYZ has a hub-and-spoke topology over an SP-managed infrastructure. To measure traffic performance metrics, they implemented IP SLA senders on all spoke CE routers and an IP SLA responder on the hub CE router. What must they monitor to have visibility on the potential performance impact due to the constantly increasing number of spoke sites?

  A. CPU and memory usage on the spoke routers

  B. memory usage on the hub router

  C. CPU usage on the hub router

  D. interface buffers on the hub and spoke routers

  Correct Answer: C

• Question 120:

  Company XYZ is designing the IS-IS deployment strategy for their multiarea IS-IS domain. They want IS-IS neighbour relationships to be minimized on each network segment and want to optimize the size of the IS-IS LSDB on each router. Which can design can be used to meet these requirements?

  A. Design all routers as Level 2 routers. Set the links between the routers as Level 1 with the area

  B. Design the network so that the routers connecting to other areas are Level 2 routers and internal routers are Level 1

  C. Design the network so that all routers are Level 1 routers

  D. Design the network so that the routers connecting to other areas are Level 1/Level 2 routers and internal routers are Level 1

  Correct Answer: D

  A Level-1 router must be connected to other areas through a Level-1-2 router. The Level-1-2 router maintains two LSDBs