Cisco CCDE 400-007 Questions & Answers

• Question 171:

  Which two actions ensure voice quality in a branch location with a low-speed, high-latency WAN connection? (Choose two.)

  A. Increase WAN bandwidth

  B. Increase memory branch switch.

  C. Fragment data packets.

  D. Replace any electrical links with optical links

  E. Prioritize voice packets

  Correct Answer: CE

• Question 172:

  Which two data plane hardening techniques are true? (Choose two)

  A. warning banners

  B. redundant AAA servers

  C. Control Plane Policing

  D. SNMPv3

  E. infrastructure ACLs

  F. disable unused services

  G. routing protocol authentication

  Correct Answer: EF

• Question 173:

  Company XYZ has 30 sites using MPLS L3 VPN and the company is now concerned about data integrity. The company wants to redesign the security aspect of their network based on these requirements:

  Securely transfer the corporate data over the private WAN

  Use a centralized configuration model.

  Minimize overhead on the tunneled traffic.

  Which technology can be used in the new design to meet the company's requirements?

  A. S-VTI

  B. DMVPN

  C. MGRE

  D. GET VPN

  Correct Answer: D

• Question 174:

  Company XYZ is running BGP as their routing protocol. An external design consultant recommends that TCP path MTU discovery be enabled. Which effect will this have on the network?

  A. It will enhance the performance of TCP-based applications.

  B. It will increase the convergence time.

  C. It will improve the convergence time.

  D. It will create a loop free path.

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp/configuration/15-sy/iap-15-sy-book/iap-tcp.html#GUID-E0CD16F9-E817-4B50-849A-4760E1C0A9B1

  Use the ip tcp path-mtu-discovery global configuration command to enable Path MTU Discovery for connections initiated by the device when the device is acting as a host.

• Question 175:

  Retef to the exhibit.

  

  An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain EIGRP routes are getting redistributed into OSPF ,OSPF area 20 has routers with limited memory and CPU resources The engineer wants to block routes from EIGRP 111 from propagating into area 20 and allow EIGRP 222 routes to how in. Which OSPF area type fulfills this design requirement?

  A. area 20 as a stub area

  B. type 5 LSA filtering on the ASBR between EIGRP 111 and area a

  C. area 20 as a NSSA area

  D. type 3 LSA filtering on the ABR between area 0 area 20

  Correct Answer: C

• Question 176:

  Refer to the exhibit.

  

  An engineer has been asked to redesign the traffic flow toward AS 111 coming from AS 500.Traffic destined to AS 111 network 91 7 0.0/16 should come in via AS 100. while traffic destined to all other networks in AS 111 should continue to use the existing path.

  Which BGP attributes are best suited to control this inbound traffic coming from BGP AS 500 Into the 91.7.0.0/16 network?

  A. Prepend AS path for the 91.7.0.0/16 network and set it for neighbor in AS 200.

  B. Use extended community for the 91.7.0.0/16 network, not advertising it to the bi-lateral peer.

  C. Use local preference on R1 for the networks that AS 500 advertises to AS 111.

  D. Set higher MED for neighbor in AS 100 to influence incoming traffic for the 91. 7.0.0/16 network.

  Correct Answer: A

• Question 177:

  An architect receives a functional requirement for a NAC system from a customer security policy stating that if a corporate Wi-Fi device does not meet current AV definitions, then it cannot access the corporate network until the definitions are updated. Which component should be built into the NAC design?

  A. posture assessment with remediation VLAN

  B. quarantine SGTs

  C. dACLs with SGTs

  D. quarantine VLAN

  Correct Answer: A

• Question 178:

  Which two conditions must be met for EIGRP to maintain an alternate loop-free path to a remote network? (Choose two.)

  A. The Reported Distance from a successor is lower than the local Feasible Distance.

  B. The Reported Distance from a successor is higher than the local Feasible Distance.

  C. The feasibility condition does not need to be met.

  D. The Feasible Distance from a successor is lower than the local Reported Distance.

  E. A feasible successor must be present.

  Correct Answer: AE

• Question 179:

  The administrator of a small branch office wants to implement the Layer 2 network without running STP The office has some redundant paths.

  Which mechanism can the administrator use to allow redundancy without creating Layer 2 loops?

  A. Use double-sided VPC on both switches

  B. Use two port channels as Flex links

  C. Use fabric path with ECMP

  D. Use 802.3ad link bundling.

  Correct Answer: B

  Flex links are a pair of a Layer 2 interfaces (switch ports or port channels) where one interface is configured to act as a backup to the other Reference: https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/consolid ated_guide/b_consolidated_3850_3se_cg_chapter_01001101.html

• Question 180:

  Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to monitor and keep track of any performance issues by continuously collecting and analyzing statistical information to monitor, correct, and optimize any reduced responsiveness across the network. Which layer accomplishes this design requirement?

  A. fault management

  B. accounting management

  C. performance management

  D. security management

  Correct Answer: C