Cisco CCDE 400-007 Questions & Answers

• Question 191:

  A service provider hires you to design its new managed CE offering to meet these requirements

  The CEs cannot run a routing protocol with the PE

  Provide the ability for equal or unequal ingress load balancing in dual-homed CE scenarios.

  Provide support for IPv6 customer routes

  Scale up to 250.000 CE devices per customer.

  Provide low operational management to scale customer growth.

  Utilize low-end (inexpensive) routing platforms for CE functionality.

  Which tunneling technology do you recommend?

  A. FlexVPN

  B. point-to-point GRE

  C. DMVPN

  D. LISP

  Correct Answer: C

• Question 192:

  A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The systems run legacy applications by using hard-coded IP addresses. Which segmentation method is suitable and scalable for the customer?

  A. data center perimeter firewalling

  B. VACLs on data center switches

  C. transparent firewalling

  D. routed firewalls

  Correct Answer: B

  VLAN (Virtual LAN) is a concept in which we divide the broadcast domain into smaller broadcast domains logically at layer 2. If we create different VLANs then by default, a host from one VLAN can communicate with all the hosts residing in the same VLAN. If we want some hosts not able to reach other hosts within the same VLAN, then the concept of VLAN Access-list or Private VLAN can be used.

• Question 193:

  An external edge router provides connectivity from a service provider to an enterprise. Which two Internet edge best practices meet compliance regulations'? (Choose two )

  A. Implement filtenng to control traffic that is sourced from the infrastructure IP space.

  B. Enable and use only secure protocols.

  C. Send logs to a centralized logging collection server.

  D. Implement EBGP to advertise all owned IP blocks.

  E. Use login banners and interface access lists to restrict administrative access to the system

  Correct Answer: BE

• Question 194:

  A key to maintaining a highly available network is building in the appropriate redundancy to protect against failure. This redundancy is carefully balanced with the inherent complexity of redundant systems. Which design consideration is relevant for enterprise WAN use cases when it comes to resiliency?

  A. Design in a way that expects outages and attacks on the network and its protected resources

  B. The design approach should consider simple and centralized management aspect

  C. Design in a way that it simplifies and improves ease of deployment

  D. Design automation tools wherever it is appropriate for greater visibility

  Correct Answer: A

• Question 195:

  Company XYZ uses an office model where the employees can use any open desk and plug their laptops in. They want to authenticate the end users using their domain username and password before allowing them access to the network. The design must also accommodate the ability of controlling traffic within the same group or subnet if a macro (or micro) segmentation-based model is adopted in the future. Which protocol can be recommended for this design to authenticate end users?

  A. LDAP

  B. EAP

  C. TACACS+

  D. RADIUS

  Correct Answer: D

  the same group or subnet if a macro (or micro) segmentation-based model is adopted in the future https://www.networkstraining.com/what-is-cisco-ise/

• Question 196:

  Which management category is not part of FCAPS framework?

  A. Configuration

  B. Security

  C. Performance

  D. Authentication

  E. Fault-management

  Correct Answer: D

• Question 197:

  Which two statements explain the operation of BFD asynchronous mode? (Choose two )

  A. BFD asynchronous mode with echo packets combines the control packets and echo packets into a single packet.

  B. BFD asynchronous mode without echo packets uses control packets, and BFD asynchronous mode with echo packets does not.

  C. BFD asynchronous mode with and without echo packets use control packets.

  D. BFD asynchronous without echo packets has control packets sent back to the originating router, which echoes the control packet to detect failures.

  E. BFD asynchronous mode with echo packets uses separate control packets and echo packets.

  Correct Answer: CE

• Question 198:

  Which two statements describe the hierarchical LAN design model? (Choose two)

  A. It is a well-understood architecture that provides scalability

  B. It is the best design for modern data centers

  C. It is the most optimal design but is highly complex

  D. It provides a simplified design

  E. Changes, upgrades, and new services can be introduced in a controlled and stagged manner

  Correct Answer: AE

• Question 199:

  What are two design constraints in a standard spine and leaf architecture? (Choose two.)

  A. Spine switches can connect to each other.

  B. Each spine switch must connect to every leaf switch.

  C. Leaf switches must connect to each other.

  D. Endpoints connect only to the spine switches.

  E. Each leaf switch must connect to every spine switch.

  Correct Answer: BE

  Endpoints does not mean the servers

• Question 200:

  An engineer must design a network for a company that uses OSPF LFA to reduce loops. Which type of loop would be reduced by using this design?

  A. DTP

  B. micro loops

  C. STP

  D. REP

  Correct Answer: B