Cisco CCDE 400-007 Questions & Answers

• Question 201:

  Which parameter is the most important factor to consider when deciding service placement in a cloud solution?

  A. data replication cost

  B. application structure

  C. security framework Implementation time

  D. data confidentiality rules

  Correct Answer: D

• Question 202:

  Company XYZ wants to deploy OSPF. The design plan requires that two OSPF networks be mutually redistributed at multiple locations and ensure end-to-end connectivity to all of the company's networks.

  Which technology can be used to fulfill the requirements while avoiding the creation of routing loops?

  A. Create a virtual link between ASBRs.

  B. Change the router ID for both ASBRs.

  C. Redistribute routes as external type 2 routes.

  D. Use route maps on ASBRs to filter routes with tags so they are not redistributed.

  Correct Answer: D

  To avoid routing loops you need to tag packets https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/4170-ospfprocesses.html

• Question 203:

  SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.

  Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

  A. TLS

  B. DTLS

  C. IPsec

  D. GRE

  Correct Answer: B

  One of the primary challenges with IPsec is its compatibility with NAT (Network Address Translation). IPsec was designed before NAT became prevalent, and as a result, it can experience difficulties traversing NAT devices. Although there are extensions like NAT-T (NAT Traversal) that help IPsec to work better with NAT, the process can still be more complex and less reliable than DTLS, which was designed with NAT traversal in mind.

• Question 204:

  A banking customer determines that it is operating POS and POI terminals that are noncompliant with PCI DSS requirements, as it is running TLSv1.0. The customer plans to migrate the terminals to TLSv1.2. What are two requirements to complete the migration? (Choose two.)

  A. Ensure that strong cryptography is applied for users who have administrative access through networks

  B. Apply strong cryptography and security protocols to safeguard sensitive cardholder data.

  C. Apply strong encryption for transmission of cardholder data across public networks.

  D. Protect all user systems against malware and frequently update antivirus software

  E. Maintain a policy that addresses information security for employees and third parties.

  Correct Answer: BC

• Question 205:

  Which architecture does not require an explicit multicast signaling protocol, such as PIM or P2MP, to signal the multicast state hop-by-hop, but instead uses a link state protocol to advertise the multicast forwarding state?

  A. Binary indexed explicit routing

  B. Binary intermediate enhanced routing

  C. Bit indexed explicit replication

  D. Bi-directional implicit replication

  Correct Answer: C

  Reference: https://community.cisco.com/t5/service-providers-documents/cisco-bit-indexed-explicit-replication-v2/ta-p/3623306

• Question 206:

  Which two characteristics are associated with 802 1s? (Choose two)

  A. 802.1s provides for faster convergence over 802.1D and PVST+

  B. 802.1s is a Cisco enhancement to 802.1w

  C. 802.1s supports up to 1024 instances of 802.1w

  D. 802.1s maps multiple VLANs to the same spanning-tree instance

  E. CPU and memory requirements are the highest of all spanning-tree STP implementations

  Correct Answer: AD

  A) Yes. The spanning tree algorithm used by MSTP is RSTP which provides quick convergence.

  B) No. 802.1s is from IEEE not Cisco.

  C) No. 802.1s has maximum 16 instance of RSTP.

  D) Yes. One or more VLANs can be mapped to one MSTP instance

  E) No. The CPU and memory requirements are less than for Rapid PVST+ but more than for RSTP.

  https://www.ciscopress.com/articles/article.asp?p=2832407andseqNum=5

  https://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/24248-147.htm

• Question 207:

  What is a characteristic of a secure cloud architecture model?

  A. limited access to job function

  B. dedicated and restricted workstations

  C. multi-factor authentication

  D. software-defined network segmentation

  Correct Answer: D

• Question 208:

  Hybrid cloud computing allows organizations to like advantage of public and private cloud models. Which best practice should organizations follow to ensure data security in the private cloud?

  A. Use standard protocols for data transmission over the network.

  B. Encrypt data when it is at rest and in motion

  C. Communicate all data security risks to customers and end users.

  D. Use standard network protocols for data communication between unsecured network connections.

  Correct Answer: B

• Question 209:

  Which feature must be part of the network design to wait a predetermined amount of time before notifying the routing protocol of a change in the path in the network?

  A. Transmit delay

  B. Throttle timer

  C. SPF hold time

  D. Interface dampening

  Correct Answer: B

• Question 210:

  A service provider recently migrated to an SD-WAN solution for delivering WAN connections to its customers. One of the main challenges with the SD-WAN deployment is that branch site volume increases every year, which causes

  management complexity.

  Which action resolves the issue?

  A. Implement a scalable network management system to manage all sites.

  B. Adopt a well-structured SD-WAN service management lifecycle model

  C. Build a service orchestration platform on top of the network controller

  D. Set up a dedicated team to monitor and provision new customers

  Correct Answer: C