Cisco CCDE 400-007 Questions & Answers

• Question 221:

  You are designing an Out of Band Cisco Network Admission Control. Layer 3 Real-IP Gateway deployment for a customer.

  Which VLAN must be trunked back to the Clean Access Server from the access switch?

  A. authentication VLAN

  B. user VLAN

  C. untrusted VLAN

  D. management VLAN

  Correct Answer: D

• Question 222:

  According to the CIA triad principles for network security design, which principle should be priority for a Zero Trust network?

  A. requirement for data-in-motion encryption and 2FA authentication

  B. requirement for data-at-rest encryption foe user identification within the VPN termination hardware

  C. categorization of systems, data, and enterprise BYOD assets that are connected to network zones based on individual privacy needs

  D. ensuring that authorized users have high-availability system access from defined zones to defined systems or zones

  Correct Answer: A

• Question 223:

  An existing wireless network was designed to support data traffic only. You must now install context Aware services for location tracking changes must be applied to the existing wireless network to increase the location accuracy? (Chose two)

  A. Add access points along the perimeter of the coverage area.

  B. Increase the access point density to create an average inter-access point distance of less than 40 feet or 12.2 meters

  C. Use directional antennas to provide more cell overlapping

  D. Install additional access points in monitor mode where the co-channel interference would otherwise be affected

  E. Fine tune the radio configuration of the access point to have a higher average transmission power to achieve better coverage

  Correct Answer: BE

• Question 224:

  Which optimal use of interface dampening on a fast convergence network design is true?

  A. When occasional flaps of long duration occur

  B. when numerous adjacent flaps of very short duration occur

  C. when the router hardware it slower than the carrier delay down detection

  D. when the switch hardware is faster than the debounce timer down detection

  Correct Answer: B

• Question 225:

  Company XYZ connects its sites over a private WAN. Their overlay network is running a DMVPN setup where the headquarters site is the hub. The company is planning on implementing multicast routing on the network. What should be used in the multicast routing design?

  A. PIM dense mode with RP located at the hub

  B. PIM sparse mode with RP located at each remote site

  C. PIM sparse mode with RP located at the hub

  D. PIM dense mode with RP located at each remote site

  Correct Answer: C

  PIM sparse mode with RP located at the hub

  https://www.ccexpert.us/routing-switching-2/dynamic-multipoint-vpn.html

• Question 226:

  When designing a WAN that will be carrying real-time traffic, what are two important reasons to consider serialization delay? (Choose two )

  A. Serialization delays are invariable because they depend only on the line rate of the interface

  B. Serialization delays are variable because they depend on the line rate of the interface and on the type of the packet being serialized.

  C. Serialization delay is the time required to transmit the packet on the physical media.

  D. Serialization delays are variable because they depend only on the size of the packet being serialized

  E. Serialization delay depends not only on the line rate of the interface but also on the size of the packet

  Correct Answer: BD

• Question 227:

  You are tasked with the design of a high available network. Which two features provide fail closed environments? (Choose two.)

  A. EIGRP

  B. RPVST+

  C. MST

  D. L2MP

  Correct Answer: AB

• Question 228:

  A business requirement stating that failure of WAN access for dual circuits into an MPLS provider for a Data Centre cannot happen due to related service credits that would need to be paid has led to diversely routed circuits to different points of presence on the providers network? What should a network designer also consider as part of the requirement?

  A. Provision of an additional MPLS provider

  B. Out of band access to the MPLS routers

  C. Ensuring all related remote branches are dual homed to the MPLS network

  D. Dual PSUs and Supervisors on each MPLS router

  Correct Answer: A

• Question 229:

  Which two possible drawbacks should you consider when introducing Network Functions Virtualization in a network design? (Choose two)

  A. Bandwidth utilization increases

  B. Traffic flows are suboptimal

  C. High-end routers are required to support NFV

  D. OpenFlow must be supported in the network

  E. An SDN orchestration layer is required to support NFV

  Correct Answer: CE

• Question 230:

  Company XYZ is migrating their existing network to IPv6 and they must plan for Layer 2 and Layer 3 devices Some of the access layer switches do not support IPv6, however, core and distribution switches fully support unicast and multicast routing. The company wants to minimize cost of the migration. Which migration strategy should be used in the design?

  A. The access layer switches must support IGMP snooping at a minimum. Any switches that do not support IGM snooping must be replaced.

  B. Upgrade the nonsupporting switches Otherwise, it will cause an issue with the migration.

  C. Layer 2 switches will not affect the implementation of IPv6. They can be included in the design in their current state.

  D. The access layer switches must support DHCPv6. Any switches that do not support DHCPv6 must be replaced.

  Correct Answer: C

  https://community.cisco.com/t5/voice-over-ip/ipv6-with-cisco-layer-2-switches/td-p/1044509