Cisco CCDE 400-007 Questions & Answers

• Question 261:

  What are two top cloud-native security challenges faced by today's cloud-oriented organizations? (Choose two )

  A. establishing user roles

  B. polymorphism

  C. lack of visibility and tracking

  D. increased attack surface

  E. user credential validation

  Correct Answer: CD

• Question 262:

  What best describes the difference between Automation and Orchestration?

  A. Automation refers to an automatic process for completing a single task and Orchestration refers to assembling and coordinating a set of tasks and conditions.

  B. Automation describes a hands-off configuration process while Orchestration refers to sets of automation tasks that require the network administrator to coordinate

  C. Automation refers to an automatic process for completing multiple tasks with conditions and Orchestration refers to executing tasks in parallel.

  D. Automation refers to scripting languages (Python. Ansible etc.) and Orchestration refers to commercial products that control configuration deployment

  Correct Answer: A

• Question 263:

  Refer to the exhibit.

  

  An engineer is designing the network for a multihomed customer running in AS 111 does not have any other Ass connected to it. Which technology is more comprehensive to use in the design to make sure that the AS is not being used as a transit AS?

  A. Configure the AS-set attribute to allow only routes from AS 111 to be propagated to the neighbor ASs.

  B. Use the local preference attribute to configure your AS as a non-transit'' AS.

  C. include an AS path access list to send routes to the neighboring ASs that only have AS 111 in the AS path field.

  D. Include a prefix list to only receive routes from neighboring ASs.

  Correct Answer: C

• Question 264:

  You have been asked to design a high-density wireless network for a university campus. Which two principles would you apply in order to maximize the wireless network capacity? (Choose two.)

  A. Implement a four-channel design on 2.4 GHz to increase the number of available channels

  B. Choose a high minimum data rate to reduce the duty cycle.

  C. increases the number of SSlDs to load-balance the client traffic.

  D. Make use of the 5-GHz band to reduce the spectrum utilization on 2.4 GHz when dual- band clients are used.

  E. Enable 802.11n channel bonding on both 2.4 GHz and 5 GHz to increase the maximum aggregated cell throughput.

  Correct Answer: BD

• Question 265:

  Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity threats. To achieve this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for the applications and services. Which protocol can be used by Company XYZ to provide authentication and authorization services?

  A. OAuth2

  B. OpenID Connect

  C. OpenID

  D. SAML2.0

  Correct Answer: D

  OpenID lacks user authorization data (such as permissions) and focuses primarily on identity assertion.

• Question 266:

  Company XYZ has designed their network to run GRE over IPsec on their Internet-based VPN to connect two sites. Which IPsec tunneling feature can they enable to optimize the data flow while ensuring that the headers contain no duplicate IP addresses?

  A. Transport Mode in IPsec Phase I

  B. Transport Mode in IPsec Phase II

  C. Tunnel Mode in IPsec Phase II

  D. Tunnel Mode in IPsec Phase I

  Correct Answer: B

• Question 267:

  You are designing the routing design for two merging companies that have overlapping IP address space. Which of these must you consider when developing the routing and NAT design?

  A. Local to global NAT translation is done after routing

  B. Global to local NAT translation is done before routing.

  C. Local to global NAT translation is done before policy-based routing

  D. Global to local NAT translation is done after policy-based routing.

  Correct Answer: B

• Question 268:

  Which main IoT migration aspect should be reviewed for a manufacturing plant?

  A. Sensors

  B. Security

  C. Applications

  D. Wi-Fi Infrastructure

  E. Ethernet Switches

  Correct Answer: A

• Question 269:

  Company XYZ has two routing domains in their network, EIGRP and OSPF. The company wants to provide full reachability between the two domains by implementing redistribution on a router running both protocols. They need to design the redistribution in a way that the OSPF routers will see link costs added to external routes. How must the redistribution strategy be designed for this network?

  A. Redistribute using metric type 2 into OSPF.

  B. Redistribute using metric type 1 into OSPF.

  C. Redistribute using metric type 1 into EIGRP.

  D. Redistribute using metric type 2 into EIGRP.

  Correct Answer: B

  https://www.ciscopress.com/articles/article.asp?p=27573andseqNum=4#:~:text=Routes%20a re%20redistributed%20in%20OSPF,shown%20in%20Figure%2014%2D2.

• Question 270:

  A network architect must redesign a service provider edge, where multiservice and multitenant PEs are currently present. Which design feature should be minimized in the new design to achieve reliability?

  A. bridging

  B. fate sharing

  C. redundancy

  D. unicast overlay routing

  Correct Answer: B