Cisco CCDE 400-007 Questions & Answers

• Question 21:

  A business wants to refresh its legacy Frame Relay WAN. It currently has product specialists in each of its 200 branches but plans to reduce and consolidate resources. The goal is to have product specialists available via video link when customers visit the nationwide branch offices. Which technology should be used to meet this objective?

  A. DMVPN phase 1 network over the Internet

  B. Layer 3 MPLS VPN hub and spoke

  C. Layer2VPLS

  D. Layer 3 MPLS VPN full mesh

  Correct Answer: D

  a branch with specialist and a branch with customer can be in same geo area, it's not optimal to push traffic to a hub.

• Question 22:

  During evaluation of migrating current on premises infrastructure to add cloud-based infrastructure, a network planning team must meet three core requirements as they make recommendations on which cloud strategy to adopt going forward

  1.

  Technology is changing rapidly, therefore the enterprise must be open to adopting new ways of doing things, and be ready to invest CapEx-funds in the next three years

  2.

  Network bandwidth capacity requirements are dynamic and are expected to change over the next year

  3.

  If new technologies are to be introduced, operational expenses must be kept at a minimum.

  Which cloud strategy meets these requirements?

  A. private

  B. hybrid

  C. public

  D. multicloud

  Correct Answer: D

  Here are the benefits of multi-cloud model https://www.cisco.com/c/en/us/solutions/cloud/what-is-multicloud.html#~benefits-of-multicloud-model

• Question 23:

  Which methodology is the leading lifecycle approach to network design and implementation?

  A. PPDIOO

  B. Waterfall model

  C. Spiral model

  D. V model

  Correct Answer: A

  Reference: https://www.ciscopress.com/articles/article.asp?p=1608131andseqNum=3

• Question 24:

  Which effect of using ingress filtering to prevent spoofed addresses on a network design is true?

  A. It reduces the effectiveness of DDoS attacks when associated with DSCP remarking to Scavenger.

  B. It protects the network Infrastructure against spoofed DDoS attacks.

  C. It Classifies bogon traffic and remarks it with DSCP bulk.

  D. It filters RFC 1918 IP addresses.

  Correct Answer: B

• Question 25:

  Refer to the exhibit.

  

  Your company designed a network to allow server VLANs to span all access switches in a data center In the design, Layer 3 VLAN interfaces and HSRP are configured on the aggregation switches Which two features improve STP stability within the network design? (Choose two.)

  A. BPDU guard on access ports

  B. BPDU guard on the aggregation switch downlinks toward access switches

  C. root guard on the aggregation switch downlinks toward access switches

  D. root guard on access ports

  E. edge port on access ports

  F. access switch pairs explicitly determined to be root and backup root bridges

  Correct Answer: AE

• Question 26:

  Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services Is true?

  A. first-hop router registration to the RP

  B. multicast client registration to the RP

  C. multicast source registration to the RP

  D. transport of all IPv6 multicast traffic

  Correct Answer: D

  The purpose of a dynamically created tunnel interface in the design of IPv6 multicast services is to transport all IPv6 multicast traffic. A tunnel interface is a virtual interface that is used to encapsulate IPv6 multicast traffic in an IPv4 or another IPv6 unicast packet for transport across a network. In the context of IPv6 multicast services, the tunnel interface is dynamically created when multicast traffic needs to be transported between multicast domains, or when the network topology requires it. The tunnel interface is used to encapsulate the IPv6 multicast traffic, allowing it to traverse the network as a unicast packet, which is then decapsulated and forwarded to the appropriate receivers.

• Question 27:

  Which two technologies enable multilayer segmentation? (Choose two.)

  A. policy-based routing

  B. segment routing

  C. data plane markings

  D. firewalls

  E. filter lists

  Correct Answer: AD

  Firewalls for sure. https://community.cisco.com/t5/security-knowledge-base/segmentation-policy-using-sgt-in-pbr-pdf/ta-p/3651240

• Question 28:

  IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches. Which use case is suitable for using IPFIX probes?\

  A. performance monitoring

  B. security

  C. observation of critical links

  D. capacity planning

  Correct Answer: C

  https://en.wikipedia.org/wiki/NetFlow#NetFlow_and_IPFIX NetFlow collection from dedicated probes is well suited for observation of critical links, whereas NetFlow on routers provides a Network-wide view of the traffic that can be used for capacity planning, accounting, performance monitoring, and security.

• Question 29:

  The Company XYZ network is experiencing attacks against their router. Which type of Control Plane Protection must be used on the router to protect all control plane IP traffic that is destined directly for one of the router interfaces?

  A. Control Plane Protection host subinterface

  B. Control Plane Protection main interface

  C. Control Plane Protection transit subinterface

  D. Control Plane Protection CEF-exception subinterface

  Correct Answer: A

• Question 30:

  Company XYZ has a multicast domain that spans across multiple autonomous systems. The company wants to choose a technology that provides simplified and controlled approach to interconnecting the multicast domains. Which technology is the best fit for this purpose?

  A. MSDP

  B. PIM SSM

  C. MPLS

  D. PIM sparse mode

  Correct Answer: A

  MSDP provides inter-domain access to multicast sources in all domains by enabling all Rendezvous Points (RPs) to discover multicast sources outside of their domains.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/ios/ipmulti/configuration/guide/imc_msdp_im_pim_s m_12_2_50_SY.html