400-007 | What Actual 400-007 Testing Software Is

NEW QUESTION 1
Drag and Drop Question
Drag and drop the end-to-end network virtualization elements from the left onto the correct network areas on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 2
What are two key design principles when using a hierarchical core-distribution-access network model? (Choose two )

• A. A hierarchical network design model aids fault isolation
• B. The core layer is designed first, followed by the distribution layer and then the access layer
• C. The core layer provides server access in a small campus.
• D. A hierarchical network design facilitates changes
• E. The core layer controls access to resources for security

Answer: AD

NEW QUESTION 3
Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple highspeed connections.
The company is now redesigning their network and must comply with these design requirements:
- Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion.
- Use the Internet as the underlay for the private WAN. Securely transfer the corporate data over the private WAN.
Which two technologies should be Incorporated into the design of this network? (Choose two.)

• A. S-VTI
• B. IPsec
• C. DMVPN
• D. GET VPN
• E. PPTP

Answer: BC

NEW QUESTION 4
Which two foundational aspects of loT are still evolving and being worked on by the industry at large? (Choose two)

• A. WiFi protocols
• B. Regulatory domains
• C. Low energy Bluetooth sensors
• D. loT consortia
• E. Standards

Answer: AC

NEW QUESTION 5
The Company XYZ network is experiencing attacks against their router.
Which type of Control Plane Protection must be used on the router to protect all control plane IP traffic that is destined directly for one of the router interfaces?

• A. Control Plane Protection host subinterface
• B. Control Plane Protection main interface
• C. Control Plane Protection transit subinterface
• D. Control Plane Protection CEF-exception subinterface

Answer: A

NEW QUESTION 6
Company XYZ wants to improve the security design of their network to include protection from reconnaissance and DoS attacks on their sub interfaces destined toward next hop routers.
Which technology can be used to prevent these types of attacks?

• A. MPP
• B. CPPr
• C. CoPP
• D. DPP

Answer: B

NEW QUESTION 7
What best describes the difference between Automation and Orchestration?

• A. Automation refers to an automatic process for completing a single task and Orchestration refersto assembling and coordinating a set of tasks and conditions.
• B. Automation describes a hands-off configuration process while Orchestration refers to sets ofautomation tasks that require the network administrator to coordinate
• C. Automation refers to an automatic process for completing multiple tasks with conditions andOrchestration refers to executing tasks in parallel.
• D. Automation refers to scripting languages (Pytho
• E. Ansible etc.) and Orchestration refers tocommercial products that control configuration deployment

Answer: A

NEW QUESTION 8
A small organization of 20 employees is looking to deliver a network design service for
modernizing customer networks to support advanced solutions:
- Project scope and weekly progress should be visualized by the management.
- Always consider feedback and make changes accordingly during the project.
- Should consider flexibility to change scope at the point of time.
Which project methodology meets the requirements and have the least impact on the outcome?

• A. Scrum
• B. LEAN
• C. Kanban
• D. Six-Sigma

Answer: C

NEW QUESTION 9
You were tasked to enhance the security of a network with these characteristics:
- A pool of servers is accessed by numerous data centers and remote sites
- The servers are accessed via a cluster of firewalls
- The firewalls are configured properly and are not dropping traffic
- The firewalls occasionally cause asymmetric routing of traffic within the server data center.
Which technology should you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

• A. Poison certain subnets by adding static routes to Null0 on the core switches connected to thepool of servers.
• B. Deploy uRPF strict mode.
• C. Limit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.
• D. Deploy uRPF loose mode

Answer: C

NEW QUESTION 10
Refer to the exhibit.

An engineer is designing the network for a multihomed customer running in AS 111 does not have any other Ass connected to it.
Which technology is more comprehensive to use in the design to make sure that the AS is not being used as a transit AS?

• A. Configure the AS-set attribute to allow only routes from AS 111 to be propagated to the neighborASs.
• B. Use the local preference attribute to configure your AS as a non-transit'' AS.
• C. include an AS path access list to send routes to the neighboring ASs that only have AS 111 in theAS path field.
• D. Include a prefix list to only receive routes from neighboring ASs.

Answer: C

NEW QUESTION 11
Refer to the exhibit. A new high availability DB sever cluster is installed in the network.

These two servers require high bandwidth and low latency Layer 2 connectivity for database replication.
Which solution supports these requirements?

• A. Add two new links between SW1 and SW2 configured as LACP trunk with STP
• B. Add secondary links to REP segments 1 and 2
• C. Add two new links between SW1 and SW2 configured as REP segment 3
• D. Add two new links between SW1 and SW2 configured as REP segments 1 and 2 respectively

Answer: C

NEW QUESTION 12
You are designing a network running both IPv4 and IPv6 to deploy QoS.
Which consideration is correct about the QoS for IPv4 and IPv6?

• A. IPv4 and IPv6 traffic types can use use queuing mechanisms such as LLQ, PQ and CQ.
• B. IPv6 packet classification is only available with process switching, whereas IPv4 packetclassification is available with both process switching and CEF.
• C. IPv6 and IB/4 traffic types can use a single QoS policy to match both protocols
• D. Different congestion management mechanisms need to be used for IPv4 and IPv6 traffic types

Answer: C

NEW QUESTION 13
Which two types of planning approaches are used to develop business-driven network designs and to facilitate the design decisions? (Choose two)

• A. cost optimization approach
• B. strategic planning approach
• C. modular approach
• D. tactical planning approach
• E. business optimization approach

Answer: BD

NEW QUESTION 14
Drag and Drop Question
Drag and drop the design use cases from the left onto the correct uRPF techniques used to prevent spoofing attacks.
Not all options are used.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15
A Service Provider is designing a solution for a managed CE service to a number of local customers using a single CE platform and wants to have logical separation on the CE platform using Virtual Routing and Forwarding (VRF) based on IP address ranges or packet length.
Which is the most scalable solution to provide this type of VRF Selection process on the CE edge device?

• A. Static Routes for Route Leaking
• B. Policy Based Routing
• C. OSPF per VRF Instance
• D. Multi-Protocol BGP

Answer: B

NEW QUESTION 16
Company XYZ Is running a redundant private WAN network using OSPF as the underlay
protocol.
The current design accommodates for redundancy. In the network, but it Is taking over 30
seconds for the network to reconverge upon failure.
Which technique can be Implemented In the design to detect such a failure in a subsecond?

• A. STP
• B. fate sharing
• C. OSPF LFA
• D. BFD
• E. flex links

Answer: D

NEW QUESTION 17
VPLS is implemented in a Layer 2 network with 2000 VLANs.
What is the primary concern to ensure successful deployment of VPLS?

• A. Flooding is necessary to propagate MAC address reachability information
• B. PE scalability
• C. The underlying transport mechanism
• D. VLAN scalability

Answer: B

NEW QUESTION 18
Which MPLS TE design consideration is true?

• A. MPLS TE replaces LDP and the dependency of the IGP to identify the best path.
• B. MPLS TE provides link and node protection
• C. MPLS TE optimizes the routing of IP traffic, given the constraints imposed by backbone capacityand application requirements.
• D. MPLS TE requires Layer 3 VPN full-mesh topology deployment

Answer: C

NEW QUESTION 19
Which three elements help network designers to construct secure systems that protect information and resources (such as devices, communication, and data) from unauthorized access, modification, inspection, or destruction? (Choose three.)

• A. confidential
• B. serviceability
• C. reliability
• D. availability
• E. integrity
• F. scalability

Answer: ADE

NEW QUESTION 20
Company ABC wants to minimize the risk of users plugging unauthorized switches and hubs into the network.
Which two features can be used on the LAN access ports to support this design requirement? (Choose two.)

• A. Loop Guard
• B. PortFast
• C. DTF
• D. Root Guard
• E. BPDU Guard

Answer: BE

NEW QUESTION 21
......