400-007 Exam Questions

In an OSPF network with routers connected together with Ethernet cabling, which topology typically takes the longest to converge?

Company XYZ is designing the network for IPv6 security and they have these design requirements: - A switch or router must deny access to traffic from sources with addresses that ar...

Which two impacts of adding the IP event dampening feature to a network design are true? (Choose two.)

A small organization of 20 employees is looking to deliver a network design service for modernizing customer networks to support advanced solutions: - Project scope and weekly prog...

Which technology is an open-source infrastructure automation tool that automates repetitive tasks for users who work in networks such as cloud provisioning and intraservice orchest...

Company XYZ asks for design recommendations for Layer 2 redundancy. The company wants to prioritize fast convergence and resiliency elements in the design. Which two technologies a...

A European government passport agency considers upgrading its IT systems to increase performance and workload flexibility in response to constantly changing requirements. The budge...

Company XYZ needs advice in redesigning their legacy Layer 2 infrastructure. Which technology should be included in the design to minimize or avoid convergence delays due to STP or...

Which two control plane policer designs must be considered to achieve high availability? (Choose two.)

Company XYZ Is running a redundant private WAN network using OSPF as the underlay protocol. The current design accommodates for redundancy. In the network, but it Is taking over 30...

Company XYZ network runs IPv4 and IPv6 and they want to Introduce a multidomain, multicast- based network. The new design should use a flavor of PIM that forwards traffic using SPT...

Which three elements help network designers to construct secure systems that protect information and resources (such as devices, communication, and data) from unauthorized access,...

The Company XYZ network is experiencing attacks against their router. Which type of Control Plane Protection must be used on the router to protect all control plane IP traffic that...

What is the most important operational driver in building a resilient and secure modular network design?

Which BGP feature provides fast convergence?

An enterprise requires MPLS connected branches to access cloud-based Microsoft 365 services over an SD-WAN solution. Internet access Is available only at dual regional hub sites th...

Refer to the diagram. Which solution must be used to send traffic from the foreign wireless LAN controller to the anchor wireless LAN controller?

Refer to the exhibit. An engineer is designing the network for a multihomed customer running in AS 111 does not have any other ASs connected to it. Which technology is more compreh...

Organizations that embrace Zero Trust initiatives ranging from business policies to technology infrastructure can reap business and security benefits. Which two domains should be c...

Which two types of planning approaches are used to develop business-driven network designs and to facilitate the design decisions? (Choose two)

An enterprise that runs numerous proprietary applications has major issues with its on-premises server estate hardware, to the point where business-critical functions are compromis...

Which two features control multicast traffic in a VLAN environment? (Choose two)

Company XYZ wants to secure the data plane of their network. Which two technologies can be included in the security design? (Choose two)

Company XYZ has a new network based on IPv6. Some of the subnets that they are planning to use will be confidential and need an addressing scheme that confines them to the local ca...

An architect receives a business requirement from a CTO that states the RTO and RPO for a new system should be as close as possible to zero. Which replication method and data cente...

Refer to the exhibit. An engineer has been asked to redesign the traffic flow toward AS 111 coming from AS 500. Traffic destined to AS 111 network 91.7.0.0/16 should come in via AS...

A European national bank considers migrating its on-premises systems to a private cloud offering in a non-European location to significantly reduce IT costs. What is a primary fact...

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network a...

Company XYZ wants to improve the security design of their network to include protection from reconnaissance and DoS attacks on their sub interfaces destined toward next hop routers...

According to the CIA triad principles for network security design, which principle should be priority for a Zero Trust network?

Refer to the exhibit. OSPF is running as the IGP to provide reachability to all AS100 networks. R3 and R4 are the current ABRs at the boundary of OSPF Area0 and Area1. Now BGP must...

Company ABC wants to minimize the risk of users plugging unauthorized switches and hubs into the network. Which two features can be used on the LAN access ports to support this des...

You are tasked with the design of a high available network. Which two features provide fail closed environments? (Choose two.)

Which two characteristics apply to firewall transparent mode operations in a firewall solution design? (Choose two.)

Your company wants to deploy a new data center infrastructure. Based on the requirements you have chosen VXLAN as encapsulation technology. The customer is concerned about miss-con...

Which two statements describe the usage of the IS-IS overload bit technique? (Choose two)

Refer to the exhibit. Your company designed a network to allow server VLANs to span all access switches in a data center. In the design, Layer 3 VLAN interfaces and HSRP are config...

Refer to the exhibit. There are multiple trees in the Cisco FabricPath. All switches in the Layer 2 fabric share the same view of each tree. Which two concepts describe how the mul...

Which mechanism provides Layer 2 fault isolation between data centers?

You have been tasked with designing a data center interconnect to provide business continuity. You want to encrypt the traffic over the DCI using IEEE 802.1AE MACsec to prevent the...

While reviewing an existing network design, you are discussing the characteristics of different STP versions. Which protocol minimizes unicast flooding during a Topology Change Not...

A network design includes a long signaling delay in notifying the Layer 3 control plane that an interface has failed. Which two of these actions would reduce that delay? (Choose tw...

Which two possible drawbacks should you consider when introducing Network Functions Virtualization in a network design? (Choose two)

You are designing an Out of Band Cisco Network Admission Control. Layer 3 Real-IP Gateway deployment for a customer. Which VLAN must be trunked back to the Clean Access Server from...

A service provider hires you to design its new managed CE offering to meet these requirements: - The CEs cannot run a routing protocol with the PE - Provide the ability for equal o...

Which design principal improves network resiliency?

When designing a WAN that will be carrying real-time traffic, what are two important reasons to consider serialization delay? (Choose two)

Which two aspects are considered when designing a dual hub dual DMVPN cloud topology? (Choose two )

A green data center is being deployed and a design requirement is to be able to readily scale server virtualization. Which IETF standard technology can provide this requirement?

Which two foundational aspects of loT are still evolving and being worked on by the industry at large? (Choose two)