400-007 Exam Questions
454 real 400-007 exam questions with expert-verified answers and explanations. Page 4 of 10.
- Question #157Gathering and Clarifying Requirements
Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The solution must provide a s...
DCICWDMdark fibertransport cost analysis - Question #158Designing Network Infrastructure
Refer to the exhibit. An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain. EIGRP routes are getting redistributed into OSPF. OSPF area...
OSPF NSSALSA filteringroute redistributionmulti-area OSPF - Question #159Designing Network Infrastructure
Refer to the exhibit. For Company XYZ Bangkok is using ECMP to reach the 172.20.2.0/24 network. The company wants a design that would allow them to forward traffic from 172.16.2.0/...
policy-based routingECMPtraffic engineeringroute selection - Question #160Designing Network Infrastructure
Refer to the exhibit. This network is running legacy STP 802.1d. Assuming "hello_timer" is fixed to 2 seconds, which parameters can be modified to speed up convergence times after...
STP 802.1dconvergence timersmax_ageforward delay - Question #161Designing Network Infrastructure
Company XYZ, a global content provider, owns data centers on different continents. Their data center design involves a standard three-layer design with a Layer 3-only core. HSRP is...
DCI termination pointthree-layer hierarchyHSRPL2/L3 demarcation - Question #162Designing Network Infrastructure
Which actions are performed at the distribution layer of the three-layer hierarchical network design model? (Choose two)
distribution layerthree-layer hierarchyfault isolationredundancy - Question #163Designing Network Infrastructure
An enterprise campus is adopting a network virtualization design solution with these requirements It must include the ability to virtualize the data plane and control plane by usin...
network virtualizationVRFpath isolationdata plane separation - Question #164Designing Network Infrastructure
Which design benefit of bridge assurance is true?
bridge assuranceSTPRapid PVST+unidirectional link - Question #165Designing Network Infrastructure
Which DCI technology utilizes a "flood and learn" technique to populate the Layer2 forwarding table?
DCIVPLSflood and learnL2 forwarding table - Question #166Designing Network Infrastructure
What advantage of placing the IS-IS layer 2 flooding domain boundary at the core Layer in a three- layer hierarchical network is true?
IS-ISL2 flooding domainthree-layer hierarchyrouting stability - Question #167Designing Network Infrastructure
A network engineering team is in the process of designing a lab network for a customer demonstration. The design engineer wants to show that the resiliency of the MPLS traffic Engi...
MPLS TEFast RerouteNNHop tunnelnode failure protection - Question #168Designing Network Services
Refer to the exhibit A service provider has a requirement to use Ethernet OAM to detect end-to- end connectivity failures between SP-SW1 and SP- SW2. Which two ways to design this...
Ethernet OAMCFMMEPconnectivity fault management - Question #169Designing Network Infrastructure
Which design consideration is valid when you contrast fabricPath and trill?
FabricPathTRILLactive-active FHRPanycast gateway - Question #170Designing Network Infrastructure
Which mechanism enables small, unmanaged switches to plug into ports of access switches without risking switch loops?
BPDU guardSTPloop preventionaccess layer - Question #171Gathering and Clarifying Requirements
Which main IoT migration aspect should be reviewed for a manufacturing plant?
IoT migrationmanufacturingsensorsOT network - Question #172Designing Management and Operations
Which two pain points are the most common for container technology adoption? (Choose two)
container adoptiondeployment challengesskilled staffoperational pain points - Question #173Designing Security
Company ABC uses IPv4-only. Recently they started deploying new endpoint devices. For operational reasons, IPv6 cannot be disabled on these new endpoint devices. Which security mea...
IPv6 securityRA GuardRouter Advertisementfirst-hop security - Question #174Designing Security
You have been asked to design a remote access VPN solution to support up to 2000 devices. You must ensure that only corporate assets are allowed to connect to the VPN, and users mu...
remote access VPNSSL VPNcertificate deploymentRADIUS authentication - Question #175Designing Security
As network designer, which option is your main concern with regards to virtualizing multiple network zones into a single hardware device?
fate sharingnetwork virtualizationsecurity zone consolidationhardware failure - Question #176Designing Network Infrastructure
You are designing the routing design for two merging companies that have overlapping IP address space. Which of these must you consider when developing the routing and NAT design?
NAToverlapping IP spacerouting ordercompany merger - Question #177Designing Network Infrastructure
Which feature must be part of the network design to wait a predetermined amount of time before notifying the routing protocol of a change in the path in the network?
throttle timerrouting convergencepath change notificationtimer tuning - Question #180Designing Network Infrastructure
What is a disadvantage of the traditional three-tier architecture model when east west traffic between different pods must go through the distribution and core layers?
three-tier architectureeast-west trafficlatencydata center design - Question #181Designing Security
Which two actions must merchants do to be compliant with the Payment Card Industry Data Security Standard? (Choose two.)
PCI DSScompliancefirewallsantivirus - Question #182Designing Security
Which solution component helps to achieve comprehensive threat protection and compliance for migration to multicloud SDX architectures?
SASEmulticloudthreat protectionSDX architecture - Question #183Designing Management and Operations
What are two descriptions of network optimization? (Choose two.)
network optimizationproactive managementnetwork redesignnetwork health - Question #184Designing Network Services
An engineer is designing the QoS strategy for Company XYZ. Based on initial analysis, a lot of scavenger type of traffic is traversing the network's 20Mb Internet link toward the s...
QoSCBWFQtraffic policingscavenger traffic - Question #185Designing Network Infrastructure
A legacy enterprise is using a Service Provider MPLS network to connect its head office and branches. Recently, they added a new branch to their network. Due to physical security c...
EoMPLSLayer 2 VPNMPLSL2 extension - Question #186Designing Security
Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity th...
SAML 2.0federated identitySSOMFA - Question #187Designing Management and Operations
A network security team uses a purpose-built tool to actively monitor the campus network, applications, and user activity. The team also analyzes enterprise telemetry data from IPF...
IPFIXnetwork telemetrythreat detectionincident response - Question #188Gathering and Clarifying Requirements
An enterprise has identified these causes for inefficient CAPEX spending: - CAPEX planning is driven by technology and not by business objectives. - The CAPEX planning team lacks t...
CAPEX planningorganizational changeROI accountabilitybusiness objectives - Question #189Designing Network Services
Which design solution reduces the amount of IGMP state in the network?
IGMPPIM-SSMmulticastIGMP state reduction - Question #190Designing Network Infrastructure
Company XYZ wants design recommendations for Layer 2 redundancy (using Layer 2 technologies). The company wants to prioritize flexibility and scalability elements in the new design...
Layer 2 redundancyswitch clusteringVLAN designnetwork scalability - Question #191Gathering and Clarifying Requirements
Which action must be taken before new VoIP systems are implemented on a network to ensure that the network is ready to handle the traffic?
VoIPbandwidth assessmentnetwork readinessQoS - Question #192Designing Network Infrastructure
Refer to the exhibit. This network is running EIGRP as the routing protocol and the internal networks are being advertised in EIGRP. Based on the link speeds, all traffic between L...
EIGRProute summarizationroute leakingrouting design - Question #193Designing Security
What are two top cloud-native security challenges faced by today's cloud-oriented organizations? (Choose two.)
cloud securityattack surfacevisibilitycloud-native - Question #194Gathering and Clarifying Requirements
In the case of outsourced IT services, the RTO is defined within the SLA. Which two support terms are often included in the SLA by IT and other service providers? (Choose two.)
SLARTOsupport availabilityoutsourced IT - Question #195Designing Network Infrastructure
Which two statements explain the operation of BFD asynchronous mode? (Choose two.)
BFDasynchronous modeecho packetscontrol packets - Question #196Gathering and Clarifying Requirements
Various teams in different organizations within an enterprise are preparing low-level design documents to capture network parameters using a Waterfall project model: - hardware siz...
Waterfall methodologyproject managementchange impactlow-level design - Question #197Designing Management and Operations
Which two benefits can software defined networks provide to businesses? (Choose two.)
SDNOpEx reductionCapEx reductionsoftware-defined networking - Question #198Designing Network Infrastructure
Company XYZ is migrating their existing network to IPv6 and they must plan for Layer 2 and Layer 3 devices. Some of the access layer switches do not support IPv6, however, core and...
IPv6 migrationLayer 2 switchesmigration strategynetwork design - Question #199Designing Network Infrastructure
Which two features describe controller-based networking solutions compared to traditional networking solutions? (Choose two.)
controller-based networkingSDNcentralized managementnetwork complexity - Question #200Designing Network Infrastructure
Which two characteristics are associated with 802.1s? (Choose two.)
802.1sMSTPspanning treeVLAN instance mapping - Question #201Designing Network Infrastructure
What are two advantages of controller-based networks versus traditional networks? (Choose two.)
SDNcontroller-based networkingnetwork automationconfiguration management - Question #202Designing Network Infrastructure
What are two design constraints in a standard spine and leaf architecture? (Choose two.)
spine-leaf topologydata center fabricleaf switchspine switch - Question #203Designing Network Infrastructure
What is a description of a control plane action?
control planedata planeIPv6 NDPnetwork planes - Question #204Designing Network Services
A network architect in an enterprise is designing a network policy for certain database applications. The goal of the policy is to allow these applications to access the internet d...
SD-WANCloud onRampSaaSapplication-aware routing - Question #205Designing Management and Operations
Which two statements describe network automation and network orchestration? (Choose two.)
network automationnetwork orchestrationREST APIprogrammatic management - Question #206Designing Network Services
When an SDN-based model is used to transmit multimedia traffic, which aspect should an architect consider while designing the network?
SDNQoEmultimedia trafficquality of experience - Question #207Designing Security
A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The sy...
VACLsnetwork segmentationdata centerVLAN security - Question #208Designing Network Infrastructure
Refer to the exhibit. An architect must design an enterprise WAN that connects the headquarters with 22 branch offices. The number of remote sites is expected to triple in the next...
MPLS over GREMP-BGPWAN virtualizationVPNv4