400-007 Exam Questions
454 real 400-007 exam questions with expert-verified answers and explanations. Page 5 of 10.
- Question #209Designing Network Infrastructure
Router R1 is a BGP speaker with one peering neighbor over link "A". When the R1 link/interface "A" fails, routing announcements are terminated, which results in the tearing down of...
BGPfate sharingfault isolationlink failure - Question #210Designing Security
An architect receives a functional requirement for a NAC system from a customer security policy stating that if a corporate Wi-Fi device does not meet current AV definitions, then...
NACposture assessmentremediation VLANwireless security - Question #211Designing Network Services
Which solution component helps to achieve rapid migration to the cloud for SaaS and public cloud leveraging SD-WAN capabilities?
SD-WANCloud onRampSaaS migrationcloud connectivity - Question #212Designing Management and Operations
A company uses equipment from multiple vendors in a data center fabric to deliver SDN, enable maximum flexibility, and provide the best return on investment. Which YANG data model...
YANGOpenConfigmulti-vendor automationSDN fabric - Question #213Gathering and Clarifying Requirements
Which development model is closely associated with Agile project management?
Agileproject managementevolutionary delivery modeldevelopment methodology - Question #214Designing Management and Operations
Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to minimize network outages by employing a set of procedures and ac...
FCAPSfault managementnetwork managementISO standards - Question #215Designing Network Infrastructure
A business wants to refresh its legacy Frame Relay WAN. It currently has product specialists in each of its 200 branches but plans to reduce and consolidate resources. The goal is...
MPLS L3VPNWAN designfull meshvideo conferencing - Question #216Gathering and Clarifying Requirements
Which development model is closely associated with traditional project management?
lifecycle modelwaterfalltraditional project managementdevelopment methodology - Question #217Designing Network Services
You are designing the QoS policy for a company that is running many TCP-based applications. The company is experiencing tail drops for these applications. The company wants to use...
QoSWREDcongestion avoidanceTCP tail drop - Question #218Designing Security
Which technology supports antispoofing and does not have any impact on encryption performance regardless of packet size?
MACsecanti-spoofingLayer 2 securityencryption performance - Question #219Designing Security
Which three components are part of the foundational information security principles of the CIA triad? (Choose three.)
CIA triadconfidentialityintegrityavailability - Question #220Designing Network Infrastructure
What is an architectural framework created by ETSI that defines standards to decouple network functions from proprietary hardware-based appliances and have them run in software on...
NFVETSInetwork functions virtualizationx86 hardware decoupling - Question #221Designing Network Infrastructure
Which two features are advantages of SD-WAN compared to MPLS-based connectivity? (Choose two.)
SD-WANMPLSpolicy-based forwardingWAN design - Question #222Designing Network Infrastructure
Which two factors must be considered for high availability in campus LAN designs to mitigate concerns about unavailability of network resources? (Choose two.)
high availabilitycampus LANdevice resiliencynetwork resiliency - Question #223Designing Network Infrastructure
A key to maintaining a highly available network is building in the appropriate redundancy to protect against failure. This redundancy is carefully balanced with the inherent comple...
WAN resiliencynetwork redundancyenterprise designhigh availability - Question #224Designing Network Infrastructure
Company XYZ is designing the IS-IS deployment strategy for their multiarea IS-IS domain. They want IS-IS neighbor relationships to be minimized on each network segment and want to...
IS-ISmultiarea IS-ISLevel 1/Level 2 routersLSDB optimization - Question #225Designing Management and Operations
An international media provider is an early adopter of Docker and micro services and is using an open-source homegrown container orchestration system. A few years ago. they migrate...
Kubernetescontainer orchestrationmicroservicescloud migration - Question #226Designing Network Infrastructure
An engineer must design a network for a company that uses OSPF LFA to reduce loops. Which type of loop would be reduced by using this design?
OSPF LFAmicro loopsloop-free alternatesfast reroute - Question #227Designing Network Infrastructure
An engineer is designing a DMVPN network where OSPF has been chosen as the routing protocol. A spoke-to-spoke data propagation model must be set up. Which two design considerations...
DMVPNOSPFDR electionspoke-to-spoke design - Question #228Designing Network Services
Company XYZ is designing their network using the three-layer hierarchical model. At which layer must the QoS design classify or mark the traffic?
QoStraffic classificationhierarchical network modelaccess layer - Question #229Designing Management and Operations
The controller has a global view of the network, and it can easily ensure that the network is in a consistent and optimal configuration. Which two statements describe a centralized...
SDNcentralized control planesouthbound APIsscalability - Question #230Designing Security
Company XYZ uses an office model where the employees can use any open desk and plug their laptops in. They want to authenticate the end users using their domain username and passwo...
RADIUSnetwork access control802.1Xmicro segmentation - Question #231Gathering and Clarifying Requirements
An architect receives a business requirement from a CTO that states the RTO for a new system should be 4 hours, and the RPO should be less than 1 hour. Business continuity must als...
RTO/RPOdisaster recoverydata replicationbusiness continuity - Question #232Designing Security
A business customer deploys workloads in the public cloud. Now the customer network faces governance issues with the flow of IT traffic and must ensure the security of data and int...
cloud governanceworkload securitydata protectioncloud workload policies - Question #233Gathering and Clarifying Requirements
A UK-based private hospital group with various levels of systems security considers upgrading its IT systems to increase performance and workload flexibility in response to constan...
hybrid cloudcloud cost optimizationpublic cloudprivate cloud - Question #234Designing Network Infrastructure
Company XYZ wants to redesign the Layer 2 part of their network and wants to use all available uplinks for increased performance. They also want to have end host reachability suppo...
TRILLLayer 2 designactive/active uplinksconversational learning - Question #235Designing Network Infrastructure
Company XYZ was not satisfied with the reconvergence time OSPF is taking. BFD was implemented to try to reduce the reconvergence time, but the network is still experiencing delays...
OSPF convergenceBFD echofast convergencereconvergence - Question #236Designing Network Infrastructure
An enterprise plans to evolve from a traditional WAN network to a software-defined WAN network. The existing devices have limited capability when it comes to virtualization. As the...
SD-WAN migrationWAN migrationdeployment sequencingnetwork migration - Question #237Designing Security
A security architect receives reports of these incidents: - An attacker exploits printers and medical devices in the organization to gain control of the network. - An attacker disr...
IoT securitynetwork access controldevice classificationnetwork segmentation - Question #238Designing Management and Operations
Which two protocols are used by SDN controllers to communicate with switches and routers? (Choose two.)
SDNOpenFlowOVSDBsouthbound protocols - Question #239Designing Management and Operations
Which SDN architecture component is used by the application layer to communicate with the control plane layer to provide instructions about the resources required by applications?
SDN architecturenorthbound APIsapplication layercontrol plane - Question #240Designing Security
Hybrid cloud computing allows organizations to take advantage of public and private cloud models. Which best practice should organizations follow to ensure data security in the pri...
hybrid clouddata encryptiondata securitycloud security - Question #241Designing Security
A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The sy...
transparent firewallnetwork segmentationVLANdata center - Question #242Designing Management and Operations
Which feature is supported by NETCONF but is not supported by SNMP?
NETCONFSNMPconfiguration datanetwork management - Question #243Designing Network Infrastructure
Two routers R1 and R2 are directly connected through an Ethernet link. Both routers are running OSPF over the Ethernet link and OSPF has been registered with BFD. R1 has been set u...
BFDtimer negotiationOSPFfailure detection - Question #244Designing Network Services
Which extensions to GRE tunneling provide session tracking and in-order packet delivery in exchange for additional state stored in tunnel endpoints?
GRE tunnelingpacket sequencingsession trackingtunnel extensions - Question #245Designing Management and Operations
In search of a system capable of hosting, monitoring compiling. and testing code in an automated way, what can be recommended to the organization?
CI/CDJenkinsautomationDevOps - Question #246Designing Network Services
An enterprise solution team is performing an analysis of multilayer architecture and multicontroller SDN solutions for multisite deployments. The analysis focuses on the ability to...
SDNmulticontrollerroot controllerEast-West API - Question #247Gathering and Clarifying Requirements
A product manufacturing organization is integrating cloud services into their IT solution. The IT team is working on the preparation phase of the implementation approach, which inc...
cloud strategyfinancial modelsIT governanceimplementation planning - Question #248Designing Security
A banking customer determines that it is operating POS and POI terminals that are noncompliant with PCI DSS requirements, as it is running TLSv1.0. The customer plans to migrate th...
PCI DSSTLSencryptioncompliance - Question #249Gathering and Clarifying Requirements
Agile and Waterfall are two popular methods for organizing projects. What describes any Agile network design development process?
Agile methodologyWaterfallproject managementnetwork design process - Question #250Designing Network Services
A business invests in SDN and develops its own SDN controller that, due to budget constraints, runs on a single controller. The controller actively places an exclusive lock on the...
SDN controllerconfiguration locksingle point of failurehigh availability - Question #251Designing Security
A network attacker exploits application flaws to compromise critical systems in the organization with these objectives: - Obtain sensitive data and export the data out of the netwo...
Zero Trustmicrosegmentationapplication discoverysecurity policy - Question #252Designing Security
Company XYZ must design a strategy to protect their routers from DoS attacks such as traffic destined to the router's own route processor, using separate control plane categories....
Control Plane ProtectionCoPPDoS protectionroute processor - Question #253Designing Network Services
What statement describes the application layer as defined in the software-defined networking architecture?
SDN architectureapplication layernorthbound APISDN controller - Question #254Designing Network Infrastructure
Refer to the exhibit. Company XYZ is currently running IPv4 but has decided to start the transition into IPv6. The initial objective is to allow communication based on IPv6 whereve...
IPv6 transitiondual stackaddress translationIPv4 compatibility - Question #255Designing Network Infrastructure
Refer to the exhibit. Company XYZ BGP topology is as shown in the diagram. The interface on the LA router connected toward the 10.1.5.0/24 network is faulty and is going up and dow...
BGP route flappingroute aggregationroute dampeningBGP - Question #256Designing Security
Which two factors provide multifactor authentication for secure access to applications and data no matter where the users are or which devices they are on? (Choose two.)
multifactor authenticationMFApossession factorpush authentication - Question #257Gathering and Clarifying Requirements
During evaluation of migrating current on-premises infrastructure to add cloud-based infrastructure, a network planning team must meet three core requirements as they make recommen...
cloud strategyhybrid cloudCapEx OpExcloud migration - Question #258Designing Network Infrastructure
As a network designer you need to support an enterprise with hundreds of remote sites connected over a single WAN network that carries different types of traffic, including VoIP, v...
WAN designQoStraffic analysisnetwork design