400-007 Exam Questions
454 real 400-007 exam questions with expert-verified answers and explanations. Page 7 of 10.
- Question #313Designing Network Infrastructure
A multinational enterprise integrates a cloud solution with these objectives: - Achieve seamless connectivity across different countries and regions. - Extend data center and priva...
hybrid cloudmulti-cloudworkload placementcloud interconnect - Question #314Designing Security
Which issue poses a challenge for security architects who want end-to-end visibility of their networks?
security visibilitytechnology silosdisparate solutionsend-to-end monitoring - Question #315Designing Network Infrastructure
Enterprise XYZ wants to implement fast convergence on their network and optimize timers for OSPF. However, they also want to prevent excess flooding of LSAs if there is a constantl...
OSPFthrottling timersLSA floodingfast convergence - Question #316Designing Security
A network hacker is trying to interrupt the transport packet on IPSEC. A packet with duplicate sequence numbers is introduced. The customer sends high-priority traffic during this...
IPSecanti-replaysequence numbersreplay attack mitigation - Question #317Designing Management and Operations
The SD-WAN architecture is composed of separate orchestration, management, control, and data planes. Which activity happens at the orchestration plane?
SD-WANorchestration planerouter onboardingSD-WAN architecture - Question #318Designing Network Infrastructure
Network changes because of mergers, acquisitions, and divestment can be very disruptive to the network if not carried out carefully. When an organization sells parts of its busines...
modular designnetwork architecturedivestmentmergers acquisitions - Question #319Designing Network Infrastructure
The Company XYZ network requires OSPF dead neighbor detection in a subsecond manner. However, the company network does not support BFD. Which other feature can be used to fulfill t...
OSPFfast hellodead neighbor detectionBFD alternative - Question #321Gathering and Clarifying Requirements
The Agile Manifesto is a document that defines the key values and principles behind the Agile philosophy and helps development teams work more efficiently and sustainably. Each of...
Agile Manifestoproject managementAgile valuessoftware development - Question #322Designing Network Infrastructure
Which aspect of BGP-LS makes it scalable in large network when multiarea topology information must be gathered?
BGP-LStopology distributionTCP flow controlscalability - Question #323Designing Network Infrastructure
Refer to the exhibit. The network 10.10.0.0/16 has been redistributed to OSPF processes and the best path to the destination from R1 has been chosen as R1-R2-R3. A failure occurred...
OSPF redistributionexternal route typespath selectionconvergence - Question #324Designing Network Infrastructure
The General Bank of Greece plans to upgrade its legacy, end-of-life WAN network with a new flexible, manageable, and scalable solution. The main requirements are ZTP support, end-t...
SD-WANmanaged servicesWAN designCAPEX reduction - Question #325Designing Network Infrastructure
A software-defined networking (SDN) controller learns network topology information by using BGP link-state sessions with the route reflectors of an MPLS-enabled network. The contro...
SDN hybridBGP-LSMPLS traffic engineeringcontroller-based networking - Question #326Designing Network Infrastructure
Refer to the exhibit. Company XYZ must design a DMVPN tunnel between the three sites. Chicago is going to act as the NHS and the company wants DMVPN to detect peer endpoint failure...
DMVPNIP SLApeer failure detectionNHS - Question #327Gathering and Clarifying Requirements
A consultant needs to evaluate project management methodologies for a new service deployment on the existing network of a customer. The customer wants to be involved in the end-to-...
Agile methodologyproject managementrequirements flexibilitycustomer collaboration - Question #328Designing Network Infrastructure
Refer to the exhibit. The WAN network of the General Bank of Greece has experienced several outages. It takes too long to activate a new branch site. The networking department of t...
WAN designDMVPNOPEX reductionin-house deployment - Question #329Designing Network Infrastructure
Refer to the exhibit. After a network audit a network engineer must optimize the current network convergence time. The proposed solution must consider link layer and control plane...
BFDnetwork convergencefailure detectioncontrol plane - Question #331Designing Security
What are two parameters that can be leveraged by SAML in mixed private/public cloud environments by using identity and asset management? (Choose two.)
SAMLidentity federationcloud IAMpolicy-based tokens - Question #332Designing Network Services
Data replication is being designed as part of a data protection setup to be run over the network. Which replication strategy is best suited when the primary and secondary systems a...
synchronous replicationdata protectiondisaster recoverystorage design - Question #333Gathering and Clarifying Requirements
What are two examples of business goals to be considered when a network design is built? (Choose two.)
business goalsOPEXnetwork design requirementsstakeholder objectives - Question #334Gathering and Clarifying Requirements
A national retail company is expanding their business by adding several international sites in the next 12 months. With their current IT infrastructure, they face a high number of...
technical requirementsscalabilityunified infrastructureWAN expansion - Question #335Designing Network Infrastructure
Refer to the exhibit. Two data center sites, X and Y, are connected with a direct backdoor link under these conditions: - Site-specific firewalls are deployed behind the Internet e...
BGPasymmetric routingdata center interconnecttraffic engineering - Question #336Gathering and Clarifying Requirements
Feature-rich networks are complex network models that provide one or more features in addition to the network topology. In attributed networks, attributes are assigned to the nodes...
network modelingtemporal networksmultilayer networksattributed networks - Question #337Designing Security
The internal policy of a private bank mandates that all digital customer data be subject to the laws of the country in which the data is processed. To which concept does this polic...
data sovereigntydata governancecompliancelegal requirements - Question #338Gathering and Clarifying Requirements
Scrum is a subset of Agile and is a lightweight process framework for Agile development. Which role becomes the interface between the business the customers, and their product-rela...
ScrumAgileProduct Ownerproject roles - Question #339Designing Network Infrastructure
Refer to the exhibit, Company XYZ is a large enterprise network where the WAN traffic utilizes most of the link. The IT team in the company often reports Stuck-In-Active problems....
EIGRPStuck-In-Activestub routingWAN scalability - Question #340Designing Network Infrastructure
Two routers R1 and R2 are directly connected through an Ethernet link. Both routers are running OSPF. OSPF has been registered with BFD and BFD is running in asynchronous mode with...
BFDecho functionasynchronous modeOSPF integration - Question #341Gathering and Clarifying Requirements
Which two factors must be considered while calculating the RTO? (Choose two.)
RTOdisaster recoverybusiness continuitysystem prioritization - Question #342Designing Security
What is a country-specific requirement that data is subject to the laws of the country in which it is collected or processed and must remain within its borders?
data sovereigntydata residencycomplianceregulatory requirements - Question #343Gathering and Clarifying Requirements
Enterprises that are embarking on their cloud migration journey must be able to have control over their workload mobility without platform interdependencies. What is an ecosystem c...
cloud migrationvendor lock-inworkload mobilitycloud agility - Question #344Designing Network Infrastructure
The first step to a resilient network is to have a clear strategy for how to achieve it and consider that simplicity modularity, and security play important roles. What is critical...
network resilienceIP network designperformance factorsfault tolerance - Question #345Designing Network Services
When classifying and marking traffic, a recommended design principle is to classify and mark applications as close to their sources as technically and administratively feasible. As...
QoSDSCPtraffic markingPHB - Question #346Gathering and Clarifying Requirements
A detailed enterprise-wide analysis of the current infrastructure of a large corporation identified three key findings: 1. Mainstream business processes 2. Light data volumes 3. Lo...
cloud model selectionpublic cloudcloud deploymentcompliance overhead - Question #347Designing Network Infrastructure
A network uses an SDN architecture with switches and a centralized controller. What should be on the switches but not on the controller?
SDNdata planecontrol planenetwork architecture - Question #348Designing Security
Refer to the exhibit. A company named XYZ has two data centers. A recent change to the company's security policy states that the firewall must not inspect intrazone communication b...
VRFfirewall zonesdata center interconnectL3VPN - Question #349Designing Network Infrastructure
Which layer of the SDN architecture orchestrates how the applications are given the resources available in the network?
SDNorchestration layercontrol layernorthbound API - Question #350Designing Network Services
What is a connection service inside a data center that provides direct connectivity to a cloud provider?
cloud direct connectdata center connectivitycloud providercolocation - Question #351Designing Security
Company XYZ has multiple production units and marketing departments across the region. The current network is a mixture of point-to-point links and MPLS Layer 3 VPN service from th...
HIPAAGETVPNIPsecMPLS encryption - Question #352Designing Network Infrastructure
Your company implemented LFA in the network to help with fast convergence in case a failure occurs on the network. However, while the network is being tested to confirm that LFA is...
LFAmicroloopsfast convergencerouting failure - Question #353Gathering and Clarifying Requirements
Which project management methodology is characterized by a having a low client involvement?
project managementtraditional methodologyclient involvementwaterfall - Question #354Designing Security
Company XYZ wants to implement an IPS device to detect and block well-known attacks against their network. They want a design solution where all packets that are forwarded to the n...
IPSinline modefirewall placementintrusion prevention - Question #355Designing Network Services
Company XYZ is operating several data centers across the globe to cater to a highly mobile workforce and dynamic workloads. Consider the cost of the connections QoS and latency req...
cloud on-rampcloud connectivitySD-WANpublic cloud - Question #356Designing Network Services
An engineer must redesign the QoS strategy for Company XYZ. The current network is experiencing many dropped packets due to oversubscription of the guaranteed bandwidth allocated b...
QoStraffic shapingbandwidth managementoversubscription - Question #357Designing Network Services
A large enterprise plans to enable direct internet access for specific SaaS applications from its remote branch sites by using local broadband internet circuits. Only traffic to sp...
SD-WANCloud OnRamppolicy-based redirectSaaS - Question #358Designing Security
As a service provider is implementing Strong Access Control Measures, which two of the following PCI Data Security Standard requirements must be met? (Choose two.)
PCI DSSaccess controlcardholder datacompliance - Question #360Gathering and Clarifying Requirements
When planning their cloud migration journey what is crucial for virtually all organizations to perform?
cloud migrationinfrastructure assessmentcloud planningTCO - Question #361Designing Management and Operations
Backups and mirror-copies of data are an essential part of RPO solutions. If a business wants to reduce their CAPEX for disaster recovery, which of the following solutions are appl...
disaster recoveryRPOcloud migrationCAPEX reduction - Question #362Designing Network Infrastructure
With virtualization being applied in many parts of the network every physical link is likely to carry one or more virtual links, but what is a drawback in cases like this?
fate sharingvirtualizationvirtual linksnetwork resilience - Question #363Designing Security
While access lists are generally associated with routers and firewalls, they can also be applied on layer 2 interfaces and to VLANs to provide granular security. Which are two bene...
Layer 2 ACLnetwork segmentationlateral attacksVLAN security - Question #364Designing Network Services
One of the approaches used in cloud bursting scenarios is distributed load-balanced, which operate the workloads in tandem between a public cloud and a data center. In which way ca...
cloud burstingdistributed load balancinghybrid cloudIaaS - Question #365Designing Network Infrastructure
As more links are added to the network, information and attributes related to the link is added to the control plane meaning every link that gets added will slow down the convergen...
MTTRcontrol plane convergencenetwork redundancyoverlapping outages