400-007 Exam Questions
454 real 400-007 exam questions with expert-verified answers and explanations. Page 8 of 10.
- Question #367Gathering and Clarifying Requirements
An enterprise service provider is designing the network for a customer who runs a video application in both a centralized and distributed fashion. The team has looked at the follow...
video conferencing designjitter and delayQoSresource allocation - Question #368Gathering and Clarifying Requirements
Creating a network that functions as a strategic part of the business rather than simply being a cost center, starts with a good understanding of business requirements and processe...
data flowsbusiness requirementsLAN WAN designhigh-level design - Question #369Designing Security
An IT services company offers cloud services to a banking customer. The banking customer has raised a ticket about unauthorized access and data loss. They use an authentication tok...
API security monitoringcloud securityphishingauthentication token - Question #370Designing Network Services
The cloud like the Internet is a massive network of independent resources that are designed to be fault tolerant. Software components that run in the cloud have no dependencies on...
REST APIcloud architecturestateless designself-descriptive messages - Question #371Designing Network Infrastructure
Refer to the exhibit A customer network design team is planning a migration from a legacy TDM- based L2VPN to an MPLS-based L3VPN Migration is planned in a phased approach: - OSPF...
MPLS L3VPNrouting loop preventionOSPF to BGP migrationL2VPN migration - Question #372Designing Network Infrastructure
Network designers often segment networks by creating modules for various reasons. Sometimes however a network can be unintentionally segmented. For instance, if the only way to con...
network segmentationVPN tunnelingWAN designoverlay networks - Question #373Designing Network Infrastructure
You want to add 900 VLANs to the existing 90 VLANs on a data center. Which two spanning-tree concerns must you consider? (Choose two )
spanning treePVST+VLAN scalingSTP convergence - Question #374Gathering and Clarifying Requirements
It is often seen that companies pick a cloud vendor solely based on technical preferences without putting enough weight on the business strategies that are driving the cloud initia...
cloud strategyIaaS vs SaaSinfrastructure controlbusiness requirements - Question #375Designing Network Infrastructure
Which three characteristics of the Single Tier and the Dual Tier Headend Architectures for DMVPN designs are true? (Choose three.)
DMVPNheadend architectureGRE tunnelsIPsec - Question #376Designing Network Services
Company XYZ is connecting its sites over a private WAN. The company is planning on implementing multicast routing on the network. The company has a mixture of routers from differen...
multicast routingPIM sparse modeBSRrendezvous point - Question #377Designing Network Infrastructure
Which type of interface are OpenFlow and OpFlex?
SDNsouthbound interfaceOpenFlowOpFlex - Question #378Designing Management and Operations
For a company that offers online billing systems for their customers, which strategy ensures the RPO is kept as low as possible?
RPOcloud backupdata mirroringdisaster recovery - Question #379Designing Security
An organization is working on a design solution for a new Internet-based remote access virtual private network that has 1000 remote sites. A network administrator recommends GETVPN...
GETVPNkey server securityInternet-based VPNIPsec - Question #380Designing Network Infrastructure
Your company utilizes many different types of network transports and you want to increase the efficiency of the network. Which solution can be used to improve network efficiency ov...
PMTUDMTU optimizationGREPPPoE - Question #381Designing Management and Operations
Which two actions minimize the impact of the trusted NMS polling your network, such as high CPU utilization on network devices and network instability? (Choose two.)
SNMP pollingOID restrictionsNMSACL - Question #382Designing Network Infrastructure
Which interface between the controller and the networking device enables the two to communicate and allows the controller to program the data plane forwarding tables of the network...
SDNsouthbound interfacecontrollerdata plane - Question #383Designing Security
A private cloud is accessed over the private IT network infrastructure that is potentially vulnerable to violations, data leaks, and man-in-the-middle attacks. The security team is...
hybrid cloud securitydata encryptionIAMcryptographic protocols - Question #384Designing Management and Operations
Organic growth or decline comes from a company's normal business activities, rather than through acquisitions or divestment. Changes in usage patterns can also cause organic change...
change managementorganic growthnetwork designscalability - Question #385Designing Network Infrastructure
Company XYZ has two offices connected to each other over unequal redundant paths and they are running OSPF as the routing protocol. An external network architect recommends BFD for...
BFDOSPFfast convergencelink failure detection - Question #386Designing Security
End users are moving swiftly toward a hybrid cloud model to support faster IT service delivery. To implement a hybrid cloud architecture, what are two critical requirements for bro...
hybrid cloudcloud securitydata interoperabilitycompliance - Question #387Designing Security
In the wake of a security compromise incident where the internal networks were breached by an outside attacker at the perimeter of the infrastructure, an enterprise is now evaluati...
network segmentationmicroperimetersperimeter securitybreach mitigation - Question #388Designing Network Infrastructure
A customer migrates from a traditional Layer 2 data center network into a new SDN-based spine- and-leaf VXLAN data center within the same location Its applications cannot be readdr...
VXLANspine-leafSDN migrationLayer 2 trunk - Question #389Designing Management and Operations
The Agile release train workflow focuses on tasks which can be accomplished reliably and efficiently. Scrum and Kanban are two of the most popular Agile frameworks, but both have a...
KanbanAgile frameworkworkflow managementIT operations - Question #390Designing Management and Operations
A thorough examination of the curant network infrastructure has revealed that several devices have an unusual high CPU load. A traffic analysis indicates that control plane protoco...
control plane policingCoPPCPU utilizationtraffic management - Question #391Designing Network Infrastructure
Which statement about OSPF hub-and-spoke topology is true?
OSPFhub-and-spokeDR electionnetwork topology - Question #392Designing Network Infrastructure
You are leading design discussions about IPv6 implementation into an existing Enterprise network. A question is raised regarding older Layer 2 switches that exist in the network, a...
IPv6MLD snoopingLayer 2 switchesmulticast - Question #393Gathering and Clarifying Requirements
Which two areas of business presents a technical solution to support the company during emergency situations by understanding the data flows and using business processes to expiam...
business continuitydisaster recoverydata flowsbusiness processes - Question #397Designing Network Infrastructure
A company is reviewing their technology roadmap ahead of their cloud journey. The as-is assessment found that a large inventory (5000+) of servers sees less than 50% capacity utili...
cloud architectureresource utilizationpublic cloudserver consolidation - Question #398Designing Management and Operations
An Agile for Infrastructure transition often means dismantling traditional IT hierarchies and rebuilding it to align with business objectives and workflows. Organizations are seein...
infrastructure-as-codeDevOpsAgileautomation - Question #399Gathering and Clarifying Requirements
When planning their cloud migration journey, what is crucial for virtually all organizations to perform?
cloud migrationinfrastructure assessmentplanningcloud journey - Question #400Designing Management and Operations
Traditionally, infrastructure is not managed using code, but instead it is managed and provisioned manually, which can cause potential issues. On the other side, infrastructure as...
infrastructure-as-codeIaCrepeatable deploymentsautomation - Question #401Designing Network Infrastructure
Refer to the exhibit. An engineer is designing the network for a multihomed customer running in AS 111. AS 111 does not have any other ASs connected to it. Which technology is more...
BGP AS pathtransit AS preventionmultihomingBGP filtering - Question #402Designing Network Infrastructure
Refer to the exhibit. A customer needs to implement a connectivity model by using one active link for inbound and outbound traffic and a second link for backup. The backup link is...
BGP traffic engineeringAS PATH prependingMEDmultihoming - Question #403Designing Network Infrastructure
Your company utilizes many different types of network transports, and you want to increase the efficiency of the network. Which solution can be used to improve network efficiency o...
PMTUDMTU optimizationPPPoEGRE tunneling - Question #404Designing Security
Refer to the exhibit. A company named XYZ needs to apply security policies for end-user browsing by installing a secure web proxy appliance. All the web traffic must be inspected b...
policy-based routingsecure web proxyNGFWtraffic steering - Question #405Designing Management and Operations
The goal for any network designer is to strive to build a resilient network that adapts to changing conditions rapidly with minimal impact on the services running over the network....
network resiliencesoft failurenetwork optimizationfault detection - Question #406Designing Network Infrastructure
Over the years, many solutions have been developed to limit control plane state, which reduces the scope or the speed of control plane information propagation. Which solution remov...
route summarizationcontrol planeBGP aggregationnetwork scalability - Question #407Designing Management and Operations
During a pre-sales meeting with a potential customer, the customer CTO asks a question about advantages of controller-based networks versus a traditional network. What are two adva...
SDNcontroller-based networkingnetwork abstractionautomation - Question #408Gathering and Clarifying Requirements
When a company network architect is working on a new network design, they are expected to ensure that business requirements and technical aspects are factored in, but often there a...
design constraintscomplianceregulatory requirementsnetwork design - Question #409Designing Security
What are three examples of solution components of the network infrastructure that help enforce security policy compliance on all devices as they seek to access the network and comp...
network access controlposture assessmentendpoint securityNAC - Question #410Designing Security
Most security monitoring systems use a signature-based approach to detect threats. In which two instances are systems based on Network Behavior Anomaly Detection better than signat...
network behavior anomaly detectionzero-day attacksthreat detectionsecurity monitoring - Question #411Designing Security
A company created an IPv6 adoption plan for its campus network that requires dual-stack connectivity on the network. Campus users must have IPv6 connectivity to an HR management ap...
IPv6 securityRA guardIPv6 snoopinggateway spoofing - Question #413Designing Management and Operations
One of the key components in an SDN-controlled network is the ability to have a piece of software that can manipulate the devices in the network and also provide the intelligent an...
SDN controllerSDN architecturenetwork programmabilitycontrol plane - Question #414Designing Network Services
Which are two major design parameters when designing the architecture of workload service placement in a hybrid cloud model? (Choose two)
hybrid cloudworkload placementcloud deployment modelcloud architecture - Question #415Designing Network Services
When organizations initially start consuming public cloud services, they often use VPNs over the internet to connect their on-premises applications to the public cloud infrastuctur...
cloud connectivityVPN alternativesdirect connectlatency-sensitive applications - Question #416Designing Network Services
Direct cloud connectivity provides secure, high-performance, and end-to-end connectivity needed to run critical
direct cloud connectivitySLAdeterministic latencycloud performance - Question #417Designing Network Infrastructure
While positive feedback loops generally don't last long enough to bring down a network completly, then long enough to disrupt traffic flows or to cause the networkto converge more...
control plane stabilitypositive feedback loopsroute redistributionnetwork convergence - Question #418Designing Management and Operations
Management is often overlooked during the design of a network because it is considered an operational issue rather than a design issue. A hierachical disrupted arrangment can be us...
network managementdistributed NMSmanager of managersnetwork operations - Question #419Gathering and Clarifying Requirements
What are two advantages of the Agile project management methodology? (Choose two)
Agile methodologyproject managementiterative developmentfeedback loops - Question #420Gathering and Clarifying Requirements
Risk is a major determining factor in whether a company chooses to go with a public cloud, a private or a hybrid of both. What are two factors that impact the deceison on which clo...
cloud service modelrisk assessmentcompliancedata ownership