400-007 Exam Questions
454 real 400-007 exam questions with expert-verified answers and explanations. Page 9 of 10.
- Question #421Designing Security
Two companies need to implement an extranet overlay network solution by using a VPN tunnel over the internet to use each other's HTTP REST APIs. The solution must only provide data...
IPsec AHIPsec ESPVPN tunneldata integrity - Question #422Designing Network Services
The API of an SDN controller named CTL-A uses the HTTP POST method and the same URL for all resources. The JSON body of each messages used to get information for specific resources...
RESTful APISDN controllerHTTP CRUDnorthbound interface - Question #423Designing Security
Virtualisation pose a special challanges for NAC because virtual servers can move aroung a data center, and the VLAN can change as servers move. What is an option that can be used...
NACvirtualizationrole-based access controldata center security - Question #424Gathering and Clarifying Requirements
An enterprise has no direct control over a public cloud architecture. What is the limitation of the cloud integration approach of creating a unified elastic resource pool of data c...
cloud integrationhybrid cloudelastic resource poolcloud architecture - Question #425Gathering and Clarifying Requirements
Network design is the practice of planning and designing a communications network, but the used methodology or framework also plays a big part. What are two benefits of using an ag...
agile methodologyproject managementiterative developmentnetwork design process - Question #426Gathering and Clarifying Requirements
Before migrating anything to the cloud, what are three cloud readiness assessment steps that are required to perform? (Choose three.)
cloud readiness assessmentcloud migrationinfrastructure assessmentbusiness case - Question #427Designing Network Infrastructure
What is the best approach in a large legacy application migration scenario when the goal is to complete the migration in the shortest possible time?
cloud migration strategyrehostinglegacy applicationlift and shift - Question #428Gathering and Clarifying Requirements
A network operations team has a project to develop a network automation solution. The team organizes the project into a series of iterations that break down the large, complex proj...
Scrumagile methodologyproject managementdaily standup - Question #429Designing Network Infrastructure
Which two benefits can software-defined networks provide to businesses? (Choose two.)
SDN benefitssoftware-defined networkingOpEx CapEx reductionnetwork innovation - Question #432Designing Management and Operations
A thorough examination of the current network infrastructure has revealed that several devices have an unusual high CPU load. A traffic analysis indicates that control plane protoc...
control plane policingCoPPCPU protectiontraffic rate limiting - Question #433Designing Management and Operations
In the In-Band Network Telemetry (INT) approach, telemetry instructions are encoded into packet header fields and then processed by network switches as they flow. Which element mak...
in-band network telemetryprogrammable forwarding pipelineINTnetwork monitoring - Question #434Designing Management and Operations
A network automation team plans to develop tasks to configure services on a network by using a Python controller. The configuration tasks must be implemented by using operations th...
NETCONFYANGcandidate configurationnetwork-wide transactions - Question #435Designing Management and Operations
A network architect is working on the baseline policies dealing with the use of Infrastructure-as- Code within an IT department, and has been requested to present the plan at the m...
Infrastructure-as-Codeautomated workflowstelemetrynetwork automation - Question #436Designing Network Infrastructure
Which element is critical to the network design process and is used to calculate the path data takes to flow and the overall state of the system?
control planepath calculationnetwork design fundamentalsnetwork state - Question #437Designing Network Infrastructure
Refer to the exhibit. A solution architect is tasked with designing a quick fault detection and convergence solution based on a set of requirements: - Due to the use of voice appli...
BFDOSPF fast convergencefault detectionsub-second failover - Question #438Designing Management and Operations
Implementing a network automation architecture usually follows a phased approach that increases automation as the new technology and processes in the preceding phases are integrate...
abstraction layernetwork automation architecturedevice interactionautomation phases - Question #439Designing Network Infrastructure
SDN controllers need to sustain healthy operation under the pressure of different objectives from the applications they host. High availability can be achieved through improved sou...
SDN controller placementhigh availabilitycontroller resiliencescalability - Question #440Designing Management and Operations
With SDN, network administrators can automate many tasks, such as configuring network policies, traffic flows, and security settings. This automation can significantly reduce the t...
end-to-end automationtask automationSDN operationsnetwork change management - Question #443Designing Network Infrastructure
Multicast routing is being designed for a company network. The requirements include to design efficiency in the forwarding plane so that traffic is not forwarded toward devices tha...
multicastIGMP snoopingforwarding planePIM - Question #444Designing Network Infrastructure
With virtualization being applied in many parts of the network, every physical link is likely to carry one or more virtual links, but what is a drawback in cases like this?
virtualizationfate sharingvirtual linksnetwork resilience - Question #445Designing Network Infrastructure
You are leading design discussions about IPv6 implementation into an existing Enterprise network. A question is raised regarding older Layer 2 switches that exist in the network, a...
IPv6Layer 2 switchesMLD snoopingmulticast - Question #446Designing Network Infrastructure
Refer to the exhibit. A customer network design team is planning a migration from a legacy TDM- based L2VPN to an MPLS-based L3VPN. Migration is planned in a phased approach: - OSP...
MPLS L3VPNL2VPN migrationrouting loopsBGP OSPF redistribution - Question #447Designing Network Infrastructure
What are two examples of design considerations when working with VXLAN? (Choose two.)
VXLANVTEPunderlay designEVPN - Question #448Designing Network Infrastructure
Adding a parallel path between any two points in a network will increase resilience by removing a single point of failure however, it should also be measured how much adding this s...
network resiliencehalving effectredundancyhigh availability - Question #451Designing Network Services
What is the best approach to ensure both scalability and high availability for a cloud-based storage solution over the IP network?
cloud storageNAS clusteringhigh availabilityscalability - Question #452Designing Network Services
In a distributed cloud-native environment, calls to services and cloud resources can fail caused by unanticipated events that will require longer periods of time to resolve. These...
circuit breaker patternfault tolerancecloud-nativemicroservices resilience - Question #453Designing Network Services
An organization that upgraded their system 10 years ago is now facing issues with their applications in the core network. Support teams have shared their findings in which some of...
NaaScloud service modelsnetwork provisioningIaaS - Question #454Designing Network Services
Traditionally, networks handled static web pages, e-mail, and routine client/server traffic. Today, enterprise networks must handle more sophisticated types of network applications...
application networking servicesnetwork intelligenceQoSvoice video - Question #455Gathering and Clarifying Requirements
Company XYZ is a large US-based online retailer that is preparing for a major sale scheduled for the holiday season. Large volumes of dynamic workloads are expected, which are time...
workload placementworkload elasticitycloud scalabilityperformance - Question #456Designing Network Services
Many companies are turning to a hybrid cloud strategy to drive innovation and improve their in- house digital transformation projects. Creating a comprehensive plan for cloud migra...
hybrid cloudinteroperabilitycloud integrationmulti-cloud - Question #457Designing Network Infrastructure
A financial institution has adopted a hybrid cloud strategy to store sensitive customer data on- premises while utilizing public cloud services for non-sensitive applications. They...
hybrid clouddirect connectcloud connectivitysecure integration - Question #458Designing Security
Data governance allows setting and enforcing controls that allow greater access to data, which gains the security and privacy from having the controls on data. What is one of the u...
data governancepolicy managementcompliancedata controls - Question #459Designing Security
IT and security managers should assess their operations and systems from the perspective of potential hackers. It includes the use of analytical activities and processes like behav...
operational securitythreat intelligencebehavior monitoringdata protection - Question #460Designing Security
A network architect is tasked to develop a design where it is a requirement to group resources according to their security and trust level in the network. Which tool can be leverag...
security zonesnetwork segmentationapplication firewalltrust levels - Question #461Designing Security
An organization that has an on-prem data center recently underwent expansion where 5000 employees were on-boarded. The organization now needs to upgrade its network security with a...
Secure Web Gatewaycloud securityDPIL4-L7 filtering - Question #462Designing Security
Integrity is the assurance that information is trustworthy and accurate and the consistency, accuracy, and trustworthiness of data must be maintained over its entire lifecycle. Wha...
CIA triaddata integrityversion controlinformation security - Question #463Designing Security
A mega store plans to expand its business into the online world, and wants to operate using the highest possible security standards to prove to their customers that they take handl...
SSL certificatesEV SSLTLS 1.3PKI - Question #464Designing Security
An organization is working on a design solution for a new Internet-based remote access virtual private network that has 1000 remote sites. A network administrator recommends GETVPN...
GETVPNIPsec VPNkey serverInternet VPN design - Question #465Designing Security
During initial preparations to deploy 802.1x for wired access to their network, a company must ensure that the solution complies with existing internal security policies. These pol...
802.1xPEAPEAP methodsPKI tunnel authentication - Question #466Designing Management and Operations
The security department at a bank is evaluating its data governance policy. A security officer requests that processes be developed to define who within the bank has authority and...
data governancedata policydata assetsregulatory compliance - Question #467Designing Management and Operations
An organization that heavily realizes on SaaS applications for its day-to-day operations has advised their Chief Data Officer to collect and retain only the required technical data...
data governancedata minimizationSaaS data managementCDO - Question #468Designing Security
Refer to the exhibit. An enterprise underwent a DoS attack sourced from the Internet on their web servers. Their existing firewall failed to handle the attack resulting in services...
defense in depthfirewall designmulti-vendor securityDoS protection - Question #471Gathering and Clarifying Requirements
An organization with 9000 users across 40 branches was using modem applications and their 15 years old network equipment failed several times to meet applications and users require...
cloud migrationOpEx vs CapExcloud economicscost optimization - Question #472Designing Management and Operations
AI can help enhance security by automating processes, from threat detectionto incident response to indentifying unauthorized network access. What are two potencial risk of using AI...
AI risksAI automationalgorithmic biasquality assurance - Question #473Gathering and Clarifying Requirements
Before migrating to cloud, what are three cloud rediness assessment steps that are required to perform? (Choose Three.)
cloud readiness assessmentcloud migration planninginfrastructure assessmentbusiness case - Question #474Designing Management and Operations
Organizations need a solid foundation in governance practices to harness the potential of AI models to revolutionize the way they do business. This means providing access to AI too...
AI/ML in networkingdynamic risk assessmentcybersecurity automationAI governance - Question #475Designing Management and Operations
As the control plane receives discovered state information from the data plane. it compares it agains the desired state. Which process is used when the desired state does not match...
SDN control planedesired statecontrol directivesnetwork automation - Question #476Designing Network Infrastructure
Openflow is one of the first software-defined networking(SDN) standards and defined the communication protocol between SDN controllers and the forwarding plane of networking device...
OpenFlowSDNpolicy managementnetwork provisioning - Question #477Gathering and Clarifying Requirements
What is an advantage of using Agile over waterfall methodology in the network design lifecycle?
Agile methodologynetwork design lifecyclewaterfall methodologydesign risk - Question #478Designing Network Services
A Company wants to design a multicast network with multiple RPs, Their design should be so that source and destination endpoints can connect to the closest RP based on IGP metrics....
multicast designAnycast-RPMSDPPIM RP selection