Download Cisco Certified Design Expert 400-007 Dumps

test2022-07-26T06:05:52+00:00

By test 400-007 CCDE v3.0 Written exam, 400-007 Dumps, 400-007 practice exam, 400-007 questions and answers, Cisco Certified Design Expert 0 Comments

To pass your Cisco Certified Design Expert 400-007 test, the best method is to challenge and improve your knowledge. We recommend that you prepare with FreeTestShare 400-007 Dumps to test your knowledge and identify areas for development using genuine exam format. FreeTestShare 400-007 Dumps offer 100% real exam questions and answers that you’ll encounter on the real exam. Our professionals have created a series of practice exams for candidates who want to ensure that they receive the maximum possible score on the actual exam.

Try out the free 400-007 practice exam before making a purchase.

Page 1 of 4

1. Which architecture does not require an explicit multicast signaling protocol, such as PIM or P2MP, to signal the multicast state hop-by-hop, but instead uses a link state protocol to advertise the multicast forwarding state?

Binary indexed explicit routing

Binary intermediate enhanced routing

Bit indexed explicit replication

Bi-directional implicit replication

2. You have been asked to design a remote access VPN solution to support up to 2000 devices. You must ensure that only corporate assets are allowed to connect to the VPN, and users must authenticate to gain access of their based on their user role. Users must use a password that they are already using to access existing applications . A user may not always use the same device to access the VPN.

Which two options combined meet the requirements? (Choose two)

Use local usernames and passwords on the VPN device

Deploy a central authentication directory that users can be authenticated and authorized against

Deploy certificates that are unique to each user

Deploy an IPsec VPN solution

Deploy certificates that are unique to each device

Deploy a SSL VPN solution

3. Which two characteristics apply to firewall transparent mode operations in a firewall solution design? (Choose two.)

Changes in the existing IP addressing and subnets are required

The firewall can participate actively on spanning tree.

Multicast traffic can traverse the firewall.

OSPF adjacencies can be established through the firewall

The firewall acts like a router hop in the network.

4. DRAG DROP

Drag and drop the optical technology design characteristics on the left to the correct optical technologies on the right. Not all options are used

Graphical user interface

Description automatically generated

Graphical user interface

Description automatically generated

5. You want to mitigate failures that are caused by STP loops that occur before UDLD detects the failure or that are caused by a device that is no longer sending BPDUs.

Which mechanism do you use along with UDLD?

Root guard

BPDU guard

Loop guard

BPDU filtering

6. What best describes the difference between Automation and Orchestration?

Automation refers to an automatic process for completing a single task and Orchestration refers to assembling and coordinating a set of tasks and conditions.

Automation describes a hands-off configuration process while Orchestration refers to sets of automation tasks that require the network administrator to coordinate

Automation refers to an automatic process for completing multiple tasks with conditions and Orchestration refers to executing tasks in parallel.

Automation refers to scripting languages (Python. Ansible etc.) and Orchestration refers to commercial products that control configuration deployment

7. Refer to the exhibit

Diagram

Description automatically generated

You are designing this network to support voice communication between software and hardware endpoints To ensure quality, the decision is to implement a DiffServ QoS model with priority queuing Which admission criteria option do you recommend?

Police voice traffic on the switches

Implement a LLQ on switches

Implement a LLQ on routers

Implement active queue management on the routers only

Monitor packet drops on the router to identify possible oversubscription

8. Which three network management requirements are common practices in network design? (Choose three)

Collect RMON poll information for future regression analysis

Ensure that all network devices have their clocks synchronized

Look at average counters instead of instantaneous counters for inconsistent and bursty KPIs, such as CPU utilization and interface utilization.

Collect SNMP poll information for future regression analysis

Validate data plane health, application and services availability with synthetic traffic

Capture both ingress and egress flow-based packets. While avoiding duplications of flows

9. A network engineer confirms that STP is enabled on all switches in the network. An edge switch is not sending or receiving configuration BPDUs, although it appears that everything is functioning correctly in the network.

Which design explanation is true?

Storm control broadcast is enabled on the port.

REP is enabled on the port.

Bridge Assurance is enabled on the port.

BPDU Guard is enabled on the port.

10. You are designing a network running both IPv4 and IPv6 to deploy QoS Which consideration is correct about the QoS for IPv4 and IPv6?

IPv4 and IPv6 traffic types can use use queuing mechanisms such as LLQ, PQ and C

IPv6 packet classification is only available with process switching, whereas IPv4 packet classification is available with both process switching and CE

IPv6 and IB/4 traffic types can use a single QoS policy to match both protocols

Different congestion management mechanisms need to be used for IPv4 and IPv6 traffic types

Page 2 of 4

11. Which two statements describe the hierarchical LAN design model? (Choose two)

It is a well-understood architecture that provides scalability

It is the best design for modern data centers

It is the most optimal design but is highly complex

It provides a simplified design

Changes, upgrades, and new services can be introduced in a controlled and stagged manner

12. Which MPLS attribute is required or links to carry a given Cisco MPLS TE tunnel?

next hop backup tunnel

tunnel path-selection metric

TE tunnel destination address

affinity

13. You are asked to design a traffic policy to restrict traffic leaving a customer site.

Which technique is recommended to enforce a traffic leaving the site?

WRED

class based policing

policy routing

traffic shaping

14. Which best practice ensures data security in the private cloud?

Use IPsec for communication between unsecured network connection

Encrypt data at rest and in transition.

Use the same vendor for consistent encryption.

Anonymize data ownership to comply with privacy rules.

15. Which two statements describe the usage of the IS-IS overload bit technique? (Choose two )

lf overload-bit is set on a Level 2 intermediate system, the other Level 2 intermediate systems in the topology will stop using the overloaded IS to forward Level 2 traffic However, the intermediate system can still forward Level 1 traffic

It can be set in intermediate systems (IS-IS routers) to prioritize control plane CSNP packets.

It can be used to automatically synchronize the link-state database between Level 1 intermediate systems

It can be set in intermediate systems (IS-IS routers) to avoid traffic black holes until routing protocols are fully converged after a reload operation.

It can be set in intermediate systems (IS-IS routers) to attract transit traffic from other intermediate systems

16. Which two points must network designers consider when designing a new network design or when evaluating an existing network design to help them understand the high-level design direction with regards to the security aspects? (Choose two)

Consider Business objectives and goals

Consider organization’s security policy standards

Consider for only multi-site networks

Consider for only new network technologies and components

17. You are designing a network for a branch office. In order to improve convergence time, you are required to use the BFD feature Which four routing protocols can you use to facilitate this? (Choose four.)

IS-IS

static

RIP

EIGRP

BGP

18. A BGP route reflector in the network is taking longer than expected to coverage during large network changes. Troubleshooting shows that the router cannot handle all the TCP acknowledgements during route updates.

Which action can be performed to tune the device performance?

Increase the size of the hold queue.

Increase the size of the large buffers.

Decrease the size of the small buffers.

Increase the keepalive timers for each BGP neighbor.

19. Which mechanism provides Layer 2 fault isolation between data centers?

fabric path

OTL

advanced VPLS

LISP

TRILL

20. Refer to the exhibit.

Diagram

Description automatically generated

Your company designed a network to allow server VLANs to span all access switches in a data center In the design, Layer 3 VLAN interfaces and HSRP are configured on the aggregation switches Which two features improve STP stability within the network design? (Choose two.)

BPDU guard on access ports

BPDU guard on the aggregation switch downlinks toward access switches

root guard on the aggregation switch downlinks toward access switches

root guard on access ports

edge port on access ports

access switch pairs explicitly determined to be root and backup root bridges

Page 3 of 4

21. 1.Refer to the exhibit.

Graphical user interface, application

Description automatically generated

The enterprise customer wants to stream one-way video from their head office to eight branch offices using multicast. Their current service provider provides a Layer3 VPN solution and manages the CE routers, but they do not currently support multicast.

Which solution quickly allows this multicast traffic to go through while allowing for future scalability?

Enable a GRE tunnel between nodes CE1 and CE2

Enable a GRE tunnel between nodes C2 and C4

Enable a GRE tunnel between nodes C1 and C4

Implement hub and spoke MPLS VPN over DMVPN (also known as 2547o DMVPN) between CE1 and CE2

The service provider must provide a Draft Rosen solution to enable a GRE tunnel between nodes PE1 and PE2

22. Company ABC wants to minimize the risk of users plugging unauthorized switches and hubs into the network Which two features can be used on the LAN access ports to support this design requirement? (Choose two.)

Loop Guard

PortFast

DTF

Root Guard

BPDU Guard

23. Refer to the exhibit

Map

Description automatically generated

ACME Mining has four data centres in Santiago, Cape town, Mumbai, and Beijing, full-mesh connected via a 400 Mb/s EVP-LAN. They want to deploy a new mission-critical application with these requirements

• cluster heartbeat 2 Mb/s continuous (250 KB/s)

• cluster heartbeat one-way maximum latency 100 ms

These are the current ping tests results between the four data centers:

Table

Description automatically generated

Table

Description automatically generated

Which hosting data center pair can host the new application?

Santiago and Cape Town

Cape Town and Mumbai

Mumbai and Beijing

Santiago and Beijing

Cape Town and Beijing

Santiago and Mumbai

24. Which three items do you recommend for control plane hardening of an infrastructure device? (Choose three.)

redundant AAA servers

Control Plane Policing

warning banners

to enable unused .services

SNMPv3

routing protocol authentication

25. Which two conditions must be met for EIGRP to maintain an alternate loop-free path to a remote network? (Choose two.)

The Reported Distance from a successor is lower than the local Feasible Distance.

The Reported Distance from a successor is higher than the local Feasible Distance.

The feasibility condition does not need to be met.

The Feasible Distance from a successor is lower than the local Reported Distance.

A feasible successor must be present.

26. Which actions are performed at the distribution layer of the three-layer hierarchical network design model? (Choose two)

Fast transport

Reliability

QoS classification and marking boundary

Fault isolation

Redundancy and load balancing

27. A service provider hires you to design its new managed CE offering to meet these requirements:

Text

Description automatically generated

Which tunnelling technology do you recommend?

DMVPN

Point-to-point GRE

FlexVPN

LISP

28. Which two possible drawbacks should you consider when introducing Network Functions Virtualization in a network design? (Choose two)

Bandwidth utilization increases

Traffic flows are suboptimal

High-end routers are required to support NFV

OpenFlow must be supported in the network

An SDN orchestration layer is required to support NFV

29. A Service Provider is designing a solution for a managed CE service to a number of local customers using a single CE platform and wants to have logical separation on the CE platform using Virtual Routing and Forwarding (VRF) based on IP address ranges or packet length.

Which is the most scalable solution to provide this type of VRF Selection process on the CE edge device?

Static Routes for Route Leaking

Policy Based Routing

OSPF per VRF Instance

Multi-Protocol BGP

30. While designing a switched topology, in which two options is UplinkFast recommended? (Choose two)

when switches of different spanning-tree types are connected (for example. 802.1d connecting to 802.1w)

on distribution layer switches

when hello timers are changed to more aggressive values

on access layer switches

on the core switches

Page 4 of 4

31. You are designing a large-scale DMVPN network with more than 500 spokes using EIGRP as the IGP protocol Which design option eliminates potential tunnel down events on the spoke routers due to the holding time expiration?

Increase the hold queue on the physical interface of the hub router.

Increase the hold queue on the tunnel interface of the spoke routers

Increase the hold queue on the tunnel interface of the hub router

Apply QoS for pak_priority class

Increase the hold queue on the physical interface of the spoke routers.

32. Refer to the exhibit.

Diagram

Description automatically generated

There are multiple trees in the Cisco FabricPath All switches in the Layer 2 fabric share the same view of each tree.

Which two concepts describe how the multicast traffic is load-balanced across this topology? (Choose two )

A specific (

G) traffic is not load-balanced

All trees are utilized at the same level of the traffic rate

Every leaf node assigns the specific (

G) to the same tree.

A specific (

G) multicast traffic is load-balanced across all trees due to better link utilization efficiency.

The multicast traffic is generally load-balanced across all trees

33. In an OSPF network with routers connected together with Ethernet cabling, which topology typically takes the longest to converge?

partial mesh

full mesh

ring

squared

triangulated

34. A large enterprise company is redesigning their WAN infrastructure and has these design requirements

Text

Description automatically generated

Which two design solutions ensure that the enterprise access routers reach all devices in this enterprise network? (Choose two)

Configure the access routers to send a default route to the MPLS network.

Summarize the routes on the MPLS WAN interfaces of the distribution routers.

Use prefix lists on the distribution routers to control which routes are sent to the MPLS network.

Configure the distribution routers to send a default route to the MPLS network.

Configure null routes and aggregate routes for the prefixes in your network on the distribution routers.

35. Which three processes are part of the ITILv3 Service Operation? (Choose three)

Release and deployment management

Problem management

Incident management

Event management

Service-level management

Change management

36. A customer asks you to perform a high level review of their upcoming WAN refresh for remote sites The review is specially focused on their retail store operations consisting of 500+ locations connected via mutlipoint IPsec VPN solution.

Which routing protocol would be valid but would also be the most restrictive for the expansion of this deployment model?

EIGRP

IS-IS

OSPF

BGP