Cisco CCDE v3.0 400-007 Updated Questions

test2022-12-20T03:42:39+00:00

The Cisco Certified Design Expert (CCDE) 400-007 exam validates high-level design aspects as well as business requirements within the context of Enterprise network a rchitectures. To earn the CCDE certification, candidates must pass the 400-007 exam, as well as meet the experience requirements set by Cisco.

There are a variety of resources to help candidates prepare for the 400-007 exam, including training courses, practice exams, and study materials.By following Cisco CCDE v3.0 400-007 Updated Questions, you can increase your chances of success on the Cisco 400-007 exam.

Test yourself by the following 400-007 free questions.

Page 1 of 4

1. Company XYZ wants to improve the security design of their network to include protection from reconnaissance and DoS attacks on their sub interfaces destined toward next hop routers.

Which technology can be used to prevent these types of attacks?

MPP

CPPr

CoPP

DPP

2. A network architect must redesign a service provider edge, where multiservice and multitenant PEs are currently present.

Which design feature should be minimized in the new design to achieve reliability?

bridging

fate sharing

redundancy

unicast overlay routing

3. Which design benefit of bridge assurance is true?

It supposes a spanning-tee topology change upon connecting and disconnecting a station on a port

It prevents switched traffic from traversing suboptimal paths on the network.

It allows small, unmanaged switches to be plugged into ports of access switches without the risk of switch loops.

It prevents switch loops caused by unidirectional point-to-point link condition on Rapid PVST + and MST

4. You are designing a large-scale DMVPN network with more than 500 spokes using EIGRP as the IGP protocol.

Which design option eliminates potential tunnel down events on the spoke routers due to the holding time expiration?

Increase the hold queue on the physical interface of the hub router.

Increase the hold queue on the tunnel interface of the spoke routers

Increase the hold queue on the tunnel interface of the hub router

Apply QoS for pak_priority class

Increase the hold queue on the physical interface of the spoke routers.

5. A Tier-3 Service Provider is evolving into a Tier-2 Service Provider due to the amount of Enterprise business it is receiving. The network engineers are re-evaluating their IP/MPLS design considerations in order to support duplicate/overlapping IP addressing from their Enterprise customers within each Layer3 VPN.

Which concept would need to be reviewed to ensure stability in their network?

Assigning unique Route Distinguishers

Assigning unique Route Target ID'S

Assigning unique IP address space for the Enterprise NAT/Firewalls

Assigning unique VRF ID's to each L3VPN

6. Which two possible drawbacks should you consider when introducing Network Functions Virtualization in a network design? (Choose two)

Bandwidth utilization increases

Traffic flows are suboptimal

High-end routers are required to support NFV

OpenFlow must be supported in the network

An SDN orchestration layer is required to support NFV

7. As part of workspace digitization, a large enterprise has migrated all their users to Desktop as a Sen/ice (DaaS), by hosting the backend system in their on-premises data center. Some of the branches have started to experience disconnections to the DaaS at periodic intervals, however, local users in the data center and head office do not experience this behavior.

Which technology can be used to mitigate this issue?

tail drop

traffic shaping

WRED

traffic policing

8. Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services Is true?

first-hop router registration to the RP

multicast client registration to the RP

multicast source registration to the RP

transport of all IPv6 multicast traffic

9. Retef to the exhibit.

An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain EIGRP routes are getting redistributed into OSPF, OSPF area 20 has routers with limited memory and CPU resources The engineer wants to block routes from EIGRP 111 from propagating into area 20 and allow EIGRP 222 routes to How in.

Which OSPF area type fulfills this design requirement?

area 20 as a stub area

type 5 LSA filtering on the ASBR between EIGRP 111 and area a

area 20 as a NSSA area

type 3 LSA filtering on the ABR between area 0 area 20

10. A BGP route reflector in the network is taking longer than expected to coverage during large network changes. Troubleshooting shows that the router cannot handle all the TCP acknowledgements during route updates.

Which action can be performed to tune the device performance?

Increase the size of the hold queue.

Increase the size of the large buffers.

Decrease the size of the small buffers.

Increase the keepalive timers for each BGP neighbor.

Page 2 of 4

11. Which two conditions must be met for EIGRP to maintain an alternate loop-free path to a remote network? (Choose two.)

The Reported Distance from a successor is lower than the local Feasible Distance.

The Reported Distance from a successor is higher than the local Feasible Distance.

The feasibility condition does not need to be met.

The Feasible Distance from a successor is lower than the local Reported Distance.

A feasible successor must be present.

12. A network engineering team is in the process of designing a lab network for a customer demonstration. The design engineer wants to show that the resiliency of the MPLS traffic Engineering Fast Reroute solution has the same failover/failback times as a traditional SONET/SDH network (around 50MSEC).

In order to address both link failure and node failure within the lab typology network, which type of the MPLS TE tunnels must be considered for this demonstration?

TE backup tunnel

Next-hop (NHop) tunnel

FRR Backup tunnel

next-next-hop (NNHop) tunnel

13. Company ABC wants to minimize the risk of users plugging unauthorized switches and hubs into the network.

Which two features can be used on the LAN access ports to support this design requirement? (Choose two.)

Loop Guard

PortFast

DTF

Root Guard

BPDU Guard

14. Refer to the exhibit.

Which impact of using three or more ABRs between the backbone area and area 1 is true?

In a large-scale network LSA replication by all ABRs can cause serious scalability issues

Multiple ABRs reduce the CPU processing on each A6R due to splitting prefix advertisement

In a large-scale network multiple ABRs can create microloops.

Prefixes from the non-backbone area are advertised by one ABR to the backbone

15. Which two mechanisms avoid suboptimal routing in a network with dynamic mutual redistribution between multiple OSPFv2 and EIGRP boundaries? (Choose two.)

AD manipulation

matching OSPF external routes

route tagging

route filtering

matching EIGRP process ID

16. Refer to the exhibit.

ACME Mining has four data centers in Santiago. Cape Town. Mumbai, and Beijing, full-mesh connected via a 400 Mb/s EVP-LAN.

They want to deploy a new mission-critical application with these requirements:

✑ cluster heartbeat 2 Mb/s continuous (250 KB/s)

✑ cluster heartbeat one-way maximum latency 100 ms

These are the current ping tests results between the four data centers:

Which hosting data center pair can host the new application?

Mumbai and Beijing

Santiago and Cape Town

Santiago and Mumbai

Cape Town and Mumbai

Cape Town and Beijing

Santiago and Beijing

17. Company XYZ asks for design recommendations for Layer 2 redundancy. The company wants to prioritize fast convergence and resiliency elements. In the design.

Which two technologies are recommended? (Choose two.)

Design MLAG/MC-LAG into the network wherever possible.

Configure DHCP snooping on the switches.

Use root guard.

Use BPDU guard.

Use UniDirectional Link Detection.

18. Which three elements help network designers to construct secure systems that protect information and resources (such as devices, communication, and data) from unauthorized access, modification, inspection, or destruction? (Choose three.)

confidential

serviceability

reliability

availability

integrity

scalability

19. What best describes the difference between Automation and Orchestration?

Automation refers to an automatic process for completing a single task and Orchestration refers to assembling and coordinating a set of tasks and conditions.

Automation describes a hands-off configuration process while Orchestration refers to sets of automation tasks that require the network administrator to coordinate

Automation refers to an automatic process for completing multiple tasks with conditions and Orchestration refers to executing tasks in parallel.

Automation refers to scripting languages (Python. Ansible etc.) and Orchestration refers to commercial products that control configuration deployment

20. A network design includes a long signaling delay in notifying the Layer 3 control plane that an interface has failed.

Which two of these actions would reduce that delay? (Choose two.)

Increase network stability.

Reduce the time for the network to reconverge.

Increase the notification of interface flaps.

Enable lower data link layer recovery systems to have an opportunity to restore the interface

Page 3 of 4

21. Which two aspects are considered when designing a dual hub dual DMVPN cloud topology? (Choose two)

will only work with single-tier headend architecture

hub sites must connect to both DMVPN clouds

recommended for high availability

spoke-to-spoke traffic will transit the hub unless spokes exchange dynamic routing directly

requires all sites to have dual Internet connections

22. You are designing a network running both IPv4 and IPv6 to deploy QoS.

Which consideration is correct about the QoS for IPv4 and IPv6?

IPv4 and IPv6 traffic types can use use queuing mechanisms such as LLQ, PQ and C

IPv6 packet classification is only available with process switching, whereas IPv4 packet classification is available with both process switching and CE

IPv6 and IB/4 traffic types can use a single QoS policy to match both protocols

Different congestion management mechanisms need to be used for IPv4 and IPv6 traffic types

23. Refer to the exhibit.

Traffic was equally balanced between Layer 3 links on core switches SW1 and SW2 before an introduction of the new video server in the network. This video server uses multicast to send video streams to hosts and now one of the links between core switches is over utilized.

Which design solution solves this issue?

Add more links between core switches.

Aggregate links Layer 2 link aggregation.

Apply a more granular load- balancing method on SW1.

Apply a more granular load-balancing method on SW2.

Filter IGMP joins on an over -utilized link.

24. You are designing a network for a branch office. In order to improve convergence time, you are required to use the BFD feature.

Which four routing protocols can you use to facilitate this? (Choose four.)

IS-IS

static

RIP

EIGRP

BGP

25. Organizations that embrace Zero Trust initiatives ranging from business policies to technology infrastructure can reap business and security benefits.

Which two domains should be covered under Zero Trust initiatives? (Choose two)

workload

work domain

workplace

workgroup

workspace

26. Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to monitor and keep track of any performance issues by continuously collecting and analyzing statistical information to monitor, correct, and optimize any reduced responsiveness across the network.

Which layer accomplishes this design requirement?

fault management

accounting management

performance management

security management

27. Company XYZ has a hub-and-spoke topology over an SP-managed infrastructure. To measure traffic performance metrics, they implemented IP SLA senders on all spoke CE routers and an IP SLA responder on the hub CE router.

What must they monitor to have visibility on the potential performance impact due to the constantly increasing number of spoke sites?

CPU and memory usage on the spoke routers

memory usage on the hub router

CPU usage on the hub router

interface buffers on the hub and spoke routers

28. Which optimal use of interface dampening on a fast convergence network design is true?

When occasional flaps of long duration occur

when numerous adjacent flaps of very short duration occur

when the router hardware it slower than the carrier delay down detection

when the switch hardware is faster than the debounce timer down detection

29. Company XYZ has a new network based on IPv6. Some of the subnets that they are planning to use will be confidential and need an addressing scheme that confines them to the local campus network.

Which type of IPv6 addresses can be used for these networks in the IPv6 addressing design?

local addresses

private addresses

link-local addresses

unique local addresses

30. An architect receives a business requirement from a CTO that states the RTO and RPO for a new system should be as close as possible to zero.

Which replication method and data center technology should be used?

asynchronous replication over dual data centers via DWDM

synchronous replication over geographically dispersed dual data centers via MPLS

synchronous replication over dual data centers via Metro Ethernet

asynchronous replication over geographically dispersed dual data centers via CWDM

Page 4 of 4

31. Which two statements describe the usage of the IS-IS overload bit technique? (Choose two)

If overload-bit is set on a Level 2 intermediate system, the other Level 2 intermediate systems in the topology will stop using the overloaded IS to forward Level 2 traffic However, the intermediate system can still forward Level 1 traffic

It can be set in intermediate systems (IS-IS routers) to prioritize control plane CSNP packets.

It can be used to automatically synchronize the link-state database between Level 1 intermediate systems

It can be set in intermediate systems (IS-IS routers) to avoid traffic black holes until routing protocols are fully converged after a reload operation.

It can be set in intermediate systems (IS-IS routers) to attract transit traffic from other intermediate systems

32. Customer XYZ network consists of an MPLS core. IS-IS running as IGP a pair of BGP route reflectors for route propagation, and a few dozens of MPLS-TE tunnels for specific tactical traffic engineering requirements. The customer's engineering department has some questions about the use of the Overload Bit in the IS-IS networks and how it could be used to improve their current network design.

Which two concepts about the Overload Bit are true? (Choose two.)

It can be set on a router during the startup process for a fixed period of time

Networks advertised within the LSPs of the respective node will become unreachable

It forces the midpoint MPLS-TE node to reoptimize the primary tunnels going through the OL node.

It can be set on a router until other interacting protocols have signaled convergence.

It is not recommended on BGP Route Reflectors

33. You are using iSCSI to transfer files between a 10 Gigabit Ethernet storage system and a 1 Gigabit Ethernet server. The performance is only approximately 700 Mbps and output drops are occurring on the server switch port.

Which action will improve performance in a cost-effective manner?

Change the protocol to CIF

Increase the queue to at least 1 GB

Use a WRED random drop policy

Enable the TCP Nagle algorithm on the receiver

34. Refer to the exhibit.

An engineer is designing the traffic flow for AS 111. Traffic from AS 111 should be preferred via AS 100 for all external routes. A method must be used that only affects AS 111.

Which BGP attributes are best suited to control outbound traffic?

community

MED

local preference

As path

35. Which two actions ensure voice quality in a branch location with a low-speed, high-latency WAN connection? (Choose two.)

Increase WAN bandwidth

Increase memory branch switch.

Fragment data packets.

Replace any electrical links with optical links

Prioritize voice packets

36. What advantage of placing the IS-IS layer 2 flooding domain boundary at the core Layer in a three-layer hierarchical network is true?

The Layer 1 and Layer 2 domains can easily overlap

It reduces the complexity of the Layer 1 domains

It can be applied to any kind of topology

The Layer 2 domain is contained and more stable

37. A senior network designer suggests that you should improve network convergence times by reducing BGP timers between your CE router and the PE router of the service provider.

Which two factors should you consider to adjust the timer values? (Choose two.)

service provider agreement to support tuned timers

manual updates to the peer groups

service provider scheduling of changes to the PE

number of routes on the CE router

number of VRFs on the PE router

38. You are designing the routing design for two merging companies that have overlapping IP address space.

Which of these must you consider when developing the routing and NAT design?

Local to global NAT translation is done after routing

Global to local NAT translation is done before routing.

Local to global NAT translation is done before policy-based routing

Global to local NAT translation is done after policy-based routing.

39. Which three Cisco products are used in conjunction with Red Hat to provide an NFVi solution? (Choose three.)

Cisco Prime Service Catalog

Cisco Open Virtual Switch

Cisco Nexus switches

Cisco UCS

Cisco Open Container Platform

Cisco Virtual Network Function

40. IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches.

Which use case is suitable for using IPFIX probes?

performance monitoring

security

observation of critical links

capacity planning