cisco 400-007 practice test
cisco certified design expert v3.0
Question 1
An architect receives a business requirement from a CTO that states the RTO for a new system should be 4 hours, and the RPO should be less than 1 hour. Business continuity must also be ensured in the event of a natural disaster. Which replication method and data center technology should be used?
- A. asynchronous replication over dual data centers via DWDM
- B. asynchronous replication over geographically dispersed dual data centers via CWDM
- C. synchronous replication over dual data centers via Metro Ethernet
- D. synchronous replication over geographically dispersed dual data centers via MPLS
Answer:
d
Question 2
Refer to the exhibit, Company XYZ is a large enterprise network where the WAN traffic utilizes most of the link. The IT team in the company often reports Stuck-In-Active problems. The company is set to acquire another company that will also be running EIGRP and which will connect to the Company XYZ R3 and R4 routers. This acquisition could make the issue worse. Which design solution solves this problem?
- A. Implement EIGRP Route Rap Dampening
- B. Utilize the EIGRP unequal cost load-balancing feature on R5 and R6 to provide an interim solution
- C. Advertise only the default route to R5 and R6 filtering all other routes
- D. Deploy the EIGRP stub capability on R5 and R6 with the connected and summary options enabled
Answer:
d
Question 3
Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The migration is estimated to take 20 months to complete but might extend an additional 10 months if issues arise. All connectivity options meet the requirements to migrate workloads. Which transport technology provides the best ROI based on cost and flexibility?
- A. DWDM over dark fiber
- B. MPLS
- C. CWDM over dark fiber
- D. Metro Ethernet
Answer:
d
Question 4
Company XYZ, a global content provider, owns data centers on different continents. Their data center design involves a standard three-layer design with a Layer
3-only core. HSRP is used as the FHRP. They require VLAN extension across access switches in all data centers, and they plan to purchase a Layer 2 interconnection between two of their data centers in Europe. In the absence of other business or technical constraints, which termination point is optimal for the
Layer 2 interconnection?
- A. at the core layer, to offer the possibility to isolate STP domains
- B. at the aggregation layer because it is the Layer 2 to Layer 3 demarcation point
- C. at the access layer because the STP root bridge does not need to align with the HSRP active node
- D. at the core layer because all external connections must terminate there for security reasons
Answer:
b
Question 5
Refer to the table. A customer investigates connectivity options for a DCI between two production data centers. The solution must provide dual 10G connections between locations with no single points of failure for Day 1 operations. It must also include an option to scale for up to 20 resilient connections in the second year to accommodate isolated SAN over IP and isolated dedicated replication IP circuits. All connectivity methods are duplex 10 Gbps. Which transport technology costs the least over two years in this scenario?
- A. CWDM
- B. DWDM
- C. MPLS
- D. Metro Ethernet
Answer:
d
Question 6
Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to minimize network outages by employing a set of procedures and activities to detect and isolate network issues and the appropriate corrective actions to overcome current issues and prevent them from occurring again. Which layer accomplishes this design requirement?
- A. fault management
- B. accounting management
- C. security management
- D. performance management
Answer:
a
Question 7
Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity threats. To achieve this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for the applications and services. Which protocol can be used by Company XYZ to provide authentication and authorization services?
- A. OAuth2
- B. OpenID Connect
- C. OpenID
- D. SAML 2.0
Answer:
d
Question 8
Cost is often one of the motivators for a business to migrate from a traditional network to a software-defined network. Which design decision is directly influenced by CAPEX drivers?
- A. scalability
- B. stability
- C. complexity
- D. manageability
Answer:
a
Question 9
A network security team observes phishing attacks on a user machine from a remote location. The organization has a policy of saving confidential data on two different systems using different types of authentication. What is the next step to control such events after the security team verifies all users in Zero Trust modeling?
- A. Assess real-time security health of devices
- B. Enforce risk-based and adaptive access policies
- C. Ensure trustworthiness of devices
- D. Apply a context-based network access control policy for users
Answer:
a
Question 10
Which aspect of BGP-LS makes it scalable in large network when multiarea topology information must be gathered?
- A. transmit flow control
- B. open-loop flow control
- C. hardware flow control
- D. TCP-based flow control
Answer:
d