400-007 Dumps Help You Study Objectives

1. Refer to the exhibit.





This network is running EIGRP as the routing protocol and the internal networks are being advertised in EIGRP. Based on the link speeds, all traffic between London and Rome is getting propagated via Barcelona and the direct link between London and Rome is not being utilized under normal working circumstances. The EIGRP design should allow for efficiency in the routing table by minimizing the routes being exchanged. The link between London and Rome should be utilized for specific routes.

Which two steps accomplish this task? (Choose two.)

2. Which statement about hot-potato routing architecture design is true?

3. DRAG DROP

Drag and drop the characteristics from the left onto the corresponding network management options on the right.

4. An enterprise has identified these causes for inefficient CAPEX spending:

✑ CAPEX planning is driven by technology and not by business objectives.

✑ The CAPEX planning team lacks the data it needs to perform due diligence tasks.

✑ The organizational structure lacks sufficient accountability and incentives.

Which corporate cultural change contributes to improving the effectiveness of CAPEX spending?

5. An enterprise requires MPLS connected branches to access cloud-based Microsoft 365 services over an SD-WAN solution. Internet access Is available only at dual regional hub sites that are connected to the MPLS network.

Which connectivity method provides an optimum access method to the cloud-based services If one ISP suffers loss or latency?

6. A customer migrates from a traditional Layer 2 data center network into a new SDN-based. spine-and-leaf VXLAN EVPN data center within the same location. The networks are joined to enable host migration at Layer 2.

Which activity should be completed each time a legacy network is migrated?

7. A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The systems run legacy applications by using hard-coded IP addresses.

Which segmentation method is suitable and scalable for the customer?

8. The Layer 3 control plane is the intelligence over the network that steers traffic toward its intended destination.

Which two techniques can be used in service provider-style networks to offer a more dynamic, flexible, controlled, and secure control plane design? (Choose two.)

9. DRAG DROP

Drag and drop the end-to-end network virtualization elements from the left onto the correct network areas on the right.

10. A senior network designer suggests that you should improve network convergence times by reducing BGP timers between your CE router and the PE router of the service provider.

Which two factors should you consider to adjust the timer values? (Choose two.)

11. Which two data plane hardening techniques are true? (Choose two)

12. DRAG DROP

Drag and drop the multicast protocols from the left onto the current design situation on the right.

13. What are two design constraints in a standard spine and leaf architecture? (Choose two.)

14. Company XYZ wants to secure the data plane of their network.

Which two technologies can be included in the security design? (Choose two)

15. A key to maintaining a highly available network is building in the appropriate redundancy to protect against failure. This redundancy is carefully balanced with the inherent complexity of redundant systems.

Which design consideration is relevant for enterprise WAN use cases when it comes to resiliency?

16. Refer to the diagram.





Which solution must be used to send traffic from the foreign wireless LAN controller to the anchor wireless LAN controller?

17. An engineer is designing a DMVPN network where OSPF has been chosen as the routing protocol A spoke-to-spoke 'J
Which two design considerations must be taken into account? (Choose two)

18. Which aspect of BGP-LS makes it scalable in large network when multiarea topology information must be gathered?

19. Which two advantages of using DWDM over traditional optical networks are true? (Choose two.)

20. When designing a WAN that will be carrying real-time traffic, what are two important reasons to consider serialization delay? (Choose two)

21. Traditionally, infrastructure is not managed using code, but instead it is managed and provisioned manually which can cause potential issues. On the other side, infrastructure as code brings several advantages.

What is a benefit of infrastructure as code?

22. You want to split an Ethernet domain in two.

Which parameter must be unique in this design to keep the two domains separated?

23. Which mechanism enables small, unmanaged switches to plug into ports of access switches without risking switch loops?

24. Two routers R1 and R2 are directly connected through an Ethernet link Both routers are running OSPF. OSPF has been registered with BFD and BFD is running in asynchronous mode with the echo function enabled.

Which two actions occur that are related to the echo function? (Choose two)

25. Which two statements describe the usage of the IS-IS overload bit technique? (Choose two)

26. Company ABC uses IPv4-only. Recently they started deploying new endpoint devices. For operational reasons, IPv6 cannot be disabled on these new endpoint devices.

Which security measure prevents the new endpoint from learning an IPv6 prefix from an attacker?

27. The network designer needs to use GLOP IP address in order make them unique within their ASN, which multicast address range will be considered?

28. Refer to the exhibit.





The network 10.10.0 .0/16 has been redistributed to OSPF processes and the best path to the destination from R1 has been chosen as R1-R2-R3 A failure occurred on the link between R2 and R3 and the path was changed to R1-R4-R5-R3.

What happens when the link between R2 and R3 is restored'?

29. Company XYZ plans to run OSPF on a DMVPN network. They want to use spoke-to-spoke tunnels in the design.

What is a drawback or concern in this type of design?

30. Which solution component helps to achieve comprehensive threat protection and compliance for migration to multicloud SDX architectures?

31. The Agile release train workflow focuses on tasks which can be accomplished reliably and efficiently Scrum and Kanban are two of the most popular Agile frameworks, but both have a specific use case based on the implementation requirements.

In which two situations are Kanban the ideal framework to use”? (Choose two.)

32. Refer to the exhibit.





AJI links are P2P Layer 3. A high availability application is synchronizing data between host A and host B. To increase chance of delivery the same data is sent twice from host A on two different NICs toward the two NICs on host B.

Which solution must be deployed in the network to ensure that any failure in the network does not trigger data loss on host B?

33. Which two actions minimize the impact of the trusted NMS polling your network, such as high CPU utilization on network devices and network instability? (Choose two.)

34. What is an architectural framework created by ETSI that defines standards to decouple network functions from proprietary hardware-based appliances and have them run in software on standard x86 servers?

35. An enterprise campus is adopting a network virtualization design solution with these requirements

✑ It must include the ability to virtualize the data plane and control plane by using VLANs and VRFs

✑ It must maintain end-to-end logical path transport separation across the network

✑ resources available grouped at the access edge

Which two primary models can this network virtualization design be categorized? (Choose two)

36. What is a country-specific requirement that data is subject to the laws of the country in which it is collected or processed and must remain within its borders?

37. SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.

Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

38. What are two examples of business goals to be considered when a network design is built? (Choose two.)

39. Company XYZ is redesigning their QoS policy. Some of the applications used by the company are real-time applications. The QoS design must give these applications preference in terms of transmission.

Which QoS strategy can be used to fulfill the requirement?

40. What are two primary design constraints when a robust infrastructure solution is created? (Choose two.)

41. Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high- speed connections.

The company is now redesigning their network and must comply with these design requirements:

✑ Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion.

✑ Use the Internet as the underlay for the private WAN.

✑ Securely transfer the corporate data over the private WAN.

Which two technologies should be Incorporated into the design of this network? (Choose two.)

42. Company XYZ is designing their network using the three-layer hierarchical model.

At which layer must the QoS design classify or mark the traffic?

43. Company XYZ was not satisfied with the reconvergence time OSPF is taking. BFD was implemented to try to reduce the reconvergence time, but the network is still experiencing delays when having to reconverge.

Which technology will improve the design?

44. Company XYZ is planning to deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively.

Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)

45. Which two actions ensure voice quality in a branch location with a low-speed, high-latency WAN connection? (Choose two.)

46. An IT service provider is upgrading network infrastructure to comply with PCI security standards. The network team finds that 802.1X and VPN authentication based on locally-significant certificates are not available on some legacy phones.

Which workaround solution meets the requirement?

47. Which mechanism provides Layer 2 fault isolation between data centers?

48. A network security team uses a purpose-built tool to actively monitor the campus network, applications, and user activity. The team also analyzes enterprise telemetry data from IPFIX data records that are received from devices in the campus network.

Which action can be taken based on the augmented data?

49. A large enterprise customer is planning a new WAN connection to its headquarters. The current architecture is dual homed with static routing, but users complain when a specific link fails. Failure of the other link does not affect any services or applications. The new WAN connection must provide the headquarters with a resilient network design and increase the return on investment.

Which solution should be recommended to the customer?

50. A business wants to centralize services via VDI technology and to replace remote WAN desktop PCs with thin client-type machines to reduce operating costs.

Which consideration supports the new business requirement?

51. Which BGP feature provides fast convergence?

52. A network uses an SDN architecture with switches and a centralized controller.

What should be on the switches but not on the controller?

53. Which statement about OSPF hub-and-spoke topology is true?

54. An architect designs a multi-controller network architecture with these requirements:

✑ Achieve fast failover to control traffic when controllers fail.

✑ Yield a short distance and high resiliency in the connection between the switches and the controller.

✑ Reduce connectivity loss and enable smart recovery to improve the SDN survivability.

✑ Improve connectivity by adding path diversity and capacity awareness for controllers.

Which control plane component of the multi-controller must be built to meet the requirements?

55. It is often seen that companies pick a cloud vendor solely based on technical preferences without putting enough weight on the business strategies that are driving the cloud initiatives.

Which strategic requirement may come into play where it is more likely that the decision makers will look to leverage laaS over SaaS or PaaS?

56. Refer to the exhibit.





Your company designed a network to allow server VLANs to span all access switches in a data center In the design, Layer 3 VLAN interfaces and HSRP are configured on the aggregation switches.

Which two features improve STP stability within the network design? (Choose two.)

57. Which solution component helps to achieve rapid migration to the cloud for SaaS and public cloud leveraging SD-WAN capabilities?

58. Company XYZ wants to prevent switch loops caused by unidirectional point-point-link condition on Rapid FVST + and MST.

Which technology can be used in the design to meet this requirement?

59. Company XYZ is revisiting the security design for their data center because they now have a requirement to control traffic within a subnet and implement deep packet inspection.

Which technology meets the updated requirements and can be incorporated into the design?

60. Two companies need to implement an extranet overlay network solution by using a VPN tunnel over the internet to use each other's HTTP REST APIs. The solution must only provide data integrity because data confidentiality will be covered at the application layer. The existing firewall devices will be used as VPN endpoints for the tunnel but they have limited available resources.

Which type of VPN tunnel must be deployed for the extranet service?

61. Which two statements describe network automation and network orchestration? (Choose two.)

62. Organic growth or decline comes from a company's normal business activities, rather than through acquisitions or divestment. Changes in usage patterns can also cause organic change in network requirements.

Which tool is useful when designing and operationalizing a network that is in the process of change?

63. An enterprise that runs numerous proprietary applications has major issues with its on-premises server estate hardware, to the point where business-critical functions are compromised. The enterprise accelerates plans to migrate services to the cloud.

Which cloud service should be used if the enterprise wants to avoid hardware issues yet have control of its applications and operating system?

64. What is a disadvantage of the traditional three-tier architecture model when east west traffic between different pods must go through the distribution and core layers?

65. Which methodology is the leading lifecycle approach to network design and implementation?

66. Company XYZ, a global content provider, owns data centers on different continents. Their data center design involves a standard three-layer design with a Layer 3-only core. HSRP is used as the FHRP. They require VLAN extension across access switches in all data centers, and they plan to purchase a Layer 2 interconnection between two of their data centers in Europe.

In the absence of other business or technical constraints, which termination point is optimal for the Layer 2 interconnection?

67. Refer to the table.





A customer investigates connectivity options for a DCI between two production data centers. The solution must provide dual 10G connections between locations with no single points of failure for Day 1 operations. It must also include an option to scale for up to 20 resilient connections in the second year to accommodate isolated SAN over IP and isolated, dedicated replication IP circuits. All connectivity methods are duplex 10 Gbps.

Which transport technology costs the least over two years, in the scenario?

68. Which two technologies enable multilayer segmentation? (Choose two.)

69. An architect prepares a network design for a startup company. The design must be able to meet business requirements while the business grows and divests due to rapidly changing markets.

What is the highest priority in this design?

70. Refer to the exhibit.





Which impact of using three or more ABRs between the backbone area and area 1 is true?

71. Enterprise XYZ wants to implement fast convergence on their network and optimize timers for OSPF However they also want to prevent excess flooding of LSAs if there is a constantly flapping link on the network.

Which timers can help prevent excess flooding of LSAs for OSPF?

72. Which two factors must be considered while calculating the RTO? (Choose two )

73. Hybrid cloud computing allows organizations to like advantage of public and private cloud models.

Which best practice should organizations follow to ensure data security in the private cloud?

74. While access lists are generally associated with routers and firewalls, they can also be applied on layer 2 interfaces and to VLANs to provide granular security.

Which are two benefits of using layer 2 access lists for segmentation? (Choose two.)

75. You want to mitigate failures that are caused by STP loops that occur before UDLD detects the failure or that are caused by a device that is no longer sending BPDUs.

Which mechanism do you use along with UDLD?

76. DRAG DROP

Drag and drop the FCAPS network management reference models from the left onto the correct definitions on the right.

77. Company XYZ has a multicast domain that spans across multiple autonomous systems. The company wants to choose a technology that provides simplified and controlled approach to interconnecting the multicast domains.

Which technology is the best fit for this purpose?

78. Refer to the exhibit.





This network is running legacy STP 802.1 d.

Assuming "hello_timer" is fixed to 2 seconds, which parameters can be modified to speed up convergence times after single link/node failure?

79. Which two design option are available to dynamically discover the RP in an IPv6 multicast network? (Choose two)

80. You have been asked to design a high-density wireless network for a university campus.

Which two principles would you apply in order to maximize the wireless network capacity? (Choose two.)

81. Which two statements describe the functionality of OSPF packet-pacing timers? (Choose two)

The group-pacing timer controls the interval that is used for group and individual LSA refreshment

82. Which layer of the SDN architecture orchestrates how the applications are given the resources available in the network?

83. Refer to the exhibit.





A customer needs to implement a connectivity model by using one active link for inbound and outbound traffic and a second link for backup The backup link is low speed and is required only during outages of the primary link.

Which design solution should be implemented?

84. For a company that offers online billing systems for their customers, which strategy ensures the RPO is kept as low as possible?

85. In the wake of a security compromise incident where the internal networks were breached by an outside attacker at the perimeter of the infrastructure, an enterprise is now evaluating potential measures that can help protect against the same type of incident in the future.

What are two design options that can be employed? (Choose two)

86. One of the approaches used in cloud bursting scenarios is distributed load-balanced, which operate the workloads in tandem between a public cloud and a data center.

In which way can the characteristics of distributed load-balancing be described?

87. When planning their cloud migration journey what is crucial for virtually all organizations to perform?

88. An engineer is designing the QoS strategy for Company XYZ. Based on initial analysis, a lot of scavenger type of traffic is traversing the network's 20Mb Internet link toward the service provider. The new design must use a QoS technique that limits scavenger traffic to 2 Mbps, which helps avoid oversubscription of the link during times of congestion.

Which QoS technique can be used to facilitate this requirement?

89. Company XYZ wants to implement an IPS device to detect and block well-known attacks against their network They want a design solution where all packets that are forwarded to the network are checked against a signature database before being allowed through This check must be done with the minimum effect on performance.

Which design is recommended?

90. Which two impacts of adding the IP event dampening feature to a network design are true? (Choose two.)

91. Organizations that embrace Zero Trust initiatives ranging from business policies to technology infrastructure can reap business and security benefits.

Which two domains should be covered under Zero Trust initiatives? (Choose two)

92. Refer to the exhibit.





A new high availability DB sever cluster is installed in the network.

These two servers require high bandwidth and low latency Layer 2 connectivity for database replication.

Which solution supports these requirements?

93. When a company network architect is working on a new network design, they are expected to ensure that business requirements and technical aspects are factored in, but often there are other factors that comes into play as well.

Which non-business constraint must also be considered throughout the design phase?

94. DRAG DROP

An enterprise organization currently provides WAN connectivity to their branch sites using MPLS technology, and the enterprise network team is considering rolling out SD-WAN services for all sites.

With regards to the deployment planning, drag and drop the actions from the left onto the corresponding steps on the right.

95. Which security architecture component offers streamlined security operations, ease of use, and visibility across all network security elements, independent of location or form factor?

96. Which two characteristics are associated with 802 1s? (Choose two)

97. Two enterprise networks must be connected together. Both networks are using the same private IP addresses.

The client requests from both sides should be translated using hide NAT (dynamic NAT) with the overload

feature to save IF addresses from the NAT pools.

Which design addresses this requirement using only one Cisco I OS NAT router for both directions?

98. A thorough examination of the curant network infrastructure has revealed that several devices have an unusual high CPU load A traffic analysis indicates that control plane protocols and management traffic are affected as the devices are busy processing inbound traffic The networking team is working on updating their design for the entre network to handle situations like this.

Which feature or technology can be added to help mitigate the problem?

99. Which two factors provide multifactor authentication for secure access to applications and data, no matter where the users are or which devices they are on? (Choose two.)

100. Company XYZ uses an office model where the employees can use any open desk and plug their laptops in. They want to authenticate the end users using their domain username and password before allowing them access to the network. The design must also accommodate the ability of controlling traffic within the same group or subnet if a macro (or micro) segmentation-based model is adopted in the future.

Which protocol can be recommended for this design to authenticate end users?

101. Company ABC uses IPv4-only. Recently they started deploying new endpoint devices. For operational reasons, IPv6 cannot be disabled on these new endpoint devices.

Which security measure prevents the new endpoint from learning an IPv6 prefix from an attacker?

102. What is the most important operational driver in building a resilient and secure modular network design?

103. You want to add 900 VLANs to the existing 90 VLANs on a data center.

Which two spanning-tree concerns must you consider? (Choose two)

104. Refer to the exhibit.





ACME Mining has four data centers in Santiago. Cape Town. Mumbai, and Beijing, full-mesh connected via a 400 Mb/s EVP-LAN.

They want to deploy a new mission-critical application with these requirements:

✑ cluster heartbeat 2 Mb/s continuous (250 KB/s)

✑ cluster heartbeat one-way maximum latency 100 ms

These are the current ping tests results between the four data centers:





Which hosting data center pair can host the new application?

105. A software-defined network can be defined as a network with an API that allows applications to understand and react to the state of the network in near real time. A vendor is building an SDN solution that exposes an API to the RIB and potentially the forwarding engine directly. The solution provides off-box processes with the capability to interact with the routing table in the same way as a distributed routing process.

Which SDN framework model does the solution use?

106. Refer to the exhibit.





A customer runs OSPF with Area 5 between its aggregation router and an internal router When a network change occurs in the backbone. Area 5 starts having connectivity issues due to the SPF algorithm recalculating an abnormal number of times in Area 5 You are tasked to redesign this network to increase resiliency on the customer network with the caveat that Router B does not support the stub area.

How can you accomplish this task*?

107. A business requirement stating that failure of WAN access for dual circuits into an MPLS provider for a Data Centre cannot happen due to related service credits that would need to be paid has led to diversely routed circuits to different points of presence on the providers network?

What should a network designer also consider as part of the requirement?

108. Backups and mirror-copies of data are an essential part of RPO solutions.

If a business wants to reduce their CAPEX for disaster recovery, which of the following solutions are applicable?

109. Company XYZ is running OSPF in their network. They have merged with another company that is running EIGRP as the routing protocol. Company XYZ now needs the two domains to talk to each other with redundancy, while maintaining a loop free environment. The solution must scale when new networks are added into the network in the near future.

Which technology can be used to meet these requirements?

110. Which MPLS TE design consideration is true?

111. Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to monitor and keep track of any performance issues by continuously collecting and analyzing statistical information to monitor, correct, and optimize any reduced responsiveness across the network.

Which layer accomplishes this design requirement?

112. A customer asks you to perform a high level review of their upcoming WAN refresh for remote sites. The review is specially focused on their retail store operations consisting of 500+ locations connected via mutlipoint IPsec VPN solution.

Which routing protocol would be valid but would also be the most restrictive for the expansion of this deployment model?

113. The goal for any network designer is to strive to build a resilient network that adapts to changing conditions rapidly with minimal impact on the services running over the network.

A resilient network can adapt to failures but which soft failure can be harder to define and detect?

114. An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh IBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process.

Which design solution is the most cost effective?

115. A financial company requires that a custom TCP-based stock-trading application beprioritized over all other traffic for the business due to the associated revenue. The company also requires that VoIP be prioritized for manual trades.

Which directive should be followed when a QoS strategy is developed for the business?

116. During evaluation of migrating current on premises infrastructure to add cloud-based infrastructure, a network planning team must meet three core requirements as they make recommendations on which cloud strategy to adopt going forward

• Technology is changing rapidly, therefore the enterprise must be open to adopting new ways of doing things, and be ready to invest CapEx-funds in the next three years

• Network bandwidth capacity requirements are dynamic and are expected to change over the next year

• If new technologies are to be introduced, operational expenses must be kept at a minimum.

Which cloud strategy meets these requirements?

117. Which two possible drawbacks should you consider when introducing Network Functions Virtualization in a network design? (Choose two)

118. Which two aspects are considered when designing a dual hub dual DMVPN cloud topology? (Choose two)

119. Which three components are part of the foundational information security principles of the CIA triad? (Choose three.)

120. Refer to the exhibit.





For Company XYZ Bangkok is using ECMP to reach the 172 20 2 0/24 network. The company wants a design that would allow them to forward traffic from 172 16 2 0/24 toward 172 20 2 0/24 via the Singapore router as the preferred route. The rest of the traffic should continue to use ECMP.

Which technology fulfills this design requirement?