Cisco CCDE 400-007 Questions & Answers

• Question 1:

  DRAG DROP

  The network team in XYZ Corp wants to modernize their infrastructure and is evaluating an implementation and migration plan to allow integration MPLS-based, Layer 2 Ethernet services managed by a service provider to connect branches and remote offices. To decrease OpEx and improve response times when network components fail, XYZ Corp decided to acquire and deploy new routers. The network currently is operated over E1 leased lines (2 Mbps) with a managed CE service provided by the telco.

  Drag and drop the implementation steps from the left onto the corresponding targets on the right in the correct order.

  Select and Place:

  

  Correct Answer:

  

• Question 2:

  DRAG DROP

  An enterprise wants to migrate an on-premises network to a cloud network, and the design team is finalizing the overall migration process. Drag and drop the options from the left into the correct order on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 3:

  DRAG DROP

  An enterprise organization currently provides WAN connectivity to their branch sites using MPLS technology, and the enterprise network team is considering rolling out SD-WAN services for all sites.

  With regards to the deployment planning, drag and drop the actions from the left onto the corresponding steps on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 4:

  DRAG DROP

  Drag and drop the characteristics from the left onto the corresponding network management options on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 5:

  Which two protocols are used by SDN controllers to communicate with switches and routers? (Choose two.)

  A. NetFlash

  B. NetFlow

  C. Open vSwitch Database

  D. OpenFlash

  E. OpenFlow

  Correct Answer: CE

• Question 6:

  Company XYZ wants design recommendations for Layer 2 redundancy (using Layer 2 technologies). The company wants to prioritize flexibility and scalability elements in the new design.

  Which two technologies help meet these requirements? (Choose two.)

  A. Configure DHCP snooping on the switches

  B. Use switch clustering at the distribution layer where possible

  C. Use Unidirectional Link Detection

  D. Avoid stretching VLANs across switches

  E. Use root guard

  Correct Answer: BE

  Switch cluserting is a flexibility + Scalability, Root guard gives flexibilty to connect L2 switches in any topology, keeping the ROOT safe

• Question 7:

  A UK-based private hospital group with various levels of systems security considers upgrading its IT systems to increase performance and workload flexibility in response to constantly changing requirements. The CTO wants to reduce capital expenses and adopt the lowest-cost technology. Which technology choice is suitable?

  A. public cloud

  B. hybrid cloud

  C. on premises

  D. private cloud

  Correct Answer: B

• Question 8:

  A security architect receives reports of these incidents:

  1.

  An attacker exploits printers and medical devices in the organization to gain control of the network.

  2.

  An attacker disrupts operations through attacks on networked business infrastructure. What is the next step to address these issues after discovery and classification of devices?

  A. Ensure trustworthiness of devices

  B. Assess continuous security health monitoring

  C. Apply a context-based network access control policy

  D. Enforce risk-based and adaptive access policies

  Correct Answer: C

  https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2020/pdf/ADD-1001-Zero-Trust-Security-Model.pdf (Zero Trust for workplace)

• Question 9:

  What is a disadvantage of the traditional three-tier architecture model when east west traffic between different pods must go through the distribution and core layers?

  A. low bandwidth

  B. security

  C. scalability

  D. high latency

  Correct Answer: A

  Its about east-west traffic, latency would not be main concern, its the the bandwidth. 3-tier design inherently enforces to have less links on the core / distribution layer, and as the east-west traffic rapidly grows, we may ran out of ports on core/ distri switches(being only few switches, can't be added on the go)

• Question 10:

  What is an architectural framework created by ETSI that defines standards to decouple network functions from proprietary hardware-based appliances and have them run in software on standard x86 servers?

  A. NFVIS

  B. NFV

  C. VNF

  D. NPIV

  Correct Answer: B