Cisco 400-007 Online Practice Questions and Exam Preparation

Cisco 400-007 Online Questions & Answers

• Question 181:

  Company XYZ is designing the network for IPv6 security and they have these design requirements:

  1.A switch or router must deny access to traffic from sources with addresses that are correct, but are topologically incorrect

  2.Devices must block Neighbor Discovery Protocol resolution for destination addresses that are not found in the binding table.

  Which two IPv4 security features are recommended for this company? (Choose two)

  A. IPv6 DHCP Guard
  B. IPv6 Source Guard
  C. IPv6 Destination Guard
  D. IPv6 Prefix Guard
  E. IPv6 RA Guard
  C. IPv6 Destination Guard
  D. IPv6 Prefix Guard

• Question 182:

  Which aspect of BGP-LS makes it scalable in large network when multiarea topology information must be gathered?

  A. transmit flow control
  B. open-loop flow control
  C. hardware flow control
  D. TCP-based flow control
  D. TCP-based flow control

• Question 183:

  A network design includes a long signaling delay in notifying the Layer 3 control plane that an interface has failed.

  Which two of these actions would reduce that delay? (Choose two.)

  A. Increase network stability.
  B. Reduce the time for the network to reconverge.
  C. Increase the notification of interface flaps.
  D. Enable lower data link layer recovery systems to have an opportunity to restore the interface
  B. Reduce the time for the network to reconverge.
  D. Enable lower data link layer recovery systems to have an opportunity to restore the interface

• Question 184:

  Company XYZ has multiple production units and marketing departments across the region

  The current network is a mixture of point-to-point links and MPLS Layer 3 VPN service from the provider.

  The Info-Sec team has suggested to isolate production traffic end-to-end with an encryption over the transport network to comply with the HIPAA standard

  Which solution must be used in their design if Company XYZ wants a quick roll out"?

  A. IPsec point-to-point tunnels over the MPLS and point-to-point links provide an isolated and encrypted packet end-to-end
  B. GETVPN can be implemented over the MPLS provider, which provides a payload encryption without the overhead of the tunnelling
  C. A firewall can be placed centrally to filter out the traffic based on required ports
  D. VRF-Lite can be implemented toward the downstream network and VRF-based tunnels combined with IPsec can be implemented over the service provider
  A. IPsec point-to-point tunnels over the MPLS and point-to-point links provide an isolated and encrypted packet end-to-end

• Question 185:

  Which architecture does not require an explicit multicast signaling protocol, such as PIM or P2MP, to signal the multicast state hop-by-hop, but instead uses a link state protocol to advertise the multicast forwarding state?

  A. Binary indexed explicit routing
  B. Binary intermediate enhanced routing
  C. Bit indexed explicit replication
  D. Bi-directional implicit replication
  C. Bit indexed explicit replication

• Question 186:

  A network architect is designing a policy where database applications access the internet directly, while other traffic routes through the data center, with dynamic path switching based on performance. Which solution meets these requirements?

  A. MPLS L3VPN with QoS
  B. Cloud OnRamp for IaaS
  C. Cloud OnRamp for SaaS
  D. MPLS Direct Connect
  B. Cloud OnRamp for IaaS

• Question 187:

  DRAG DROP

  Drag and drop the design use cases from the left onto the correct uRPF techniques used to prevent spoofing attacks Not all options are used.

  Select and Place:

  

  

• Question 188:

  End users are moving swiftly toward a hybrid cloud model to support faster IT service delivery. To implement a hybrid cloud architecture, what are two critical requirements for broader cloud service provider and vendor interoperability in terms of cloud security and compliance? (Choose two.)

  A. cloud integration and data security
  B. tighter controls based on dynamic policy enforcement
  C. security event and data interoperability
  D. flexible controls based on policy application
  E. orchestration and cross cloud access security
  A. cloud integration and data security
  C. security event and data interoperability

• Question 189:

  A UK-based private hospital group with various levels of systems security considers upgrading its IT systems to increase performance and workload flexibility in response to constantly changing requirements. The CTO wants to reduce capital expenses and adopt the lowest-cost technology. Which technology choice is suitable?

  A. public cloud
  B. hybrid cloud
  C. on premises
  D. private cloud
  B. hybrid cloud

• Question 190:

  Over the years, many solutions have been developed to limit control plane state which reduces the scope or the speed of control plane information propagation. Which solution removes more specific information about a particular destination as topological distance is covered in the network?

  A. Aggregation
  B. Summarization
  C. Back-off timers
  D. Layering
  B. Summarization