Cisco CCDE 400-007 Questions & Answers

• Question 261:

  Refer to the exhibit.

  

  An engineer is designing the network for a multihomed customer running in AS 111 does not have any other Ass connected to it. Which technology is more comprehensive to use in the design to make sure that the AS is not being used as a transit AS?

  A. Configure the AS-set attribute to allow only routes from AS 111 to be propagated to the neighbor ASs.

  B. Use the local preference attribute to configure your AS as a non-transit'' AS.

  C. include an AS path access list to send routes to the neighboring ASs that only have AS 111 in the AS path field.

  D. Include a prefix list to only receive routes from neighboring ASs.

  Correct Answer: C

• Question 262:

  You have been asked to design a high-density wireless network for a university campus. Which two principles would you apply in order to maximize the wireless network capacity? (Choose two.)

  A. Implement a four-channel design on 2.4 GHz to increase the number of available channels

  B. Choose a high minimum data rate to reduce the duty cycle.

  C. increases the number of SSlDs to load-balance the client traffic.

  D. Make use of the 5-GHz band to reduce the spectrum utilization on 2.4 GHz when dual- band clients are used.

  E. Enable 802.11n channel bonding on both 2.4 GHz and 5 GHz to increase the maximum aggregated cell throughput.

  Correct Answer: BD

• Question 263:

  Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity threats. To achieve this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for the applications and services. Which protocol can be used by Company XYZ to provide authentication and authorization services?

  A. OAuth2

  B. OpenID Connect

  C. OpenID

  D. SAML2.0

  Correct Answer: D

  OpenID lacks user authorization data (such as permissions) and focuses primarily on identity assertion.

• Question 264:

  Company XYZ has designed their network to run GRE over IPsec on their Internet-based VPN to connect two sites. Which IPsec tunneling feature can they enable to optimize the data flow while ensuring that the headers contain no duplicate IP addresses?

  A. Transport Mode in IPsec Phase I

  B. Transport Mode in IPsec Phase II

  C. Tunnel Mode in IPsec Phase II

  D. Tunnel Mode in IPsec Phase I

  Correct Answer: B

• Question 265:

  You are designing the routing design for two merging companies that have overlapping IP address space. Which of these must you consider when developing the routing and NAT design?

  A. Local to global NAT translation is done after routing

  B. Global to local NAT translation is done before routing.

  C. Local to global NAT translation is done before policy-based routing

  D. Global to local NAT translation is done after policy-based routing.

  Correct Answer: B

• Question 266:

  Which main IoT migration aspect should be reviewed for a manufacturing plant?

  A. Sensors

  B. Security

  C. Applications

  D. Wi-Fi Infrastructure

  E. Ethernet Switches

  Correct Answer: A

• Question 267:

  An enterprise that runs numerous proprietary applications has major issues with its on- premises server estate hardware, to the point where business-critical functions are compromised. The enterprise accelerates plans to migrate services to the cloud. Which cloud service should be used if the enterprise wants to avoid hardware issues yet have control of its applications and operating system?

  A. SaaS

  B. PaaS

  C. laaS

  D. hybrid cloud

  Correct Answer: C

• Question 268:

  A network architect must redesign a service provider edge, where multiservice and multitenant PEs are currently present. Which design feature should be minimized in the new design to achieve reliability?

  A. bridging

  B. fate sharing

  C. redundancy

  D. unicast overlay routing

  Correct Answer: B

• Question 269:

  Company XYZ has two routing domains in their network, EIGRP and OSPF. The company wants to provide full reachability between the two domains by implementing redistribution on a router running both protocols. They need to design the redistribution in a way that the OSPF routers will see link costs added to external routes. How must the redistribution strategy be designed for this network?

  A. Redistribute using metric type 2 into OSPF.

  B. Redistribute using metric type 1 into OSPF.

  C. Redistribute using metric type 1 into EIGRP.

  D. Redistribute using metric type 2 into EIGRP.

  Correct Answer: B

  https://www.ciscopress.com/articles/article.asp?p=27573andseqNum=4#:~:text=Routes%20a re%20redistributed%20in%20OSPF,shown%20in%20Figure%2014%2D2.

• Question 270:

  Which three tools are used for ongoing monitoring and maintenance of a voice and video environment? (Choose three.)

  A. flow-based analysis to measure bandwidth mix of applications and their flows

  B. call management analysis to identify network convergence-related failures

  C. call management analysis to identify CAC failures and call quality issues

  D. active monitoring via synthetic probes to measure loss, latency, and jitter

  E. passive monitoring via synthetic probes to measure loss, latency, and jitter

  F. flow-based analysis with PTP time-stamping to measure loss, latency, and jitter

  Correct Answer: ACD