Cisco CCDE 400-007 Questions & Answers

• Question 21:

  During evaluation of migrating current on premises infrastructure to add cloud-based infrastructure, a network planning team must meet three core requirements as they make recommendations on which cloud strategy to adopt going forward

  1.

  Technology is changing rapidly, therefore the enterprise must be open to adopting new ways of doing things, and be ready to invest CapEx-funds in the next three years

  2.

  Network bandwidth capacity requirements are dynamic and are expected to change over the next year

  3.

  If new technologies are to be introduced, operational expenses must be kept at a minimum.

  Which cloud strategy meets these requirements?

  A. private

  B. hybrid

  C. public

  D. multicloud

  Correct Answer: D

  Here are the benefits of multi-cloud model https://www.cisco.com/c/en/us/solutions/cloud/what-is-multicloud.html#~benefits-of-multicloud-model

• Question 22:

  Which methodology is the leading lifecycle approach to network design and implementation?

  A. PPDIOO

  B. Waterfall model

  C. Spiral model

  D. V model

  Correct Answer: A

  Reference: https://www.ciscopress.com/articles/article.asp?p=1608131andseqNum=3

• Question 23:

  Refer to the exhibit.

  

  Your company designed a network to allow server VLANs to span all access switches in a data center In the design, Layer 3 VLAN interfaces and HSRP are configured on the aggregation switches Which two features improve STP stability within the network design? (Choose two.)

  A. BPDU guard on access ports

  B. BPDU guard on the aggregation switch downlinks toward access switches

  C. root guard on the aggregation switch downlinks toward access switches

  D. root guard on access ports

  E. edge port on access ports

  F. access switch pairs explicitly determined to be root and backup root bridges

  Correct Answer: AE

• Question 24:

  You are tasked to design a QoS policy for a service provider so they can include it in the design of their MPLS core network If the design must support an MPLS network with six classes, and CEs will be managed by the service provider, which QoS policy should be recommended?

  A. map IP CoS bits into the IP Precedence field

  B. map flow-label bits into the Exp field

  C. map IP precedence bits into the DSCP field

  D. map DSCP bits into the Exp field

  Correct Answer: D

• Question 25:

  Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services Is true?

  A. first-hop router registration to the RP

  B. multicast client registration to the RP

  C. multicast source registration to the RP

  D. transport of all IPv6 multicast traffic

  Correct Answer: D

  The purpose of a dynamically created tunnel interface in the design of IPv6 multicast services is to transport all IPv6 multicast traffic. A tunnel interface is a virtual interface that is used to encapsulate IPv6 multicast traffic in an IPv4 or another IPv6 unicast packet for transport across a network. In the context of IPv6 multicast services, the tunnel interface is dynamically created when multicast traffic needs to be transported between multicast domains, or when the network topology requires it. The tunnel interface is used to encapsulate the IPv6 multicast traffic, allowing it to traverse the network as a unicast packet, which is then decapsulated and forwarded to the appropriate receivers.

• Question 26:

  Which two technologies enable multilayer segmentation? (Choose two.)

  A. policy-based routing

  B. segment routing

  C. data plane markings

  D. firewalls

  E. filter lists

  Correct Answer: AD

  Firewalls for sure. https://community.cisco.com/t5/security-knowledge-base/segmentation-policy-using-sgt-in-pbr-pdf/ta-p/3651240

• Question 27:

  IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches. Which use case is suitable for using IPFIX probes?\

  A. performance monitoring

  B. security

  C. observation of critical links

  D. capacity planning

  Correct Answer: C

  https://en.wikipedia.org/wiki/NetFlow#NetFlow_and_IPFIX NetFlow collection from dedicated probes is well suited for observation of critical links, whereas NetFlow on routers provides a Network-wide view of the traffic that can be used for capacity planning, accounting, performance monitoring, and security.

• Question 28:

  The Company XYZ network is experiencing attacks against their router. Which type of Control Plane Protection must be used on the router to protect all control plane IP traffic that is destined directly for one of the router interfaces?

  A. Control Plane Protection host subinterface

  B. Control Plane Protection main interface

  C. Control Plane Protection transit subinterface

  D. Control Plane Protection CEF-exception subinterface

  Correct Answer: A

• Question 29:

  Company XYZ has a multicast domain that spans across multiple autonomous systems. The company wants to choose a technology that provides simplified and controlled approach to interconnecting the multicast domains. Which technology is the best fit for this purpose?

  A. MSDP

  B. PIM SSM

  C. MPLS

  D. PIM sparse mode

  Correct Answer: A

  MSDP provides inter-domain access to multicast sources in all domains by enabling all Rendezvous Points (RPs) to discover multicast sources outside of their domains.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/ios/ipmulti/configuration/guide/imc_msdp_im_pim_s m_12_2_50_SY.html

• Question 30:

  Which best practice ensures data security in the private cloud?

  A. Use IPsec for communication between unsecured network connection

  B. Encrypt data at rest and in transition.

  C. Use the same vendor for consistent encryption.

  D. Anonymize data ownership to comply with privacy rules.

  Correct Answer: B

  Reference: https://www.bmc.com/blogs/hybrid-cloud-security/