Cisco 400-007 Online Practice Questions and Exam Preparation

Cisco 400-007 Online Questions & Answers

• Question 351:

  Which design principal improves network resiliency?

  A. Added load-balancing
  B. Added redundancy
  C. Added confidentiality
  D. Added reliability
  B. Added redundancy

• Question 352:

  You were tasked to enhance the security of a network with these characteristics:

  1.A pool of servers is accessed by numerous data centers and remote sites

  2.The servers are accessed via a cluster of firewalls

  3.The firewalls are configured properly and are not dropping traffic

  4.The firewalls occasionally cause asymmetric routing of traffic within the server data center.

  Which technology should you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

  A. Poison certain subnets by adding static routes to Null0 on the core switches connected to the pool of servers.
  B. Deploy uRPF strict mode.
  C. Limit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.
  D. Deploy uRPF loose mode
  C. Limit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.

• Question 353:

  DRAG DROP

  Network operators have many options available, from fully centralized to fully distributed control planes, and each approach has its own set of characteristics.

  Drag and drop the characteristics from the left onto the corresponding approach on the right.

  Select and Place:

  

  

• Question 354:

  The SD-WAN architecture is composed of separate orchestration management, control, and data planes. Which activity happens at the orchestration plane?

  A. automatic onboarding of the SD-WAN routers into the SD-WAN overlay
  B. decision-making process on where traffic flows
  C. packet forwarding
  D. central configuration and monitoring
  A. automatic onboarding of the SD-WAN routers into the SD-WAN overlay

• Question 355:

  A network uses an SDN architecture with switches and a centralized controller What should be on the switches but not on the controller?

  A. control plane functions
  B. a southbound interface
  C. data plane functions
  D. a northbound interface
  C. data plane functions

• Question 356:

  Hybrid cloud computing allows organizations to like advantage of public and private cloud models. Which best practice should organizations follow to ensure data security in the private cloud?

  A. Use standard protocols for data transmission over the network.
  B. Encrypt data when it is at rest and in motion
  C. Communicate all data security risks to customers and end users.
  D. Use standard network protocols for data communication between unsecured network connections.
  B. Encrypt data when it is at rest and in motion

• Question 357:

  The internal policy of a private bank mandates that all digital customer data be subject to the laws of the country in which the data is processed. To which concept does this policy relate?

  A. data sovereignty
  B. data compliance
  C. data localization
  D. data ownership
  A. data sovereignty

• Question 358:

  IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches. Which use case is suitable for using IPFIX probes?\

  A. performance monitoring
  B. security
  C. observation of critical links
  D. capacity planning
  C. observation of critical links

• Question 359:

  A detailed enterprise-wide analysis of the current infrastructure of a large corporation identified three key findings:

  1.Mainstream business processes

  2.Light data volumes

  3.Low regulations or compliance overheads

  Considering these findings which cloud model fits this enterprise?

  A. public cloud
  B. private cloud
  C. PaaS
  D. SaaS
  A. public cloud

• Question 360:

  A key to maintaining a highly available network is building in the appropriate redundancy to protect against failure. This redundancy is carefully balanced with the inherent complexity of redundant systems. Which design consideration is relevant for enterprise WAN use cases when it comes to resiliency?

  A. Design in a way that expects outages and attacks on the network and its protected resources
  B. The design approach should consider simple and centralized management aspect
  C. Design in a way that it simplifies and improves ease of deployment
  D. Design automation tools wherever it is appropriate for greater visibility
  A. Design in a way that expects outages and attacks on the network and its protected resources