Cisco 400-007 Online Practice Questions and Exam Preparation

Cisco 400-007 Online Questions & Answers

• Question 371:

  What statement describes the application layer as defined in the software-defined networking architecture?

  A. This layer is responsible for collecting the network status such as network usage and topology.
  B. This layer contains programs that communicate their desired network behavior to controllers.
  C. This layer is responsible for handling packets based on the rules provided by the controller.
  D. This layer processes the instructions and requirements sent by networking components.
  B. This layer contains programs that communicate their desired network behavior to controllers.

• Question 372:

  Refer to the exhibit.

  

  The WAN network of the General Bank of Greece has experienced several outages It takes too long to activate a new branch site The networking department of the bank plans to upgrade the legacy end-of-life WAN network with a new flexible manageable, and scalable in-house solution The number of branches will increase exponentially in the next fiscal year The CTO states that the bank's mam goal is OPEX reduction The network engineering team prepares a table to evaluate the available options.

  Which WAN technology can be used for the solution?

  A. DMVPN over L3VPN
  B. Managed SD-WAN
  C. SD-WAN over L3VPN
  D. SD-WAN over L2VPN
  A. DMVPN over L3VPN

• Question 373:

  DRAG DROP

  The line between security and compliance is easily blurred and is, to a large extent, a moving target Drag and drop each of the requirements on the left to the appropriate section on the right.

  Select and Place:

  

  

• Question 374:

  You have been tasked with designing a data center interconnect to provide business continuity You want to encrypt the traffic over the DCI using IEEE 802 1AE MACsec to prevent the deployment of any firewall or IPS. Which two interconnect technologies support MACsec? (Choose two.)

  A. EoMPLS
  B. MPLS Layer 3 VPN
  C. DMVPN
  D. GET VPN
  E. KVPLS
  A. EoMPLS
  E. KVPLS

• Question 375:

  Company XYZ is operating several data centers across the globe to cater to a highly mobile workforce and dynamic workloads. Consider the cost of the connections QoS and latency requirements and the global spread of users. Which cloud connectivity mechanism is the preferred mode of connectivity to public clouds?

  A. internet-based direct connect circuits
  B. IPsec over internet
  C. cloud on-ramp
  D. MPLS direct connect
  C. cloud on-ramp

• Question 376:

  A Tier-3 Service Provider is evolving into a Tier-2 Service Provider due to the amount of Enterprise business it is receiving The network engineers are re-evaluating their IP/MPLS design considerations in order to support duplicate/overlapping IP addressing from their Enterprise customers within each Layer3 VPN. Which concept would need to be reviewed to ensure stability in their network?

  A. Assigning unique Route Distinguishers
  B. Assigning unique Route Target ID'S
  C. Assigning unique IP address space for the Enterprise NAT/Firewalls
  D. Assigning unique VRF ID's to each L3VPN
  A. Assigning unique Route Distinguishers

• Question 377:

  Which two data plane hardening techniques are true? (Choose two)

  A. warning banners
  B. redundant AAA servers
  C. Control Plane Policing
  D. SNMPv3
  E. infrastructure ACLs
  F. disable unused services
  G. routing protocol authentication
  E. infrastructure ACLs
  F. disable unused services

• Question 378:

  A healthcare provider discovers that protected health information of patients was altered without patient consent. The healthcare provider is subject to HIPAA compliance and is required to protect PHI data. Which type of security safeguard should be implemented to resolve this issue?

  A. technical and physical access control
  B. administrative security management processes
  C. physical device and media control
  D. technical integrity and transmission security
  D. technical integrity and transmission security

• Question 379:

  If the desire is to connect virtual network functions together to accommodate different types of network service connectivity, what must be deployed?

  A. bridging
  B. service chaining
  C. linking
  D. daisy chaining
  E. switching
  B. service chaining

• Question 380:

  A private cloud is accessed over the private IT network infrastructure that is potentially vulnerable to violations, data leaks, and man-in- the-middle attacks. The security team is evaluating the following solutions to address the challenges:

  1.Encrypt data at rest and in transition.

  2.Use strong identity and access management (IAM) capabilities.

  3.Communicate the inherent data security risks to your customers and end-users.

  Assuming that adoption of a hybrid cloud model is likely to occur within the next 12 months, which two solutions can also help provide protection in a hybrid cloud environment? (Choose two.)

  A. Avoid automating the scanning and remediation of security controls using open-source tooling
  B. Practice SSH network protocols for data communication between unsecured network connections
  C. Implement a common protective methodology for the same information at rest or motion at different points of time
  D. Provide distributed management and visibility across the infrastructure instead of centralized management
  E. Apply cryptographic protocols to secure data transmission over the network
  C. Implement a common protective methodology for the same information at rest or motion at different points of time
  E. Apply cryptographic protocols to secure data transmission over the network