Cisco CCDE 400-007 Questions & Answers

• Question 41:

  Which design principal improves network resiliency?

  A. Added load-balancing

  B. Added redundancy

  C. Added confidentiality

  D. Added reliability

  Correct Answer: B

• Question 42:

  A company plans to use BFD between its routers to detect a connectivity problem inside the switched network. An IPS is transparently installed between the switches. Which packets shold the IPS forward for BFD to work under all circumstances?

  A. Fragmented packet with the do-not-fragment bit set

  B. IP packets with broadcast IP source addresses

  C. IP packets with the multicast IP source address

  D. IP packet with the multicast IP destination address

  E. IP packets with identical source and destination IP addresses

  F. IP packets with the destination IP address 0.0.0.0.

  Correct Answer: E

• Question 43:

  Which two statements describe the usage of the IS-IS overload bit technique? (Choose two )

  A. lf overload-bit is set on a Level 2 intermediate system, the other Level 2 intermediate systems in the topology will stop using the overloaded IS to forward Level 2 traffic However, the intermediate system can still forward Level 1 traffic

  B. It can be set in intermediate systems (IS-IS routers) to prioritize control plane CSNP packets.

  C. It can be used to automatically synchronize the link-state database between Level 1 intermediate systems

  D. It can be set in intermediate systems (IS-IS routers) to avoid traffic black holes until routing protocols are fully converged after a reload operation.

  E. It can be set in intermediate systems (IS-IS routers) to attract transit traffic from other intermediate systems

  Correct Answer: AD

• Question 44:

  What is a web-based model in which a third-party provider hosts applications that are available to customers over the Internet?

  A. PaaS

  B. SaaS

  C. laaS D. WaaS

  Correct Answer: B

  Reference: https://www.dynamicsfocus.com/practice-areas/cloud-saas/

• Question 45:

  Refer to the exhibit.

  

  A customer runs OSPF with Area 5 between its aggregation router and an internal router When a network change occurs in the backbone. Area 5 starts having connectivity issues due to the SPF algorithm recalculating an abnormal number of times in Area 5 You are tasked to redesign this network to increase resiliency on the customer network with the caveat that Router B does not support the stub area.

  How can you accomplish this task?

  A. Increase the bandwidth on the connection between Router A and Router B

  B. Implement LSA filtering ontheAB, allowing summary routes and preventing more specific routes into Area 5

  C. Create a virtual link to Area 0 from Router B to the ABR

  D. Turn on LSA throttling on all devices in Area 5

  E. Set Area 5 to stubby at the ABR anyway

  Correct Answer: B

• Question 46:

  Which Interconnectivity method offers the fastest convergence in the event of a unidirectional issue between three Layer 3 switches connected together with routed links in the same rack in a data center?

  A. Copper Ethernet connectivity with BFD enabled

  B. Copper Ethernet connectivity with UDLD enabled

  C. Fiber Ethernet connectivity with BFD enabled

  D. Fiber Ethernet connectivity with UDLD enabled

  Correct Answer: C

• Question 47:

  Which solution component helps to achieve rapid migration to the cloud for SaaS and public cloud leveraging SD-WAN capabilities?

  A. service-oriented cloud architecture

  B. Cloud onramp

  C. cloud registry

  D. microservices in the cloud

  Correct Answer: B

• Question 48:

  Which technology supports antispoofing and does not have any impact on encryption performance regardless of packet size?

  A. MACsec

  B. IP source guard

  C. DHCP snooping with DAI

  D. IPsec

  Correct Answer: B

  IP source guard is a security feature that helps prevent IP spoofing attacks by allowing only packets with valid source IP addresses to pass through a network device. It uses a combination of source IP address filtering and DHCP snooping to determine the validity of the source IP address.

• Question 49:

  You have been tasked with designing a data center interconnect to provide business continuity You want to encrypt the traffic over the DCI using IEEE 802 1AE MACsec to prevent the deployment of any firewall or IPS. Which two interconnect technologies support MACsec? (Choose two.)

  A. EoMPLS

  B. MPLS Layer 3 VPN

  C. DMVPN

  D. GET VPN

  E. KVPLS

  Correct Answer: AE

• Question 50:

  Refer to the exhibit.

  

  Company XYZ is currently running IPv4 but has decided to start the transition into IPv6. The initial objective is to allow communication based on IPv6 wherever possible, and there should still be support in place for devices that only support IPv4. These devices must be able to communicate to IPv6 devices as well. Which solution must be part of the design?

  A. address family translation

  B. dual stack

  C. host-to-host tunneling

  D. 6rd tunneling

  Correct Answer: A

  Dual stack should be fine for this: The initial objective is to allow communication based on IPv6 wherever possible and there should still be support in place for devices that only support IPv4. IPv4 <=> IPv6 need NAT: These devices must be able to communicate to IPv6 devices as well.