Cisco 400-007 Online Practice Questions and Exam Preparation

Cisco 400-007 Online Questions & Answers

• Question 61:

  A business wants to refresh its legacy Frame Relay WAN. It currently has product specialists in each of its 200 branches but plans to reduce and consolidate resources. The goal is to have product specialists available via video link when customers visit the nationwide branch offices. Which technology should be used to meet this objective?

  A. DMVPN phase 1 network over the Internet
  B. Layer 3 MPLS VPN hub and spoke
  C. Layer2VPLS
  D. Layer 3 MPLS VPN full mesh
  D. Layer 3 MPLS VPN full mesh

• Question 62:

  According to the CIA triad principles for network security design, which principle should be priority for a Zero Trust network?

  A. requirement for data-in-motion encryption and 2FA authentication
  B. requirement for data-at-rest encryption foe user identification within the VPN termination hardware
  C. categorization of systems, data, and enterprise BYOD assets that are connected to network zones based on individual privacy needs
  D. ensuring that authorized users have high-availability system access from defined zones to defined systems or zones
  A. requirement for data-in-motion encryption and 2FA authentication

• Question 63:

  The major business applications of an enterprise are largely monolithic and hard-coded As part of a major modernization and overhaul of the applications the goal is to move to a modular and containerized application architecture mode At the same time decoupling from the hardware is desired to move to an on-demand provisioning However the CyberOps team mandated that the final architecture must provide the same security levels as an air- gapped data center. Which cloud architecture meets these requirements?

  A. laaS
  B. private cloud
  C. PaaS
  D. hybrid cloud
  E. public cloud
  B. private cloud

• Question 64:

  DRAG DROP

  Drag and drop the multicast protocols from the left onto the correct design situations on the right. Not all options are used.

  Select and Place:

  

  

• Question 65:

  A large enterprise plans to enable direct internet access for specific SaaS applications from its remote branch sites by using local broadband internet circuits. Only traffic to specific cloud SaaS applications will be allowed direct internet access and all other internet-bound traffic will follow its usual path. The customer wants to leverage its existing SD-WAN solution and cloud provider integration.

  Which action must be taken on the remote branch routers to meet the requirements?

  A. Define a policy-based redirect to the applications.
  B. Enable Cloud OnRamp for the branch sites.
  C. Configure IPsec to the cloud provider.
  D. Implement direct connect for site connectivity.
  B. Enable Cloud OnRamp for the branch sites.

• Question 66:

  A national retail company is expanding their business by adding several international sites in the next 12 months. With their current IT infrastructure, they face a high number of expenses in managing and maintaining their two current data and voice networks. In addition, the business wants to invest in technologies that offer enhancements to business activities and increase employee productivity.

  Which two technical requirements should be considered during the network design phase? (Choose two.)

  A. Ability to provide isolation between the traffic of guests and internal staff (for wired and wireless) to comply with the standard security policy of the organization.
  B. Provide traffic isolation to meet the information security requirements.
  C. Capability to support introducing new remote sites to the network without any redesign
  D. Increase high availability to support critical traffic such as voice.
  E. Unified infrastructure that supports voice, video, data, and wireless
  C. Capability to support introducing new remote sites to the network without any redesign
  E. Unified infrastructure that supports voice, video, data, and wireless

• Question 67:

  As more links are added to the network, information and attributes related to the link is added to the control plane meaning every link that gets added will slow down the convergence of the control plane by some measurable amount of time.

  As a result when additional redundancy is built or added the MTTR will increase too

  Which risk increases along with the increased MTTR?

  A. management visibility
  B. slower data plane convergence
  C. overlapping outages
  D. topology change detection
  C. overlapping outages

• Question 68:

  A network architect in an enterprise is designing a network policy for certain database applications.

  The goal of the policy is to allow these applications to access the internet directly, whereas other user and network applications that communicate with systems or users outside their own network must be routed through the data center.

  The focus is on achieving higher availability and a better user experience for the database applications, but switching between different network paths based on performance characteristics must be supported.

  Which solution meets these requirements?

  A. MPLS L3VPN with QoS
  B. Cloud onRamp for laaS
  C. Cloud onRamp for SaaS
  D. MPLS direct connect
  C. Cloud onRamp for SaaS

• Question 69:

  Company XYZ wants to implement an IPS device to detect and block well-known attacks against their network

  They want a design solution where all packets that are forwarded to the network are checked against a signature database before being allowed through

  This check must be done with the minimum effect on performance.

  Which design is recommended?

  A. Deploy an IPS behind the firewall in promiscuous mode
  B. Deploy an IPS in front of the firewall in promiscuous mode
  C. Deploy an IPS behind the firewall in in-line mode
  D. Deploy and IPS in front of the firewall in in-line mode
  C. Deploy an IPS behind the firewall in in-line mode

• Question 70:

  Refer to the exhibit.

  

  Company XYZ must design a DMVPN tunnel between the three sites Chicago is going to act as the NHS and the company wants DMVPN to detect peer endpoint failures.

  Which technology should be used m the design?

  A. VPLS
  B. IP SLA
  C. GRE
  D. L2TPv3
  B. IP SLA