Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the Cisco CCDE v3.0 | CCDE 400-007 Questions and answers with ValidTests

Exam 400-007 All Questions
Exam 400-007 Premium Access

View all detail and faqs for the 400-007 exam

Viewing page 11 out of 11 pages
Viewing questions 151-165 out of questions
Questions # 151:

Question # 151

Refer to the exhibit. A customer needs to implement a connectivity model by using one active link for inbound and outbound traffic and a second link for backup. The backup link is low speed and is required only during outages of the primary link. Which design solution should be implemented?

Options:

A.

Advertise a longer AS PATH to ISP 2. Increase the MED to ISP 2.

B.

Advertise more specific routes to ISP 1. Increase the local preference attribute of inbound BGP from ISP1.

C.

Advertise less specific routes to ISP 2. Increase the AS PATH inbound from ISP 1.

D.

Advertise a higher local preference to ISP 2. Increase the AS PATH inbound from ISP 1.

Questions # 152:

An external edge router provides connectivity from a service provider to an enterprise Which two Internet edge best practices meet compliance regulations? (Choose two.)

Options:

A.

Implement filtering to control traffic that is sourced from the infrastructure IP space.

B.

Enable and use only secure protocols.

C.

Send logs to a centralized logging collection server.

D.

Implement EBGP to advertise all owned IP blocks.

E.

Use login banners and interface access lists to restrict administrative access to the system.

Questions # 153:

Question # 153

Refer to the exhibit Network orchestration is a critical component of IT services that involves the automation of network services and execution over devices The orchestration deployment is not related to any specific OEM in the network It is performed through four components orchestration plane, control plane, management plane, and data plane Drag and drop the components from the left onto the corresponding actions they perform.

Question # 153

Options:

Questions # 154:

In the wake of a security compromise incident where the internal networks were breached by an outside attacker at the perimeter of the infrastructure, an enterprise is now evaluating potential measures that can help protect against the same type of incident in the future. What are two design options that can be employed? (Choose two)

Options:

A.

microzoning

B.

segmentation

C.

domain fencing

D.

virtualization

E.

microperimeters

Questions # 155:

A multinational organization has decided to migrate its business-critical operations to a hybrid cloud solution They are concerned about data governance, particularly regarding data sovereignty, ownership, and locale The company operates in multiple countries with strict data privacy regulations Which solution best ensures compliance with data governance regulations ' ?

Options:

A.

Implement a private cloud solution with data centers within the company ' s own premises.

B.

Utilize a public cloud provider with data centers located in different countries around the world.

C.

Store all data in a single data center located in the country where the company is headquartered

D.

Distribute data across multiple data centers located in different countries based on user location

Questions # 156:

In traditional network design, the network and data center are confined within a single building In this configuration, a router connects the internal and external networks Basic configuration of an access control list within the router controls the traffic that can pass through Which security technique defines the boundary between an internal/trusted network and an external/untrusted network?

Options:

A.

network segmentation

B.

security certifications

C.

encryption

D.

perimeter security

Questions # 157:

Question # 157

Refer to the exhibit. A customer needs to implement a connectivity model by using one active link for inbound and outbound traffic and a second link for backup. The backup link is low speed and is required only during outages of the primary link. Which design solution should be implemented?

Options:

A.

Advertise a longer AS PATH to ISP 2. Increase the MED to ISP 2.

B.

Advertise more specific routes to ISP 1. Increase the local preference attribute of inbound BGP from ISP1.

C.

Advertise less specific routes to ISP 2. Increase the AS PATH inbound from ISP 1.

D.

Advertise a higher local preference to ISP 2. Increase the AS PATH inbound from ISP 1.

Questions # 158:

Which redundancy element plays a crucial role in ensuring business continuity even in challenging situations?

Options:

A.

adapting and expanding the network

B.

network boot performance

C.

disaster recovery planning

D.

minimizing the downtime

Questions # 159:

Question # 159

Refer to the exhibit. A company is running their data center based on VXLAN and BGP EVPN with stretched subnets for servers attaching to the edge devices being an important feature. The security team has defined a requirement where server group A must not be able to communicate with each other but is allowed to communicate with server group B. while servers in Group B must be able to communicate with all servers. Which scalable solution can be deployed to support these requirements?

Options:

A.

VACL

B.

VRF with route leaking

C.

private VLAN

D.

transparent firewall

Questions # 160:

Which two compliance audit functions are useful to meet business requirements? (Choose two.)

Options:

A.

risk prevention

B.

advise auditing

C.

audit monitoring

D.

risk identification audit resolution

Questions # 161:

What is the best approach in a large legacy application migration scenario when the goal is to complete the migration in the shortest possible time?

Options:

A.

refactoring

B.

replatfoming

C.

rearchitecting

D.

rehosting

Questions # 162:

As a service provider is implementing Strong Access Control Measures, which two of the following PCI Data Security Standard requirements must be met? (Choose two . )

Options:

A.

Assign a unique ID to each person with computer access

B.

Restrict access to cardholder data to on a need-to-know basis

C.

Encrypt transmission of cardholder data across open or public networks

D.

Each location must require validating PCI compliance if business has multiple locations

E.

Protect stored cardholder data

Questions # 163:

Question # 163

Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The migration is estimated to take 20 months to complete but might extend an additional 10 months if issues arise. All connectivity options meet the requirements to migrate workloads.

Which transport technology provides the best ROI based on cost and flexibility?

Options:

A.

CWDM over dark fiber

B.

MPLS

C.

DWDM over dark fiber

D.

Metro Ethernet

Questions # 164:

Network orchestration enables network administrators to focus on strategic initiatives, innovation, and value-added tasks rather than spending time on manual and repetitive network management activities. Drag and drop the orchestration types from the left onto the corresponding functions on the right. Not all options are used.

Question # 164

Options:

Questions # 165:

An enterprise wants to migrate an on-premises network to a cloud network, and the design team is finalizing the overall migration process. Drag and drop the options from the left into the correct order on the right.

Question # 165

Options:

Viewing page 11 out of 11 pages
Viewing questions 151-165 out of questions