A Review Of Approved 400-007 Exam Guide

NEW QUESTION 1
When designing a WAN that will be carrying real-time traffic, what are two important reasons to consider serialization delay? (Choose two )

• A. Serialization delays are invariable because they depend only on the line rate of the interface
• B. Serialization delays are variable because they depend on the line rate of the interface and on thetype of the packet being serialized.
• C. Serialization delay is the time required to transmit the packet on the physical media.
• D. Serialization delays are variable because they depend only on the size of the packet beingserialized
• E. Serialization delay depends not only on the line rate of the interface but also on the size of thepacket

Answer: BD

NEW QUESTION 2
What are two key design principles when using a hierarchical core-distribution-access network model? (Choose two )

• A. A hierarchical network design model aids fault isolation
• B. The core layer is designed first, followed by the distribution layer and then the access layer
• C. The core layer provides server access in a small campus.
• D. A hierarchical network design facilitates changes
• E. The core layer controls access to resources for security

Answer: AD

NEW QUESTION 3
You have been tasked with designing a data center interconnect to provide business continuity.
You want to encrypt the traffic over the DCI using IEEE 802.1AE MACsec to prevent the deployment of any firewall or IPS.
Which two interconnect technologies support MACsec? (Choose two.)

• A. EoMPLS
• B. MPLS Layer 3 VPN
• C. DMVPN
• D. GET VPN
• E. KVPLS

Answer: AE

NEW QUESTION 4
Two enterprise networks must be connected together. Both networks are using the same private IP addresses.
The client requests from both sides should be translated using hide NAT (dynamic NAT) with the overload feature to save IF addresses from the NAT pools.
Which design addresses this requirement using only one Cisco I OS NAT router for both directions?

• A. This is not possible, because two Cisco IOS NAT routers are required to do dynamic NAT, withoverload in both directions.
• B. The ip nat inside and ip nat outside commands must be configured at the interfaces with theoverload option in both directions.
• C. The overload feature is the default and does not have to be configured.
• D. Two different NAT pools must be used for the ip nat inside source and the ip nat outside sourcecommands for the overload feature in both directions.
• E. The Nat Virtual interface must be used to achieve this requirement.

Answer: D

NEW QUESTION 5
Company XYZ asks for design recommendations for Layer 2 redundancy. The company wants to
prioritize fast convergence and resiliency elements in the design.
Which two technologies are recommended? (Choose two.)

• A. Design MLAG/MC-LAG into the network wherever possible.
• B. Configure DHCP snooping on the switches.
• C. Use root guard.
• D. Use BPDU guard.
• E. Use UniDirectional Link Detection.

Answer: AE

NEW QUESTION 6
Which option is a fate-sharing characteristic in regards to network design?

• A. A failure of a single element causes the entire service to fail
• B. It protects the network against failures in the distribution layer
• C. It acts as a stateful forwarding device
• D. It provides data sequencing and acknowledgment mechanisms

Answer: A

NEW QUESTION 7
Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services Is
true?

• A. first-hop router registration to the RP
• B. multicast client registration to the RP
• C. multicast source registration to the RP
• D. transport of all IPv6 multicast traffic

Answer: D

NEW QUESTION 8
SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.
Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

• A. TLS
• B. DTLS
• C. IPsec
• D. GRE

Answer: C

NEW QUESTION 9
A Tier-3 Service Provider is evolving into a Tier-2 Service Provider due to the amount of Enterprise business it is receiving.
The network engineers are re-evaluating their IP/MPLS design considerations in order to support duplicate/overlapping IP addressing from their Enterprise customers within each Layer3 VPN.
Which concept would need to be reviewed to ensure stability in their network?

• A. Assigning unique Route Distinguishers
• B. Assigning unique Route Target ID'S
• C. Assigning unique IP address space for the Enterprise NAT/Firewalls
• D. Assigning unique VRF ID's to each L3VPN

Answer: A

NEW QUESTION 10
Company A has a hub-and spoke topology over an SP-managed infrastructure. To measure traffic performance metrics. IP SLA senders on all spoke CE routers and an IP SLA responder on the hub CE router.
What must they monitor to have visibility on the potential performance impact due to the constantly increasing number of spoke sites?

• A. memory usage on the hub router
• B. interface buffers on the hub and spoke routers
• C. CPU and memory usage on the spoke routers
• D. CPU usage on the hub router

Answer: D

NEW QUESTION 11
VPLS is implemented in a Layer 2 network with 2000 VLANs.
What is the primary concern to ensure successful deployment of VPLS?

• A. Flooding is necessary to propagate MAC address reachability information
• B. PE scalability
• C. The underlying transport mechanism
• D. VLAN scalability

Answer: B

NEW QUESTION 12
Which protocol does an SD-Access wireless Access Point use for its fabric data plane?

• A. GRE
• B. MPLS
• C. VXLAN
• D. LISP
• E. CAPWAP

Answer: C

NEW QUESTION 13
An MPLS service provider is offering a standard EoMPLS-based VPLS service to CustomerA providing Layer 2 connectivity between a central site and approximately 100 remote sites.
CustomerA wants to use the VPLS network to carry its internal multicast video feeds which are sourced at the central site and consist of 20 groups at Mbps each.
Which service provider recommendation offers the most scalability?

• A. EoMPLS-based VPLS can carry multicast traffic in a scalable manner
• B. Use a mesh of GRE tunnels to carry the streams between sites
• C. Enable snooping mechanisms on the provider PE routers.
• D. Replace VPLS with a Layer 3 MVPN solution to carry the streams between sites

Answer: D

NEW QUESTION 14
Which network management framework can be used to develop a network architecture that contains business requirements analysis, gap analysis, and network diagrams as artifacts to be used for design and implementation later?

• A. TOG
• B. ITIL
• C. FCAPS
• D. Cobit

Answer: C

NEW QUESTION 15
Your network operations team is deploying Access Control Lists (ACLs) across your Internet gateways.
They wish to place an ACL inbound on the Internet gateway interface facing the core network (the "trusted" interface).
Which IP address would the ACL need for traffic sourced from the inside interface, to match the source address of the traffic?

• A. inside global
• B. outside global
• C. inside local
• D. outside local

Answer: C

NEW QUESTION 16
......