400-007 practice test

1. Question 1 · 1

   Company XYZ is planning to deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively. Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)

   Choose all answers that apply.

   • Target RPO/RTO requirements cannot be met due to the one-way delay introduced by the distance between sites.
   • VSANs must be extended from the primary to the secondary site to improve performance and availability.
   • VSANs must be routed between sites to isolate fault domains and increase overall availability.
   • Synchronous data replication must be used to meet the business requirements.
   • Asynchronous data replication should be used in this scenario to avoid performance impact in the primary site.

2. Question 2 · 1

   Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The migration is estimated to take 20 months to complete but might extend an additional 10 months if issues arise. All connectivity options meet the requirements to migrate workloads. Which transport technology provides the best ROI based on cost and flexibility?

   Choose one answer.

   

   • DWDM over dark fiber
   • MPLS
   • CWDM over dark fiber
   • Metro Ethernet

3. Question 3 · 1

   What is a disadvantage of the traditional three-tier architecture model when east west traffic between different pods must go through the distribution and core layers?

   Choose one answer.

   • low bandwidth
   • security
   • scalability
   • high latency

4. Question 4 · 1

   Which two actions must merchants do to be compliant with the Payment Card Industry Data Security Standard? (Choose two.)

   Choose all answers that apply.

   • conduct risk analyses
   • install firewalls
   • use antivirus software
   • establish monitoring policies
   • establish risk management policies

5. Question 5 · 1

   What are two descriptions of network optimization? (Choose two.)

   Choose all answers that apply.

   • identify network requirements
   • network redesign
   • proactive network management
   • network health maintenance
   • maintain high availability

6. Question 6 · 1

   An engineer is designing the QoS strategy for Company XYZ. Based on initial analysis, a lot of scavenger type of traffic is traversing the network’s 20Mb Internet link toward the service provider. The new design must use a QoS technique that limits scavenger traffic to 2 Mbps, which helps avoid oversubscription of the link during times of congestion. Which QoS technique can be used to facilitate this requirement?

   Choose one answer.

   • class-based traffic policing
   • class-based traffic shaping
   • CBWFQ
   • LLQ

7. Question 7 · 1

   A legacy enterprise is using a Service Provider MPLS network to connect its head office and branches. Recently, they added a new branch to their network. Due to physical security concerns, they want to extend their existing IP CCTV network of the head office to the new branch, without any routing changes in the network. They are also under some time constraints. What is the best approach to extend the existing IP CCTV network to the new branch, without incurring any IP address changes?

   Choose one answer.

   • GRE
   • L2TPv3
   • VXLAN
   • EoMPLS

8. Question 8 · 1

   Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity threats. To achieve this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for the applications and services. Which protocol can be used by Company XYZ to provide authentication and authorization services?

   Choose one answer.

   • OAuth2
   • OpenID Connect
   • OpenID
   • SAML 2.0

9. Question 9 · 1

   A network security team uses a purpose-built tool to actively monitor the campus network, applications, and user activity. The team also analyzes enterprise telemetry data from IPFIX data records that are received from devices in the campus network. Which action can be taken based on the augmented data?

   Choose one answer.

   • reduction in time to detect and respond to threats
   • integration with an incident response plan
   • adoption and improvement of threat-detection response
   • asset identification and grouping decisions

10. Question 10 · 1

    SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways. Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

    Choose one answer.

    • DTLS
    • TLS
    • IPsec
    • GRE

11. Question 11 · 1

    Which design solution reduces the amount of IGMP state in the network?

    Choose one answer.

    • one multicast group address thorough network regardless of IGMP version
    • multiple multicast domains
    • IGMP filtering
    • IGMPv3 with PIM-SSM

12. Question 12 · 1

    Company XYZ wants design recommendations for Layer 2 redundancy (using Layer 2 technologies). The company wants to prioritize flexibility and scalability elements in the new design. Which two technologies help meet these requirements? (Choose two.)

    Choose all answers that apply.

    • Configure DHCP snooping on the switches
    • Use switch clustering at the distribution layer where possible
    • Use Unidirectional Link Detection
    • Avoid stretching VLANs across switches
    • Use root guard

13. Question 13 · 1

    Which action must be taken before new VoIP systems are implemented on a network to ensure that the network is ready to handle the traffic?

    Choose one answer.

    • Evaluate bandwidth utilization and connection quality
    • Enable special requirements such as direct DID lines on pickup
    • Make recommendations to limit the size of the half-open session table on routers
    • Check if anomaly detection is enabled for SIP and H.323 on Layer 3 devices

14. Question 14 · 1

    Refer to the exhibit. This network is running EIGRP as the routing protocol and the internal networks are being advertised in EIGRP. Based on the link speeds, all traffic between London and Rome is getting propagated via Barcelona and the direct link between London and Rome is not being utilized under normal working circumstances. The EIGRP design should allow for efficiency in the routing table by minimizing the routes being exchanged. The link between London and Rome should be utilized for specific routes. Which two steps accomplish this task? (Choose two.)

    Choose all answers that apply.

    

    • Configure EIGRP route summarization on all the interfaces to summarize the internal LAN routes
    • Filter the routes on the link between London and Barcelona
    • Filter the routes on the link between London and Rome
    • Configure route leaking of summary routes on the link between London and Rome

15. Question 15 · 1

    What are two top cloud-native security challenges faced by today’s cloud-oriented organizations? (Choose two.)

    Choose all answers that apply.

    • polymorphism
    • lack of visibility and tracking
    • establishing user roles
    • increased attack surface
    • user credential validation

Paid access to all 241 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.