2024年最新の保証された成功できる400-007問題集でCiscoのPDF問題 [Q182-Q204]

2024年最新の保証された成功できる400-007問題集でCiscoのPDF問題

格別な練習Cisco Certified Design Expert (CCDE v3.0) Written Exam問題集で最速合格させます

シスコ400-007認定試験は、ネットワーク設計における専門知識を証明するために必要な資格です。この試験は、ネットワーキング業界で最も権威ある資格の1つであるCCDE v3.0認定の一部です。試験に合格すると、組織のビジネス要件を満たす複雑なネットワークソリューションを設計および実装できる能力が証明されます。

Cisco 400-007試験を受験するためには、有効なCCNAまたはCCNP認定を取得している必要があります。また、ネットワークデザイン、実装、およびトラブルシューティングの経験が少なくとも5年必要です。これらの要件を満たす候補者は、Ciscoのウェブサイトを通じて試験に登録し、自分の近くのテストセンターで試験をスケジュールできます。

質問 # 182
A network design includes a long signaling delay in notifying the Layer 3 control plane that an interface has failed Which two of these actions would reduce that delay? (Choose two.)

A. Reduce the time for the network to reconverge.
B. Enable lower data link layer recovery systems to have an opportunity to restore the interface
C. Increase network stability.
D. Increase the notification of interface flaps.

正解：A、B

質問 # 183
Refer to the exhibit.

This network is running legacy STP 802.1 d. Assuming "hello_timer" is fixed to 2 seconds, which parameters can be modified to speed up convergence times after single link/node failure?

A. The max_age and forward delay parameters can be adjusted to speed up STP convergence process.
B. Only the transit_delay and bpdu_delay timers are configurable parameters in 802.1d to speed up STP convergence process.
C. Only the maximum_transmission_halt_delay and diameter parameters are configurable parameters in 802. to speed up STP convergence process
D. The transit_delay=5 and dpdu_delay=20 are recommended values, considering helto_timer=2 and specified

正解：A

質問 # 184
Drag and drop the characteristics from the left onto the corresponding network management options on the right.

正解：

解説：

質問 # 185
If the desire is to connect virtual network functions together to accommodate different types of network service connectivity what must be deployed?

A. daisy chaining
B. service chaining
C. linking
D. bridging
E. switching

正解：B

解説：
Service chaining is the technique of connecting virtual network functions together to provide different types of network service connectivity. Service chaining uses software-defined networking (SDN) programmability to create a chain of connected network services, such as firewalls, load balancers, NAT, and intrusion protection. Service chaining can automate the provisioning of network applications that have different characteristics and requirements, such as security, latency, or quality of service (QoS). Service chaining can also optimize the use of network resources and improve application performance by using SDN analytics and performance tools to select the best available network paths and avoid network congestion. Service chaining is being used in many SDN and network functions virtualization (NFV) use cases and deployments, such as data centers, carrier networks, and virtual customer edge123. Reference:
1: What is Network Service Chaining or Service Function Chaining - SDxCentral
2: On service chaining using Virtual Network Functions in Network-enabled Cloud systems | IEEE Conference Publication | IEEE Xplore
3: Service function chaining - Gini5

質問 # 186
A financial company requires that a custom TCP-based stock-trading application be prioritized over all other traffic for the business due to the associated revenue. The company also requires that VoIP be prioritized for manual trades. Which directive should be followed when a QoS strategy is developed for the business?

A. Avoid placing the custom application in a CBWFQ queue that contains other
B. Interleave the custom application with other TCP applications in the same CBWR
C. The custom application and VoIP must be assigned their own separate priority queue.
D. Allow VoIP and the custom application to share the same priority queue,

正解：C

質問 # 187
Which issue poses a challenge for security architects who want end-to-end visibility of their networks?

A. a network security skills shortage
B. an overabundance of manual processes
C. too many overlapping controls
D. too many disparate solutions and technology silos

正解：D

質問 # 188
Drag and drop the QoS technologies from the left onto the correct capabilities on the right

正解：

解説：

質問 # 189
In an OSPF network with routers connected together with Ethernet cabling, which topology typically takes the longest to converge?

A. squared
B. ring
C. triangulated
D. partial mesh
E. full mesh

正解：E

質問 # 190
Which technology supports antispoofing and does not have any impact on encryption performance regardless of packet size?

A. DHCP snooping with DAI
B. IPsec
C. IP source guard
D. MACsec

正解：D

質問 # 191
Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to monitor and keep track of any performance issues by continuously collecting and analyzing statistical information to monitor, correct, and optimize any reduced responsiveness across the network. Which layer accomplishes this design requirement?

A. security management
B. accounting management
C. performance management
D. fault management

正解：C

質問 # 192
Company XYZ has a hub-and-spoke topology over an SP-managed infrastructure. To measure traffic performance metrics, they implemented IP SLA senders on all spoke CE routers and an IP SLA responder on the hub CE router. What must they monitor to have visibility on the potential performance impact due to the constantly increasing number of spoke sites?

A. interface buffers on the hub and spoke routers
B. CPU usage on the hub router
C. memory usage on the hub router
D. CPU and memory usage on the spoke routers

正解：B

質問 # 193
You were tasked to enhance the security of a network with these characteristics:
* A pool of servers is accessed by numerous data centers and remote sites
* The servers are accessed via a cluster of firewalls
* The firewalls are configured properly and are not dropping traffic
* The firewalls occasionally cause asymmetric routing of traffic within the server data center.
Which technology should you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

A. Deploy uRPF strict mode.
B. Deploy uRPF loose mode
C. Limit sources of traffic that exit the server-facing interface of the firewall cluster with ACLs.
D. Poison certain subnets by adding static routes to Null0 on the core switches connected to the pool of servers.

正解：C

質問 # 194
Company XYZ uses an office model where the employees can use any open desk and plug their laptops in. They want to authenticate the end users using their domain username and password before allowing them access to the network. The design must also accommodate the ability of controlling traffic within the same group or subnet if a macro (or micro) segmentation-based model is adopted in the future. Which protocol can be recommended for this design to authenticate end users?

A. LDAP
B. TACACS+
C. EAP
D. RADIUS

正解：D

解説：
https://www.networkstraining.com/what-is-cisco-ise/

質問 # 195
Company XYZ is redesigning their QoS policy. Some of the applications used by the company are real-time applications. The QoS design must give these applications preference in terms of transmission. Which QoS strategy can be used to fulfill the requirement?

A. weighted fair queuing
B. low-latency queuing
C. first-in first-out
D. weighted random early detection

正解：B

質問 # 196
Company XYZ is planning to deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively. Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)

A. Target RPO/RTO requirements cannot be met due to the one-way delay introduced by the distance between sites.
B. Synchronous data replication must be used to meet the business requirements
C. VSANs must be routed between sites to isolate fault domains and increase overall availability.
D. VSANs must be extended from the primary to the secondary site to improve performance and availability.
E. Asynchronous data replication should be used in this scenario to avoid performance impact in the primary site.

正解：C、E

質問 # 197
Retef to the exhibit.

An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain EIGRP routes are getting redistributed into OSPF ,OSPF area 20 has routers with limited memory and CPU resources The engineer wants to block routes from EIGRP 111 from propagating into area 20 and allow EIGRP 222 routes to How in Which OSPF area type fulfills this design requirement?

A. area 20 as a stub area
B. type 5 LSA filtering on the ASBR between EIGRP 111 and area a
C. type 3 LSA filtering on the ABR between area 0 area 20
D. area 20 as a NSSA area

正解：D

質問 # 198
You have been asked to design a remote access VPN solution to support up to 2000 devices. You must ensure that only corporate assets are allowed to connect to the VPN, and users must authenticate to gain access of their based on their user role. Users must use a password that they are already using to access existing applications . A user may not always use the same device to access the VPN. Which two options combined meet the requirements? (Choose two)

A. Deploy an IPsec VPN solution
B. Deploy certificates that are unique to each device
C. Deploy a central authentication directory that users can be authenticated and authorized against
D. Deploy a SSL VPN solution
E. Deploy certificates that are unique to each user
F. Use local usernames and passwords on the VPN device

正解：C、D

質問 # 199
A service provider hires you to design its new managed CE offering to meet these requirements
* The CEs cannot run a routing protocol with the PE
* Provide the ability for equal or unequal ingress load balancing in dual-homed CE scenarios.
* Provide support for IPv6 customer routes
* Scale up to 250.000 CE devices per customer.
* Provide low operational management to scale customer growth.
* Utilize low-end (inexpensive) routing platforms for CE functionality.
Which tunneling technology do you recommend?

A. point-to-point GRE
B. LISP
C. DMVPN
D. FlexVPN

正解：B

質問 # 200
A service provider recently migrated to an SD-WAN solution for delivering WAN connections to its customers. One of the main challenges with the SD-WAN deployment is that branch site volume increases every year, which causes management complexity. Which action resolves the issue?

A. Set up a dedicated team to monitor and provision new customers
B. Adopt a well-structured SD-WAN service management lifecycle model
C. Build a service orchestration platform on top of the network controller
D. Implement a scalable network management system to manage all sites.

正解：C

質問 # 201
Which action must be taken before new VoIP systems are implemented on a network to ensure that the network is ready to handle the traffic?

A. Enable special requirements such as direct DID lines on pickup
B. Evaluate bandwidth utilization and connection quality
C. Make recommendations to limit the size of the half-open session table on routers
D. Check if anomaly detection is enabled for SIP and H.323 on Layer 3 devices

正解：B

質問 # 202
Which aspect of BGP-LS makes it scalable in large network when multiarea topology information must be gathered?

A. hardware flow control
B. TCP-based flow control
C. open-loop flow control
D. transmit flow control

正解：D

質問 # 203
Which component of the SDN architecture automatically ensures that application traffic is routed according to policies established by network administrators?