100% 高得点合格保証400-007無制限330解答で[2024]
400-007問題集でPDF、400-007最速合格したいならここ
質問 # 136
What are two advantages of controller-based networks versus traditional networks? (Choose two.)
- A. more flexible configuration per device
- B. the ability to configure the features for the network rather than per device
- C. more consistent device configuration
- D. programmatic APIs that are available per device
- E. the ability to have forwarding tables at each device
正解：B、C
質問 # 137
Company XYZ is running BGP as their routing protocol. An external design consultant recommends that TCP path MTU discovery be enabled. Which effect will this have on the network?
- A. It will enhance the performance of TCP-based applications.
- B. It will increase the convergence time.
- C. It will create a loop free path.
- D. It will improve the convergence time.
正解：A
質問 # 138
You have been tasked with designing a data center interconnect to provide business continuity You want to encrypt the traffic over the DCI using IEEE 802 1AE MACsec to prevent the deployment of any firewall or IPS. Which two interconnect technologies support MACsec? (Choose two.)
- A. GET VPN
- B. MPLS Layer 3 VPN
- C. EoMPLS
- D. KVPLS
- E. DMVPN
正解：C、D
質問 # 139
Drag and drop the multicast protocols from the left onto the current design situation on the right.
正解：
解説：
質問 # 140
Retef to the exhibit.
An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain EIGRP routes are getting redistributed into OSPF ,OSPF area 20 has routers with limited memory and CPU resources The engineer wants to block routes from EIGRP 111 from propagating into area 20 and allow EIGRP 222 routes to How in Which OSPF area type fulfills this design requirement?
- A. type 3 LSA filtering on the ABR between area 0 area 20
- B. type 5 LSA filtering on the ASBR between EIGRP 111 and area a
- C. area 20 as a stub area
- D. area 20 as a NSSA area
正解：D
質問 # 141
An enterprise wants to migrate an on-premises network to a cloud network, and the design team is finalizing the overall migration process. Drag and drop the options from the left into the correct order on the right.
正解：
解説：
質問 # 142
When designing a WAN that will be carrying real-time traffic, what are two important reasons to consider serialization delay? (Choose two )
- A. Serialization delays are invariable because they depend only on the line rate of the interface
- B. Serialization delays are variable because they depend on the line rate of the interface and on the type of the packet being serialized.
- C. Serialization delays are variable because they depend only on the size of the packet being serialized
- D. Serialization delay is the time required to transmit the packet on the physical media.
- E. Serialization delay depends not only on the line rate of the interface but also on the size of the packet
正解：B、C
質問 # 143
What are two common approaches to analyzing and designing networks? (Choose two.)
- A. high-low security approach
- B. top-down approach
- C. left-right approach
- D. three-tier approach
- E. bottom-up approach
正解：B、E
質問 # 144
A network security team uses a purpose-built tool to actively monitor the campus network, applications, and user activity. The team also analyzes enterprise telemetry data from IPFIX data records that are received from devices in the campus network. Which action can be taken based on the augmented data?
- A. adoption and improvement of threat-detection response
- B. integration with an incident response plan
- C. reduction in time to detect and respond to threats
- D. asset identification and grouping decisions
正解：C
質問 # 145
Which action must be taken before new VoIP systems are implemented on a network to ensure that the network is ready to handle the traffic?
- A. Check if anomaly detection is enabled for SIP and H.323 on Layer 3 devices
- B. Make recommendations to limit the size of the half-open session table on routers
- C. Evaluate bandwidth utilization and connection quality
- D. Enable special requirements such as direct DID lines on pickup
正解：D
質問 # 146
Retef to the exhibit.
An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain EIGRP routes are getting redistributed into OSPF ,OSPF area 20 has routers with limited memory and CPU resources The engineer wants to block routes from EIGRP 111 from propagating into area 20 and allow EIGRP 222 routes to How in Which OSPF area type fulfills this design requirement?
- A. type 3 LSA filtering on the ABR between area 0 area 20
- B. type 5 LSA filtering on the ASBR between EIGRP 111 and area a
- C. area 20 as a stub area
- D. area 20 as a NSSA area
正解：D
質問 # 147
Which two statements describe the usage of the IS-IS overload bit technique? (Choose two )
- A. It can be set in intermediate systems (IS-IS routers) to prioritize control plane CSNP packets.
- B. lf overload-bit is set on a Level 2 intermediate system, the other Level 2 intermediate systems in the topology will stop using the overloaded IS to forward Level 2 traffic However, the intermediate system can still forward Level 1 traffic
- C. It can be used to automatically synchronize the link-state database between Level 1 intermediate systems
- D. It can be set in intermediate systems (IS-IS routers) to attract transit traffic from other intermediate systems
- E. It can be set in intermediate systems (IS-IS routers) to avoid traffic black holes until routing protocols are fully converged after a reload operation.
正解：B、E
質問 # 148
A healthcare provider discovers that protected health information of patients was altered without patient consent. The healthcare provider is subject to HIPAA compliance and is required to protect PHI dat a. Which type of security safeguard should be implemented to resolve this issue?
- A. administrative security management processes
- B. technical integrity and transmission security
- C. technical and physical access control
- D. physical device and media control
正解：B
解説：
https://www.cisco.com/en/US/docs/solutions/Enterprise/Compliance/HIPAA/HIP_AppC.html#wp1085353
質問 # 149
A network security team observes phishing attacks on a user machine from a remote location. The organization has a policy of saving confidential data on two different systems using different types of authentication. What is the next step to control such events after the security team verifies all users in Zero Trust modeling?
- A. Assess real-time security health of devices.
- B. Ensure trustworthiness of devices.
- C. Enforce risk-based and adaptive access policies.
- D. Apply a context-based network access control policy for users.
正解：B
質問 # 150
Refer to the exhibit.
For Company XYZ Bangkok is using ECMP to reach the 172 20 2 0/24 network The company wants a design that would allow them to forward traffic from 172 16 2 0/24 toward 172 20 2 0/24 via the Singapore router as the preferred route The rest of the traffic should continue to use ECMP Which technology fulfills this design requirement?
- A. route summarization
- B. unequal-cost load balancing using variance
- C. LFA
- D. policy-based routing
正解：D
質問 # 151
Which two characteristics apply to firewall transparent mode operations in a firewall solution design? (Choose two.)
- A. The firewall can participate actively on spanning tree.
- B. Multicast traffic can traverse the firewall.
- C. The firewall acts like a router hop in the network.
- D. OSPF adjacencies can be established through the firewall
- E. Changes in the existing IP addressing and subnets are required
正解：B、D
質問 # 152
You want to mitigate failures that are caused by STP loops that occur before UDLD detects the failure or that are caused by a device that is no longer sending BPDUs. Which mechanism do you use along with UDLD?
- A. Root guard
- B. Loop guard
- C. BPDU filtering
- D. BPDU guard
正解：B
質問 # 153
Refer to the exhibit.
Traffic was equally balanced between Layer 3 links on core switches SW1 and SW2 before an introduction of the new video server in the network. This video server uses multicast to send video streams to hosts and now one of the links between core switches is over utilized Which design solution solves this issue?
- A. Apply a more granular load- balancing method on SW1.
- B. Filter IGMP joins on an over -utilized link.
- C. Apply a more granular load-balancing method on SW2.
- D. Aggregate links Layer 2 link aggregation.
- E. Add more links between core switches.
正解：D
質問 # 154
Refer to the exhibit.
This network is running legacy STP 802.1 d. Assuming "hello_timer" is fixed to 2 seconds, which parameters can be modified to speed up convergence times after single link/node failure?
- A. The transit_delay=5 and dpdu_delay=20 are recommended values, considering helto_timer=2 and specified
- B. The max_age and forward delay parameters can be adjusted to speed up STP convergence process.
- C. Only the maximum_transmission_halt_delay and diameter parameters are configurable parameters in 802. to speed up STP convergence process
- D. Only the transit_delay and bpdu_delay timers are configurable parameters in 802.1d to speed up STP convergence process.
正解：B
質問 # 155
Which two actions must merchants do to be compliant with the Payment Card Industry Data Security Standard? (Choose two.)
- A. install firewalls
- B. use antivirus software
- C. establish monitoring policies
- D. conduct risk analyses
- E. establish risk management policies
正解：A、B
質問 # 156
The controller has a global view of the network, and it can easily ensure that the network is in a consistent and optimal configuration. Which two statements describe a centralized SDN control path? (Choose two.)
- A. It is highly-available by design with no single-point-of-failure risks present.
- B. It centralized controller can support all southbound APIs, which allows for easy integration with legacy equipment.
- C. Integrating smart NIC capabilities on the local host level is made easier through rest APIs.
- D. Scaling of the centralized controller cluster is challenging for services like DHCP and load-balancing.
- E. It significantly improves the latency when performing reactive handling of PACKET_IN events.
正解：B、D
質問 # 157
......
最新の検証済み400-007問題と解答合格保証：https://jp.fast2test.com/400-007-premium-file.html
400-007練習試験問題集-99% 合格率Cisco試験が合格できます：https://drive.google.com/open?id=1bS7GdcApZLaB9kp37fxsI30QGCM4A1br