Cisco® 400-007 Exam Practice Questions (P. 3)
- Full Access (281 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #11
SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.
Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?
Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?
- ADTLS
- BTLS
- CIPsec
- DGRE
Correct Answer:
C
C
GPT-4o - Answer
IPsec remains the superior choice for encryption in SDWAN environments, particularly when devices are situated behind NAT gateways. Although concerns regarding IPsec's compatibility with NAT exist, these can be effectively managed with NAT-T, a standard feature designed to allow IPsec to function seamlessly with NAT. Furthermore, IPsec provides robust security, essential for securing communication over the inherently less secure public internet infrastructure used in SDWAN. Ensure configurations align with NAT-T functionalities to optimize performance and security.
Question #12
Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to monitor and keep track of any performance issues by continuously collecting and analyzing statistical information to monitor, correct, and optimize any reduced responsiveness across the network. Which layer accomplishes this design requirement?
- Asecurity management
- Bperformance management
- Caccounting management
- Dfault management
Correct Answer:
B
B
GPT-4o - Answer
The correct focus for Company XYZ, considering the FCAPS standard and wanting to track and optimize network performance, is performance management. This layer is specifically designed to measure, analyze, and tune the network to meet performance objectives. Monitoring statistical information to enhance responsiveness fits squarely into this category. It effectively serves the purpose of continuously assessing the network to ensure it operates at peak efficiency.
Question #13
Company XYZ has implemented policy-based routing in their network. Which potential problem must be kept in mind about network reconvergence and PBR?
- AIt can limit network scalability.
- BIt can create microloops during reconvergence.
- CIt reduces convergence time.
- DIt increases convergence time.
Correct Answer:
B
B
GPT-4o - Answer
Great spot on the microloops! Indeed, in the context of Policy-Based Routing, one crucial snag during network reconvergence is the emergence of microloops. These can occur if PBR mistakenly routes traffic through a failing link, which then returns the packets to the originating device — looping the traffic without reaching the destination and choking network performance. It's essential to configure PBR with precise network state awareness to avoid getting trapped in these unintentional loops during dynamic changes or failures in the network topology.
Question #15
Company XYZ is in the process of identifying which transport mechanism(s) to use as their WAN technology. Their main two requirements are:
* a technology that could offer DPI, SLA, secure tunnels, privacy, QoS, scalability, reliability, and ease of management
* a technology that is cost-effective
Which WAN technology(ies) should be included in the design of company XYZ?
* a technology that could offer DPI, SLA, secure tunnels, privacy, QoS, scalability, reliability, and ease of management
* a technology that is cost-effective
Which WAN technology(ies) should be included in the design of company XYZ?
- ABoth technologies should be used. Each should be used to back up the other one; where the primary links are MPLS, the Internet should be used as a backup link with IPsec (and vice versa).
- BMPLS meets all these requirements and it is more reliable than using the Internet. It is widely used with clearly defined best practices and an industry standard.
- CSoftware-defined WAN should be the preferred choice because it complements both technologies, covers all the required features, and it is the most cost- effective solution.
- DInternet should be the preferred option because it is cost effective and supports BFD, IP SLA, and IPsec for secure transport over the public Internet.
Correct Answer:
C
C
GPT-4o - Answer
The correct answer is C, where Software-defined WAN (SD-WAN) emerges as the most suitable choice for Company XYZ, primarily due to its comprehensive ability to meet a breadth of requirements efficiently. SD-WAN not only covers all the desired features such as DPI, SLA, secure tunnels, privacy, QoS, scalability, reliability, and ease of management but also stands out as a cost-effective solution. Given that Company XYZ values both a robust feature set and cost efficiency, SD-WAN aligns perfectly by integrating beneficial characteristics of both MPLS and Internet solutions, while significantly reducing complexities and costs associated with managing distinct transport technologies.
All Pages