400-007 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
What is a characteristic of a secure cloud architecture model?

A.limited access to job function
B.dedicated and restricted workstations
C.multi-factor authentication
D.software-defined network segmentation

正解:

Question No : 2
Company XYZ needs advice in redesigning their legacy Layer 2 infrastructure.
Which technology should be included in the design to minimize or avoid convergence delays due to STP or FHRP and provide a loop-free topology?

A.Use switch clustering in the access layer.
B.Use switch clustering in the core/distribution layer.
C.Use spanning-tree PortFast.
D.Use BF

正解:

Question No : 3
Refer to the exhibit.

As part of a redesign project, you must predict multicast behavior.
What happens to the multicast traffic received on the shared tree (*,G), if it is received on the LHR interface indicated*?

A.It is dropped due to an unsuccessful RPF check against the multicast source
B.It is switched give that no RPF check is performed
C.It is switched due to a successful RPF check against the routing table
D.It is dropped due to an unsuccessful RPk8t8ck against the multicast receiver.

正解:
Explanation:
https://www.cisco.com/c/en/us/support/docs/ip/ip-multicast/16450-mcastguide0.html
When a multicast packet arrives on an interface, the RPF process checks to ensure that this incoming interface is the outgoing interface used by unicast routing in order to reach the source of the multicast packet. This RPF check process prevents loops. Multicast routing does not forward a packet unless the source of the packet passes a RPF check. Once a packet passes this RPF check, multicast routing forwards the packet based only upon the destination address.

Question No : 4
Which two statements explain the operation of BFD asynchronous mode? (Choose two)

A.BFD asynchronous mode with echo packets combines the control packets and echo packets into a single packet.
B.BFD asynchronous mode without echo packets uses control packets, and BFD asynchronous mode with echo packets does not.
C.BFD asynchronous mode with and without echo packets use control packets.
D.BFD asynchronous without echo packets has control packets sent back to the originating router, which echoes the control packet to detect failures.
E.BFD asynchronous mode with echo packets uses separate control packets and echo packets.

正解:

Question No : 5
A European government passport agency considers upgrading its IT systems to increase performance and workload flexibility in response to constantly changing requirements. The budget manager wants to reduce capital expenses and IT staff and must adopt the lowest-cost technology.
Which technology choice is suitable?

A.on premises
B.private cloud
C.public cloud
D.hybrid cloud

正解:

Question No : 6
In the case of outsourced IT services, the RTO is defined within the SLA.
Which two support terms are often included in the SLA by IT and other service providers? (Choose two.)
A. network size and cost
B. support availability
C. network sustainability
D. network reliability
E. resolution time

正解: B,E

Question No : 7
Various teams in different organizations within an enterprise are preparing low-level design documents to capture network parameters using a Waterfall project model:
• hardware sizing and power consumption
• Layer 2 and layer 3 services parameters
• configuration of all control plane protocols
Input from relevant stakeholders was captured at the start of the project, and the project scope has been defined based on the parameters above.
What impact will it have on documentation and project deliverables if the stakeholders ask to have changes carried out in the network before the information has been captured?

A.This provides more opportunity to think outside the box.
B.Rework is expected before the delivery.
C.Significant effort and time are required.
D.This provides a flexible approach to incorporate changes.

正解:

Question No : 8
Which mechanism enables small, unmanaged switches to plug into ports of access switches without risking switch loops?

A.PortFast
B.UDLD
C.Root guard
D.BPDU guard

正解:

Question No : 9
Which two data plane hardening techniques are true? (Choose two)

A.warning banners
B.redundant AAA servers
C.Control Plane Policing
D.SNMPv3
E.infrastructure ACLs
F.disable unused services
G.routing protocol authentication

正解:

Question No : 10
Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services Is true?

A.first-hop router registration to the RP
B.multicast client registration to the RP
C.multicast source registration to the RP
D.transport of all IPv6 multicast traffic

正解:

Question No : 11
Which two points must network designers consider when designing a new network design or when evaluating an existing network design to help them understand the high-level design direction with regards to the security aspects? (Choose two)

A.Consider Business objectives and goals
B.Consider organization’s security policy standards
C.Consider for only multi-site networks
D.Consider for only new network technologies and components

正解:

Question No : 12
Refer to the exhibit.

Which impact of using three or more ABRs between the backbone area and area 1 is true?

A.In a large-scale network LSA replication by all ABRs can cause serious scalability issues
B.Multiple ABRs reduce the CPU processing on each A6R due to splitting prefix advertisement
C.In a large-scale network multiple ABRs can create microloops.
D.Prefixes from the non-backbone area are advertised by one ABR to the backbone

正解:

Question No : 13
A healthcare provider discovers that protected health information of patients was altered without patient consent. The healthcare provider is subject to HIPAA compliance and is required to protect PHI data.
Which type of security safeguard should be implemented to resolve this issue?

A.technical and physical access control
B.administrative security management processes
C.physical device and media control
D.technical integrity and transmission security

正解:
Explanation:
https://www.cisco.com/en/US/docs/solutions/Enterprise/Compliance/HIPAA/HIP_AppC.html #wp1085353

Question No : 14
Retef to the exhibit.

An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain EIGRP routes are getting redistributed into OSPF, OSPF area 20 has routers with limited memory and CPU resources. The engineer wants to block routes from EIGRP 111 from propagating into area 20 and allow EIGRP 222 routes to How in.
Which OSPF area type fulfills this design requirement?

A.area 20 as a stub area
B.type 5 LSA filtering on the ASBR between EIGRP 111 and area a
C.area 20 as a NSSA area
D.type 3 LSA filtering on the ABR between area 0 area 20

正解:

Question No : 15
SD-WAN can be used to provide secure connectivity to remote offices, branch offices, campus networks, data centers, and the cloud over any type of IP-based underlay transport network.
Which two statements describe SD WAN solutions? (Choose two.)

A.SD-WAN networks are inherently protected against slow performance.
B.Control and data forwarding planes are kept separate.
C.Improved operational efficiencies result In cost savings.
D.Solutions include centralized orchestration, control, and zero-touch provisioning.
E.Solutions allow for variations of commodity and specialized switching hardware.

正解:

Cisco 400-007 問題練習