400-007 Exam Dumps - Cisco Certified Design Expert (CCDE v3.1)

Go to page:

<< First
Prev
2
3
4
5
6
7
8
9
10
11
Next
Last >>

Question # 49

You are designing an Out of Band Cisco Network Admission Control. Layer 3 Real-IP Gateway deployment for a customer Which VLAN must be trunked back to the Clean Access Server from the access switch?

authentication VLAN

user VLAN

untrusted VLAN

management VLAN

Full Access

Question # 50

Refer to the exhibit.

There are multiple trees in the Cisco FabricPath All switches in the Layer 2 fabric share the same view of each tree. Which two concepts describe how the multicast traffic is load-balanced across this topology? (Choose two )

A specific (S.G) traffic is not load-balanced

All trees are utilized at the same level of the traffic rate

Every leaf node assigns the specific (S.G) to the same tree.

A specific (S.G) multicast traffic is load-balanced across all trees due to better link utilization efficiency.

The multicast traffic is generally load-balanced across all trees

Full Access

Question # 51

Company XYZisplanningto deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively. Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)

Target RPO/RTO requirements cannot be met due to the one-way delay introduced by the distance between sites.

VSANs must be routed between sites to isolate fault domains and increase overall availability.

Synchronous data replication must be used to meet the business requirements

Asynchronous data replication should be used in this scenario to avoid performance impact in the primary site.

VSANs must be extended from the primary to the secondary site to improve performance and availability.

Full Access

Question # 52

Refer to the exhibit.

The enterprise customer wants to stream one-way video from their head office to eight branch offices using multicast. Their current service provider provides a Layer3 VPN solution and manages the CE routers, but they do not currently support multicast. Which solution quickly allows this multicast traffic to go through while allowing for future scalability?

Enable a GRE tunnel between nodes CE1 and CE2

Enable a GRE tunnel between nodes C2 and C4

Enable a GRE tunnel between nodes C1 and C4

Implement hub and spoke MPLS VPN over DMVPN (also known as 2547o DMVPN) between CE1 and CE2

The service provider must provide a Draft Rosen solution to enable a GRE tunnel between nodes PE1 and PE2

Full Access

Question # 53

Company XYZasksfor design recommendationsfor Layer2redundancy. Thecompanywants to prioritize fast convergence and resiliency elements. In the design. Which two technologies are recommended? (Choose two.)

Design MLAG/MC-LAG into the network wherever possible.

Configure DHCP snooping on the switches.

Use root guard.

Use BPDU guard.

Use UniDirectional Link Detection.

Full Access

Question # 54

Your company utilizes many different types of network transports and you want to increase the efficiency of the network Which solution can be used to improve network efficiency over PPPoE IPsec, and GRE networks'?

PMTUD

OATM

IRDP

Host Discovery Protocol

Full Access

Question # 55

What are two key design principles when using a hierarchical core-distribution-access network model? (Choose two )

A hierarchical network design model aids fault isolation

The core layer is designed first, followed by the distribution layer and then the access layer

The core layer provides server access in a small campus.

A hierarchical network design facilitates changes

The core layer controls access to resources for security

Full Access

Question # 56

Company XYZwants to improve the security design of their network to include protection from reconnaissance and DoS attacks on their sub interfaces destined toward next hop routers. Which technology can be used to prevent these types of attacks?

MPP

CPPr

CoPP

DPP

Full Access