400-007 Exam Questions and Answers | Exam-Dumps (Page: 3)

QUESTION: 11

SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.

Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

DTLS
TLS
IPsec
GRE

Answer(s): C

Explanation:

-DTLS (Datagram Transport Layer Security) is a secure transport protocol that can be used to encrypt datagrams. However, it is not as widely deployed as IPsec.
-TLS (Transport Layer Security) is a secure transport protocol that can be used to encrypt data between two hosts. However, it is not as well-suited for use over unreliable underlay networks as IPsec.
-GRE (Generic Routing Encapsulation) is a tunneling protocol that can be used to encapsulate traffic between two hosts. However, it does not provide any encryption, so it is not suitable for use over insecure underlay networks.
-IPsec (Internet Protocol Security) is a secure tunneling protocol that can be used to encapsulate traffic between two hosts. It is well-suited for use over insecure underlay networks, as it provides encryption and authentication.

Here are some additional details about IPsec:

-IPsec is a mature and widely deployed protocol.
-IPsec provides strong encryption and authentication.
-IPsec can be used to encapsulate traffic between two hosts or between two networks.
-

Reveal Solution Next Question

QUESTION: 12

Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to monitor and keep track of any performance issues by continuously collecting and analyzing statistical information to monitor, correct, and optimize any reduced responsiveness across the network. Which layer accomplishes this design requirement?

security management
performance management
accounting management
fault management

Answer(s): B

Explanation:

-Security management is responsible for protecting the network from unauthorized access, use, disclosure, disruption, modification, or destruction.
-Accounting management is responsible for tracking and recording network usage, such as the amount of data that is transmitted and received.
-Fault management is responsible for detecting and correcting network faults.
-Performance management is responsible for monitoring and optimizing network performance.
-Therefore, the layer that accomplishes the design requirement of monitoring and keeping track of any performance issues is performance management.

Here are some additional details about performance management:

-Performance management typically involves collecting statistical information about network performance, such as throughput, latency, and availability.
-This information can be used to identify performance problems, such as bottlenecks and congestion.
-Performance management can also be used to optimize network performance, such as by adjusting traffic flows or configuring devices.
-

Reveal Solution Next Question

QUESTION: 13

Company XYZ has implemented policy-based routing in their network. Which potential problem must be kept in mind about network reconvergence and PBR?

It can limit network scalability.
It can create microloops during reconvergence.
It reduces convergence time.
It increases convergence time.

Answer(s): B

Explanation:

Policy-based routing (PBR) is a routing technique that allows you to control how traffic is routed based on a set of policies. This can be useful for a variety of purposes, such as load balancing, traffic shaping, and security.

However, PBR can also create microloops during reconvergence. A microloop is a situation where traffic is routed in a loop, which can cause performance problems. This can happen if the PBR policies are not configured correctly or if there is a change in the network topology.

Therefore, it is important to be aware of the potential for microloops when using PBR. You can minimize the risk of microloops by carefully configuring the PBR policies and by monitoring the network for any changes that could cause a loop.

The other options are incorrect.

-Option A: PBR does not limit network scalability.
-Option C: PBR does not reduce convergence time. In fact, it can increase convergence time because it takes longer for the routers to recalculate the routing tables after a change in the network topology.
-Option D: PBR does not create microloops during normal operation. Microloops can only occur during reconvergence.
-

Reveal Solution Next Question

QUESTION: 14

SD-WAN can be used to provide secure connectivity to remote offices, branch offices, campus networks, data centers, and the cloud over any type of IP-based underlay transport network. Which two statements describe SD-WAN solutions? (Choose two.)

Control and data forwarding planes are kept separate.
Solutions allow for variations of commodity and specialized switching hardware.
SD-WAN networks are inherently protected against slow performance.
Solutions include centralized orchestration, control, and zero-touch provisioning.
Improved operational efficiencies result in cost savings.

Answer(s): A,D

Explanation:

-SD-WAN solutions separate the control plane from the data forwarding plane. This allows for greater flexibility and scalability, as well as improved security.
-SD-WAN solutions typically include centralized orchestration, control, and zero-touch provisioning. This simplifies network management and reduces operational costs.
The other options are not as accurate descriptions of SD-WAN solutions.

-SD-WAN solutions do not inherently protect against slow performance. However, they can be configured to optimize performance for different types of traffic.
-SD-WAN solutions can use a variety of hardware, including commodity and specialized switching hardware. The specific hardware that is used will depend on the requirements of the specific deployment.
-Improved operational efficiencies can result in cost savings. However, the extent of the cost savings will vary depending on the specific deployment.

Reference:

https://techacad.net/what-is-sd-wan-software-defined-wide-area-network/

Reveal Solution Next Question

QUESTION: 15

Company XYZ is in the process of identifying which transport mechanism(s) to use as their WAN technology. Their main two requirements are:
-a technology that could offer DPI, SLA, secure tunnels, privacy, QoS, scalability, reliability, and ease of management
-a technology that is cost-effective

Which WAN technology(ies) should be included in the design of company XYZ?

Both technologies should be used. Each should be used to back up the other one; where the primary links are MPLS, the Internet should be used as a backup link with IPsec (and vice versa).
MPLS meets all these requirements and it is more reliable than using the Internet. It is widely used with clearly defined best practices and an industry standard.
Software-defined WAN should be the preferred choice because it complements both technologies, covers all the required features, and it is the most cost- effective solution.
Internet should be the preferred option because it is cost effective and supports BFD, IP SLA, and IPsec for secure transport over the public Internet.

Answer(s): C

Reveal Solution Next Question

Cisco® 400-007 Exam (page: 3) Cisco® Certified Design Expert CCDE v3.0 Updated on: 25-Dec-2025

QUESTION: 11

Explanation:

QUESTION: 12

Explanation:

QUESTION: 13

Explanation:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Cisco® 400-007 Exam (page: 3)
Cisco® Certified Design Expert CCDE v3.0
Updated on: 25-Dec-2025