400-007 Free Practice Test

Company XYZ wants to deploy OSPF. The design plan requires that two OSPF networks be mutually redistributed at multiple locations and ensure end-to-end connectivity to all of the company's networks Which technology can be used to fulfill the requirements while avoiding the creation of routing loops?

1. A. Create a virtual link between ASBRs.
2. B. Change the router ID for both ASBRs.
3. C. Redistribute routes as external type 2 routes.
4. D. Use route maps on ASBRs to filter routes with tags so they are not redistributed.

Correct Answer: D
https://www.cisco.com/c/en/us/support/docs/ip/open-shortest-path-first-ospf/4170-ospfprocesses.html

A network security team observes phishing attacks on a user machine from a remote location. The organization has a policy of saving confidential data on two different systems using different types of authentication. What is the next step to control such events after the security team verifies all users in Zero Trust modeling?

1. A. Enforce risk-based and adaptive access policies.
2. B. Assess real-time security health of devices.
3. C. Apply a context-based network access control policy for users.
4. D. Ensure trustworthiness of devices.

Correct Answer: B

Company XYZ has 30 sites using MPLS L3 VPN and the company is now concerned about data integrity. The company wants to redesign the security aspect of their network based on these requirements:
• Securely transfer the corporate data over the private WAN
• Use a centralized configuration model.
• Minimize overhead on the tunneled traffic.
Which technology can be used in the new design to meet the company's requirements?

1. A. S-VTI
2. B. DMVPN
3. C. MGRE
4. D. GET VPN

Correct Answer: D

While designing a switched topology, in which two options is UplinkFast recommended? (Choose two )

1. A. when switches of different spanning-tree types are connected (for exampl
2. B. 802.1d connecting to 802.1w)
3. C. on distribution layer switches
4. D. when hello timers are changed to more aggressive values
5. E. on access layer switches
6. F. on the core switches

Correct Answer: AD

A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The systems run legacy applications by using hard-coded IP addresses. Which segmentation method is suitable and scalable for the customer?

1. A. data center perimeter firewalling
2. B. VACLs on data center switches
3. C. transparent firewalling
4. D. routed firewalls

Correct Answer: B