Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Cisco
  5. 400-007

Cisco 400-007 Exam
Cisco Certified Design Expert CCDE v3.0 (Page 32 )

Updated On: 1-Feb-2026
Page 12 of 60
PDF with 397 Questions

An engineer must design a network for a company that uses OSPF LFA to reduce loops. Which type of loop would be reduced by using this design?

  1. DTP
  2. micro loops
  3. STP
  4. REP

Answer(s): B



A business customer deploys workloads in the public cloud. Now the customer network faces governance issues with the flow of IT traffic and must ensure the security of data and intellectual property. Which action helps to identify the issue for further resolution?

  1. Set up a secure tunnel from customer routers to ensure that traffic is protected as it travels to the cloud service providers
  2. Send IPFIX telemetry data from customer routers to a centralized collector to identify traffic to cloud service providers
  3. Build a zone-based firewall policy on Internet edge firewalls that collects statistics on traffic sent to cloud service providers
  4. Apply workload policies that dictate the security requirements to the workloads that are placed in the cloud

Answer(s): B



Hybrid cloud computing allows organizations to take advantage of public and private cloud models. Which best practice should organizations follow to ensure data security in the private cloud?

  1. Use standard protocols for data transmission over the network
  2. Use standard network protocols for data communication between unsecured network connections
  3. Communicate all data security risks to customers and end users
  4. Encrypt data when it is at rest and in motion

Answer(s): D



A customer has a functional requirement that states HR systems within a data center should be segmented from other systems that reside in the same data center and same VLAN. The systems run legacy applications by using hard-coded IP addresses. Which segmentation method is suitable and scalable for the customer?

  1. data center perimeter firewalling
  2. routed firewalls
  3. VACLs on data center switches
  4. transparent firewalling

Answer(s): C



Which feature is supported by NETCONF but is not supported by SNMP?

  1. distinguishing between configuration data and operational data
  2. taking administrative actions
  3. collecting the status of specific fields
  4. changing the configuration of specific fields

Answer(s): A



Viewing page 32 of 60
Viewing questions 156 - 160 out of 397 questions



Post your Comments and Discuss Cisco 400-007 exam prep with other Community members:

Join the 400-007 Discussion