Free Cisco 400-007 CCDE Practice Questions 2026 Part2

Question #1

Refer to the exhibit.The WAN network of the General Bank of Greece has experienced several outages. It takes too long to activate a new branch site. The networking department of the bank plans to upgrade the legacy end-of-life WAN network with a new flexible, manageable, and scalable in-house solution. The number of branches will increase exponentially in the next fiscal year. The CTO states that the bank's main goal is OPEX reduction.The network engineering team prepares a table to evaluate the available options. Which WAN technology can be used for the solution?

A. D-WAN over L3VPN

B. anaged SD-WAN

C. D-WAN over L2VPN

D. MVPN over L3VPN

View answer

Correct Answer: A

Question #2

Refer to the exhibit.An engineer is designing the network for a multihomed customer running in AS 111 AS 111 does not have any other ASs connected to it.Which technology is more comprehensive to use in the design to make sure that the AS is not being used as a transit AS?

A. Include an AS path access list to send routes to the neighboringASs that only have AS 111 in the AS path field

B. Configure the AS-set attribute to allow only routes from AS 111 to be propagated to the neighborASs

C. Use the local preference attribute to configure your AS as a "non-transit" AS

D. Include a prefix list to only receive routes from neighboringASs

View answer

Correct Answer: A

Question #3

How can EIGRP topologies be designed to converge as fast as possible in the event of a point-to-point link failure?

A. Limit the query domain by use of summarization

B. Limit the query domain by use of default routes

C. Build neighbor adjacencies in a squared fashion

D. Limit the query domain by use of distribute lists

E. Build neighbor adjacencies in a triangulated fashion

View answer

Correct Answer: A

Question #4

Refer to the table.A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The solution must provide a single 10G connection between locations and be able to run its own varying QoS profiles without service provider interaction based on the migration stages. All connectivity methods are at 10 Gbps. Which transport technology costs the least if the connectivity is required for just one year?

A. DWDM over dark fiber

B. Metro Ethernet

C. MPLS wires only

D. CWDM over dark fiber

View answer

Correct Answer: D

Question #5

Which two design solutions ensure sub 50 msec of the convergence time after a link failure in the network?(Choose two)

A. BFD

B. Ti-LFA

C. minimal BGP scan time

D. MPLS-FRR

E. IGP fast hello

F. Reveal Answer

View answer

Correct Answer: BD

Question #6

IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches. Which use case is suitable for using IPFIX probes?\

A. performance monitoring

B. security

C. observation of critical links

D. capacity planning

E. Reveal Answer

View answer

Correct Answer: C

Question #7

Which Interconnectivity method offers the fastest convergence in the event of a unidirectional issuebetween three Layer 3 switches connected together with routed links in the same rack in a datacenter?

A. opper Ethernet connectivity with BFD enabled

B. opper Ethernet connectivity with UDLD enabled

C. iber Ethernet connectivity with BFD enabled

D. iber Ethernet connectivity with UDLD enabled

View answer

Correct Answer: C

Question #8

Company XYZ is planning to deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively. Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)

A. arget RPO/RTO requirements cannot be met due to the one-way delay introduced by the distance between sites

B. SANs must be extended from the primary to the secondary site to improve performance and availability

C. SANs must be routed between sites to isolate fault domains and increase overall availability

D. ynchronous data replication must be used to meet the business requirements

E. synchronous data replication should be used in this scenario to avoid performance impact in the primary site

View answer

Correct Answer: CE

Question #9

Which two types of planning approaches are used to develop business-driven network designs and to facilitate the design decisions? (Choose two.)

A. strategic planning approach

B. business optimization approach

C. tactical planning approach

D. modular approach

E. cost optimization approach

View answer

Correct Answer: AC

Question #10

A company uses equipment from multiple vendors in a data center fabric to deliver SDN, enable maximum flexibility, and provide the best return on investment. Which YANG data model should be adopted for comprehensive features to simplify and streamline automation for the SDN fabric?

A. penConfig

B. ative

C. roprietary

D. ETF

View answer

Correct Answer: A

Question #11

Sometimes SDN leverages various overlay networking technologies to create layer(s) of network abstraction. What describes an overlay network?

A. AIt transmits packets that traverse over network devices like switches and routers

B. BIt encapsulates packets at source and destination, which incurs additional overhead

C. CPacket delivery and reliability occurs at Layer 3 and Layer 4

D. DIt is responsible for the delivery of packets; NAT- or VRF-based segregation is required

View answer

Correct Answer: B

Question #12

Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The migrationis estimated to take 20 months to complete but might extend an additional 10 months if issues arise. All connectivity options meet the requirements to migrateworkloads. Which transport technology provides the best ROI based on cost and flexibility?

A. DWDM over dark fiber

B. MPLS

C. CWDM over dark fiber

D. Metro Ethernet

View answer

Correct Answer: D

Question #13

Which function is performed at the access layer of the three-layer hierarchical network design model?

A. fast transport

B. reliability

C. fault isolation

D. redundancy and load balancing

E. QoS classification and marking boundary

View answer

Correct Answer: E

Question #14

Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The migration is estimated to take 20 months to complete but might extend an additional 10 months if issues arise. All connectivity options meet the requirements to migrate workloads. Which transport technology provides the best ROI based on cost and flexibility?

A. WDM over dark fiber

B. PLS

C. WDM over dark fiber

D. etro Ethernet

View answer

Correct Answer: D

Question #15

The SD-WAN architecture is composed of separate orchestration, management, control, and data planes. Which activity happens at the orchestration plane?

A. Automatic onboarding of the SD-WAN routers into the SD-WAN overlay

B. Decision-making process on where traffic flows

C. Packet forwarding

D. Central configuration and monitoring

View answer

Correct Answer: A

Question #16

Refer to the exhibit. ACME Mining has four data centers in Santiago, Cape Town, Mumbai, and Beijing, full-mesh connected via a 400 Mb/s EVP-LAN. They want to deploy a new mission-critical application with these requirements:* cluster heartbeat 2 MB/s continuous (250 KB/s)* cluster heartbeat one-way maximum latency 100 msThese are the current ping tests results between the four data centers:Which hosting data center pair can host the new application?

A. umbai and Beijing

B. ape Town and Mumbai

C. ape Town and Beijing

D. antiago and Mumbai

E. antiago and Beijing

F. antiago and Cape Town

View answer

Correct Answer: B

Question #17

Refer to the table.A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The migration is estimated to take 20 months to complete but might extend an additional 10 months if issues arise. All connectivity options meet the requirements to migrate workloads. Which transport technology provides the best ROI based on cost and flexibility?

A. DWDM over dark fiber

B. MPLS

C. CWDM over dark fiber

D. Metro Ethernet

View answer

Correct Answer: C

Question #18

Company XYZ network runs IPv4 and IPv6 and they want to introduce a multidomain, multicast-based network. The new design should use a flavor of PIM that forwards traffic using SPT. Which technology meets this requirement?

A. PIM-SSM

B. PIM-SM

C. BIDIR-PIM

D. PIM-DM

View answer

Correct Answer: A

Question #19

Which undesired effect of increasing the jitter compensation buffer is true?

A. The overall transport delay decreases and quality improves

B. The overall transport jitter increases and quality issues can occur

C. The overall transport delay increases and quality issues can occur

D. The overall transport jitter decreases and quality improves

View answer

Correct Answer: C

Question #20

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

A. first-hop router registration to the RP

B. multicast source registration to the RP

C. multicast client registration to the RP

D. transport of all IPv6 multicast traffic

View answer

Correct Answer: D

Question #21

An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh iBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process. Which design solution is the most cost effective?

A. Increase the memory on the core routers

B. Increase bandwidth between the core routers

C. Implement eBGP between the core and distribution routers

D. Increase the memory on the distribution routers

E. Implement route reflectors on the two core routers

View answer

Correct Answer: E

Question #22

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

A. first-hop router registration to the RP

B. multicast source registration to the RP

C. multicast client registration to the RP

D. transport of all IPv6 multicast traffic

View answer

Correct Answer: D

Question #23

What are two examples of business goals to be considered when a network design is built? (Choose two.)

A. integrate endpoint posture

B. ensure faster obsolescence

C. minimize operational costs

D. reduce complexity

E. standardize resiliency

View answer

Correct Answer: CD

Question #24

Which two types of planning approaches are used to develop business-driven network designs and to facilitate the design decisions? (Choose two.)

A. trategic planning approach

B. usiness optimization approach

C. actical planning approach

D. odular approach

E. ost optimization approach

View answer

Correct Answer: AC

Question #25

An IT service provider is upgrading network infrastructure to comply with PCI security standards. The network team finds that 802.1X and VPN authentication based on locally-significant certificates are not available on some legacy phones. Which workaround solution meets the requirement?

A. Replace legacy phones with new phones because the legacy phones will lose trust if the certificate is renewed

B. Enable phone VPN authentication based on end-user username and password

C. Temporarily allow fallback to TLS 1

D. Use authentication-based clear text password with no EAP-MD5 on the legacy phones

View answer

Correct Answer: B

Question #26

Which network management framework can be used to develop a network architecture that contains business requirements analysis, gap analysis, and network diagrams as artifacts to be used for design and implementation later?

A. FCAPS

B. Cobit

C. TOGAF

D. ITIL

View answer

Correct Answer: C

Question #27

An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh iBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process. Which design solution is the most cost effective?

A. Increase the memory on the core routers

B. Increase bandwidth between the core routers

C. Implement eBGP between the core and distribution routers

D. Increase the memory on the distribution routers

E. Implement route reflectors on the two core routers

View answer

Correct Answer: E

Question #28

Which two are IoT sensor -specific constraints? (Choose two.)

A. memory

B. processing power

C. the amount of devices

D. cooling

E. standard transportprotocols

View answer

Correct Answer: AB

Question #29

Which extensions to GRE tunneling provide session tracking and in-order packet delivery in exchange for additional state stored in tunnel endpoints?

A. GRE Protocol Type and Checksum extension fields

B. GRE Version and Reserved0 extension fields

C. No extension fields are available in the GRE header to track session data and packet sequences

D. GRE Key and Sequence number extensions

E. Reveal Answer

View answer

Correct Answer: D

Question #30

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network and must comply with these design requirements:•Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion•Use the Internet as the underlay for the private WAN•Securely transfer the corporate data over the private WANWhich two technologies should be incorporated into the design of this network? (Choose two.)

A. PPTP

B. DMVPN

C. IPsec

D. GET VPN

E. S-VTI

View answer

Correct Answer: BC

Question #31

Refer to the diagram. Which solution must be used to send traffic from the foreign wireless LAN controller to the anchor wireless LAN controller?

A. Send packets without encapsulation to the anchor controller over the routed network

B. Encapsulate packets into an EoIP tunnel and send them to the anchor controller

C. Send packets from the foreign controller to the anchor controller via Layer 3 MPLS VPN or VRF-Lite

D. Send packets from the foreign controller to the anchor controller via IPinIP or IPsec tunnel

View answer

Correct Answer: B

Question #32

Refer to the table. A customer investigates connectivity options for a DCI between two production data centers. The solution must provide dual 10G connectionsbetween locations with no single points of failure for Day 1 operations. It must also include an option to scale for up to 20 resilient connections in the second yearto accommodate isolated SAN over IP and isolated dedicated replication IP circuits. All connectivity methods are duplex 10 Gbps. Which transport technologycosts the least over two years in this scenario?

A. CWDM

B. DWDM

C. MPLS

D. Metro Ethernet

View answer

Correct Answer: B

Question #33

Which two actions ensure voice quality in a branch location with a low-speed, high-latency WANconnection? (Choose two.)

A. ncrease WAN bandwidth

B. ncrease memory branch switch

C. ragment data packets

D. eplace any electrical links with optical links

E. rioritize voice packets

View answer

Correct Answer: CE

Question #34

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

A. first-hop router registration to the RP

B. multicast source registration to the RP

C. multicast client registration to the RP

D. transport of all IPv6 multicast traffic

View answer

Correct Answer: D

Question #35

The Company XYZ network is experiencing attacks against their router. Which type of Control Plane Protection must be used on the router to protect all control plane IP traffic that is destined directly for one of the router interfaces?

A. Control Plane Protection transit subinterface

B. Control Plane Protection host subinterface

C. Control Plane Protection CEF-exception subinterface

D. Control Plane Protection main interface

View answer

Correct Answer: B

Question #36

Refer to the exhibit.For Company XYZ, Bangkok is using ECMP to reach the 172.20.2.0/24 network. The company wants a design that would allow them to forward traffic from 172.16.2.0/24 toward 172.20.2.0/24 via the Singapore router as the preferred route. The rest of the traffic should continue to use ECMP. Which technology fulfills this design requirement?

A. policy-based routing

B. unequal-cost load balancing using variance

C. route summarization

D. LFA

View answer

Correct Answer: A

Question #37

An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh iBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process. Which design solution is the most cost effective?

A. Increase the memory on the core routers

B. Increase bandwidth between the core routers

C. Implement eBGP between the core and distribution routers

D. Increase the memory on the distribution routers

E. Implement route reflectors on the two core routers

View answer

Correct Answer: E

Question #38

How many fully established neighbour relationships exist on an Ethernet with five routers running OSPF as network type broadcast?

A. 5

B. 6

C. 7

D. 10

E. 20

View answer

Correct Answer: C

Question #39

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network and must comply with these design requirements:•Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion•Use the Internet as the underlay for the private WAN•Securely transfer the corporate data over the private WANWhich two technologies should be incorporated into the design of this network? (Choose two.)

A. PPTP

B. DMVPN

C. IPsec

D. GET VPN

E. S-VTI

View answer

Correct Answer: BC

Question #40

An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh iBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process. Which design solution is the most cost effective?

A. Increase the memory on the core routers

B. Increase bandwidth between the core routers

C. Implement eBGP between the core and distribution routers

D. Increase the memory on the distribution routers

E. Implement route reflectors on the two core routers

View answer

Correct Answer: E

Question #41

What are two examples of business goals to be considered when a network design is built? (Choose two.)

A. ntegrate endpoint posture

B. nsure faster obsolescence

C. inimize operational costs

D. educe complexity

E. tandardize resiliency

View answer

Correct Answer: CD

Question #42

Refer to the exhibit. An engineer is designing the traffic flow for AS 111. Traffic from AS 111 should be preferred via AS 100 for all external routes. A method must be used that only affects AS 111. Which BGP attributes are best suited to control outbound traffic?

A. MED

B. community

C. local preference

D. AS path

View answer

Correct Answer: C

Question #43

Company XYZ network runs IPv4 and IPv6 and they want to introduce a multidomain, multicast-based network. The new design should use a flavor of PIM that forwards traffic using SPT. Which technology meets this requirement?

A. PIM-SSM

B. PIM-SM

C. BIDIR-PIM

D. PIM-DM

View answer

Correct Answer: A

Question #44

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network and must comply with these design requirements:•Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion•Use the Internet as the underlay for the private WAN•Securely transfer the corporate data over the private WANWhich two technologies should be incorporated into the design of this network? (Choose two.)

A. PPTP

B. DMVPN

C. IPsec

D. GET VPN

E. S-VTI

View answer

Correct Answer: BC

Question #45

Identity and access management between multiple users and multiple applications has become a mandatory requirement for Company XYZ to fight against ever increasing cybersecurity threats. To achieve this, federated identity services have been deployed in the Company XYZ network to provide single sign-on and Multi-Factor Authentication for the applications and services. Which protocol can be used by Company XYZ to provide authentication and authorization services?

A. OAuth2

B. OpenID Connect

C. OpenID

D. SAML2

View answer

Correct Answer: D

Question #46

Which optimal use of interface dampening on a fast convergence network design is true?

A. when the switch hardware is faster than the debounce timer down detection

B. when numerous adjacent flaps of very short duration occur

C. when occasional flaps of long duration occur

D. when the router hardware is slower than the carrier delay down detection

View answer

Correct Answer: B

Question #47

A business invests in SDN and develops its own SDN controller that, due to budget constraints, runs on a single controller. The controller actively places an exclusive lock on the configuration of the devices to ensure it is the only source of changes to the environment. What is the result if the controller fails?

A. ll device configurations are in read-only mode until the controller is restored

B. he control plane is unavailable until the controller is restored

C. f a device fails, the configuration backup is unavailable

D. anual changes are only possible until the controller is restored

View answer

Correct Answer: B

Question #48

Company XYZ needs advice in redesigning their legacy Layer 2 infrastructure. Which technology should be included in the design to minimize or avoid convergence delays due to STP or FHRP and provide a loop-free topology?

A. Use BFD

B. Use switch clustering in the core/distribution layer

C. Use spanning-tree PortFast

D. Use switch clustering in the access layer

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free Cisco 400-007 CCDE Practice Questions 2026 Part2 | Cisco Certified Design Expert

View The Updated 400-007 Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free Cisco 400-007 CCDE Practice Questions 2026 Part2 | Cisco Certified Design Expert

View The Updated 400-007 Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now