Free Cisco 400-007 CCDE Practice Questions 2026 Part3

Question #1

Company XYZ wants to use the FCAPS ISO standard for network management design. The focus of the design should be to monitor and keep track of any performance issues by continuously collecting and analyzing statistical information to monitor, correct, and optimize any reduced responsiveness across the network. Which layer accomplishes this design requirement?

A. security management

B. performance management

C. accounting management

D. fault management

View answer

Correct Answer: B

Question #2

Which network management framework can be used to develop a network architecture that contains business requirements analysis, gap analysis, and networkdiagrams as artifacts to be used for design and implementation later?

A. FCAPS

B. Cobit

C. TOGAF

D. ITIL

View answer

Correct Answer: C

Question #3

Retef to the exhibit.An engineer is designing a multiarea OSPF network for a client who also has a large EIGRP domain. EIGRP routes are getting redistributed into OSPF. OSPF area 20 has routers with limited memory and CPU resources. The engineer wants to block routes from EIGRP 111 from propagating into area 20 and allow EIGRP 222 routes to flow in. Which OSPF area type fulfills this design requirement?

A. area 20 as a stub area

B. type 5 LSA filtering on the ASBR between EIGRP 111 and area 0

C. area 20 as a NSSA area

D. type 3 LSA filtering on the ABR between area 0 and area 20

View answer

Correct Answer: A

Question #4

An architect receives a business requirement from a CTO that states the RTO and RPO for a new system should be as close as possible to zero. Whichreplication method and data center technology should be used?

A. synchronous replication over geographically dispersed dual data centers via MPLS

B. synchronous replication over dual data centers via Metro Ethernet

C. asynchronous replication over geographically dispersed dual data centers via CWDM

D. asynchronous replication over dual data centers via DWDM

View answer

Correct Answer: B

Question #5

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

A. first-hop router registration to the RP

B. multicast source registration to the RP

C. multicast client registration to the RP

D. transport of all IPv6 multicast traffic

View answer

Correct Answer: D

Question #6

Company XYZ has implemented policy-based routing in their network. Which potential problem must be kept in mind about network reconvergence and PBR?

A. It can limit network scalability

B. It can create microloops during reconvergence

C. It reduces convergence time

D. It increases convergence time

View answer

Correct Answer: B

Question #7

How must the queue sizes be designed to ensure that an application functions correctly?

A. ach individual device queuing delay in the chain must be less than or equal to the application required delay

B. he queuing delay on every device in the chain must be exactly the same to the application required delay

C. he default queue sizes are good for any deployment as it compensates the serialization delay

D. he sum of the queuing delay of all devices plus serialization delay in the chain must be less than or equal to the application required delay

View answer

Correct Answer: D

Question #8

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network and must comply with these design requirements:•Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion•Use the Internet as the underlay for the private WAN•Securely transfer the corporate data over the private WANWhich two technologies should be incorporated into the design of this network? (Choose two.)

A. PPTP

B. DMVPN

C. IPsec

D. GET VPN

E. S-VTI

View answer

Correct Answer: BC

Question #9

Refer to the exhibit. An engineer is designing the traffic flow for AS 111. Traffic from AS 111 should be preferred via AS 100 for all external routes. A method must be used that only affects AS 111. Which BGP attributes are best suited to control outbound traffic?

A. MED

B. community

C. local preference

D. AS path

View answer

Correct Answer: C

Question #10

Refer to the exhibit. An engineer is designing the traffic flow for AS 111. Traffic from AS 111 should be preferred via AS 100 for all external routes. A method must be used that only affects AS 111. Which BGP attributes are best suited to control outbound traffic?

A. MED

B. community

C. local preference

D. AS path

View answer

Correct Answer: C

Question #11

Which mechanism provides Layer 2 fault isolation between data centers?

A. FabricPath

B. OTV

C. Advanced VPLS

D. LISP

E. TRILL

View answer

Correct Answer: B

Question #12

Company XYZ network runs IPv4 and IPv6 and they want to introduce a multidomain, multicast-based network. The new design should use a flavor of PIM that forwards traffic using SPT. Which technology meets this requirement?

A. PIM-SSM

B. PIM-SM

C. BIDIR-PIM

D. PIM-DM

View answer

Correct Answer: A

Question #13

Refer to the exhibit.As part of a redesign project, you must predict multicast behavior What happens to the multicasttraffic received on the shared tree (*,G), if it is received on the LHR interface indicated*?

A. t is dropped due to an unsuccessful RPF check against the multicast source

B. t is switched give that no RPF check is performed

C. t is switched due to a successful RPF check against the routing table

D. t is dropped due to an unsuccessful RPk8t8ck against the multicast receiver

View answer

Correct Answer: C

Question #14

Refer to the exhibit.ACME Mining has four data centers in Santiago, Cape Town, Mumbai, and Beijing, full-mesh connected via a 400 Mb/s EVP-LAN. They want to deploy a new mission-critical application with these requirements:* cluster heartbeat 2 MB/s continuous (250 KB/s)* cluster heartbeat one-way maximum latency 100 msThese are the current ping tests results between the four data centers:Which hosting data center pair can host the new application?

A. Mumbai and Beijing

B. Cape Town and Mumbai

C. Cape Town and Beijing

D. Santiago and Mumbai

E. Santiago and Beijing

F. Santiago and Cape Town

View answer

Correct Answer: B

Question #15

Company XYZ is in the process of identifying which transport mechanism(s) to use as their WAN technology. Their main two requirements are:-a technology that could offer DPI, SLA, secure tunnels, privacy, QoS, scalability, reliability, and ease of management-a technology that is cost-effectiveWhich WAN technology(ies) should be included in the design of company XYZ?

A. Both technologies should be used

B. MPLS meets all these requirements and it is more reliable than using the Internet

C. Software-defined WAN should be the preferred choice because it complements both technologies, covers all the required features, and it is the most cost- effective solution

D. Internet should be the preferred option because it is cost effective and supports BFD, IP SLA, and IPsec for secure transport over the public Internet

View answer

Correct Answer: C

Question #16

A Tier-3 Service Provider is evolving into a Tier-2 Service Provider due to the amount of Enterprise business it is receiving. The network engineers are re-evaluating their IP/MPLS design considerations in order to support duplicate/overlapping IP addressing from their Enterprise customers within each Layer3 VPN. Which concept would need to be reviewed to ensure stability in their network?

A. ssigning unique Route Target IDs

B. ssigning unique Route Distinguishers

C. ssigning unique IP address space for the Enterprise NAT/Firewalls

D. ssigning unique VRF IDs to each L3VPN

View answer

Correct Answer: B

Question #17

SDWAN networks capitalize the usage of broadband Internet links over traditional MPLS links to offer more cost benefits to enterprise customers. However, due to the insecure nature of the public Internet, it is mandatory to use encryption of traffic between any two SDWAN edge devices installed behind NAT gateways.Which overlay method can provide optimal transport over unreliable underlay networks that are behind NAT gateways?

A. DTLS

B. TLS

C. IPsec

D. GRE

View answer

Correct Answer: C

Question #18

In an OSPF network with routers connected together with Ethernet cabling, which topology typically takes the longest to converge?

A. squared

B. ring

C. partial mesh

D. triangulated

E. full mesh

View answer

Correct Answer: B

Question #19

What are two primary design constraints when a robust infrastructure solution is created? (Choose two.)

A. omponent availability

B. onitoring capabilities

C. roject time frame

D. taff experience

E. otal cost

View answer

Correct Answer: CE

Question #20

A financial company requires that a custom TCP-based stock-trading application be prioritized over all other traffic for the business due to the associated revenue. The company also requires that VoIP be prioritized for manual trades. Which directive should be followed when a QoS strategy is developed for the business?

A. Allow VoIP and the custom application to share the same priority queue,

B. The custom application and VoIP must be assigned their own separate priority queue

C. Interleave the custom application with other TCP applications in the same CBWR

D. Avoid placing the custom application in a CBWFQ queue that contains other

E. Reveal Answer

View answer

Correct Answer: B

Question #21

Company XYZ runs OSPF in their network. A design engineer decides to implement hot-potato routing architecture. How can this implementation be achieved?

A. Enable iBGP and apply prepend to ensure all prefixes will have the same length of the AS path attribute value

B. Redistribute the external prefixes onto OSPF and ensure that the total metric calculation includes external and internal values

C. Enable OSPF load-balancing over unequal cost path

D. Redistribute the external prefixes onto OSPF and ensure the total metric calculation includes only the external value and the value is the same in all ASBRs

View answer

Correct Answer: B

Question #22

Which two statements define some of the general characteristics of SDN? (Choose two.)

A. Southbound interfaces are interfaces used between the control plane and the date plane

B. OpenFlow isconsidered one of the first Northbound APIs used by SDN controllers

C. Northbound interfaces are open interfaces used between the control plane and the date plane

D. The separation of the control plane from the data plane

E. OVSDB is an application database management protocol

View answer

Correct Answer: AE

Question #23

What is the most important operational driver in building a resilient and secure modular network design?

A. Minimize app downtime

B. Reduce the frequency of failures requiring human intervention

C. Increase time spent on developing new features

D. Dependencies on hardware or software that is difficult to scale

View answer

Correct Answer: A

Question #24

Refer to the exhibit. An engineer is designing the traffic flow for AS 111. Traffic from AS 111 should be preferred via AS 100 for all external routes. A method must be used that only affects AS 111. Which BGP attributes are best suited to control outbound traffic?

A. MED

B. community

C. local preference

D. AS path

View answer

Correct Answer: C

Question #25

Company XYZ is running OSPF in their network. They have merged with another company that is running EIGRP as the routing protocol. Company XYZ now needs the two domains to talk to each other with redundancy, while maintaining a loop free environment. The solution must scale when new networks are added into the network in the near future. Which technology can be used to meet these requirements?

A. single point route-redistribution with route filtering using route tags

B. multipoint route-redistribution with route filtering using ACLs

C. multipoint route-redistribution with route filtering using route tags

D. single point route-redistribution with route filtering using ACLs

View answer

Correct Answer: C

Question #26

What are two primary design constraints when a robust infrastructure solution is created? (Choose two.)

A. component availability

B. monitoring capabilities

C. project time frame

D. staff experience

E. total cost

View answer

Correct Answer: CE

Question #27

Company XYZ is planning to deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively. Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)

A. Target RPO/RTO requirements cannot be met due to the one-way delay introduced by the distance between sites

B. VSANs must be extended from the primary to the secondary site to improve performance and availability

C. VSANs must be routed between sites to isolate fault domains and increase overall availability

D. Synchronous data replication must be used to meet the business requirements

E. Asynchronous data replication should be used in this scenario to avoid performance impact in the primary site

View answer

Correct Answer: BD

Question #28

Company XYZ network runs IPv4 and IPv6 and they want to introduce a multidomain, multicast-based network. The new design should use a flavor of PIM that forwards traffic using SPT. Which technology meets this requirement?

A. PIM-SSM

B. PIM-SM

C. BIDIR-PIM

D. PIM-DM

View answer

Correct Answer: A

Question #29

What are two common approaches to analyzing and designing networks? (Choose two.)

A. three-tier approach

B. top-down approach

C. high-low security approach

D. bottom-up approach

E. left-right approach

View answer

Correct Answer: BD

Question #30

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

A. first-hop router registration to the RP

B. multicast source registration to the RP

C. multicast client registration to the RP

D. transport of all IPv6 multicast traffic

View answer

Correct Answer: D

Question #31

A healthcare customer requested that SNMP traps must be sent over the MPLS Layer 3 VPN service. Which protocol must be enabled?

A. syslog

B. SNMPv3

C. SNMPv2

D. syslog TLS

E. SSH

View answer

Correct Answer: B

Question #32

Company XYZ network runs IPv4 and IPv6 and they want to introduce a multidomain, multicast-based network. The new design should use a flavor of PIM that forwards traffic using SPT. Which technology meets this requirement?

A. PIM-SSM

B. PIM-SM

C. BIDIR-PIM

D. PIM-DM

View answer

Correct Answer: A

Question #33

What are two primary design constraints when a robust infrastructure solution is created? (Choose two.)

A. component availability

B. monitoring capabilities

C. project time frame

D. staff experience

E. total cost

View answer

Correct Answer: CE

Question #34

You have been tasked with designing a data center interconnect as part of business continuity. You want to use FCoE over this DCI to support synchronous replication. Which two technologies allow for FCoE via lossless Ethernet or data center bridging? (Choose two.)

A. DWDM

B. EoMPLS

C. SONET/SDH

D. Multichassis EtherChannel over Pseudowire

E. VPLS

View answer

Correct Answer: AB

Question #35

An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh iBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process. Which design solution is the most cost effective?

A. Increase the memory on the core routers

B. Increase bandwidth between the core routers

C. Implement eBGP between the core and distribution routers

D. Increase the memory on the distribution routers

E. Implement route reflectors on the two core routers

View answer

Correct Answer: E

Question #36

Refer to the table. A customer investigates connectivity options for a DCI between two production data centers. The solution must provide dual 10G connections between locations with no single points of failure for Day 1 operations. It must also include an option to scale for up to 20 resilient connections in the second year to accommodate isolated SAN over IP and isolated dedicated replication IP circuits. All connectivity methods are duplex 10 Gbps. Which transport technology costs the least over two years in this scenario?

A. WDM

B. WDM

C. PLS

D. etro Ethernet

View answer

Correct Answer: B

Question #37

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network and must comply with these design requirements:•Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion•Use the Internet as the underlay for the private WAN•Securely transfer the corporate data over the private WANWhich two technologies should be incorporated into the design of this network? (Choose two.)

A. PPTP

B. DMVPN

C. IPsec

D. GET VPN

E. S-VTI

View answer

Correct Answer: BC

Question #38

Refer to the exhibit.Traffic was equally balanced between Layer 3 links on core switches SW1 and SW2 before an introduction of the new video server in the network. This video server uses multicast to send video streams to hosts and now one of the links between core switches is overutilized. Which design solution solves this issue?

A. pply a more granular load-balancing method on SW2

B. dd more links between core switches

C. ggregate links Layer 2 link aggregation

D. pply a more granular load-balancing method on SW1

E. ilter IGMP joins on an overutilized link

View answer

Correct Answer: D

Question #39

Which two factors provide multifactor authentication for secure access to applications and data? (Choose two.)

A. APersona-based

B. BPower-based

C. CPush-based

D. DPossession-based

E. EPull-based

View answer

Correct Answer: CD

Question #40

You have been asked to design a high-density wireless network for a university campus. Which two principles would you apply in order to maximize the wireless network capacity? (Choose two.)

A. Choose a high minimum data rate to reduce the duty cycle

B. Make use of the 5-GHz band to reduce the spectrum utilization on 2

C. Enable 802

D. Increase the number of SSIDs to load-balance the client traffic

E. Implement a four-channel design on 2

View answer

Correct Answer: AB

Question #41

Which interconnectivity method offers the fastest convergence in the event of a unidirectional issue between three Layer 3 switches connected together with routed links in the same rack in a data center?

A. Fiber Ethernet connectivity with UDLD enabled

B. Copper Ethernet connectivity with UDLD enabled

C. Fiber Ethernet connectivity with BFD enabled

D. Copper Ethernet connectivity with BFD enabled

View answer

Correct Answer: C

Question #42

Which network management framework can be used to develop a network architecture that contains business requirements analysis, gap analysis, and network diagrams as artifacts to be used for design and implementation later?

A. CAPS

B. obit

C. OGAF

D. TIL

View answer

Correct Answer: C

Question #43

Company XYZ network runs IPv4 and IPv6 and they want to introduce a multidomain, multicast-based network. The new design should use a flavor of PIM that forwards traffic using SPT. Which technology meets this requirement?

A. PIM-SSM

B. PIM-SM

C. BIDIR-PIM

D. PIM-DM

View answer

Correct Answer: A

Question #44

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

A. first-hop router registration to the RP

B. multicast source registration to the RP

C. multicast client registration to the RP

D. transport of all IPv6 multicast traffic

View answer

Correct Answer: D

Question #45

Router R1 is a BGP speaker with one peering neighbor over link 'A'. When the R1 link/interface 'A' fails, routing announcements are terminated, which results in the tearing down of the state for all BGP routes at each end of the link. What is this a good example of?

A. fault isolation

B. resiliency

C. redundancy

D. fate sharing

E. Reveal Answer

View answer

Correct Answer: D

Question #46

An engineer must redesign the QoS strategy due to oversubscription and excessive packet drops. What QoS technique should be used to manage traffic leaving the edge router and reduce packet drops?

A. LLQ

B. Traffic shaping

C. Rate-limiting

D. PolicingB: Traffic shaping buffers excess traffic and releases it gradually to match the configured rate, preventing congestion and dropped packets on outbound interfaces

View answer

Correct Answer: B

Question #47

Company XYZ, a global content provider, owns data centers on different continents. Their data center design involves a standard three-layer design with a Layer 3-only core. HSRP is used as the FHRP. They require VLAN extension across access switches in all data centers, and they plan to purchase a Layer 2 interconnection between two of their data centers in Europe. In the absence of other business or technical constraints, which termination point is optimal for the Layer 2 interconnection?

A. t the aggregation layer because it is the Layer 2 to Layer 3 demarcation point

B. t the core layer because all external connections must terminate there for security reasons

C. t the access layer because the STP root bridge does not need to align with the HSRP active node

D. t the core layer, to offer the possibility to isolate STP domains

View answer

Correct Answer: A

Question #48

You want to add 900 VLANs to the existing 90 VLANs on a data center Which two spanning-tree concerns must you consider? (Choose two )

A. STP is increased by a factor of 10 convergence time

B. To add 990 VLANs to the switching hardware reserved VLANs requires you to use extended VLAN

C. The diameter of the STP topology is increased

D. The PVST+ increases CPU utilization

E. BPDU does not support 990 VLANs

View answer

Correct Answer: CD

Question #49

Company XYZ has designed their network to run GRE over IPsec on their Internet-based VPN to connect two sites. Which IPsec tunneling feature can they enable to optimize the data flow while ensuring that the headers contain no duplicate IP addresses?

A. Transport Mode in IPsec Phase I

B. Transport Mode in IPsec Phase II

C. Tunnel Mode in IPsec Phase II

D. Tunnel Mode in IPsec Phase I

View answer

Correct Answer: B

Question #50

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network and must comply with these design requirements:•Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion•Use the Internet as the underlay for the private WAN•Securely transfer the corporate data over the private WANWhich two technologies should be incorporated into the design of this network? (Choose two.)

A. PPTP

B. DMVPN

C. IPsec

D. GET VPN

E. S-VTI

View answer

Correct Answer: BC

Question #51

An architect receives a business requirement from a CTO that states the RTO and RPO for a new system should be as close as possible to zero. Which replication method and data center technology should be used?

A. synchronous replication over geographically dispersed dual data centers via MPLS

B. synchronous replication over dual data centers via Metro Ethernet

C. asynchronous replication over geographically dispersed dual data centers via CWDM

D. asynchronous replication over dual data centers via DWDM

View answer

Correct Answer: A

Question #52

Refer to the exhibit. An engineer is designing the traffic flow for AS 111. Traffic from AS 111 should be preferred via AS 100 for all external routes. A method must be used that only affects AS 111. Which BGP attributes are best suited to control outbound traffic?

A. MED

B. community

C. local preference

D. AS path

View answer

Correct Answer: C

Question #53

An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh iBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP process. Which design solution is the most cost effective?

A. Increase the memory on the core routers

B. Increase bandwidth between the core routers

C. Implement eBGP between the core and distribution routers

D. Increase the memory on the distribution routers

E. Implement route reflectors on the two core routers

View answer

Correct Answer: E

Question #54

Which function is performed at the access layer of the three-layer hierarchical network design model?

A. oS classification and marking boundary

B. ast transport

C. eliability

D. ault isolation

E. edundancy and load balancing

View answer

Correct Answer: A

Question #55

In large-scale networks controllers needs to be able to process millions of flows per second without compromising the quality of the service What are two actions that must be implemented to address scaling limitations when deploying the network*? (Choose two.)

A. ASpirt the control logic functions between specialized data plane devices and controllers

B. BDeploy a high-throughput application platform

C. CDelegate work to the forwarding devices to reduce control plane overhead

D. DDeploy high performance controllers to increase the performance of the data plane

E. EDeploy authoritative switches to reduce the amount of controller workloads

View answer

Correct Answer: AC

Question #56

What are two common approaches to analyzing and designing networks? (Choose two.)

A. bottom-up approach

B. high-low security approach

C. top-down approach

D. left-right approach

E. three-tier approach

F. Reveal Answer

View answer

Correct Answer: AC

Question #57

Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The solution must provide a single 10G connection between locations and be able to run its own varying QoS profiles without service provider interaction based on the migration stages. All connectivity methods are at 10 Gbps. Which transport technology costs the least if the connectivity is required for just one year?

A. WDM over dark fiber

B. etro Ethernet

C. PLS wires only

D. WDM over dark fiber

View answer

Correct Answer: D

Question #58

Which two application requirements are mandatory tor traffic to receive proper treatment whenplaced in the priority queue? (Choose two.)

A. mall transactions (HTTP-like behavior)

B. RED drop treatment

C. olerance to packet loss

D. ntolerance to jitter

E. CP-based application

View answer

Correct Answer: AD

Question #59

Company XYZ has 30 sites running a legacy private WAN architecture that connects to the Internet via multiple high-speed connections. The company is now redesigning their network and must comply with these design requirements:•Use a private WAN strategy that allows the sites to connect to each other directly and caters for future expansion•Use the Internet as the underlay for the private WAN•Securely transfer the corporate data over the private WANWhich two technologies should be incorporated into the design of this network? (Choose two.)

A. PPTP

B. DMVPN

C. IPsec

D. GET VPN

E. S-VTI

View answer

Correct Answer: BC

Question #60

What are three common objectives for customers using multiple cloud providers? (Choose three.)

A. high availability

B. bandwidth

C. security

D. analytics

E. feature disparity

F. regional provider access

View answer

Correct Answer: ABC

Question #61

Which purpose of a dynamically created tunnel interface on the design of IPv6 multicast services is true?

A. first-hop router registration to the RP

B. multicast source registration to the RP

C. multicast client registration to the RP

D. transport of all IPv6 multicast traffic

View answer

Correct Answer: D

Question #62

Which two types of planning approaches are used to develop business-driven network designs and to facilitate the design decisions? (Choose two.)

A. strategic planning approach

B. business optimization approach

C. tactical planning approach

D. modular approach

E. cost optimization approach

View answer

Correct Answer: AC

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free Cisco 400-007 CCDE Practice Questions 2026 Part3 | Cisco Certified Design Expert

View The Updated 400-007 Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free Cisco 400-007 CCDE Practice Questions 2026 Part3 | Cisco Certified Design Expert

View The Updated 400-007 Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now