A European government passport agency considers upgrading its IT systems to increase performance and workload flexibility in response to constantly changing requirements. The budget manager wants to reduce capital expenses and IT staff and must adopt the lowest-cost technology. Which technology choice is suitable?
Apublic cloud
Bhybrid cloud
Con premises
Dprivate cloud
0
Question 2
Network Design
0
Question 3
Network Design
0
Question 4
Security Design
0
Question 5
Control, Data, Management Plane, and Operational Design
DRAG DROP -
Drag and drop the multicast protocols from the left onto the correct design situations on the right. Not all options are used.
Select and Place:
Which relationship between iBGP and the underlying physical topology is true?
AiBGP full mesh requires an underlying fully meshed network topology.
BiBGP full mesh requirement does not dictate any specific network topology.
CiBGP does not work on a ring network topology even with an underlying IGP.
DiBGP can work only on a ring network topology with a link-state protocol like OSPF or IS-IS.
A European national bank considers migrating its on-premises systems to a private cloud offering in a non-European location to significantly reduce IT costs. What is a primary factor prior to migration?
Asecurity
Bcloud connectivity
Cadditional latency
Ddata governance
Company XYZ is planning to deploy primary and secondary (disaster recovery) data center sites. Each of these sites will have redundant SAN fabrics and data protection is expected between the data center sites. The sites are 100 miles (160 km) apart and target RPO/RTO are 3 hrs and 24 hrs, respectively. Which two considerations must Company XYZ bear in mind when deploying replication in their scenario? (Choose two.)
ATarget RPO/RTO requirements cannot be met due to the one-way delay introduced by the distance between sites.
BVSANs must be extended from the primary to the secondary site to improve performance and availability.
CVSANs must be routed between sites to isolate fault domains and increase overall availability.
DSynchronous data replication must be used to meet the business requirements.
EAsynchronous data replication should be used in this scenario to avoid performance impact in the primary site.
Question 6
Service Design
0
Question 7
Network Design
Question 8
Control, Data, Management Plane, and Operational Design
Question 9
Security Design
Question 10
Security Design
Question 11
Security Design
Question 12
Control, Data, Management Plane, and Operational Design
Question 13
Network Design
Question 14
Service Design
Question 15
Network Design
Question 16
Network Design
Question 17
Network Design
Question 18
Network Design
Question 19
Network Design
Question 20
Network Design
Question 21
Security Design
Question 22
Security Design
Question 23
Security Design
Question 24
Control, Data, Management Plane, and Operational Design
Question 25
Network Design
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ad
Want a break from the ads?
Become a Supporter and enjoy a completely ad-free experience, plus unlock Learn Mode, Exam Mode, AstroTutor AI, and more.
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
Ask AstroTutor
0
A small organization of 20 employees is looking to deliver a network design service for modernizing customer networks to support advanced solutions.
Project scope and weekly progress should be visualized by the management.
Always consider feedback and make changes accordingly during the project.
Should consider flexibility to change scope at the point of time.
Which project methodology meets the requirements and have the least impact on the outcome?
ALEAN
BSix-Sigma
CScrum
DKanban
What is the most important operational driver in building a resilient and secure modular network design?
AMinimize app downtime
BReduce the frequency of failures requiring human intervention
CIncrease time spent on developing new features
DDependencies on hardware or software that is difficult to scale
Which three items do you recommend for control plane hardening of an infrastructure device? (Choose three.)
ASNMPv3
Bwarning banners
Crouting protocol authentication
Dredundant AAA servers
Eto enable unused services
FControl Plane Policing
What is a characteristic of a secure cloud architecture model?
Amulti-factor authentication
Blimited access to job function
Cdedicated and restricted workstations
Dsoftware-defined network segmentation
Which two data plane hardening techniques are true? (Choose two.)
Arouting protocol authentication
Binfrastructure ACLs
Credundant AAA servers
DControl Plane Policing
Ewarning banners
FSNMPv3
Which two technologies enable multilayer segmentation? (Choose two.)
Afirewalls
Bdata plane markings
Cfilter lists
Dsegment routing
Epolicy-based routing
IPFIX data collection via standalone IPFIX probes is an alternative to flow collection from routers and switches. Which use case is suitable for using IPFIX probes?
Asecurity
Bobservation of critical links
Ccapacity planning
Dperformance monitoring
You want to mitigate failures that are caused by STP loops that occur before UDLD detects the failure or that are caused by a device that is no longer sending
BPDUs. Which mechanism do you use along with UDLD?
ABPDU guard
Broot guard
Cloop guard
DBPDU filtering
An architect receives a business requirement from a CTO that states the RTO and RPO for a new system should be as close as possible to zero. Which replication method and data center technology should be used?
Asynchronous replication over geographically dispersed dual data centers via MPLS
Bsynchronous replication over dual data centers via Metro Ethernet
Casynchronous replication over geographically dispersed dual data centers via CWDM
Dasynchronous replication over dual data centers via DWDM
A multicast network is using Bidirectional PIM. Which two combined actions achieve high availability so that two RPs within the same network can act in a redundant manner? (Choose two.)
AAdvertise the two RP addresses in the routing protocol.
BUse two phantom RP addresses.
CManipulate the multicast routing table by creating static mroutes to the two RPs.
DControl routing to the two RPs through a longest match prefix.
EUse Anycast RP based on MSDP peering between the two RPs.
FManipulate the administrative distance of the unicast routes to the two RPs.
Refer to the table. A customer investigates connectivity options for a DCI between two production data centers to aid a large-scale migration project. The solution must provide a single 10G connection between locations and be able to run its own varying QoS profiles without service provider interaction based on the migration stages. All connectivity methods are at 10 Gbps. Which transport technology costs the least if the connectivity is required for just one year?
ADWDM over dark fiber
BMetro Ethernet
CMPLS wires only
DCWDM over dark fiber
Which two features control multicast traffic in a VLAN environment? (Choose two.)
ARGMP
BPIM snooping
CMLD snooping
Dpruning
EIGMP snooping
Which two mechanisms avoid suboptimal routing in a network with dynamic mutual redistribution between multiple OSPFv2 and EIGRP boundaries? (Choose two.)
AAD manipulation
Bmatching OSPF external routes
Croute filtering
Dmatching EIGRP process ID
Eroute tagging
Refer to the table. A customer investigates connectivity options for a DCI between two production data centers. The solution must provide dual 10G connections between locations with no single points of failure for Day 1 operations. It must also include an option to scale for up to 20 resilient connections in the second year to accommodate isolated SAN over IP and isolated dedicated replication IP circuits. All connectivity methods are duplex 10 Gbps. Which transport technology costs the least over two years in this scenario?
ACWDM
BDWDM
CMPLS
DMetro Ethernet
An enterprise requires MPLS connected branches to access cloud-based Microsoft 365 services over an SD-WAN solution. Internet access is available only at dual regional hub sites that are connected to the MPLS network. Which connectivity method provides an optimum access method to the cloud-based services if one ISP suffers loss or latency?
ACloud onRamp SWG
BCloud onRamp
CCloud onRamp gateway site
DCloud onRamp SaaS
A healthcare provider discovers that protected health information of patients was altered without patient consent. The healthcare provider is subject to HIPAA compliance and is required to protect PHI data. Which type of security safeguard should be implemented to resolve this issue?
Atechnical and physical access control
Bphysical device and media control
Cadministrative security management processes
Dtechnical integrity and transmission security
Company XYZ wants to improve the security design of their network to include protection from reconnaissance and DoS attacks on their subinterfaces destined toward next hop routers. Which technology can be used to prevent these types of attacks?
ADPP
BCPPr
CCoPP
DMPP
Company XYZ is designing the network for IPv6 security and they have these design requirements:
A switch or router must deny access to traffic from sources with addresses that are correct, but are topologically incorrect.
Devices must block Neighbor Discovery Protocol resolutions for destination addresses that are not found in the binding table.
Which two IPv6 security features are recommended for this company? (Choose two.)
AIPv6 RA Guard
BIPv6 Destination Guard
CIPv6 Prefix Guard
DIPv6 Source Guard
EIPv6 DHCP Guard
DRAG DROP -
Drag and drop the multicast protocols from the left onto the correct design situations on the right.
Select and Place:
What are two examples of business goals to be considered when a network design is built? (Choose two.)