Question 251 · 263 in bank
Select 2As a service provider is implementing Strong Access Control Measures, which two of the following PCI Data Security Standard requirements must be met? (Choose two.)
Show answer
Answer: AE
400-007ExpertCiscoAll questions freePage 26 of 27
400-007 practice questions 251–260
Cisco Certified Design Expert (CCDE) Written263 questions across 27 pages are complete and free, with no account or card.
Official study references
263 questions in this bank
Free access · progress saved on this device
Question 252 · 263 in bank
Refer to the exhibit. A customer needs to implement a connectivity model by using one active link for inbound and outbound traffic and a second link for backup. The backup link is low speed and is required only during outages of the primary link. Which design solution should be implemented?
Show answer
Answer: B
Question 253 · 263 in bank
Select 3What are three examples of solution components of the network infrastructure that help enforce security policy compliance on all devices as they seek to access the network and computing resources, thereby limiting damage from emerging security threats such as viruses, worms, and spyware? (Choose three.)
Show answer
Answer: ADE
Question 254 · 263 in bank
Select 2Most security monitoring systems use a signature-based approach to detect threats. In which two instances are systems based on Network Behavior Anomaly Detection better than signature-based systems when it comes to detecting security threat vectors? (Choose two.)
Show answer
Answer: DE
Question 255 · 263 in bank
Refer to the exhibit. A company named XYZ needs to apply security policies for end-user browsing by installing a secure web proxy appliance. All the web traffic must be inspected by the appliance, and the remaining traffic must be inspected by an NGFW that has been upgraded with intrusion prevention system functionality. In which two ways must the routing be performed? (Choose two.)
Show answer
Answer: B
Question 256 · 263 in bank
Over the years, many solutions have been developed to limit control plane state, which reduces the scope or the speed of control plane information propagation. Which solution removes more specific information about a particular destination as topological distance is covered in the network?
Show answer
Answer: B
Question 257 · 263 in bank
An enterprise has no direct control over a public cloud architecture. What is the limitation of the cloud integration approach of creating a unified elastic resource pool of data center and cloud functions?
Show answer
Answer: C
Question 258 · 263 in bank
With virtualization being applied in many parts of the network, every physical link is likely to carry one or more virtual links, but what is a drawback in cases like this?
Show answer
Answer: B
Question 259 · 263 in bank
An organization that has an on-prem data center recently underwent expansion where 5000 employees were on-boarded. The organization now needs to upgrade its network security with an ability to perform DPI and filter content based on L4 to L7 data. The network team has decided to adapt a cloud-based security service as a quick solution. Which solution fulfills the customer requirement?
Show answer
Answer: D
Question 260 · 263 in bank
In a distributed cloud-native environment, calls to services and cloud resources can fail caused by unanticipated events that will require longer periods of time to resolve. These faults can range in severity from a partial loss of connectivity to the complete failure of a service. In these situations, it's pointless for an application to continually retry an operation that is unlikely to succeed. Which pattern can prevent an application from repeatedly trying to execute an operation that's likely to fail?
Show answer
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
400-007 practice, question 251. 263 questions available.
About this question bank
Version 1.0.0. How we source questions