QUESTION 1
IT and security managers should assess their operations and systems from the perspective of potential hackers. It includes the use of analytical activities and processes like behavior monitoring, social media monitoring, and security best practices. Which process should be deployed to prevent sensitive information from getting into the wrong hands?
A. productive benchmarking
B. network management
C. centralized monitoring
D. operational security
Correct Answer: D
QUESTION 2
Enterprises that are embarking on their cloud migration journey must be able to have control over their workload mobility without platform interdependencies. What is an ecosystem consideration for workload placement that helps the enterprise remain agile and independent post cloud migration?
A. cloud service provider offerings without lock-in
B. overall TCO reduction
C. business continuity and disaster recovery
D. proper integration with back-end systems
Correct Answer: A
QUESTION 3
During initial preparations to deploy 802.1x for wired access to their network, a company must ensure that the solution complies with existing internal security policies. These policies mandate that every Auth-C/Auth-Z request must be protected by a tunnel which authenticates both server and clients using their PKI. At the same time, the user authentication phase must be independent of the tunnel. Which scheme meets the requirements?
A. EAP-MSCHAPV2
B. EAP-FAST
C. EAP-MD5
D. PEAP
Correct Answer: D
QUESTION 4
Which SDN controller element supports troubleshooting the entire fabric from any switch and review logs on a particular flow between two endpoints?
A. operational flexibility
B. network slicing
C. deep visibility
D. enhanced resilience
Correct Answer: C
QUESTION 5
What is the best approach to ensure both scalability and high availability for a cloud-based storage solution over the IP network?
A. Using a RAID (Redundant Array of Independent Disks) setup to provide data redundancy and improve performance.
B. Deploying a Content Delivery Network (CDN) to cache and serve frequently accessed storage content.
C. Utilizing a Storage Area Network (SAN) with redundant controllers and paths for storage access.
D. Implementing Network Attached Storage (NAS) devices in a clustered configuration for load balancing
Correct Answer: D
QUESTION 6
An international corporation is considering incorporating environmentally friendly and sustainable practices into its operations, and you must create a network to support this goal. Reducing the negative effects of its infrastructure on the environment is a top priority for the corporation. Which two actions should be considered to build a greener, more sustainable network? (Choose two.)
A. Introduce an eco-friendly system for managing networks that captures and reports on power usage.
B. Select network components that are eco-friendly and meet standards like WEEE (Waste Electrical and Electronic Equipment) and RoHS (Restriction of Hazardous Substances).
C. Make better use of legacy network hardware to decrease waste and increase the lifespan of older devices.
D. Encourage users to reduce network bandwidth usage to cut down on power consumption.
E. Avoid software-defined networking (SDN) due to the complexity of managing energy consumption in virtual environments.
Correct Answer: AB
QUESTION 7
A financial institution has adopted a hybrid cloud strategy to store sensitive customer data on-premises while utilizing pubic cloud services for non sensitive applications. They want a secure and seamless integration between their on-premises data center and the public cloud. Which cloud connectivity option can they choose given these requirements?
A. custom WAN integration
B. remote access VPN
C. cloud on-ramp
D. direct connect
Correct Answer: D
QUESTION 8
A network architect is working on the baseline policies dealing with the use of Infrastructure-as-Code within an IT department, and has been requested to present the plan at the monthly management board meeting. What are two examples of operational aspects of Infrastructure-as-Code that can be highlighted during the presentation? (Choose two.)
A. API for programmatic control
B. automated workflows
C. automatic trouble ticketing
D. telemetry and monitoring
E. source code management repository
Correct Answer: AB
QUESTION 9
An organization that has an on-prem data center recently underwent expansion where 5000 employees were on-boarded. The organization now needs to upgrade its network security with an ability to perform DPI and filter content based on L4 to L7 data. The network team has decided to adapt a cloud-based security service as a quick solution. Which solution fulfills the customer requirement?
A. Use Secure Proxy by subscribing to SaaS.
B. Use Secure Web Gateway by subscribing to a PaaS.
C. Use IPS provided by a PaaS CSP
D. Use FW provided by an IaaS CSP.
Correct Answer: A
QUESTION 10
business continuity planning spans multiple operational processes and departments. It is a master plan for mitigating the disruptions and regaining control. What is the plan for managing IT disruptions and returning to full operations after unplanned interruption?
A. recovery time objective
B. baseline recovery point
C. restore procedures
D. disaster recovery
Correct Answer: D
QUESTION 11
An organization that upgraded their system 10 years apo is now facing issues with their applications in the core network. Support teams have shared their findings in which some of the hardware and links needs to be upgraded to support newly provisioned bandwidth hungry applications. The design team has started working on the new design and has also requested to provision some of the application and network services in the cloud to immediately overcome current issues. Which service type its this use case?
A. Daas
B. Iaas
C. NaaS
D. Saas
E. PaaS
Correct Answer: C
QUESTION 12
A mega store plans to expand its business into the online world, and wants to operate using the highest possible security standards to prove to their customers that they take handing of their payment information seriously. Only TLS v1.3 will be allowed on their websites. Which type of SSL certificate will emphasize their commitment to enforcing high security standards and minimize risk of spoofing?
A. EV SSL certificate
B. OV SSL certificate
C. DV SSL certificate
D. PV SSL certificate
Correct Answer: A
QUESTION 13
Which form of scalability is often suitable for organizations that anticipate steady growth and need to enhance the performance of specific network devices?
A. vertical scalability
B. structured scalability
C. unstructured scalability
D. horizontal scalability
Correct Answer: A
QUESTION 14
In SDN, network administrators can automate many tasks, such as configuring network policies, traffic flows, and security settings. This automation can significantly reduce the time and effort required to manage and maintain networks. Which focus area of task automation can the work engineers use to greatly reduce manual effort for everyday network changes?
A. training and enablement
B. on demand
C. end-to-end outcome
D. individual activities
Correct Answer: C
QUESTION 15
Network design is the practice of planning and designing a communications network, but the used methodology or framework also plays a big part. What are two benefits of using an agile execution methodology? (Choose two.)
A. Dedicated resources can work in parallel for their specific tasks
B. Customer-focused, resulting in increased customer satisfaction.
C. Flexibility in accepting and honoring on-going changes as the project progresses.
D. Straightforward planning and designing due to the agreement on deliverables at the start of the project
E. Results in better network designs using a holistic approach
Correct Answer: BC
QUESTION 16
Which design consideration for Al auto-scaling is necessary?
A. feedback filters
B. traffic management
C. scaling granularity
D. qualified alerts
Correct Answer: C
QUESTION 17
Which two outcomes of the most efficient SDN-based routing enable greater resilience? (Choose two.)
A. flexible routes
B. increase productivity
C. Agile access control
D. targeted monitoring
E. decrease downtime
Correct Answer: AE
QUESTION 18
Network compliance can be a challenging aspect of network operations due to the complexity of compliance rules and the difficulty of assessing whether they are met within large, sophisticated networks. Which action can help to make network compliance easier and more efficient?
A. Establish tolerable risk levels
B. Periodic monitor compliances.
C. Segregate compliance across network.
D. Distribute compliance requirements.
Correct Answer: B
QUESTION 19
By monitoring the effects of the design variations, you can characterize the relative resilience of the design. Which method involves disturbing the network by removing an active interface and monitoring how the change is handled by the network?
A. randomized configuration
B. failover testing
C. nondeterministic analysis
D. passive monitoring
Correct Answer: B
QUESTION 20
Setting a specific goal for throughput based on per-second data rates between end hosts does not identify the requirements for specific applications. When specifying throughput goals for applications, it is important to understand the throughput requirements for each application. Which two factors that can constrain application layer throughput? (Choose two.)
A. workstation and server availability
B. protocol parameters, such as frame size and retransmission timers
C. the pps or cps rate of networking devices
D. end-to-end throughput rates
E. sent packets or cells at networking devices
Correct Answer: BC