QUESTION 41
Cost is often one of the motivators for a business to migrate from a traditional network to a software.-defined network. Which design decision is directly influenced by CAPEX drivers?

A. complexity
B. manageability
C. stability
D. scalability

Correct Answer: D

QUESTION 42
An enterprise service provider is planning to migrate the customer network to MPLS to connect cloud applications. The customer network team and service provider team are analyzing all process flows before live migration and implementation. Before planning the migration, what is crucial task that must be executed?

A. real-time process monitoring and maintenance
B. application packaging and deployment
C. impact forecasts and risk analysis
D. impact analysis and application refactoring

Correct Answer: C

QUESTION 43
The network team in an organization has identified bottlenecks between different network devices including switches and firewalls, because some devices have higher forwarding capacity than others. In which part of the CIA triad do the identified bottlenecks fall?

A. compliance
B. integrity
C. security
D. confidentiality
E. availability

Correct Answer: E

QUESTION 44
In order to achieve key business objectives, the design team of a hosting provider has identified a series of objectives in their cloud computing environments.
1. Customer data privacy and protection against external vulnerabilities must be improved
2. Access to sensitive data must be monitored and relevant regulations must be adhered to
3. Use data analyzing to optimize operations and business decision-making

Which step must be take to meet these requirements?

A. Expand the ability to capture and store data with manual and well-defined methods of governing data.
B. Reducing rework and empowering data engineers to apply data governance policies more consistently throughout the IT infrastructure.
C. Apply data governance policies that depend on role-based access controls.
D. Enhance auditing and reporting capabilities of the design team to reveal authentication and authorization of data access.

Correct Answer: B

QUESTION 45
A financial institution is planning to expand its operations to serve customers in remote areas with limited connectivity. The institution’s IT team wants to ensure that their network design supports real-time financial transactions and data synchronization across multiple branches. Which network solution can be considered?

A. Adopt a cloud-based network solution with data centers strategically located for low-latency access.
B. Use satellite communication to establish connectivity between remote branches and the main data center.
C. Utilize a software-defined wide-area network (SD-WAN) to efficiently manage network traffic across different offices.
D. Implement a traditional client-server network model for data synchronization.

Correct Answer: C

QUESTION 46
What is the primary benefit for an organization that dynamically can expand their private cloud capacity by allocating additional compute and/or storage resources using a third-party service provider or partner?

A. traffic encapsulation
B. policy enforcement
C. business agility
D. traffic engineering

Correct Answer: C

QUESTION 47
Following a series of security incidents, where hackers have been able to successfully gain access to the network with varying levels of access, the CTO of a large corporation has launched an initiative to ensure that there is end.-to-end visibility inside the corporate network Which two technologies are relevant to include in the analysis that is started as part of the initiative? (Choose two.)

A. NETCONF
B. Openflow
C. Floodlight
D. RSPAN
E. IPFIX

Correct Answer: DE

QUESTION 48
What are two parameters that can be leveraged by SAML in mixed private/public cloud environments by using identity and asset management? (Choose two.)

A. link federations
B. policy-based tokens
C. unified directories
D. multifactor hard tokens
E. identity federations

Correct Answer: CE

QUESTION 49
A large defense organization is planning their cloud migration journey, but they have high data sovereignty concerns, major regulation or compliance requirements, and very restrictive SLAs. Which cloud architecture model can be adopted?

A. hybrid cloud
B. IaaS
C. private cloud
D. PaaS
E. public cloud

Correct Answer: C

QUESTION 50
While positive feedback loops generally don’t last long enough to bring down a network completely, they can still last long enough to disrupt traffic flows or to cause the network to converge more slowly than it should. What are two examples of cases where a positive feedback loop can be long-lived and devastating to the network’s control plane? (Choose two.)

A. During redistribution of reachability information between multiple control planes.
B. The rate at which the information carried in the various control plane protocols changes.
C. When input traffic volumes on an interfaces causes the interface queue to overflow.
D. Modifying the flow of traffic through the network by steering traffic based on QoS attributes

Correct Answer: BC

QUESTION 51
A small food company added online ordering services and started to give discounts on online orders to boost sales during certain days and hours. The online order web application runs in a private data center that is sufficient for periods of regular traffic but reaches peak capacity during a promotion event. What is an efficient way to maintain high-quality customer experiences in situations like this?

A. Build high compute resources.
B. Leverage cloud bursting.
C. Leverage applications porting.
D. Reduce remote access.

Correct Answer: B

QUESTION 52
An e-commerce startup is planning to deploy its web application on a hybrid cloud environment to handle business-critical operations Which networking approach can be recommended to ensure scalability and high performance during peak traffic periods?

A. Implementing a load balancer across multiple cloud instances for traffic distribution
B. Utilizing Network Function Virtualization (NFV) for flexible network scaling
C. Employing a content delivery network (CDN) to cache and serve static content globally.
D. Using dedicated leased line to connect on-premises servers with cloud infrastructure.

Correct Answer: A

QUESTION 53
An enterprise customer is working on a plan for PoC for implementing 802.1x for wired users in one of their branches. The goal is to use native EAP between access switches and the RADIUS server while supporting two-way authentication and being an open IETF standard. Which authentication method meets all goals?

A. PEAP
B. EAP-FAST
C. MSCHAPv2
D. EAP-TLS

Correct Answer: A

QUESTION 54
Even with two different device platforms that support NETCONF or any other common transport method, it does not mean they are compatible from a tooling and/or a developer’s perspective. What is required to get the compatibility?

A. Both devices must support the same NETCONF features
B. Both devices must use a common data modeling language.
C. Both devices should have vendor-specific interoperability.
D. Both devices must use the same versions of NETCONF.

Correct Answer: B

QUESTION 55
A global e-commerce company is expanding is operations and planning to migrate its entire infrastructure to a hybrid cloud solution. They are connected about data governance and want to ensure that their customers data is treated with utmost respect to sovereignty and privacy What is an appropriate approach?

A. Encrypt all customer data and store it in a public cloud environment to benefit from advanced security measures.
B. Utilize a cloud provider that offers region-specific data centers to store customer data within the same geographic region.
C. Replicate customer data across all data centers globally to ensure data redundancy and compliance with local data regulations.
D. Implement strict access controls for customer data and store it in a single central data center to maintain data sovereignty.

Correct Answer: B

QUESTION 56
Direct cloud connectivity provides secure, high-performance, and end-to-end connectivity needed to run critical applications that have requirements that cannot be met when using the Internet What is the primary benefit gained from direct cloud connectivity?

A. End-to-end visibility and management of the entire enterprise network
B. Consistent and guaranteed SLA-backend performance to the closest peering point.
C. Avoids network contention and unpredictable routing changes
D. End-to end connectivity SLA with deterministic latency and performance.

Correct Answer: D

QUESTION 57
Risk is a major determining factor in whether a company chooses to go with a public cloud, a private, or a hybrid of both. What are two factors that impact the decision on which cloud service placement model to use? (Choose two.)

A. data ownership
B. cross-zone redundancy
C. organization skills
D. regulation
E. legacy architectures

Correct Answer: AD

QUESTION 58
Which are two major design parameters when designing the architecture of workload service placement in a hybrid cloud model? (Choose two.)

A. heterogeneity of hosting cloud zones
B. elasticity of hosting cloud zones
C. deployment model
D. cloud environment type
E. placement mode

Correct Answer: CD

QUESTION 59
A company has recently implemented an SDWAN solution for its branches. The DC as well as the company head quarters are located in San Francisco ， CA The company has a global presence:
1. 3500 branches located in mainland US
2. 2500 branches located in Europe.
3. 1200 branches located in the Middle East and Asia Pacific.
4. All sites are connected using WAN edge devices.

All branches has direct internet access to connect them to the Internet and Saas applications. The proposed solution must provide filtering intrusion prevention and secure access to branches and Internet. Which service or architecture meets all the requirements?

A. cloud-based NGFW
B. IaaS
C. SASE
D. CASB

Correct Answer: C

QUESTION 60
What are two reasons for a company to prefer a hybrid approach rather than a mixed approach while transitioning to a software-defined network? (Choose two.)

A. Mixed approach is more palatable to the small-size companies.
B. Mixed approach creates more complexity which makes troubleshooting more difficult.
C. Hybrid approach allows to deploy portions of the network without impacting performance.
D. Hybrid approach allows box-by-box transition to spread out the costs
E. Hybrid approach is more palatable to the large size companies.

Correct Answer: CD