QUESTION 61
When organizations initially start consuming public cloud services, they often use MPNs over the internet to connect their on-premises applications to the public cloud infrastructure. In which two cases are other connectivity methods a better fit? (Choose two.)

A. migration to transit gateway
B. desktop-as-a-service Using VDI
C. latency sensitive multimedia streaming
D. cost sensitive business applications
E. high availability

Correct Answer: CE

QUESTION 62
Piggybank a leading financial instruction, is planning migrate its business-optical operations to a hybrid cloud solution. A recommendation of the most appropriate security measure to protect sensitive financial data during data transmission must be given to the board of directors. Which solution will meet these requirement?

A. Using SSL/TLS encryption for searing data communication over the Internet
B. Deploying a software-defined perimeter to Dynamically control access to cloud resources
C. Utilizing MPLS to establish private and secure connections to the cloud
D. Implementing a traditional VPN tunnel between on-premises data centers and the cloud provider.

Correct Answer: C

QUESTION 63
What is an advantage of using Agile over Waterfall methodology in the network design lifecycle?

A. lower total cost
B. ideal for large projects
C. reduced risk in the design process
D. closed loop operation

Correct Answer: C

QUESTION 64
Virtualization pose a special challenges for NAC because virtual servers can move around a data center, and the VLAN can change as the servers move. What is an option that can be used to improve security in this condition?

A. in-band traffic control
B. traffic encryption
C. role-based control
D. application based security

Correct Answer: C

QUESTION 65
company chooses to go with a public cloud a private or a hybrid of both What are two factors that impact the decision on which cloud service placement model to use? (Choose two.)

A. data ownership
B. cross-zone redundancy
C. organization skills
D. regulation
E. legacy architectures

Correct Answer: AD

QUESTION 66
A network architect is tasked to develop a design where it is a requirement to group resources according to their security and trust level in the network. Which tool can be leveraged to achieve this?

A. IDS-based malware detection
B. application firewalls
C. proxy servers
D. multi-factor authentication

Correct Answer: B

QUESTION 67
A rapidly growing e-commerce business with a global customer base needs a robust network design that can support their business-critical operations and ensure low-latency access for their customers around the globe. The IT team is considering different solutions to meet their requirements. Which network design is suitable for these needs?

A. Adopt a hybrid cloud approach, using a mix of public cloud services and private on-premises servers.
B. Rely on a peer-to-peer network architecture to distribute the workload among customer devices.
C. Implement a fully on-premises network infrastructure with dedicated servers in different geographic locations.
D. Utilize a public cloud provider to provide hosting for web servers and databases.

Correct Answer: A

QUESTION 68
A lead network architect is tasked with designing the optimal cloud-based solution for a rapidly growing e-commerce company that heavily relies on its online platform for sales and customer interactions. The company’s business-critical operations include real-time inventory management, order processing, and payment processing. The executive team has decided to migrate their infrastructure to the cloud to improve scalability and reduce operational costs. Which cloud service model(s) needs to considered?

A. IaaS and PaaS
B. Saas and PaaS
C. SaaS
D. IaaS

Correct Answer: A

QUESTION 69
Which technique used by network operators achieves IP convergence that is designed to optimize network performance through multilayer operations, dynamic scalability, and improved overall network sustainability?

A. converged architecture
B. coherent routing
C. dynamic performance
D. programmable traffic flow

Correct Answer: B

QUESTION 70
Which design approach helps network designers to view network design solutions from a business-driven approach?

A. technology centric
B. application driven
C. functional behavioral
D. top-down

Correct Answer: D

QUESTION 71
Which two actions must be taken when assessing an existing wireless network implementation for its readiness to support voice traffic? (Choose two.)

A. Validate antenna settings on APs.
B. Verify that RX levels are not above -68 dBm.
C. Check for high channel utilization.
D. Analyze typical roaming delays.
E. Identify frequent TX power changes.

Correct Answer: CD

QUESTION 72
A network consists of multiple planes where each plane represents a different area of network operations and carries different types of network traffic. Which two statements describe the concepts of assurance in the context of control planes? (Choose two.)

A. It primarily deals with configuring system access and network traffic flow policies.
B. It is responsible for collecting, analyzing, and enforcing policies based on observed data.
C. It executes predefined policies and forwards network traffic.
D. It focuses on gathering and analyzing metrics, logs, and traces to infer the health of systems.
E. It is the ability to ensure system compliance and reliability under specified conditions.

Correct Answer: AE

QUESTION 73
A large enterprise customer is planning a new WAN connection to its headquarters. The current architecture is dual homed with static routing, but users complain when a specific link fails. Failure of the other link does not affect any services or applications. The new WAN connection must provide the headquarters with a resilient network design and increase the return on investment. Which solution should be recommended to the customer?

A. Procure additional bandwidth.
B. Add an additional link to the WAN
C. Use dynamic routing toward the WAN
D. Implement granular quality of service on the links.

Correct Answer: C

QUESTION 74
The advantages of a hybrid SDN/OSPF control plane are broadly recognized in the networking community, as it promises the best of two worlds: programmability and agility of SDN and the reliability and fault tolerance of OSPF, but there are tradeoffs. Which two challenges of a hybrid SDN control plane exist in an operational network? (Choose two.)

A. model optimization for network management
B. total cost of ownership for migration to SDN
C. distributed routing protocol for packet forwarding
D. increased forwarding information base size
E. forwarding anomalies due to uncorrelated control planes

Correct Answer: DE

QUESTION 75
In a distributed cloud-native environment, calls to services and cloud resources can fail caused by unanticipated events that will require longer periods of time to resolve. These faults can range in severity from a partial loss of connectivity to the complete failure of a service. In these situations, it’s pointless for an application to continually retry an operation that is unlikely to succeed. Which pattern can prevent an application from repeatedly trying to execute an operation that’s likely to fail?

A. circuit breaker
B. fallback
C. bulkhead
D. timeout

Correct Answer: A

QUESTION 76
An organization is looking to perform a major overhaul on their data center storage infrastructure with a focus on high availability and fault tolerance. Which approach will accomplish this?

A. Deploying a storage virtualization solution to aggregate multiple storage devices.
B. Implementing a single storage array with RAID 0 configuration for maximum storage capacity.
C. Using a clustered storage setup with active-active controllers for load balancing.
D. Utilizing a distributed storage system with multiple geographically dispersed nodes.

Correct Answer: C

QUESTION 77
Comparing traditional networks with SDN, where the network is only application aware, what is the advantage of SDN architecture?

A. has faster network convergence time during catastrophic failures
B. is resilient to scale with fixed number of network devices
C. integrates real-time information about networking activity with the applications
D. simplifies device management by managing each device independently

Correct Answer: C

QUESTION 78
A network architect is working on a large project involving migration to a software-defined networking platform, and is currently working on writing an executive summary for final approval by the management board. When writing the executive summary. What is a limitation of or challenges with software-defined networks that must be listed?

A. Difficulties in making significant improvements to service request response times.
B. Virtualization inherently adds overhead and network latency.
C. Often comes with a high CAPEX due to use of automation tools.
D. Provides better flexibility but decreases the speed of service delivery.

Correct Answer: B

QUESTION 79
A bank has two data centers (Primary and DR), and compliance policies mandate that services or servers can be moved seamlessly between the two data centers. Additionally, the technology cannot be locked to a specific vendor and must offer good scalability with broad support of layer 2 protocols. Which protocol meets these requirements?

A. EVPN
B. H-VPLS
C. VXLAN
D. VPLS
E. Q-in-Q

Correct Answer: C

QUESTION 80
A bank recently had their security compromised during an initial key exchange between devices using a symmetric cryptography algorithm, and as a result the key was revealed leaked. Going forward, they want to ensure that key exchanges are performed using asymmetric cryptography algorithms. Which algorithm offers the desired functionality?

A. RSA
B. AES
C. RC4
D. Diffie-Hellman

Correct Answer: D