Practice 400-007 Exam Online

Question 1

What are two parameters that can be leveraged by SAML in mixed private/public cloud environments by using identity and asset management? (Choose two.)

A : unified directories

B : policy-based tokens

C : link federations

D : identity federations

E : multifactor hard tokens

Answer: A,D

Question 2

A service provider recently migrated to an SD-WAN solution for delivering WAN connections to its customers. One of the main challenges with the SD-WAN deployment is that branch site volume increases every year, which causes management complexity. Which action resolves the issue?

A : Implement a scalable network management system to manage all sites.

B : Adopt a well-structured SD-WAN service management lifecycle model

C : Build a service orchestration platform on top of the network controller

D : Set up a dedicated team to monitor and provision new customers

Answer: B

Question 3

Refer to the exhibit. Company XYZ must design a DMVPN tunnel between the three sites. Chicago is going to act as the NHS and the company wants DMVPN to detect peer endpoint failures. Which technology should be used in the design?

A : VPLS

B : IP SLA

C : GRE

D : L2TPv3

Answer: B

Question 4

During evaluation of migrating current on premises infrastructure to add cloud-based infrastructure, a network

planning team must meet three core requirements as they make recommendations on which cloud strategy to

adopt going forward

• Technology is changing rapidly, therefore the enterprise must be open to adopting new ways of doing things,

and be ready to invest CapEx-funds in the next three years

• Network bandwidth capacity requirements are dynamic and are expected to change over the next year

• If new technologies are to be introduced, operational expenses must be kept at a minimum. Which cloud

strategy meets these requirements?

A : private

B : hybrid

C : public

D : multicloud

Answer: D

Question 5

What is a correct design consideration of IPv6 MLD snooping?

A : MLD snooping conserves CPU bysharing IPv4 and IPv6 multicast topology.

B : MLD snooping conserves bandwidth on switches.

C : MLD snooping is usedto filter all MLD queries.

D : MLD snooping requires IGMP snooping to be implemented.

Answer: B

Name:	Cisco Certified Design Expert CCDE v3.1
Exam Code:	400-007
Certification:	CCDE
Vendor:	Cisco
Total Questions:	598
Last Updated:	May 11, 2026

Cisco 400-007 Answers