Free Cisco 400-007 Practice Exam with Questions & Answers | Set: 13

EIGRP may be valid for initial deployment, but its scalability limitations — including proprietary nature, limited support over non-broadcast multipoint VPNs, and suboptimal convergence for large WAN overlays — make it most restrictive for future expansion.

BGP is typically the most scalable choice for large-scale VPN WAN deployments.

Why other options are incorrect:

B: IS-IS is not commonly deployed over Internet VPNs.

C: OSPF has better scalability than EIGRP for multi-area design but still limited over VPN overlays.

D: BGP is the preferred protocol for large-scale IPsec VPN WANs.

—

--------------------------------------------------------------------------------------------

—

A (MSDP - Multicast Source Discovery Protocol):MSDP allows different autonomous systems to share multicast source information while maintaining their own PIM Sparse Mode domains. It simplifies interdomain multicast routing without requiring full mesh peering or shared RPs between domains.

Other options explained:

B: SSM does not require MSDP but limits use to source-specific groups.

C: MPLS is a transport technology, not multicast control-plane solution.

D: PIM-SM is used within a domain, not across multiple autonomous systems.

OSPF uses pacing timers to control how quickly it sends LSAs to neighbors to prevent network flooding and CPU spikes:

C. Retransmission-pacing timer: Controls spacing between retransmitted LSAs queued after a lost or unacknowledged transmission.

E. Flood-pacing timer: Controls spacing between consecutive LSAs when flooding new information to peers.

These timers are critical in scaling OSPF in dense or unstable topologies and are key to tuning control plane convergence performance without destabilizing routers.

A (Establish visibility and behavior modeling):After discovering applications, Zero Trust design requires baseline visibility into traffic flows, system behavior, and interaction patterns. This modeling allows for the design of effective microsegmentation and policy enforcement.

Other options explained:

B: Policy enforcement comes after visibility and modeling.

C: Health assessment is a continuous activity but not the next step.

D: Trust assessment is part of the initial Zero Trust design, not specifically after discovery.

C (Significant effort and time): In a Waterfall model, changes introduced after the design phase require rework of multiple design documents, validations, and downstream impacts on implementation and testing. This leads to significant delays and resource consumption compared to more flexible models like Agile.

Other options explained:

A: Creativity is not the primary impact.

B: Rework is true but doesn’t fully capture the scope of additional effort.

D: Waterfall does not provide inherent flexibility to absorb late changes.

—

HIPAA requires integrity controls to prevent unauthorized data modification.

D (Technical integrity and transmission security): Ensures PHI data is protected against unauthorized alteration during storage and transmission.

This directly addresses the issue of data being altered without consent.

Why other options are incorrect:

A: Prevents unauthorized access but does not guarantee data integrity.

B: Administrative processes cover policies, not technical enforcement.

C: Focuses on physical device control, not data integrity.

—