Jump to content

[Offer]- CCDE dump that needs fixes


keje

Recommended Posts

PL QUESTION 218: Which technology supports antispoofing and does not have any impact on encryption performance regardless of packet size?

A. MACsec

B. IP source guard

C. DHCP snooping with DAI

D. IPsec

PL Answer: A

Actually B. Most people agree:

This is the hidden content, please

Edited by ExLearner
  • Like 38
  • Thanks 4
  • Haha 1
Link to comment
Share on other sites

This is really tricky:  I changed my views on the matter so I'm editing it.

PL QUESTION 221: Which two features are advantages of SD-WAN compared to MPLS-based connectivity? (Choose two.)

A. uses FEC constructs for traffic forwarding, thereby improving efficiency
B. separates infrastructure and policy
C. uses policy-based forwarding of real-time traffic with less complexity
D. unifies the WAN backbone
E. manages failures through backup links

C & D are correct. I think in B, means it's actually marry/bring close the policy with infrastructure than MPLS. 

Steers real-time traffic based on centralised policy and unifies the WAN backbone are correct. Ref: 

This is the hidden content, please

Edited by ExLearner
Changed my views on the matter
  • Like 29
  • Thanks 5
  • Haha 2
Link to comment
Share on other sites

PL QUESTION 247 A product manufacturing organization is integrating cloud services into their IT solution. The IT team is working on the preparation phase of the implementation approach, which includes the Define Strategy step. This step defines the scope of IT, the application, and the service. What is one topic that should be considered in the Define Strategy step?

A. due diligence and financial scenarios

B. innovate and align with business according to volume

C. contingency exit strategy steps

D. financial and governance models

PL Answer: C

Seems to be D according to this ref document: 

This is the hidden content, please
 

 

  • Like 26
  • Thanks 7
  • Haha 2
Link to comment
Share on other sites

PL QUESTION 267 - An enterprise wants to provide low-cost delivery of network systems that can be scaled on business demand, followed by an initiative to reduce capital expenses for new IT equipment. Which technology meets these goals?

A. IaaS within an on-premises location

B. SaaS within an on-premises location

C. IaaS within a private cloud

D. PaaS within a public cloud

PL Answer: D 

but I think IaaS within a private cloud is the answer. They need to deliver network systems. Not sure exactly what it means but it doesn't sound like something you can put on a platform but an infrastructure... 

Link to comment
Share on other sites

We have this in 3 questions. Cisco Zero Trust model for Workforce, Workload, Workplace:

------------------------------------------
Cisco Zero Trust for Workforce

1-Verify identity of users
    1a-Multi-factor authentication (MFA)

2-Ensure trustworthiness of devices
    2a-Endpoint posture & context visibility

3-Enforce risk-based and adaptive access policies
    3a-Per application access policies that vary based on risk tolerance levels
    
------------------------------------------
Cisco Zero Trust for Workload

1-Visibility and behavior modeling
    1a-Application discovery and dependency maps
    1b-All Processes, cmds, files, users and network comms

2-Per workload, micro-segmentation policy
    2a-Automated, context-based,segmentation policy
    2b-Consistent policy: Any workload, Anywhere

3-Real-time security health of workloads
    3a-Security visibility and health score
    3b-Vulnerability, anomaly, forensic and threat data
------------------------------------------
Cisco Zero Trust for the Workplace:

1-Discover and classify devices
    1a-IoT device profiling
    1b-BYOD lifecycle management
    1c-User device Posture

2-Context-based network access control policy for users and things
    2a-Dynamic precise policies
    2b-Group-based (SGT)

3-Continuous security health monitoring of devices
    3a-Continuous Posture
    3b-Vulnerability assessments
    3c-Indications of compromise
 

Ref: 

This is the hidden content, please

  • Like 33
  • Thanks 6
Link to comment
Share on other sites

This one is wrong both in CD247 (Q14) and PL292 (Q248).

A banking customer determines that it is operating POS and POI terminals that are noncompliant with PCI DSS requirements as it is running TLSv1.0 The customer plans to migrate the terminals to TISv1.2 What are two requirements to complete the migration? (Choose two )

A. Ensure that strong cryptography is applied for users who have administrative access through networks

B. Apply strong cryptography & security protocols to safeguard sensitive cardholder data

C. Apply strong encryption for transmission of cardholder data across public networks

D. Protect all user systems against Malware and frequently updating antivirus software

E. Maintain a policy that addresses information security for employees and third parties

The answer should be A & C.

It asks what are the two PCI DSS requirements which are the reasons of this TLSv1.2 upgrade. TLS is about transporting data securely. Only A & C is related to transporting the encrypted data. Answer is also clearly stated in this article "What this means for PCI DSS" section: 

This is the hidden content, please
 

  • Like 26
  • Thanks 5
  • Haha 2
Link to comment
Share on other sites

@ Exleraner

From Cisco

MPLS versus SD-WAN

SD-WAN represents evolution of MPLS technology which has successfully powered private connectivity for more than two decades. In many ways, SD-WAN can be seen as a software abstraction of MPLS technology that is applicable to wider scenarios i.e. it brings secure, private connectivity agnostic to all kinds of links and providers and is cloud aware. Whereas MPLS handled failure scenarios with backup links, SD-WAN handles them with real-time traffic steering based on centralized policy. Also, given that SD-WAN unifies the entire WAN backbone, it delivers comprehensive analytics across the full enterprise back bone, globally. This wasn’t possible before due to disparate pieces of infrastructure and policy.

 

From <

This is the hidden content, please
>

  • Like 24
  • Thanks 3
  • Haha 1
Link to comment
Share on other sites

1 hour ago, ublyft said:

PL QUESTION 218: Which technology supports antispoofing and does not have any impact on encryption performance regardless of packet size?

A. MACsec

I don't agree. MACSec performance is inversely correlated to packet size.

Ref: 

This is the hidden content, please

  • Like 25
  • Thanks 4
Link to comment
Share on other sites

1 hour ago, ublyft said:

B. Apply strong cryptography & security protocols to safeguard sensitive cardholder data

C. Apply strong encryption for transmission of cardholder data across public networks

I don't agree with this either. B is secure data at REST. POS/POI terminals' TLS encryption of traffic is nothing to do with data at rest .

Secure admin access to POI/POS terminals (with TLS) does.

  • Like 3
Link to comment
Share on other sites

On 6/25/2023 at 11:43 AM, mangutfloren said:

Hello!

Passed CCDE 400-007 exam on 06/23/2023!

No new questions.

The premium PassLeader 400-007 dumps with 292 Q&As are still valid.

Here the premium PassLeader 400-007 dumps with 292 Q&As PDF file for free:

This is the hidden content, please

Good luck!

Thanks!

  • Like 7
  • Thanks 2
Link to comment
Share on other sites

Hi All,

Passed the exam. CD247 is still valid. There are very few questions which are in PL. Both given in previous pages by multiple people.

Just check the answers yourselves. Quick search the question in google shows you discussions on examtopic.com. They are useful. 

Good luck.

 

  • Like 1
  • Thanks 1
Link to comment
Share on other sites

2 hours ago, ExLearner said:

Hi All,

Passed the exam. CD247 is still valid. There are very few questions which are in PL. Both given in previous pages by multiple people.

Just check the answers yourselves. Quick search the question in google shows you discussions on examtopic.com. They are useful. 

Good luck.

 

That's great news, congratulations ExLearner.  Can you confirm exactly which of the questions you answered differently to those in CD247, please? Did you have a higher score than the others (seems to be around 810)?

Link to comment
Share on other sites

On 3/15/2023 at 4:51 AM, vercipane said:

Hello!

Passed the CCDE 400-007 exam on 13/Mar/2023.

Scored 8XX by learning the PassLeader 400-007 dumps (292q), some wrong answers have been corrected from this thread.

Here PassLeader 400-007 dumps (292q) PDF file FYI:

 

Hidden Content

  • Give reaction or reply to this topic to see the hidden content.

 

Thanks for sharing and good luck!

Please provide me the PL Dump For CCDE 

 

  • Like 10
  • Thanks 1
Link to comment
Share on other sites

Fellows, 

Passed the exam in the last 10 days. 

All the questions from PL or CD dumps, except one. the new question was about RTO/RPO. I dont remember the details unfortunately. 

Thanks to everyone's contribution to this thread. We are all based in different parts of the world, but come together to contribute to, and benefit from each other - on these pages.

Good luck with your endeavours!

Link to comment
Share on other sites

On 6/24/2023 at 4:22 PM, ExLearner said:

Funny moments: PassLeader question 25 and 231. Same question, different answers 😉 Come on PL.
 

Hello Gents, I require the CCDE Materials for the lab please.

  • Like 2
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...