A government agency is migrating a citizen-facing application to a hybrid cloud. The application processes personal data and must comply with GDPR. The agency uses Azure and plans to store data in Azure Blob Storage. Which architectural control is necessary to meet GDPR's data minimization principle?

Enable Azure Defender for Storage to monitor for unauthorized access.

Configure Azure Blob Storage lifecycle management to automatically delete data after a specified retention period.

Use Azure Private Endpoints to restrict access to the storage account.

Implement Azure Policy to enforce tagging of all storage accounts with data classification.

To meet PCI-DSS compliance in a cloud deployment, which control is commonly required?

Network segmentation to isolate cardholder data

Allowing all traffic without restrictions

Using a single shared account for all administrators

Which design approach is commonly used to integrate cloud connectivity into an existing enterprise WAN?

Extending the WAN to the cloud provider via direct connect or VPN

Disabling all on-premises network security

Using only public internet for all cloud traffic

Replacing all on-premises routers with cloud-based routers

CiscoCertified Design Expert (CCDE)

Domain 4Objective 2

4.2 Cloud/hybrid Solutions Based on Business-Critical Operations 400-007 Practice Questions (Page 5)

Part of the 4.0 Service Design domain, which accounts for 15% of the 400-007 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

17concepts

15%of the exam

17 Concepts in This Objective

Regulatory compliance frameworks
Compliance mapping to service architecture
Data sovereignty and residency
Data ownership and control
Data locale and jurisdictional issues
Service placement strategies
IaaS design considerations
PaaS design considerations
SaaS integration and management
Direct connect options
Cloud OnRamp and MPLS integration
WAN integration for cloud
Cloud security architecture
Security compliance in cloud
AI/ML workload placement
AI/ML infrastructure requirements
AI/ML governance and compliance

Questions 21–25

21foundation · easy
Which placement strategy is most appropriate for a workload that requires extremely low latency to on-premises users and must keep data on-premises for compliance?
Select an answer first
22expert · hard
A government agency is migrating a citizen-facing application to a hybrid cloud. The application processes personal data and must comply with GDPR. The agency uses Azure and plans to store data in Azure Blob Storage. Which architectural control is necessary to meet GDPR's data minimization principle?
Select an answer first
23foundation · easy
To meet PCI-DSS compliance in a cloud deployment, which control is commonly required?
Select an answer first
24foundation · easy
Which design approach is commonly used to integrate cloud connectivity into an existing enterprise WAN?
Select an answer first
25foundation · easy
In a hybrid IaaS design, which component is typically used to securely extend an on-premises network to a cloud VPC?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 400-007

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “400-007” is a trademark of its owner, used for identification only.

4.2 Cloud/hybrid Solutions Based on Business-Critical Operations 400-007 Practice Questions (Page 5)

Questions 21–25

Which placement strategy is most appropriate for a workload that requires extremely low latency to on-premises users and must keep data on-premises for compliance?

To meet PCI-DSS compliance in a cloud deployment, which control is commonly required?

Which design approach is commonly used to integrate cloud connectivity into an existing enterprise WAN?

In a hybrid IaaS design, which component is typically used to securely extend an on-premises network to a cloud VPC?

Keep studying — 4.0 Service Design