To satisfy PCI-DSS requirements in a hybrid cloud, which architectural control is most directly needed for cardholder data?

Encryption at rest and in transit

A company with a global MPLS WAN is adopting Google Cloud. The network team wants to ensure that traffic to Google Cloud is optimized and does not traverse the public internet. They are considering Cisco Cloud OnRamp for MPLS. Which benefit does Cloud OnRamp provide in this scenario?

It automatically selects the best path for traffic to Google Cloud based on performance and policy.

It requires a dedicated Google Cloud Interconnect connection to function.

It is a Google Cloud service that connects on-premises networks to Google Cloud.

It replaces the MPLS WAN with a direct internet connection to Google Cloud.

Which security component is essential for managing identities and access in a hybrid cloud environment?

Identity and access management (IAM)

Which characteristic is most typical of Infrastructure as a Service (IaaS)?

Provider manages the application code

Customer has no control over the underlying infrastructure

Provider manages the operating system

Customer manages the virtual machines and operating systems

CiscoCertified Design Expert (CCDE)

Domain 4Objective 2

4.2 Cloud/hybrid Solutions Based on Business-Critical Operations 400-007 Practice Questions (Page 8)

Part of the 4.0 Service Design domain, which accounts for 15% of the 400-007 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 4–6 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

17concepts

15%of the exam

17 Concepts in This Objective

Regulatory compliance frameworks
Compliance mapping to service architecture
Data sovereignty and residency
Data ownership and control
Data locale and jurisdictional issues
Service placement strategies
IaaS design considerations
PaaS design considerations
SaaS integration and management
Direct connect options
Cloud OnRamp and MPLS integration
WAN integration for cloud
Cloud security architecture
Security compliance in cloud
AI/ML workload placement
AI/ML infrastructure requirements
AI/ML governance and compliance

Questions 36–40

36foundation · easy
To satisfy PCI-DSS requirements in a hybrid cloud, which architectural control is most directly needed for cardholder data?
Select an answer first
37application · medium
A company with a global MPLS WAN is adopting Google Cloud. The network team wants to ensure that traffic to Google Cloud is optimized and does not traverse the public internet. They are considering Cisco Cloud OnRamp for MPLS. Which benefit does Cloud OnRamp provide in this scenario?
Select an answer first
38foundation · easy
Which regulatory framework is specifically designed to protect cardholder data and applies to any organization that stores, processes, or transmits credit card information?
Select an answer first
39foundation · easy
Which security component is essential for managing identities and access in a hybrid cloud environment?
Select an answer first
40foundation · easy
Which characteristic is most typical of Infrastructure as a Service (IaaS)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 400-007

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “400-007” is a trademark of its owner, used for identification only.