A global company is designing a network that must comply with both the EU's General Data Protection Regulation (GDPR) and the US Health Insurance Portability and Accountability Act (HIPAA). The company has offices in the EU and the US, and it stores personal data and health data in both regions. The design must ensure that data is protected according to the strictest requirements of both regulations. Which design consideration is most critical for meeting both compliance requirements?

Segmenting the network so that EU data is stored only in the EU and US data is stored only in the US.

Ensuring that all data is stored in a single region to simplify compliance.

Implementing a single, unified security policy that meets the strictest requirements of both GDPR and HIPAA.

Using a single encryption standard for all data, regardless of the region.

Which network device is commonly used as a policy enforcement point for applying security policies based on user identity and application?

Next-generation firewall (NGFW)

A large enterprise is deploying a new microservices-based application across multiple availability zones. The security team wants to detect and investigate anomalous east-west traffic between microservices. They also need to verify that the segmentation rules they have defined are actually being enforced. Which combination of visibility and assurance tools should the designer recommend?

Implement a central firewall and route all inter-microservice traffic through it, using its logs for visibility and assurance.

Deploy a network tap on the core switch and use a legacy SIEM to analyze the aggregated traffic logs.

Deploy a distributed network security monitoring solution that can capture and analyze traffic between microservices, and use a separate tool to periodically test the segmentation rules by sending probe traffic.

Enable flow logging on the virtual switches and use a network performance monitor to baseline traffic patterns.

CiscoCertified Design Expert (CCDE)

Domain 5Objective 1

5.1 Network Security Design and Integration 400-007 Practice Questions (Page 2)

Part of the 5.0 Security Design domain, which accounts for 15% of the 400-007 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 8–12 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

8concepts

15%of the exam

Questions 6–10

6expert · hard
A global company is designing a network that must comply with both the EU's General Data Protection Regulation (GDPR) and the US Health Insurance Portability and Accountability Act (HIPAA). The company has offices in the EU and the US, and it stores personal data and health data in both regions. The design must ensure that data is protected according to the strictest requirements of both regulations. Which design consideration is most critical for meeting both compliance requirements?
Select an answer first
7foundation · easy
Which network device is commonly used as a policy enforcement point for applying security policies based on user identity and application?
Select an answer first
8application · medium
A large enterprise is deploying a new microservices-based application across multiple availability zones. The security team wants to detect and investigate anomalous east-west traffic between microservices. They also need to verify that the segmentation rules they have defined are actually being enforced. Which combination of visibility and assurance tools should the designer recommend?
Select an answer first
9foundation · easy
In the CIA triad, which principle is primarily concerned with ensuring that data has not been altered or tampered with?
Select an answer first
10foundation · easy
A network design includes redundant links, failover capabilities, and backup power supplies. Which CIA principle is this design primarily addressing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 400-007

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “400-007” is a trademark of its owner, used for identification only.

5.1 Network Security Design and Integration 400-007 Practice Questions (Page 2)

Questions 6–10

Which network device is commonly used as a policy enforcement point for applying security policies based on user identity and application?

In the CIA triad, which principle is primarily concerned with ensuring that data has not been altered or tampered with?

A network design includes redundant links, failover capabilities, and backup power supplies. Which CIA principle is this design primarily addressing?

Keep studying — 5.0 Security Design