Cisco 352-001 Online Practice Questions and Exam Preparation

Cisco 352-001 Online Questions & Answers

• Question 111:

  Your client is considering acquiring a new IPv6 address block so that all Ethernet interfaces on the network receive addresses based on their burned-in hardware addresses, with support for 600 VLANs. Which action do you recommend?

  A. Acquire a new /60 IPv6 network and subnet it into /70 networks, one per VLAN
  B. Acquire a new /58 IPv6 network and subnet it into /64 networks, one per VLAN
  C. Acquire a new /60 Ipv6 network and subnet it into /68 networks, one per VLAN
  D. Acquire a new/54 IPv6 network and subnet it into /64 networks , one per VLAN
  D. Acquire a new/54 IPv6 network and subnet it into /64 networks , one per VLAN

• Question 112:

  Which feature or technology that affects the operations of IPsec should be taken into account when designing an IPsec network using Authentication header?

  A. TCP MSS adjustment
  B. Certificate-based authentication
  C. Transform set
  D. NAT
  D. NAT

• Question 113:

  A data center deign requires monitoring of their business critical voice and video services accessed by remote locations. Which two items are applicable? (Choose two)

  A. If multiple applications share the same DSCP or CoS values, NBAR can be utilized
  B. The applications being monitored must be assigned a unique CoS value
  C. If multiple applications share the same the same DSCP or CoS values, IPFIX can be utilized
  D. The applications being monitored must be assigned a unique QoS profile
  E. The applications being monitored must be assigned unique DSCP values
  F. The reporting data must be assigned to a QoS profile to ensure accurate statistics
  C. If multiple applications share the same the same DSCP or CoS values, IPFIX can be utilized
  F. The reporting data must be assigned to a QoS profile to ensure accurate statistics

• Question 114:

  Refer to the exhibit.

  

  Each branch network must connect to the HQ and other branch networks over the phase 2 DMVPN network using a single tunnel interface. OSPF is running over the DMVPN network. Which network type is compatible with the DMVPN tunnel and ensures that the next hop of any route is unchanged?

  A. Point-to-point
  B. Point-to-multipoint
  C. Broadcast
  D. Nonbroadcast
  C. Broadcast

• Question 115:

  DRAG DROP

  As a network designer for a major multiservice network, your first assignment is to improve the IS-IS convergence to meet application requirements. Drag and drop the convergence tools or techniques to be used on your proposal from the left into the corresponding convergence phase on the right.

  Select and Place:

  

  

• Question 116:

  You are asked to design a traffic policy to restrict traffic that leaves a customer site. Which technology should you recommend to enforce a bandwidth limit, inbound and outbound, on the service provider side?

  A. traffic policing
  B. WRED
  C. LLQ
  D. traffic shaping
  A. traffic policing

• Question 117:

  Refer to the exhibit.

  

  When designing an MPLS-based LAN extension between DC-1 and DC-2, what are three Advantages of deploying VSS? (Choose three.)

  A. Layers 2, 3, and 4 flow-based load balancing
  B. native VSS and MEC failover without using scripts
  C. sub-second failover
  D. required to configure VPLS
  E. failover time depends on Cisco IOS EEM and STP convergence
  F. limited VLAN-based VPLS traffic hashing
  A. Layers 2, 3, and 4 flow-based load balancing
  B. native VSS and MEC failover without using scripts
  C. sub-second failover

• Question 118:

  Which mechanism enables small, unmanaged switches to plug into ports of access switches without risking switch loops?

  A. PortFast
  B. UDLD
  C. Root guard
  D. BPDU guard
  C. Root guard

• Question 119:

  A company has these requirements for access to their wireless and wired corporate LANs using 802.1x:

  Client devices that are corporate assets and have been joined to the Active Directory domain are allowed access.

  Personal devices must not be allowed access.

  Clients and access servers must be mutually authenticated.

  Which solution meets these requirements?

  A. Protected Extensible Authentication Protocol/Microsoft Challenge Handshake Authentication Protocol Version 2 with user authentication
  B. Extensible Authentication Protocol-Transport Layer Security with machine authentication
  C. Extensible Authentication Protocol-Transport Layer Security with user authentication
  D. Protected Extensible Authentication Protocol/Microsoft Challenge Handshake Authentication Protocol Version 2 with machine authentication
  B. Extensible Authentication Protocol-Transport Layer Security with machine authentication

• Question 120:

  A metro service provider is planning Resilient Ethernet Protocol for his backbone. Which two aspects must be considered before the network design is finalized? (Choose two.)

  A. Two Resilient Ethernet Protocol segments can be connected redundantly at two points. One connection will be blocked, using the Spanning Tree Protocol defined in IEEE 802.1D.
  B. UniDirectional Link Detection Protocol can be enabled on Resilient Ethernet Protocol interfaces to detect unidirectional failures.
  C. The guaranteed convergence recovery time is less than 50 ms for the local segment.
  D. A Resilient Ethernet Protocol segment is limited to a maximum of seven devices.
  E. VLAN load balancing for optimal bandwidth usage is supported in any Resilient Ethernet Protocol segment.
  B. UniDirectional Link Detection Protocol can be enabled on Resilient Ethernet Protocol interfaces to detect unidirectional failures.
  E. VLAN load balancing for optimal bandwidth usage is supported in any Resilient Ethernet Protocol segment.