Cisco Cisco Certifications 352-001 Questions & Answers

• Question 131:

  Refer to the exhibit.

  

  As part of a redesign project, you must predict multicast behavior. What is the resultant multicast traffic receiving on the shared tree( , G), if it is received on the LHR interface indicated?

  A. It is dropped due to an unsuccessful RPF check against the multicast receiver

  B. It is switched due to a successful RPF check against the routing table

  C. It is switched given that no RPF check is performed

  D. It is dropped due to an unsuccessful RPF check against the multicast source

  Correct Answer: B

• Question 132:

  Refer to the exhibit.

  

  A customer interconnected hundreds of branch offices into a single DMVPN network, with the HUB in the main data center. Due to security policies, the customer requires that the default route for all Internet traffic from the users at the

  branches must go through the tunnel and the only connections that are allowed to and from the branch router over the local internet circuit are the DMVPN tunnels.

  Which two combined actions must you take on the branch router to address these security requirements and keep the solution scalable? (Choose two)

  A. Place the WAN interface in a front-door VRF, leaving the tunnel interface in the default routing instance

  B. Protect the WAN interface by an inbound ACL that permits only IPsec-related traffic

  C. Implement a zone-based firewall that allows only IPsec-related traffic from zone UNTRUSTED to zone TRUSTED

  D. Add a host route for the public IP address of each remote branch and HUB routers that points directly to the local ISP, and add a default route that points to the tunnel

  E. Use a floating default route with the preferred path over the tunnel and a backup path over the Internet natively

  Correct Answer: AB

• Question 133:

  Which two statements about VXLAN are true? (Choose two)

  A. VXLAN is a Cisco proprietary solution

  B. VXLAN is an encapsulation method used to create a Layer 3 overlay network

  C. VXLAN can be used to enforce Layer 2 isolation in a multitenant infrastructure

  D. VXLAN uses the Spanning Tree protocol for loop prevention

  E. VXLAN overcomes the 802.1Q virtual LAN address space limitation

  Correct Answer: BE

• Question 134:

  Which IEEE standard is commonly used at the data link layer for an access network, in an IoT environment?

  A. Wireless Regional Area Network

  B. Low-Rate Wireless Network

  C. Wireless Local Area Network

  D. Broadband wireless metropolitan Network

  Correct Answer: B

• Question 135:

  An enterprise campus is adopting a network virtualization design solution with these requirements

  It must include the ability to virtualize the data plane and control plane by using VLANs and VRFs

  It must maintain end-to-end logical path transport separation across the network

  resources available grouped at the access edge

  Which two primary models can this network virtualization design be categorized? (Choose two)

  A. Path isolation

  B. Session isolation

  C. Group virtualization

  D. Services virtualization

  E. Edge isolation

  Correct Answer: AD

• Question 136:

  Which three options are IS-IS design considerations when connecting two Layer 3 switches directly using a 10 GBASE-T cabling and formatting an IS-IS neighbor adjacency?

  A. The default IS-IS network type is point-to-point so a DIS is not elected

  B. A DIS is elected between the IS-IS neighbors and the elected DIS is pre-empted if router with a higher system ID is connected

  C. The area, levels, and interface MTU parameters must match, and system MTU must be unique for two IS-IS routers to become adjacent

  D. Faster IS-IS hello and dead timers increase bandwidth and CPU use, and may cause instability

  E. The IS-IS hello and dead timers should be tuned to detect failures as quickly as possible

  F. A DIS is elected between the IS-IS neighbors and the elected Dis is pre-empted if a router with a lower system ID is connected

  G. The hello and dead timers must match for two IS-IS routers to become adjacent

  Correct Answer: CDF

• Question 137:

  Refer to the exhibit.

  

  As part of your design to monitor reachable services, a route health injector has just been deployed on the network. The route health injector injects /32 host routes into BGP with the next hop of 192.18.0.2, but the /32 routes are not being installed into the RIB or FIB of Router A. Which BGP feature must be deployed to make be deployed to make the design to work?

  A. BGP community attributes

  B. MP-BGP

  C. BGP AS-Path prepending

  D. eBGP multihop attribute

  Correct Answer: A

• Question 138:

  You must make IGP redesign recommendations for a client that has old equipment, with low CPU power and memory, that they do not have budget replace. They are very concerned about CPU load on routers. They are using IS-IS as the

  IGP in a single l1 area and all routers are connected to each other with point-to-point links.

  Which method do you recommend to reduce or limit CPU overhead caused by IS-IS?

  A. Use mesh groups to limit flooding of LSAs

  B. Implement wide style metrics for IS-IS on all routers

  C. Select a router to act as a pseudowire to limit topology synchronization

  D. Divide the router into multiple areas and implement address summarization

  Correct Answer: A

• Question 139:

  Which two SAN designs appropriate to support large-scale SAN environments? (Choose two)

  A. Edge-core-edge design

  B. Fibre Channel forwarder

  C. Split fabric design

  D. Core-edge design

  E. Dual fabric design

  Correct Answer: AD

• Question 140:

  An enterprise network has two core routers that connect to 200 distribution routers and uses full-mesh iBGP peering between these routers as its routing method. The distribution routers are experiencing high CPU utilization due to the BGP

  process.

  Which design solution is the most effective?

  A. Increase the memory on the distribution routers

  B. Increase the memory on the core routers

  C. Implement route reflectors on the two core routers

  D. Increase bandwidth between the core routers

  E. Implement eBGP between the core and distribution routers

  Correct Answer: C