Cisco Cisco Certifications 352-001 Questions & Answers

• Question 161:

  Which four resources does Cisco Cloud Center provision in an ACL environment? (Choose four)

  A. VLAN Pool

  B. Contracts

  C. End point Group (EPG)

  D. VRF

  E. Subject/Filters

  F. Application Network Profile (ANP)

  Correct Answer: BCEF

• Question 162:

  Your customer asked you to redesign there is-IS network to reduce to a minimum the number of adjacencies because the network has several routers running L1/L2 mode on the sme Ethernet segment. Which action do you recommend?

  A. Define only one router on the segment to be DIS

  B. Make the interface priority on the backup DIS lower than the primary DIS

  C. Change half the routers to L1 routers and half to L2 routers

  D. Change all routers to a single-level area

  Correct Answer: D

• Question 163:

  Refer to the exhibit.

  

  You are a network designer who is given these design requirements: Multicast services must be provided for Layer 3 VPN customers The same forwarding technology must be used as Layer 3 VPN unicast packets Replication of multicast traffic is not allowed on the ingress PE Which multicast VPN technology conforms to the design requirements?

  A. Multipoint-to-point LDP

  B. MSDP

  C. MLDP VPN

  D. Rosen Draft using LDP

  Correct Answer: C

• Question 164:

  Which open source message broker is in the Cisco Cloud Center?

  A. Apache kafka

  B. HornetQ

  C. RabbitMQ

  D. Fuse Message Broker

  E. Oracle Message Broker

  Correct Answer: C

• Question 165:

  At which two networks points is route summarization supported? (Choose two)

  A. At EIGRP AS boundaries

  B. At EIGRP interface boundaries

  C. At OSPF virtual-link boundaries

  D. At EIGRP are boundaries

  E. At OSPF area boundaries

  F. At EIGRP stub interface boundaries

  Correct Answer: BE

• Question 166:

  Which feature or technology that affects the operations of IPsec should be taken into account when designing an IPsec network using Authentication header?

  A. TCP MSS adjustment

  B. Certificate-based authentication

  C. Transform set

  D. NAT

  Correct Answer: D

• Question 167:

  You are designing a new multisite data center network within the same city. You are using the newest routers that run OSPF and DWDM point-to-point interfaces for site-to-site connectivity. Your primary objective is to use the fastest possible method for interface failure detection. Which method achieves this objective?

  A. UDLD

  B. Interface event dampening

  C. LoS/AIS event faults

  D. Fast-hello timers

  Correct Answer: C

• Question 168:

  Which load balancing option for IP-only traffic is the least efficient in terms of EtherChannel physical links utilization?

  A. On a per source IP address basis

  B. On a per destination MAC address basis

  C. On a per destination IP address basis

  D. On a per port number basis

  Correct Answer: B

• Question 169:

  ACME Agricultural requires that access to all network devices is granted based on identify validation, and an authentication server was installed for this purpose. Currently the network team uses a list of passwords based on regions to access the internal corporate network devices. Which protocol do you recommend to ensure identify validation from the authentication server to the corporate directory?

  A. HTTPS

  B. TACACS+

  C. SSH

  D. LDAP

  Correct Answer: D

• Question 170:

  In a VPLS design solution, which situation indicates that BGP must be used instead of LDP in the control plane?

  A. MAC address learning scales better through BGP

  B. BGP supports VPLS interworking

  C. Pseudowire configuration overhead is reduced

  D. There are no full-mesh pseudowire due to the route reflection feature of BGP

  Correct Answer: A