Cisco 352-001 Online Practice Questions and Exam Preparation

Cisco 352-001 Online Questions & Answers

• Question 11:

  Which two benefits can be obtained by protecting the control plane of a network device? (Choose two.)

  A. Maintains remote management access to the router
  B. Preserves the confidentiality of traffic encrypted by IPsec
  C. Prevents the delivery of packets from spoof sources
  D. Maintains routing protocol adjacencies with local neighbors
  A. Maintains remote management access to the router
  D. Maintains routing protocol adjacencies with local neighbors

• Question 12:

  DRAG DROP

  Drag and drop the characteristics of the DMVPN technology from the left to the right. Not all options are used.

  Select and Place:

  

  

• Question 13:

  There is an MPLS-enabled link constantly flapping on an MPLS VPN network. Given that the network runs OSPF as the IGP protocol, which design mechanism will stabilize the network and avoid constant re-convergence?

  A. IP Event Dampening
  B. OSPF fast hellos
  C. IP SLA
  D. Partial SPF
  A. IP Event Dampening

• Question 14:

  Refer to the exhibit.

  

  The routers in this network are all running EIGRP. What is the most important step to take in order to ensure that this network core will converge quickly should a link failure occur?

  A. make certain EIGRP is running across all links
  B. make certain EIGRP is not running across non-transit links
  C. make certain the maximum number of paths on both of the routers is two
  D. add another link between the two routers with no servers and set the metric on this new link equal to the other four links
  B. make certain EIGRP is not running across non-transit links

• Question 15:

  A hosted service provider is designing an IPS solution to protect its DMZ segment. The goal is to detect and prevent anomalous activities and, at the same time, give the security operations team visibility into any attempted attacks against the organization. Which IPS solution should you deploy in the Internet perimeter to accomplish this goal?

  A. Deploy IPS as inline mode between the firewall and the servers
  B. Deploy IPS as promiscuous mode between the firewall and the servers
  C. Deploy IPS as inline mode between the firewall and the internet gateway
  D. Deploy IPS as promiscuous mode between the firewall and the internet gateway
  A. Deploy IPS as inline mode between the firewall and the servers

• Question 16:

  A customer is running OSPF on a broadcast network type in a DMVPN single-hub, single- cloud topology and dynamically routes from the data center to the branch networks. The customer wants to speed up convergence and to avoid having to elect DRs by changing the network type to point-to-multipoint at the data center and to point-to-point at the branches. Which option will meet the fast convergence requirement and not break any OSPF neighbor adjacencies when this redesign is implemented?

  A. The OSPF area containing the branch office routers should be set to stubby.
  B. The OSPF neighbors should be set manually at the data center router.
  C. The OSPF hello and dead timers should be adjusted at the data center router to match the timers at the remote sites.
  D. The OSPF database should be cleared manually for the new network types to take effect.
  E. The interface MTU sizes should be increased on all routers.
  C. The OSPF hello and dead timers should be adjusted at the data center router to match the timers at the remote sites.

• Question 17:

  You are developing the routing design for two merging companies that have overlapping IP address space. What must you consider when developing the routing and NAT design?

  A. Global to local NAT translation is done before routing.
  B. Local to global NAT translation is done after routing.
  C. Global to local NAT translation is done after policy-based routing.
  D. Local to global NAT translation is done before policy-based routing.
  D. Local to global NAT translation is done before policy-based routing.

• Question 18:

  What is an implication of using route reflectors in an iBGP topology?

  A. Route reflection limits the total number of iBGP routers.
  B. Route reflection causes traffic to flow in a hub-and-spoke fashion.
  C. The manipulation of BGP attributes is not supported on the other routers than the route reflectors.
  D. Route reflectors can create routing loops when more than one router reflector is used in the same cluster.
  E. Multipath information is difficult to propagate in a route reflector topology.
  E. Multipath information is difficult to propagate in a route reflector topology.

• Question 19:

  You are the lead network designer for an enterprise company called ABC, and you are leading design discussions regarding IPv6 implementation into their existing network. A

  QUESTION NO: is raised regarding older Layer 2 switches that exist in the network, and if any changes are required to these Layer 2 switches for successful IPv6 implementation. Which two responses should you give? (Choose two.)

  A. IPv6 is transparent on Layer 2 switches, so there is no need to make any changes to the Layer 2 switches.
  B. If IPv6 anycast deployment is planned, then make sure that Layer 2 switches support ICMPv6 snooping at Layer 2 switches.
  C. If IPv6 anycast deployment is planned, then make sure that Layer 2 switches support DHCPv6 snooping at Layer 2 switches.
  D. If IPv6 multicast deployment is planned, then make sure that Layer 2 switches support MLD snooping at Layer 2 switches.
  E. If IPv6 anycast deployment is planned, then make sure that Layer 2 switches support ND snooping at Layer 2 switches.
  A. IPv6 is transparent on Layer 2 switches, so there is no need to make any changes to the Layer 2 switches.
  D. If IPv6 multicast deployment is planned, then make sure that Layer 2 switches support MLD snooping at Layer 2 switches.

• Question 20:

  Which two practices should you implement to increase SNMPv1 security? (Choose two.)

  A. Restrict access to the specific SNMP engine IDs in use.
  B. Use ACLs to allow only specific IP addresses to poll SNMP.
  C. Use a combination of alphanumeric characters for the community strings.
  D. Use SNMP encryption for transport confidentiality.
  B. Use ACLs to allow only specific IP addresses to poll SNMP.
  C. Use a combination of alphanumeric characters for the community strings.