Cisco Cisco Certifications 352-001 Questions & Answers

• Question 201:

  Which load balancing option for iP-only traffic is the least efficient in terms of Layer 2 EtherChnnel physical links utilization?

  A. on a per port number basis

  B. on a per destination MAC address basis

  C. on a per destination IP address basis

  D. on a per source IP address basis

  Correct Answer: B

• Question 202:

  Which is a requirement for performing attack detection by use of anomaly detection technologies?

  A. Baseline data

  B. Packet captures

  C. Syslog data

  D. Exploit signatures

  Correct Answer: A

• Question 203:

  Which two components are the responsibility of the customers in a Platform as a Service offering? (Choose 2)

  A. data

  B. APIs

  C. hardware

  D. applications

  E. infrastructure connectivity

  Correct Answer: AD

• Question 204:

  You are designing a FabricPath network that connects to a spine-and-leaf topology using layer 2 IS-IS as the IGP. The solution should be able to detect changes in the network topology and calculate loop-free paths to other nodes in the network that are being used as top-of-rack switches. Which four options are characteristics of this FabricPath design solution? (Choose 4)

  A. The FabricPath domain should be replaced because it does not run STP.

  B. The switch operating system uses multiple equal-cost, parallel links that provide ECMP.

  C. To use the basic FabricPath functionality, you must configure IS-IS on every interface between the leaf-and-spine switches.

  D. FabricPath Layer 2 IS-IS uses the standard IS-IS functionality to populate up to 16 routes for a given destination switch.

  E. This path is used for forwarding unicast Fabricpath frames.

  F. Each switch computes its shortest path to every other switch in the network using the SPF algorithm.

  G. The interfaces in a FabricPath network run only the FabricPath Layer 2 IS-IS protocol with FTags disabled.

  Correct Answer: BDEF

• Question 205:

  You are developing the routing design for two merging companies that have overlapping IP address space. What must you consider when developing the routing and NAT design?

  A. Global to local NAT translation is done before routing.

  B. Local to global NAT translation is done after routing.

  C. Global to local NAT translation is done after policy-based routing.

  D. Local to global NAT translation is done before policy-based routing.

  Correct Answer: D

• Question 206:

  A mobile service provider wants to design and deploy an Ethernet service with similar physical link failover/failback characteristics on the active/backup links as APS/MSP SONET. Which Layer 2 service addresses this design requirement?

  A. Ethernet Pseudowires

  B. FlexLink

  C. MLPPP

  D. Port-Channel

  Correct Answer: B

• Question 207:

  Which two disadvantages are of using proxy servers as compared to stateful firewalls? (Choose two)

  A. Proxy servers expose the source addresses of traffic flows.

  B. Proxy servers must be explicitly set to support new applications and protocols.

  C. Proxy servers typically perform more slowly.

  D. Proxy servers use network address translation as their primary security mechanism.

  Correct Answer: BC

• Question 208:

  You are the consultant network designer for a large GET VPN deployment for a large bank with national coverage. Between 1800 and 2000 remote locations connect to the central location through four hubs using an MPLS backbone and using two key servers. The bank is concerned with security and replay attacks. Which two actions should you use to tune GET VPN to meet the bank requirements? (Choose 2)

  A. Replace unicast rekey with multicast rekey.

  B. Increase the cryptographic key size.

  C. Reduce the SAR clock interval duration.

  D. Reduce the Dead Peer Detection periodic timer.

  E. Increase the TEK and KEK lifetime.

  Correct Answer: BC

• Question 209:

  Which statement about DHCPv6 Guard features design is true?

  A. A certificate must be installed on the DHCPv6 server and relay agent.

  B. DHCPv6 client requests can be rate-limited to protect the control plane.

  C. Rogue DHCPv6 servers cannot assign IPv6 addresses to clients.

  D. DHCPv6 client requests can be filtered to protect the data plane.

  Correct Answer: C

• Question 210:

  Which statement describes the main difference between the Layer 2 loop-free inverted U design and the Layer 2 loop-free U design?

  A. A loop-free U design has all uplinks active, but a loop-free inverted U design does not.

  B. A loop-free inverted U design has all uplinks active, but a loop-free U design does not.

  C. A loop-free U design extends VLANs between access switches, but a loop-free inverted U design does not.

  D. A loop-free U design extends VLANs between distribution switches, but a loop-free inverted U design does not.

  Correct Answer: C