Cisco Cisco Certifications 352-001 Questions & Answers

• Question 231:

  Which statement about IDS/IPS design is correct?

  A. An IPS analyzes a copy of the monitored traffic and not the actual forwarded packet.

  B. An IPS should be deployed if the security policy does not support the denial of traffic.

  C. An IDS analyzes a copy of the monitored traffic and not the actual forwarded packet.

  D. Bandwidth considerations must be taken into account since IDS is deployed inline to traffic flow.

  Correct Answer: C

• Question 232:

  Which statement about APIC controller versus a more traditional SDN controller is true?

  A. APIC uses a policy agent to translate policies into instructions

  B. APIC supports OpFlex as a Northbound Protocol

  C. APIC does support a Southbound REST API

  D. APIC uses an imperative model

  Correct Answer: A

• Question 233:

  After a large EIGRP network had automatic summarization enabled throughout, it started experiencing routing loops. Which action should you take to quickly resolve the routing loops yet continue to perform summarization?

  A. Replace the automatic summarization with more specific summary routes.

  B. Redesign the IP addressing scheme.

  C. Redistribute connected routes at major IP network boundaries.

  D. Increase the AD of the automatically summarized routes.

  Correct Answer: A

• Question 234:

  Why is a route leaking mechanism needed in this large, unified MPLS network with end-to- end BGP labeled prefixes and IS-IS multilevel-areas as the IGP?

  

  A. to build an LSP between the PE routers

  B. for PE management such as Telnet or SNMP

  C. to announce PE loopbacks from other IS-IS areas into the Layer 2 backbone area

  D. to leak routes from the Layer 2 backbone to the Layer 1 areas

  Correct Answer: A

• Question 235:

  Which technology, implemented on aggregation-edge nodes at the aggregation layer, provides per-tenant isolation at Layer 3, with separate dedicated per-tenant routing and forwarding tables on the inside interfaces of firewall contexts?

  A. VLAN

  B. VXLAN

  C. VRF-lite

  D. VDC

  Correct Answer: C

• Question 236:

  Which major block is not included in the ETSI Network Function Virtualization reference framework?

  A. Network Function Virtualization Infrastructure

  B. Network Function Virtualization Management and Orchestration

  C. Network Function Virtualization Policy Manager

  D. Virtualized Network Function / Element Management Systems

  Correct Answer: C

• Question 237:

  The two Ethernet switches are in close proximity to each other. Assuming that the IGP timers have already been tuned for fast convergence, which additional change provides for the fastest network convergence time?

  

  A. Change all links from fiber to copper.

  B. Use point-to-point links between the routers instead of connecting through the Ethernet switches.

  C. Remove one of the Ethernet switches and connect all routers to only one Ethernet switch.

  D. Change all links between switches and routers to 10 Gb/s.

  Correct Answer: B

• Question 238:

  Which action can identify and monitor denial of service attacks?

  A. Deploy access control lists that match well-known attack vectors

  B. Deploy deep packet inspection appliances

  C. Select attack counter-measures

  D. Establish normal network characteristics

  Correct Answer: D

• Question 239:

  Where in this network should you deploy flow monitoring to monitor traffic from all the branch offices?

  A. at the Core devices

  B. at the WAN Distribution devices

  C. at the WAN Edge devices

  D. at each branch office device

  Correct Answer: B

• Question 240:

  Which data format is used in this REST API call?

  A. JSON

  B. HTML

  C. BASH

  D. XML

  E. HTMLv5

  Correct Answer: A