Cisco Cisco Certifications 352-001 Questions & Answers

• Question 271:

  Which two steps can be taken by the sinkhole technique? (Choose two.)

  A. Delay an attack from reaching its target

  B. Redirect an attack away from its target

  C. Monitor attack noise, scans, and other activity

  D. Reverse the direction of an attack

  Correct Answer: BC

• Question 272:

  A network is designed to use OSPF to reach eBGP peers. Which condition should be avoided so that the eBGP peers do not flap continuously in case of link failure?

  A. Advertise via a non-backbone OSPF area IP addresses used on eBGP peer statements.

  B. Advertise via eBGP IP addresses used on eBGP peer statements.

  C. Disable BGP synchronization.

  D. Use an ACL to block BGP in one direction.

  Correct Answer: B

• Question 273:

  Which option describes a design benefit of root guard?

  A. It makes the port go immediately into the forwarding state after being connected.

  B. It does not generate a spanning-tree topology change upon connecting and disconnecting a station on a port.

  C. It allows small, unmanaged switches to be plugged into ports of access switches without the risk of switch loops.

  D. It prevents switch loops by detecting one-way communications on the physical port.

  E. It prevents switch loops caused by unidirectional point-to-point link condition on Rapid PVST+ and MST.

  F. It prevents switched traffic from traversing suboptimal paths on the network.

  Correct Answer: F

• Question 274:

  In Layer 2 access campus design, which mechanism should be enabled on access ports to protect the campus network from undesired access switches and looped ports?

  A. root guard

  B. EtherChannel guard

  C. BPDU guard

  D. loop guard

  Correct Answer: C

• Question 275:

  You are asked to design an RSVP-TE LSP protection solution for a large service provider network. Which traffic protection mechanism is highly scalable and ensures that multiple LSPs always terminate at the same merge point?

  A. detour LSPs

  B. 1:1 protection

  C. 1:N protection

  D. shared-explicit reservation style

  Correct Answer: C

• Question 276:

  You must design this network for IP Fast Reroute by enabling the OSPF Loop-Free Alternates feature (not Remote Loop-Free Alternates). Which two options are concerns about the proposed solution? (Choose 2)

  A. OSPF Loop-Free Alternates is not supported on ring topologies.

  B. OSPF Loop-Free Alternates on ring topologies are prone to routing loops.

  C. Fast Reroute requires MPLS TE.

  D. The solution is prone to microloops in case of congestion

  E. OSPF Loop-Free Alternates is transport dependent.

  Correct Answer: AD

• Question 277:

  Which three of the following security controls would you take into consideration when implementing IoT capabilities?

  A. Layered security approach

  B. Place security above functionality

  C. Define lifecycle controls for IoT devices

  D. Privacy impact Assessment

  E. Change passwords every 90 days

  F. Implement intrusion detection systems on IoT Devices

  Correct Answer: ACD

• Question 278:

  How should you compensate for jitter on an IP network so it carries real-time VolP traffic with acceptable voice transmission quality?

  A. Set up VAD to replace gaps on speech with comfort noise.

  B. Set up a playout buffer to play back the voice stream.

  C. Deploy RSVP for dynamic VolP packet classification.

  D. Change CODEC from G.729 to G.711.

  Correct Answer: B

• Question 279:

  The service provider that you work for wants to offer IPv6 internet service to its customers without upgrading all of its access equipment to support IPv6. Which transition technology do you recommend?

  A. CGN

  B. NAT64

  C. dual-stack CPE

  D. 6RD

  Correct Answer: B

• Question 280:

  Which two benefits can be obtained by protecting the control plane of a network device? (Choose two.)

  A. Maintains remote management access to the router

  B. Preserves the confidentiality of traffic encrypted by IPsec

  C. Prevents the delivery of packets from spoof sources

  D. Maintains routing protocol adjacencies with local neighbors

  Correct Answer: AD