Cisco Cisco Certifications 352-001 Questions & Answers

• Question 321:

  Which mechanism can you use to improve network performance over PPPoE, IPsec, and GRE networks?

  A. Path MTU Discovery

  B. Simple Service Discovery Protocol

  C. ICMP Router Discovery Protocol

  D. Bidirectional Forwarding Detection

  Correct Answer: A

• Question 322:

  While designing a security solution, which three requirements would make you decide to deploy an IPS sensor in inline mode? (Choose three.)

  A. The solution should be resistant to sensor failure.

  B. The solution should allow for stream normalization.

  C. The solution should not impact jitter and latency for voice traffic.

  D. The solution should allow for signature-based pattern matching.

  E. The solution should allow denying packets inline.

  Correct Answer: BDE

• Question 323:

  Acme Corporation wants to minimize the risk of users plugging unauthorized switches and hubs into the network. Which two features can be used on the LAN access ports to support this design requirement? (Choose two.)

  A. BPDU Guard

  B. PortFast

  C. Loop Guard

  D. Port Security

  E. UDLD

  Correct Answer: AD

• Question 324:

  Which three factors slow down network convergence? (Choose three.)

  A. constant interface flapping

  B. lack of redundant paths

  C. inconsistent topology states between routers

  D. transport network failing to generate LoS

  E. wrong summarization in ABRs

  Correct Answer: ACD

• Question 325:

  Which three reasons to deploy an IDS sensor in promiscuous mode when you design a security solution are true? (Choose three.)

  A. Solution should be resistant to sensor failure.

  B. Solution should allow for stream normalization.

  C. Solution should not impact jitter and latency for voice traffic.

  D. Solution should allow for signature-based pattern matching.

  E. Solution should allow to deny packets inline.

  Correct Answer: ACD

• Question 326:

  Company Y is a mobile backhaul provider that uses microwave rings in their network. Which low-cost, simple technology do you recommend to Company Y to ensure the fastest convergence times in a ring topology?

  A. sub-second IGP hello and dead timers

  B. MPLS Traffic Engineering

  C. Remote Loop-Free Alternate

  D. IP Event Dampening

  E. hub and spoke with ECMP

  Correct Answer: C

• Question 327:

  To meet specific business requirements, QoS-marked traffic must be sent over a dedicated link. Which technology fulfills this requirement?

  A. MPLS

  B. Q-in-Q tunneling

  C. policy-based routing

  D. traffic policing

  Correct Answer: C

• Question 328:

  Refer to the exhibit.

  

  This network is running IS-IS as the single routing protocol and the LSP and SPF timers are aggressively configured so the network converges in subsecond. The customer reports that router B had a memory crash and reloaded, which resulted in some packets from the application being lost. The application servers are behind router G and the end users are behind router H. Which design change should be made to prevent this packet-loss problem from reoccurring?

  A. Enable the advertisement of the overload bit for a specific amount of time after a reload on router B.

  B. Optimize the LSP/SPF timers to send LSPs immediately after a topology change.

  C. Redesign the network as a flat level 2.

  D. Use asymmetric carrier delay timer.

  E. Deploy all links as point-to-point.

  Correct Answer: A

• Question 329:

  You need to redesign your NMS system so that it can collect information without causing adverse effects in the network, such as high CPU utilization on network devices and network instability. Which two options will minimize the impact of the trusted NMS polling your network in this situation? (Choose two.)

  A. Implement SNMP community restrictions that are associated with an ACL.

  B. Unload unused MIBs from the network devices.

  C. Prevent polling of large tables through the use of SNMP OID restrictions.

  D. Disable unused OIDs and MIBs on the NMS systems.

  Correct Answer: CD

• Question 330:

  Acme Corporation wants to minimize the risk of users plugging unauthorized switches and hubs into the network.

  Which two features can be used on the LAN access ports to support this design requirement? (Choose two.)

  A. BPDU Guard

  B. PortFast

  C. Loop Guard

  D. Root Guard

  E. DTP

  Correct Answer: AD