Cisco 352-001 Online Practice Questions and Exam Preparation

Cisco 352-001 Online Questions & Answers

• Question 391:

  You are designing a large-scale DMVPN network with more than 500 spokes using EIGRP as the IGP protocol. Which design option eliminates potential tunnel down events on the spoke routers due to the holding time expiration?

  A. Increase the hold queue on the tunnel interface of the spoke routers.
  B. Increase the hold queue on the physical interface of the spoke routers.
  C. Increase the hold queue on the physical interface of the hub router.
  D. Increase the hold queue on the tunnel interface of the hub router.
  E. Apply QoS for pak_priority class.
  D. Increase the hold queue on the tunnel interface of the hub router.

• Question 392:

  You are designing a traffic monitoring and analysis system for a customer. Which traffic monitoring technique would you recommend to place the least amount of burden on the network infrastructure?

  A. SPAN monitor ports
  B. NetFlow
  C. IP NBAR
  D. passive taps
  D. passive taps

• Question 393:

  Your customer wants to migrate their network from IPv4 to IPv6. They currently have Control Plane Policing deployed to protect their network devices from illegitimate ICMP traffic flooding.

  How do you adjust Control Plane Policing for ICMPv6 traffic, if it should be adjusted at all?

  A. Unlike ICMPv4, ICMPv6 must never be policed because it has additional functionality in the LAN
  B. The customer must pay special attention to the ICMPv6 rate limiting policy because it has additional functionality in the LAN
  C. ICMPv6 must be policed to the ICMPv4 lower value because the ICMPv6 packet size is bigger
  D. The policy must remain the same for ICMPv4 and ICMPv6
  B. The customer must pay special attention to the ICMPv6 rate limiting policy because it has additional functionality in the LAN

• Question 394:

  Which three options are important functions of IPv6 first-hop security? (Choose three.)

  A. implements a broadcast-control mechanism
  B. limits IPv6 route advertisement in the network
  C. suppresses excessive multicast neighbor discovery
  D. prevents IPv6 packet fragmentation
  E. prevents rogue DHCP servers from assigning IPv6 addresses
  B. limits IPv6 route advertisement in the network
  C. suppresses excessive multicast neighbor discovery
  E. prevents rogue DHCP servers from assigning IPv6 addresses

• Question 395:

  While designing a security solution, which three requirements would make you decide to deploy an IPS sensor in inline mode? (Choose three.)

  A. The solution should be resistant to sensor failure.
  B. The solution should allow for stream normalization.
  C. The solution should not impact jitter and latency for voice traffic.
  D. The solution should allow for signature-based pattern matching.
  E. The solution should allow denying packets inline.
  B. The solution should allow for stream normalization.
  D. The solution should allow for signature-based pattern matching.
  E. The solution should allow denying packets inline.

• Question 396:

  Your enterprise customer has asked where they should deploy flow monitoring in their network to monitor traffic between branch offices. What is your design recommendation?

  A. at the edge of the network so that user traffic will be seen
  B. at the central site, because all traffic from the remotes will be seen there.
  C. in the core, because all traffic will be seen there
  D. in the data center, because all user traffic will be seen there
  B. at the central site, because all traffic from the remotes will be seen there.

• Question 397:

  You are a network designer who must fine tune the convergence of an IS-IS network. The failure detection mechanism has been addressed with reliable loss-of-signal at the interface level. Which three other tools or techniques should be employed to achieve your requirements? (Choose three.)

  A. Use prefix prioritization techniques.
  B. Use BFD on point-to-point links.
  C. Speed up LSP generation.
  D. Disable LDP-IGP synchronization.
  E. Speed up the initial link state computation.
  F. Eliminate the time that the overload bit is advertised to neighbors.
  A. Use prefix prioritization techniques.
  C. Speed up LSP generation.
  E. Speed up the initial link state computation.

• Question 398:

  DRAG DROP

  Company ACME is adding a Cisco TelePresence system for real-time collaboration and wants to ensure the highest user experience. Drag and drop the necessary QoS mechanisms from the left to the right in any order. Not all options will be used.

  Select and Place:

  

  

• Question 399:

  DRAG DROP

  A small local business recently had an outage after an employee plugged a switch into the corporate network, which caused the traffic pattern in the network to change. You have been tasked to redesign the network so that this does not happen again. From the left side to the right side, drag the PVRST+ features that should be implemented to prevent the corresponding root cause. Not all sources will be used.

  Select and Place:

  

  

• Question 400:

  The IGP next-hop reachability for a BGP route is lost but a default route is available. Assuming that BGP connectivity is maintained, what will happen to the BGP route?

  A. It will be removed from the BGP table.
  B. It will be considered invalid for traffic forwarding.
  C. It will be considered a valid route.
  D. It will be put in a hold-down state by BGP until the next hop has been updated.
  C. It will be considered a valid route.