Cisco Cisco Certifications 352-001 Questions & Answers

• Question 401:

  You have been asked to establish a design that will allow your company to migrate from a WAN service to a Layer 3 VPN service. In your design, you are keeping some WAN links between critical sites as a backup for this service. You plan to use OSPF as your IGP and BGP for the PE- CE protocol. When the Layer 3 VPN service is available, how will you prevent transit traffic over the backup links?

  A. Redistribute routes at the CE as external type 1.

  B. Redistribute routes at the CE as external type 2.

  C. Use conditional advertisement only when the Layer 3 service is down.

  D. Manually turn off the backdoor link when the Layer 3 service is up.

  Correct Answer: D

• Question 402:

  You work for a financial institution that is planning to deploy a new multicast application in your network to do real-time trading. This application will be run simultaneously by thousands of traders located throughout your network, each a source of several IP multicast streams, to carry the "sell" and "buy" trading bids. All routers in your network have full hardware support for all PIM multicast modes.

  Which mode should you use in order to minimize the impact of the new application on the routers in your network?

  A. PIM Any-Source Multicast

  B. PIM Dense Mode

  C. PIM Source Specific Multicast

  D. PIM Bidirectional

  Correct Answer: D

• Question 403:

  Three routers in a single broadcast domain are connected by means of a standard Ethernet switch. The only Layer 2 protocol running on this link is Spanning Tree Protocol. The only Layer 3 protocol running on this link is EIGRP, which uses a standard configuration. Then, one of the three routers is manually shut down. How will the other two routers discover the loss of this neighbor?

  A. The line protocol on the remaining two routers will be brought down as soon as the carrier is lost from the switch.

  B. The switch will bring down the carrier on all ports momentarily to force all the routers connected to the link to relearn their neighbors.

  C. The EIGRP dead timers will expire due to the absence of EIGRP traffic.

  D. The switch will send a reverse ARP when the router disconnects from the switch.

  Correct Answer: C

• Question 404:

  A certain service provider network includes IPsec tunnels between PE router loopbacks and dual-homed PE routers. The service provider is using OSPF to carry infrastructure routes and using BGP to carry tunnel endpoints.

  What could the service provider do to provide fast convergence in case of a link failure in its network?

  A. tune OSPF on all routers

  B. tune BGP on all routers

  C. configure a full mesh of traffic engineering among PE routers

  D. carry IPsec tunnels in GRE among PE routers

  E. carry IPsec tunnels in L2TPv3 among PE routers

  F. carry IPsec tunnels in VPLS among PE routers

  Correct Answer: A

• Question 405:

  Which two actions can the sinkhole technique be used to perform? (Choose two.)

  A. delay an attack from reaching its target

  B. redirect an attack away from its target

  C. monitor attack noise, scans, and other activity

  D. reverse the direction of an attack

  Correct Answer: BC

• Question 406:

  What is a design aspect regarding multicast transport for MPLS Layer 3 VPNs using the Rosen Draft implementation?

  A. LDP is the multicast control plane protocol.

  B. Multicast traffic is forwarded over GRE tunnels.

  C. Multicast traffic is forwarded over LDP or RSVP signaled LSPs.

  D. Using the MDT SAFI in BGP ensures that PIM can be disabled in the core.

  Correct Answer: B

• Question 407:

  What is downstream suppression?

  A. the ability of a fault management tool to generate alerts for only an upstream device failure and to suppress the alarms related to all unreachable downstream sites

  B. the ability of devices to exclusively send summary routes and suppress the sending of complete routing updates

  C. the ability of a router to suppress downstream route fluctuations to avoid introducing instability into the network core

  D. the ability of a network management station to perform root cause analysis on a network fault and remove duplicates of all other alarms resulting from fault symptoms

  E. the ability of an element manager to restrict forwarding to critical performance alarms northbound to the Manager of Managers and suppress other alarms

  Correct Answer: A

• Question 408:

  When a multiprotocol environment is designed to have several routers redistribute among the routing domains, how can routing loops be avoided?

  A. by using the AS-PATH attribute

  B. by using route tags

  C. by activating split horizon

  D. by implementing spanning tree

  Correct Answer: B

• Question 409:

  When using LDAP servers, you should configure the password policy to prevent _____.

  A. DoS attacks

  B. dictionary attacks

  C. flood attacks

  D. man-in-the-middle attacks

  Correct Answer: B

• Question 410:

  As part of the network design, ACME Corporation requires the ability to export IPv6 information to better manage its network. Which version of NetFlow records is required to export this information?

  A. 5

  B. 6

  C. 7

  D. 8

  E. 9

  Correct Answer: E