Cisco 352-001 Online Practice Questions and Exam Preparation

Cisco 352-001 Online Questions & Answers

• Question 41:

  The campus consists of four main buildings with a single router at each location. A single Ethernet connection exists between each building. Which two EIGRP metrics should be made equal in the network redesign to ensure proper load sharing? (Choose two.)

  A. Bandwidth
  B. Load
  C. Delay
  D. Reliability
  A. Bandwidth
  C. Delay

• Question 42:

  

  Refer to the exhibit. This smart city has decided to deploy a converged network for video surveillance and applications for utility services. These new applications are delay-sensitive and require strict convergence times of less than 50 milliseconds. The network is expected to have up to 50 intermediate distribution frames per ring. Which protocol provides less than 50 milliseconds convergence?

  A. G8032
  B. STP
  C. G 8031
  D. RSTP
  A. G8032

• Question 43:

  Network designers plan to interconnect two geographically separated data centers using an Ethernet-over-MPLS pseudowire. Within that design, the link between the sites is stable, there are no apparent loops in the topology, and the root bridges for the respective VLANs are stable and unchanging. What additional aspect of the design should be adjusted to mitigate the chance of connectivity issues to the peer data center when the connection takes place?

  A. Enable 802.1d on one data center, and 802.1w on the other.
  B. Ensure that the spanning tree diameter for one or more VLANs is not too large.
  C. Enable UDLD on the link between the data centers.
  D. Enable root guard on the link between the data centers.
  B. Ensure that the spanning tree diameter for one or more VLANs is not too large.

• Question 44:

  You are a network designer and have been asked to consult with your server operations team to further enhance the security of the network. The operations team provides you with these details about the network:

  A pool of servers is accessed by numerous data centers and remote sites. The servers are accessed via a cluster of firewalls.

  The firewalls are configured properly and are not dropping traffic.

  The firewalls occasionally cause asymmetric routing of traffic within the server data center.

  Which technology would you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

  A. Access control lists to limit sources of traffic that exits the server-facing interface of the firewall cluster
  B. Poison certain subnets by adding static routes to Null0 on the server farm core switches.
  C. Unicast Reverse Path Forwarding in strict mode
  D. Unicast Reverse Path Forwarding in loose mode
  D. Unicast Reverse Path Forwarding in loose mode

• Question 45:

  Which statement is correct about policy-based routing?

  A. It can create microloops during network reconvergence.
  B. It should be implemented at both ends of a GRE tunnel.
  C. It can limit the network scalability.
  D. It decreases failure detection time.
  A. It can create microloops during network reconvergence.

• Question 46:

  After the recent implementation of a new design that incorporated GRE tunnels into the network, the network operations staff is seeing the following syslog message in multiple routers on the network - %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing. From a design perspective, what was not taken into account prior to implementing the solution?

  A. The neighboring routers cannot respond within the specified hold time.
  B. The interface on the router that is the source of the tunnel is down.
  C. The interface on the neighboring router that is the source of the tunnel is down.
  D. The router is learning the route to the tunnel destination address using the tunnel interface.
  E. The tunnel interface on the router is not receiving any keepalives within the specified hold time.
  D. The router is learning the route to the tunnel destination address using the tunnel interface.

• Question 47:

  You have been hired by Acme Corporation to evaluate their existing network and determine if the current network design is secure enough to prevent man-in-the-middle attacks. When evaluating the network, which switch security option should you investigate to ensure that authorized ARP responses take place according to known IP-to-MAC address mapping?

  A. ARP rate limiting
  B. DHCP snooping
  C. Dynamic ARP Inspections
  D. IP Source Guard
  C. Dynamic ARP Inspections

• Question 48:

  .which two options are benefits of using Topology Independent Loop-Free Alternate in WAN design? (Choose two)

  A. It provides backup convergence for all topologies by avoiding the post-convergence path
  B. It maximizes the network utilization by load-sharing across low bandwidth and edge links while IGP convergence is in progress
  C. No additional protocols are required in the MPLS network because it uses LDP labels to signal the backup path
  D. Although it requires enabling segment routing, SR does not have to be activated as the preferred forwarding method
  E. It can provide backup paths for IPv4, IPv6 and LDP traffic
  A. It provides backup convergence for all topologies by avoiding the post-convergence path
  E. It can provide backup paths for IPv4, IPv6 and LDP traffic

• Question 49:

  An enterprise company is attaching to a new Gigabit Ethernet-based link from the local service provider. This connection must have a 150 Mbps committed information rate.

  For the design of this new service, which QoS mechanism must be used to ensure low packet loss within the service provider network?

  A. policing
  B. LLQ
  C. shaping
  D. CBWFQ
  C. shaping

• Question 50:

  While reviewing an existing network design, you are discussing the characteristics of different STP versions. Which protocol minimizes unicast flooding during TCN in a Layer 2 switched network with many VLANs?

  A. STP
  B. MST
  C. PVRSTP
  D. PVSTP+
  D. PVSTP+