Cisco 352-001 Online Practice Questions and Exam Preparation

Cisco 352-001 Online Questions & Answers

• Question 601:

  Refer to the exhibit.

  

  You are designing an IPv4 unicast Layer 3 VPN load-balancing solution. Which L3VPN feature needs to be configured on the PE routers to support the design requirement?

  A. nonmatching route distinguishers
  B. matching route target values
  C. disable split horizon on PE2 and PE3
  D. matching route distinguishers
  A. nonmatching route distinguishers

• Question 602:

  You are designing an optical network. Your goal is to ensure that your design contains the highest degree of resiliency. In which two ways will you leverage a wavelength-switched optical network solution in your network design? (Choose two.)

  A. a wavelength-switched optical network assigns routing and wavelength information
  B. a wavelength-switched optical network takes linear and nonlinear optical impairment calculation into account
  C. a wavelength-switched optical network guarantees restoration based strictly on the shortest path available
  D. a wavelength-switched optical network eliminates the need for dispersion compensating units in a network
  A. a wavelength-switched optical network assigns routing and wavelength information
  B. a wavelength-switched optical network takes linear and nonlinear optical impairment calculation into account

• Question 603:

  You are designing an Out of Band Cisco Network Admission Control, Layer 3 Real-IP Gateway deployment for a customer. Which VLAN must be trunked back to the Clean Access Server from the access switch?

  A. untrusted VLAN
  B. user VLAN
  C. management VLAN
  D. authentication VLAN
  A. untrusted VLAN

• Question 604:

  In secure IP multicast, which protocol handles group key management?

  A. IPsec
  B. GDOI
  C. MD5
  D. SHA-256
  B. GDOI

• Question 605:

  When designing a large full mesh network running OSPF, how would you reduce LSA repetition?

  A. Elect a DR and BDR.
  B. Use access control lists to control outbound advertisements.
  C. Choose one or two routers to re-flood LSA information.
  D. Put each of the point-to-point links in your full mesh networking into a separate area.
  C. Choose one or two routers to re-flood LSA information.

• Question 606:

  DRAG DROP

  You are designing a new data center network. Drag and drop new data center requirements on the left into the appropriate design principle on the right.

  Select and Place:

  

  

• Question 607:

  To improve the stability of the network and protect it from intrusions, you must design control plane security.

  Which two features should you enable as part of this design? (Choose two.)

  A. SNMP security
  B. uRPF
  C. IPsec
  D. IP receive ACL
  E. control plane policing
  F. role-based CLI access
  D. IP receive ACL
  E. control plane policing

• Question 608:

  You are a network designer and are responsible for ensuring that the network you design is secure. How do you plan to prevent infected devices on your network from sourcing random DDoS attacks using forged source addresses?

  A. ACL-based forwarding
  B. ACL filtering by destination
  C. Unicast RPF loose mode
  D. Unicast RPF strict mode
  D. Unicast RPF strict mode

• Question 609:

  Which VPN technology supports multivendor interoperability on a network design?

  A. VTI
  B. DMVPN
  C. Easy VPN
  D. IPsec VPN
  D. IPsec VPN

• Question 610:

  During a network design review, it is recommended that the network with a single large area should be broken up into a backbone and multiple nonbackbone areas. There are differing opinions on how many ABRs are needed for each area for redundancy. What would be the impact of having additional ABRs per area?

  A. There is no impact to increasing the number of ABRs.
  B. The SPF calculations are more complex.
  C. The number of externals and network summaries are increased.
  D. The size of the FIB is increased.
  C. The number of externals and network summaries are increased.