352-011 Exam Details

  • Exam Code
    :352-011
  • Exam Name
    :Cisco Certified Design Expert Practical
  • Certification
    :Cisco Certifications
  • Vendor
    :Cisco
  • Total Questions
    :249 Q&As
  • Last Updated
    :May 31, 2026

Cisco 352-011 Online Questions & Answers

  • Question 171:

    Refer to the exhibit.

    An enterprise has three sites over a Layer 2 Metro Ethernet ELAN service. 100Mb/s and 10 Mb/s links have been provisioned to provide redundancy for the head office. When OSPF routing enabled to provide connectivity and the correct bandwidth statement has been applied to each interface, the branch sites observe two equal-cost routes to the head office. The enterprise wants to send all traffic through the 100 Mb/s link and use the 10Mb/S link strictly as a backup. Which OSPF network type must be set to ensure that the head office 100 Mb/s circuit is preferred over the 10 Mb/s circuit, at the same time minimize the amount of configuration required on all of the routers throughout the network?

    A. NBMA
    B. Point-to-multipoint
    C. Point-to-point
    D. Broadcast

  • Question 172:

    A network has several routers running IS-IS L1L2 mode on the same Ethernet segment. Which action reduces to a minimum the number of IS-IS adjacencies in this segment?

    A. Define only the router on the segment to be DIS
    B. Change all routers connected to this segment to a single-level area
    C. Make the interface priority on the backup DIS lower than the primary DIS
    D. Change half the routers to be L1-only and other half to be L2-only on this segment

  • Question 173:

    DRAG DROP

    Drag the fast Reroute mechanism on the left and drop it onto the corresponding routing protocol on the right.

    Select and Place:

  • Question 174:

    An ISP provides VoIP and internet services to its customers. For security reasons, these services must be transported in different MPLS Layer 3 VPNs over the ISP core network. The customer CEs do not have the ability to segment the services using different VLANs and have only one uplink interface that does not support VLAN tagging. How should you design the network to ensure that VoIP traffic that is received from the CE goes in the VoIP VPN, and that Internet traffic goes into the Internet VPN on the ISP PE devices?

    A. Use a secondary interface IP address to differentiate between VoIP and Internet traffic
    B. Extend the Layer 3 VPN toward the CE
    C. Enable NBAR on the PE to direct the traffic into the correct VRF
    D. Use a subinterface on the PE for each service, VoIP and Internet, with different subnets
    E. Use policy-based routing to direct traffic into the correct VRF

  • Question 175:

    Which two items are required for data plane hardening of an infrastructure device? (Choose two)

    A. Disable unused services
    B. Routing protocol authentication
    C. SNMPv3
    D. Redundant AAA servers
    E. Infrastructure ACLs
    F. Warning banners
    G. Control Plane Policing

  • Question 176:

    What is a design application of control plane policing?

    A. CPP protects the control plane from reconnaissance and or denial-of-service attacks
    B. CPP protects the forwarding plane by rate -limiting excessive routing protocol traffic
    C. CPP protects the forwarding plane by allowing legitimate traffic and dropping excessive traffic
    D. CPP drop malformed packet that are sent to the CPU

  • Question 177:

    Which three options are IS-IS design considerations when connecting two Layer 3 switches directly using a 10 GBASE-T cabling and formatting an IS-IS neighbor adjacency?

    A. The default IS-IS network type is point-to-point so a DIS is not elected
    B. A DIS is elected between the IS-IS neighbors and the elected DIS is pre-empted if router with a higher system ID is connected
    C. The area, levels, and interface MTU parameters must match, and system MTU must be unique for two IS-IS routers to become adjacent
    D. Faster IS-IS hello and dead timers increase bandwidth and CPU use, and may cause instability
    E. The IS-IS hello and dead timers should be tuned to detect failures as quickly as possible
    F. A DIS is elected between the IS-IS neighbors and the elected Dis is pre-empted if a router with a lower system ID is connected
    G. The hello and dead timers must match for two IS-IS routers to become adjacent

  • Question 178:

    Which technology , implemented on aggregation -edge nodes at the aggregation layer, provides per -tenant isolation at Layer 3 , with separate dedicated per-tenant routing and forwarding tables on the inside interfaces of firewall contexts?

    A. VDC
    B. VLAN
    C. VXLAN
    D. VRF-lite

  • Question 179:

    Refer to the exhibit.

    Which data format is used in this REST API call?

    A. JSON
    B. HTMLv5
    C. HTML
    D. XML
    E. BASH

  • Question 180:

    Which three different behaviors must a network designer expect when bidirectional PIM is used instead of PIM Sparse Mode? (Choose three)

    A. The source IP addresses from the multicast senders cannot be seen in the multicast routing table
    B. The RPF check does not prevent routing loops when bidirectional PIM is used
    C. Many possible rendezvous point can be used for bidirectional PIM as compared to PIM Sparse Mode
    D. PIMv2 BSR is not supported with bidirectional PIM
    E. The join messages to join a bidirectional PIM multicast group are different compared to PIM-SM
    F. No rendezvous point is required when bidirectional PIM is used
    G. Auto-RP is not supported with bidirectional PIM

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 352-011 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.