Cisco 352-001 Dumps - 100% Cover Real Exam Questions (Updated 270 Questions)
Real 352-001 dumps - Real Cisco dumps PDF
NEW QUESTION 127
A network is designed to use OSPF to reach eBGP peers. Which condition should be avoided so that the eBGP peers do not flap continuously in case of link failure?
- A. Advertise via eBGP IP addresses used on eBGP peer statements.
- B. Advertise via a non-backbone OSPF area IP addresses used on eBGP peer statements.
- C. Use an ACL to block BGP in one direction.
- D. Disable BGP synchronization.
Answer: A
NEW QUESTION 128
Your organization is working on a design solution for a new Internet-based remote access virtual private network that has 1000 remote sites A network administrator recommends GETVPN as the model because the network of today uses DMVPN, which results in a lot of background NHRP control traffic What is a potential problem with using GETVPN for this design solution?
- A. GETVPN key servers would be on public, hacker-reachable space and need higher security
- B. GETVPN would require a high level of background traffic to maintain its IPsec SAs
- C. GETVPN is not scalable to a large number of remote sites
- D. GETVPN requires an overlay routing control plane
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/products/collateral/security/group-encrypted-transport-vpn/GETVPN_DIG_
NEW QUESTION 129 
Refer to the exhibit. You are asked to design this OSPF network to converge within 60 ms for unicast packets after a link topology changes due to a single link failure. Which technology can be enabled while conforming to the design requirements?
- A. IGP neighbor timer tuning
- B. Loop-Free Alternates
- C. RSVP-TE Fast Reroute
- D. IGP SPF- timer tuning
- E. BFD
Answer: E
Explanation:
Explanation
https://www.cisco.com/en/US/technologies/tk648/tk365/tk480/technologies_white_paper0900aecd80244005.htm
NEW QUESTION 130
Company XYZ has started to implement IPv6 in their network and has rolled out dual-stack endpoint devices to their employees Which security measure prevents Company XYZ from replay attacks?
- A. SeND with Nonce
- B. IPv6 Destination Guard
- C. IPv6 Source Guard
- D. Router Advertisement Guard
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_data_acl/configuration/15-mt/sec-data-acl-15-mt-book/ip
NEW QUESTION 131
A service provider is designing a new backbone based on an IGP and MPLS what are two valid reasons for implementing MPLS-TE as well? (Choose two)
- A. MPLS-TE is required to create backup paths independently from the IGP
- B. MPLS-TE is a prerequisite for implementing RSVP in the backbone
- C. MPLS-TE can detect and react to neighbor failures faster than IGPs can
- D. MPLS-TE is required to route different MPLS QoS Service classes through different paths
- E. MPLS-TE is required to reroute traffic within less than 1 second in case of a link failure inside the backbone
Answer: A,D
NEW QUESTION 132
As part of a network design, you should tighten security to prevent man-in-the-middle attacks Which two switch security options ensure that authorized ARP responses take place according to known IP to MAC address mapping ? (Choose two)
- A. ARP rate limiting
- B. ARP spoofing
- C. Port Security
- D. Dynamic ARP inspection
- E. DHCP snooping
Answer: D,E
Explanation:
Explanation
https://www.cisco.com/c/dam/global/da_dk/assets/docs/security2006/Security2006_Eric_Vyncke_2.pdf
NEW QUESTION 133
Refer to the exhibit.
This Layer 2 network is expected to add 150 VLANs over the next year, in addition to the existing 50 VLANs within the network. Which STP type will support this design requirement using the least amount of CPU resources and achieving load-balancing?
- A. PVST+
- B. MST
- C. CST
- D. RSTP
Answer: B
NEW QUESTION 134
Refer to the exhibit.
The design is being proposed for use within the network. The CE devices are OSPF graceful restart- capable, and the core devices are OSPF graceful restart-aware. The WAN advertisements received from BGP are redistributed into OSPF. A forwarding supervisor failure event takes place on CE A.
During this event, how will the routes learned from the WAN be seen on the core devices?
- A. via CE A
- B. via CE Aand CE B
- C. via CE B
- D. no WAN routes will be accessible
Answer: C
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 135
Which two reasons are valid for aggregating routing information within a network? (Choose two.)
- A. to reduce the amount of information any specific router within the network must store and process
- B. to reduce the impact of topology changes
- C. to isolate the impact of DDoS attacks
- D. to improve optimal routing within the network
Answer: A,B
Explanation:
Section: (none)
Explanation/Reference:
NEW QUESTION 136
Refer to Exhibit.
Which three layers must use cisco nonstop forwarding to reduce service impact in case of failure?
- A. Enterprise Core
- B. Enterprise Non-Routed Access Layer
- C. Enterprise Edge
- D. Enterprise Non-Routed Distribution Layer
- E. Service Provider Edge
- F. Dual-attached Server Layer
Answer: A,C,E
Explanation:
Explanation
https://www.cisco.com/en/US/technologies/tk869/tk769/technologies_white_paper0900aecd801dc5e2.html
NEW QUESTION 137
You are designing a GET VPN solution consisting of 30 group members. Which measure helps product encrypted user traffic from replay attacks?
- A. RSA-encrypted nonce
- B. nonce payload
- C. counter based anti-replay
- D. time-based anti-replay
- E. digital certificates
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/products/collateral/security/group-encrypted-transport-vpn/GETVPN_DIG_
NEW QUESTION 138
DRAG DROP
Drag and drop the technology details or features support on the left into the corresponding Layer 2 multipath technologies on the right. Not all options will be used.
Answer:
Explanation:
NEW QUESTION 139
DRAG DROP
Answer:
Explanation:
NEW QUESTION 140
Refer to the exhibit.
You are designing an MPLS network with Layer 3 VPNs, where the traffic path must be the same in both directions inside the MPLS network to ensure that symmetric routing occurs.
The sites are connected to two PE routers. Which two design considerations will allow you to achieve this symmetric routing? (Choose two.)
- A. There should not be any equal cost paths for IGP inside the MPLS backbone, the IGP routing should use the same path in both directions, and the BGP routing does not matter.
- B. When MPLS TE is used, the bidirectional TE tunnel automatically provides symmetric routing.
- C. There should not be any equal cost paths for BGP inside the MPLS backbone, the BGP routing should use the same path in both directions, and the IGP routing does not matter.
- D. The MPLE TE tunnels should be set up in both directions so that the same path is used.
- E. There should not be any equal cost paths for the IGP and the BGP inside the MPLS backbone, and both IGP and BGP routing should use the same path in both directions.
Answer: D,E
NEW QUESTION 141
A mobile network operator is designing an NGN backhaul and plans to migrate their legacy
SDH and SONET-based transport network to a packet-based transport network. The NGN network must achieve similar failover and failback times as the legacy network (50 milliseconds). Which method does allow for similar failover and failback times on the new packet-based network?
- A. UDLC
- B. E-OAM
- C. BPDU
- D. BFD
Answer: B
NEW QUESTION 142
You are the lead network designer hired by Service Provider XYZ to deploy CoS functionality on the core MPLS network (P routers). The goal of the network design is to provide a complete CoS solution to all customers that purchase services such as dedicated internet access, MPLS L3VPN, and L2VPN (pseudowire). Service Provider XYZ has these design requirements:
- The network supports four service queues with equal treatment for delay, jitter, and packet loss.
- Queues are numbered 0-3, where 0 is the default queue.
- Three queues have one treatment.
- One queue has either one or two treatments.
How would you design your solution to map the DSCP value properly so that the traffic is assigned
35
to the respective queues in the Service Provider XYZ MPLS core network?
- A. Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS PE routers.
- B. Based on the DSCP value, traffic is mapped automatically into appropriate queues in the MPLS CE routers.
- C. Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS P routers.
- D. Classify traffic according to DSCP value into appropriate P router queues.
Answer: A
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 143
Drag and drop the optical technology design characteristics on the left to the correct optical technologies on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION 144
Which two statements about the various types or DevOps tools are true? (Choose two)
- A. Puppet and Chef are written in Python, Python skills are a must to operate these two.
- B. Puppet requires the installation of a master (server) and agents (clients) architecture for configuring systems.
- C. Salt cannot communicate with clients through general SSH, it use minions client agents only.
- D. Ansible does not require agent node installation and uses SSH for performing all tasks.
- E. Chef and Puppet are much more attuned to the needs of system administrators.
Answer: B,D
NEW QUESTION 145
A engineer has been tasked to design an IPv6 wireless sensor network using IEEE 802.15.4 to support an IoT project. Which two protocols does the engineer need to utilize for this design? (Choose two)
802.11
- A. 802.11ac
- B. 802.11ax
- C. VPN
- D. 6LoWPAN
Answer: B,D
NEW QUESTION 146
Which three items do you recommend for control plane hardening of an infrastructure device? (Choose three)
- A. Control Plane Policing
- B. Warning banners
- C. SNMPv3
- D. Redundant AAA servers
- E. To enable unused services
- F. Routing protocol authentication
Answer: A,C,F
NEW QUESTION 147
You are the lead network designer hired by Service Provider XYZ to deploy CoS functionality on the core MPLS network (P routers). The goal of the network design is to provide a complete CoS solution to all customers that purchase services such as dedicated internet access, MPLS L3VPN, and L2VPN (pseudowire). Service Provider XYZ has these design requirements:
The network supports four service queues with equal treatment for delay, jitter,
and packet loss.
Queues are numbered 0-3, where 0 is the default queue.
Three queues have one treatment.
One queue has either one or two treatments.
- ---
How would you design your solution to map the DSCP value properly so that the traffic is
assigned to the respective queues in the Service Provider XYZ MPLS core network?
- A. Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS PE routers.
- B. Based on the DSCP value, traffic is mapped automatically into appropriate queues in the MPLS CE routers.
- C. Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS P routers.
- D. Classify traffic according to DSCP value into appropriate P router queues.
Answer: A
NEW QUESTION 148
Which solution provides interoperability and protects data traffic from eavesdropping?
- A. Cisco MPLS TE
- B. DMVPN
- C. GET-VPN
- D. IPsec-VPN
Answer: D
NEW QUESTION 149
......
Realistic Prep4King 352-001 Dumps PDF - 100% Passing Guarantee: https://www.prep4king.com/352-001-exam-prep-material.html
