352-001 Exam Dumps - PDF Questions and Testing Engine
352-001 Dumps - The Sure Way To Pass Exam
NEW QUESTION 73
You are designing an IEEE 802.1X solution for a customer, where the network supports a large
number of IP phones and printers. You plan to configure MAC address bypass for the phones and printers. What is your primary design and security concern?
- A. the additional AAA traffic on the network
- B. the placement of the AAA server
- C. the potential of MAC address spoofing
- D. the scaling of the MAC address database
Answer: C
NEW QUESTION 74
FIFO queuing is being used on all routers in a network. The primary application running on the network is data backup using FTP. At certain times, users experience cyclical performance degradation.
What two things might mitigate this problem and help ensure bandwidth is used effectively in the network?
(Choose two.)
- A. traffic policing
- B. MDRR
- C. WRED
- D. CB-WFQ
- E. traffic shaping
Answer: C,D
NEW QUESTION 75
A company plans to use BFD between its routers to detect a connectivity problem inside the switched network. An IPS is transparently installed between the switches. Which packets should the IPS forward for BFD to work under all circumstances?
- A. IP packets with the multicast IP destination address
- B. fragmented packets with the do-not-fragment bit set
- C. IP packets with identical source and destination IP addresses
- D. IP packets with the multicast IP source address
- E. IP packets with the destination IP address 0.0.0.0
- F. IP packets with broadcast IP source addresses
Answer: C
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 76
You must change a network design to include link-state topology summarization. Which two effects of route summarization should you be concerned about? (Choose two)
- A. Packet reordering
- B. Not scalable
- C. Suboptimal routing
- D. Traffic black-holing
- E. Slow convergence
Answer: C,D
NEW QUESTION 77
Refer to the exhibit.
Acme Corporation hired you as a network designer to upgrade their network so that it supports IPv4 and IPv6 multicast. Which two protocols are needed on the LAN switch? (Choose two.)
- A. PIM sparse mode
- B. MLD snooping
- C. IGMP snooping
- D. Source Specific Multicast
- E. PIM snooping
Answer: B,C
NEW QUESTION 78
Which mechanism should be added to a network design to identify unidirectional Spanning Tree Protocol failures through BPDU loss?
- A. BPDU guard?
- B. root guard
- C. loop guard
- D. UDLD
Answer: C
NEW QUESTION 79
Which option is best suited to maintain Layer 3 separation in a multitenant data center design?
- A. VRF
- B. VXLAN
- C. VLAN
- D. VDC
Answer: A
Explanation:
Explanation/Reference:
Explanation:
References:
NEW QUESTION 80
AS100 and AS200 each have two peering points in different parts of their network. AS100 would like to use one of the links and keep the other link as backup. What should be changed for the design inside AS100 for prefixes received from AS200?
- A. weight
- B. AS-PATH
- C. local preference
- D. MED
Answer: C
NEW QUESTION 81
VARIATION 2
Refer to the exhibit. The service provider ACME Internet just added a 100Gbps peering in Paris to use as the default for inbound traffic from Very Big ISP. Which routing policy achieves the desired outcome?
- A. Apply an export policy in Pans by applying a MED or Community attribute with a preference M Very Big ISP ads upon
- B. Apply an export policy in New York and Tokyo that adds a Weight attribute to routes sent to Very Big ISP via Paris
- C. Use traffic engineering by injecting a preferred LocalPref attribute to routes advertised to Very Big ISP in Paris
- D. Apply an export policy that only permits a default route in Brussels and Zurich
Answer: A
NEW QUESTION 82 
Refer to the exhibit. A new high availability DB sever cluster is installed in the network . these two servers require high bandwidth and low latency Layer 2 connectivity for database replication. Which solution supports these requirements?
- A. Add two new links between SW1 and SW2 configured as REP segment 3
- B. Add two new links between SW1 and SW2 configured as LACP trunk with STP
- C. Add secondary links to REP segments 1 and 2
- D. Add two new links between SW1 and SW2 configured as REP segments 1 and 2 respectively
Answer: A
NEW QUESTION 83
Which three options are important design functions of IPv6 first-hop security? (Choose three)
- A. It implements a broadcast-control mechanism.
- B. It limits IPv6 route the advertisement in the network.
- C. It implements multihoming security.
- D. It suppresses excessive multicast neighbor discovery.
- E. It prevents rogue DHCP servers farms assigning IPv6 addresses.
- F. It prevents IPv6 packets fragmentation.
Answer: B,D,E
NEW QUESTION 84
Which ISAKMP feature can be used to reduce device CPU load by not sending keepalive messages for known active ISAKMP security associations?
- A. IKEv2
- B. main mode
- C. SPI
- D. DPD
Answer: D
NEW QUESTION 85
Which two aspects are considered when designing a dual hub, dual DMVPN cloud topology? (Choose two.)
- A. recommended for high availability
- B. requires all sites to have dual Internet connections
- C. hub sites must connect to both DMVPN clouds
- D. spoke-to-spoke traffic will transit the hub unless spokes exchange dynamic routing directly
- E. will only work with single-tier headend architecture
Answer: A,E
NEW QUESTION 86
Which two options are true about the impact flooding domain boundaries have when built in OSPF?
(Choose two.)
- A. They isolate network failures within a domain.
- B. They decrease convergence time by reducing the complexity and size of the shortest path trees in the individual areas.
- C. They increase convergence time by adding the time required to run two full Shortest Path First computations on the area border routers.
- D. They decrease convergence time by automatically summarizing reachability information transmitted through the network, thereby decreasing the number of routes that must be installed in each router's routing table.
Answer: A,B
Explanation:
Section: (none)
Explanation/Reference:
NEW QUESTION 87
DRAG DROP
Drag and drop the design characteristics of GET VPN from the left to the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION 88
You are the Cisco Network Designer in P4S. Which layer
NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?
- A. Layer 4
- B. Layer 2
- C. Layer 3
- D. out-of-band
Answer: D
Explanation:
Section: (none)
Explanation/Reference:
NEW QUESTION 89
How should you compensate for jitter on an IP network so it carries real-time VolP traffic with acceptable voice transmission quality?
- A. Set up a playout buffer to play back the voice stream.
- B. Set up VAD to replace gaps on speech with comfort noise.
- C. Deploy RSVP for dynamic VolP packet classification.
- D. Change CODEC from G.729 to G.711.
Answer: A
NEW QUESTION 90
For the following items, which one is the weakness of rate limiting as a response to a DoS attack?
- A. Rate limiting does not detect attacks.
- B. Rate limiting only works on inbound traffic.
- C. Rate limiting does not drop enough packets.
- D. Rate limiting is too processor-intensive.
Answer: A
Explanation:
Section: (none)
Explanation/Reference:
NEW QUESTION 91
In a large enterprise network with multiple data centers and thousands of access devices, OSPF is becoming unstable due to link flapping. The current design has the access devices multihomed to large aggregation routers at each of the data centers. How would you redesign the network to improve stability?
- A. Add a layer of regional Layer 2 aggregation devices, but leave the ABR function on the data center aggregation routers.
- B. Add a layer of regional Layer 3 aggregation devices and move the ABR function to the regional aggregation device.
- C. Add a layer of regional Layer 3 aggregation devices, but leave the ABR function on the data center aggregation routers.
- D. Add a layer of regional Layer 2 aggregation devices and move the ABR function to the regional aggregation device.
Answer: B
NEW QUESTION 92
When creating a design plan for IPv6 integration, you decide to use stateless encapsulation of IPv6 packets into IPv4 tunnels between subscriber CPEs and a border relay. Which deployment technique allows for this functionality?
- A. Dual-Stack Lite
- B. 6rd
- C. DSTM
- D. 4rd
Answer: B
NEW QUESTION 93
Refer to the exhibit.
You are designing a loop-free hierarchical VPLS service. Which two design considerations should be implemented for the pseudowires between the N-PE and U-PE routers? (Choose two.)
- A. Enable split horizon toward the U-PE router.
- B. Disable split horizon toward the N-PE routers.
- C. Disable MAC learning on the N-PE routers.
- D. Enable split horizon toward the N-PE routers.
- E. Disable MAC learning on the U-PE route.
- F. Disable split horizon toward the U-PE router.
Answer: D,F
Explanation:
Explanation/Reference:
Explanation:
NEW QUESTION 94
Sun Stable is a global insurance company with headquarters located in Houston, Texas. The campus there is made up of a number of office buildings located within the same vicinity. In 2003, a new building, Building 331B was added. The additional building houses approximately 1000 employees. Rather than deploy a private branch exchange (PBX) in the new building, Sun Stable has decided to implement an IP telephony solution. External calls will be carried across a MAN link to another building, where a gateway connects into the worldwide PBX network of Sun Stable. Voice mail and unified messaging components are required and all IP phones and workstations should be on separate VLANs and IP subnets.
Which IP telephony deployment best suits their need?
- A. multisite with centralized call processing
- B. multisite with distributed call processing
- C. single-site
- D. clustering over the WAN
Answer: C
Explanation:
Section: (none)
Explanation/Reference:
NEW QUESTION 95
DRAG DROP
Answer:
Explanation:
NEW QUESTION 96
Refer to the exhibit.
How would you adjust the design to improve convergence on the network?
- A. Use an IP SLA between the end stations to detect path failures.
- B. Add an intra-POP link between routers 1A and 1B, and enable IP LFA FRR.
- C. Enable SSO-NSF on routers 1A and 1B.
- D. Use BGP to connect the sites over the WAN.
Answer: B
NEW QUESTION 97
......
How to study the 352-001 Exam
Actual4Cert expert team recommends you to prepare some notes on these topics along with it don't forget to practice Cisco 352-001 Exam exam dumps which been written by our expert team, Both these will help you a lot to clear this exam with good marks.
Pass Cisco 352-001 Exam Quickly With Actual4Cert: https://pass4sure.actual4cert.com/352-001-pass4sure-vce.html