Question 1

For which two reasons do you choose L2TPv3 over other technologies for a VPN solution? (Choose two.)

Accepted Answer

A)  The VPN solution should support Frame Relay to Ethernet pseudowire connections 
B)  The VPN solution does not contain MPLS on the network core 
C)  The VPN solution should tunnel Layer 2 frames and Layer 3 packets 
D)  The VPN solution requires multipoint Ethernet LAN service 
E)  The VPN solution should be industry-standard 
A)  The VPN solution should support Frame Relay to Ethernet pseudowire connections 
B)  The VPN solution does not contain MPLS on the network core 
C)  The VPN solution should tunnel Layer 2 frames and Layer 3 packets 
D)  The VPN solution requires multipoint Ethernet LAN service 
E)  The VPN solution should be industry-standard

Question 2

After a large EIGRP network had automatic summarization enabled throughout, it started experiencing routing loops. Which action should you take to quickly resolve the routing loops yet continue to perform summarization?

Accepted Answer

A)  Redistribute connected routes atmajor IP network boundaries. 
B)  Redesign the IP addressing scheme. 
C)  Increase the AD of the automatically summarization with more specific summary routes. 
D)  Replace the automatic summarization with more specific summary routes. 
A)  Redistribute connected routes atmajor IP network boundaries. 
B)  Redesign the IP addressing scheme. 
C)  Increase the AD of the automatically summarization with more specific summary routes. 
D)  Replace the automatic summarization with more specific summary routes.

Question 3

Which is the way that an OSPF ABR uses to prevent summary route information from being re-advertised from an area into the network core (Area 0)?

Accepted Answer

A)  It advertises only inter-area summaries to the backbone. 
B)  It advertises only intra-area summaries to the backbone. 
C)  It sends only locally originated summaries to the backbone. 
D)  It compares the area number on the summary LSA to the local area. 
A)  It advertises only inter-area summaries to the backbone. 
B)  It advertises only intra-area summaries to the backbone. 
C)  It sends only locally originated summaries to the backbone. 
D)  It compares the area number on the summary LSA to the local area.

Question 4

NetFlow provides valuable information about network users and applications, peak usage times, and traffic routing. Which function is of NetFlow?

Accepted Answer

A)  monitor configuration changes 
B)  monitor CPU utilization 
C)  monitor link utilization 
D)  generate traps for failure conditions 
A)  monitor configuration changes 
B)  monitor CPU utilization 
C)  monitor link utilization 
D)  generate traps for failure conditions

Question 5

Refer to the exhibit. "Pass Any Exam. Any Time." - www.actualtests.com 17 Cisco 352-001 Exam   How would you adjust the design to improve convergence on the network?

Accepted Answer

A)  Add an intra-POP link between routers 1A and 1B, and enable IP LFA FRR. 
B)  Use an IP SLA between the end stations to detect path failures. 
C)  Enable SSO-NSF on routers 1A and 1B. 
D)  Use BGP to connect the sites over the WAN. 
A)  Add an intra-POP link between routers 1A and 1B, and enable IP LFA FRR. 
B)  Use an IP SLA between the end stations to detect path failures. 
C)  Enable SSO-NSF on routers 1A and 1B. 
D)  Use BGP to connect the sites over the WAN.

Question 6

Your organization is working on a design solution for a new Internet-based remote access virtual private network that has 1000 remote sites. A network administrator recommends GETVPN as the model because the network of today uses DMVPN, which results in a lot of background NHRP control traffic. What is a potential problem with using GETVPN for this design solution?

Accepted Answer

A)  GETVPN would require a high level of background traffic to maintain its IPsec SAs. 
B)  GETVPN is not scalable to a large number of remote sites. 
C)  GETVPN and DMVPN will not interoperate. 
D)  GETVPN key servers would be on public, hacker-reachable space and need higher security. 
A)  GETVPN would require a high level of background traffic to maintain its IPsec SAs. 
B)  GETVPN is not scalable to a large number of remote sites. 
C)  GETVPN and DMVPN will not interoperate. 
D)  GETVPN key servers would be on public, hacker-reachable space and need higher security.

Question 7

A service provider sets up LSP among all the edge routers in its network by using LDP. A user would like to maintain its DSCP marking across the service provider backbone. Mark the MPLS packets with the appropriate EXP values according to QoS policies. Which step should be taken to classify and queue packets on egress nodes on the basis of EXP marking?

Accepted Answer

A)  disable penultimate hop popping 
B)  use MPLS network-wide QoS propagation 
C)  copy IP DSCP at the ingress into MPLS EXP 
D)  copy MPLS EXP at penultimate hop into DSCP 
A)  disable penultimate hop popping 
B)  use MPLS network-wide QoS propagation 
C)  copy IP DSCP at the ingress into MPLS EXP 
D)  copy MPLS EXP at penultimate hop into DSCP

Question 8

You are performing a BGP design review for a service provider that offers MPLS-based services to their end customers. The network is comprised of several PE routers that run iBGP with a pair of route reflectors for all BGP address families. Which two options about the use of Constrained Route Distribution for BGP/MPLS VPNs are true? (Choose two.)

Accepted Answer

A)  This feature must be enabled on all devices in the network at the same time. 
B)  The RR must advertise the default route target filter toward the PE routers. 
C)  The RRs do not need to advertise any route target filter toward the PE routers. 
D)  Both PE and RR routers must support this feature. 
A)  This feature must be enabled on all devices in the network at the same time. 
B)  The RR must advertise the default route target filter toward the PE routers. 
C)  The RRs do not need to advertise any route target filter toward the PE routers. 
D)  Both PE and RR routers must support this feature.

Question 9

LLQ is short for Low Latency Queue .VoIP traffic is mapped to (LLQ) over a slow speed link. Which kind of delay will seriously affect the quality of voice for this link?

Accepted Answer

A)  encoding delay 
B)  serialization delay 
C)  propagation delay 
D)  packetization delay 
A)  encoding delay 
B)  serialization delay 
C)  propagation delay 
D)  packetization delay

Question 10

Which statement correctly describes OSPF incremental SPF?

Accepted Answer

A)  iSPF is negotiated during the OSPF adjacency process. 
B)  iSPF must be enabled on all routers in the domain. 
C)  iSPF must be enabled on all routers in a particular area. 
D)  iSPF is local to the router and does not require interoperability. 
A)  iSPF is negotiated during the OSPF adjacency process. 
B)  iSPF must be enabled on all routers in the domain. 
C)  iSPF must be enabled on all routers in a particular area. 
D)  iSPF is local to the router and does not require interoperability.

Question 11

Refer to the exhibit.   In this design, which technology would provide for the best use of resources to provide end-to-end Layer 2 connectivity? "Pass Any Exam. Any Time." - www.actualtests.com 12 Cisco 352-001 Exam

Accepted Answer

A)  MSTP 
B)  PAgP 
C)  Multichassis EtherChannel 
D)  LACP 
A)  MSTP 
B)  PAgP 
C)  Multichassis EtherChannel 
D)  LACP

Question 12

You are tasked with implementing a 1000-phone remote access solution, where phone calls will traverse a WAN edge router. Assuming all of the following features are supported in a hardware- assisted manner, which of the following will have the most negative impact on the delay of the packet?

Accepted Answer

A)  encryption 
B)  stateful firewall 
C)  MPLS encapsulation 
D)  GRE encapsulation 
A)  encryption 
B)  stateful firewall 
C)  MPLS encapsulation 
D)  GRE encapsulation

Question 13

A small to medium-sized enterprise customer has a campus network that consists of 10GE and 40GE wired links with an Internet access link of 1GE to the service provider. The network connects to the Internet using redundant firewalls. Sometimes user traffic saturates the core network links. The customer wants to deploy deep packet inspection for monitoring traffic generated by its staff leaving the customer network. Which place in the network should you recommend DPI to be deployed?

Accepted Answer

A)  at the data center 
B)  in the core layer 
C)  in the WAN 
D)  at the Internet gateway 
E)  at theaccess layer 
A)  at the data center 
B)  in the core layer 
C)  in the WAN 
D)  at the Internet gateway 
E)  at theaccess layer

Question 14

What can be prevented by configuring the password policy when using LDAP servers?

Accepted Answer

A)  man-in-the-middle attacks 
B)  dictionary attacks 
C)  DoS attacks 
D)  flood attacks 
A)  man-in-the-middle attacks 
B)  dictionary attacks 
C)  DoS attacks 
D)  flood attacks

Question 15

Your enterprise customer has asked where they should deploy flow monitoring in their network to monitor traffic between branch offices. What is your design recommendation?

Accepted Answer

A)  at the edge of the network so that user traffic will be seen 
B)  at the central site, because all traffic from the remotes will be seen there. 
C)  in the core, because all traffic will be seen there 
D)  in the data center, because all user traffic will be seen there 
A)  at the edge of the network so that user traffic will be seen 
B)  at the central site, because all traffic from the remotes will be seen there. 
C)  in the core, because all traffic will be seen there 
D)  in the data center, because all user traffic will be seen there

Question 16

You are asked to design a large campus network that will be using multicast for data transport. Which feature should be enabled at the Layer 2 access edge for host-only ports?

Accepted Answer

A)  PortFast 
B)  BPDU guard 
C)  PIM-SM 
D)  PIM query interval 
A)  PortFast 
B)  BPDU guard 
C)  PIM-SM 
D)  PIM query interval

Question 17

A company has these requirements for access to their wireless and wired corporate LANs using 802.1x: - Client devices that are corporate assets and have been joined to the Active Directory domain are allowed access. - Personal devices must not be allowed access. - Clients and access servers must be mutually authenticated. Which solution meets these requirements?

Accepted Answer

A)  Protected Extensible Authentication Protocol/Microsoft Challenge Handshake Authentication Protocol Version 2 with user authentication 
B)  Extensible Authentication Protocol-Transport Layer Security with machine authentication 
C)  Extensible Authentication Protocol-Transport Layer Security with user authentication 
D)  Protected Extensible Authentication Protocol/Microsoft Challenge Handshake Authentication Protocol Version 2 with machine authentication 
A)  Protected Extensible Authentication Protocol/Microsoft Challenge Handshake Authentication Protocol Version 2 with user authentication 
B)  Extensible Authentication Protocol-Transport Layer Security with machine authentication 
C)  Extensible Authentication Protocol-Transport Layer Security with user authentication 
D)  Protected Extensible Authentication Protocol/Microsoft Challenge Handshake Authentication Protocol Version 2 with machine authentication

Question 18

Acme Corporation indicates that their network design must support the ability to scale to support a high number of remote sites. Which IGP is considered to scale better for a hub-and-spoke topology?

Accepted Answer

A)  BGP 
B)  OSPF 
C)  IS-IS 
D)  EIGRP 
A)  BGP 
B)  OSPF 
C)  IS-IS 
D)  EIGRP

Question 19

You are the Cisco Network Designer in P4S. Which two statements about Layer 3 access designs are correct? (Choose two.)

Accepted Answer

A)  Convergence time is fractionally slower than STP. 
B)  Broadcast and fault domains are increased. 
C)  IP address space is difficult to manage. 
D)  Fast uplink convergence is supported for failover and fallback. 
A)  Convergence time is fractionally slower than STP. 
B)  Broadcast and fault domains are increased. 
C)  IP address space is difficult to manage. 
D)  Fast uplink convergence is supported for failover and fallback.

Question 20

You are the Cisco Network Designer in P4S. You are designing an e-Commerce module, which routing statement is correct?

Accepted Answer

A)  Routing is mostly static. 
B)  Hardcoded IP addresses are used to support failover. 
C)  Inbound servers use the CSM or ACE as the default gateway. 
D)  VLANs between the access layer switches are used for FHRP protocols. 
A)  Routing is mostly static. 
B)  Hardcoded IP addresses are used to support failover. 
C)  Inbound servers use the CSM or ACE as the default gateway. 
D)  VLANs between the access layer switches are used for FHRP protocols.

Exam 44: Deploying Cisco Unified Contact Center Express

For which two reasons do you choose L2TPv3 over other technologies for a VPN solution? (Choose two.)

After a large EIGRP network had automatic summarization enabled throughout, it started experiencing routing loops. Which action should you take to quickly resolve the routing loops yet continue to perform summarization?

Which is the way that an OSPF ABR uses to prevent summary route information from being re-advertised from an area into the network core (Area 0)?

NetFlow provides valuable information about network users and applications, peak usage times, and traffic routing. Which function is of NetFlow?

Refer to the exhibit. "Pass Any Exam. Any Time." - www.actualtests.com 17 Cisco 352-001 Exam How would you adjust the design to improve convergence on the network?

LLQ is short for Low Latency Queue .VoIP traffic is mapped to (LLQ) over a slow speed link. Which kind of delay will seriously affect the quality of voice for this link?

Which statement correctly describes OSPF incremental SPF?

Refer to the exhibit. In this design, which technology would provide for the best use of resources to provide end-to-end Layer 2 connectivity? "Pass Any Exam. Any Time." - www.actualtests.com 12 Cisco 352-001 Exam

You are tasked with implementing a 1000-phone remote access solution, where phone calls will traverse a WAN edge router. Assuming all of the following features are supported in a hardware- assisted manner, which of the following will have the most negative impact on the delay of the packet?

What can be prevented by configuring the password policy when using LDAP servers?

Your enterprise customer has asked where they should deploy flow monitoring in their network to monitor traffic between branch offices. What is your design recommendation?

You are asked to design a large campus network that will be using multicast for data transport. Which feature should be enabled at the Layer 2 access edge for host-only ports?

Acme Corporation indicates that their network design must support the ability to scale to support a high number of remote sites. Which IGP is considered to scale better for a hub-and-spoke topology?

You are the Cisco Network Designer in P4S. Which two statements about Layer 3 access designs are correct? (Choose two.)

You are the Cisco Network Designer in P4S. You are designing an e-Commerce module, which routing statement is correct?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters