Latest Cisco 352-001 Exam Question - 100% Passing Assurance
                                      C   i s  c o 352-001 Dumps
Cisco ADVDESIGN
For More Info:
https://www.dumps4download.us/free-352-001/cisco-question-answers.html
 
Question: 1 
   
The cloud service provider CSP is planning to launch five data centers in Egypt, United Arab Emirates, 
Saudi Arabia, Qatar and Turkey. CSP is looking for VLAN extension and DCIs between these five data 
centers to allow for software replication, where original and backup VMs must be on the same subnet. 
Which tunneling technology must they use?  
 
A. VPLS  
B. IPsec VPN  
C. VPWS  
D. L2TPv3  
 
Answer: A      
 
Question: 2 
   
As part of network design, two geographically separated data centers must be interconnected using 
Ethernet-over-MPLS pseudowire. The link between the sites is stable, the topology has no apparent 
loops, and the root bridges for the respective VLANs are stable and unchanging. Which aspect must be 
the part of the design to mitigate the risk of connectivity issues between the data centers?  
 
A. Enable 802.1d on one data center, and 802.1w on the other.  
B. Ensure that the spanning tree diameter for one or more VLANs is not too large.  
C. Enable UDLD on the link between the data centers.  
D. Enable root guard on the link between the data centers.  
 
Answer: B      
 
Question: 3 
   
Which load balancing option for IP-only traffic is the least efficient in terms of EtherChannel physical 
links utilization?  
 
A. On a per source IP address basis  
B. On a per destination MAC address basis  
C. On a per destination IP address basis  
D. On a per port number basis  
 
Answer: B      
 
 
Question: 4 
   
A service provider wants to use a controller to automate the provisioning of service function chaining. 
Which two overlay technologies can be used with EVPN MP-BGP to create the service chains in the data 
center?  
 
A. VXLAN  
B. MPLS L2VPN  
C. Provider Backbone Bridging EVPN  
D. 802.1Q  
 
Answer: A      
 
Question: 5 
   
Company ABC is using an Ethernet virtual circuit as its provider’s DCI solution. A goal is to reduce the 
time to detect the link failure. Which protocol accomplishes this goal?  
 
A. UDLD  
B. Spanning tree bridge assurance  
C. Link aggregation group  
D. Ethernet OAM  
 
Answer: D      
 
Question: 6 
   
ACME Corporation is integrating IPv6 into their network, which relies heavily on multicast distribution of 
data. Which two IPv6 integration technologies support IPv6 multicast? (Choose two.)  
 
A. 6VPE  
B. 6PE  
C. dual stack  
D. ISATAP  
E. 6to4  
F. IPv6INIP  
 
Answer: C, E      
 
Question: 7 
 
   
What is an implication of using route reflectors in an iBGP topology?  
 
A. Route reflection limits the total number of iBGP routers.  
B. Route reflection causes traffic to flow in a hub-and-spoke fashion.  
C. The manipulation of BGP attributes is not supported on the other routers than the route reflectors.  
D. Route reflectors can create routing loops when more than one router reflector is used in the same 
cluster.  
E. Multipath information is difficult to propagate in a route reflector topology.  
 
Answer: E      
 
Question: 8 
   
What are two benefits of following a structured hierarchical and modular design? (Choose two.)  
 
A. Each component can be designed independently for its role.  
B. Each component can be managed independently based on its role.  
C. Each component can be funded by different organizations based on its role.  
D. Each component can support multiple roles based on the requirements.  
E. Each component can provide redundancy for applications and services.  
 
Answer: A, B      
 
Question: 9 
   
Which three options are important design functions of IPv6 first-hop security? (Choose three)  
 
A. It prevents rogue DHCP servers farms assigning IPv6 addresses.  
B. It prevents IPv6 packets fragmentation.  
C. It limits IPv6 route the advertisement in the network.  
D. It implements a broadcast-control mechanism.  
E. It suppresses excessive multicast neighbor discovery.  
F. It implements multihoming security.  
 
Answer: A, C, E      
 
Question: 10 
   
You have been asked to design a wireless network solution that will implement context-aware services 
on an existing network that was initially deployed for data traffic only. Which two design principles 
 
would you follow to increase the location accuracy with the least possible impact on the current setup? 
(Choose two.)  
 
A. Use directional antennas to provide better cell separation.  
B. Add access points along the perimeter of the coverage area.  
C. Install additional APs in monitor mode where the co-channel interference would otherwise be 
affected.  
D. Increase the AP density to create an average inter-access point distance of less than 40 ft.| 
12.2meters  
E. Fine tune the access point’s radio configuration to have a higher average transmission power to 
achieve better coverage.  
 
Answer: A, D      
 
Question: 11 
   
Refer to the exhibit.  
 
Which data format is used in this REST API call?  
 
A. JSON  
B. HTMLv5  
C. HTML  
D. XML  
E. BASH  
 
Answer: A      
 
Question: 12 
   
DRAG DROP 
Drag and drop the design characteristics of GET VPN from the left to the right. Not all options are used.  
 
 
 
Answer: A, C, D  
 
Question: 13 
 
Which major block is not included in the ETSI network Function Virtualization reference framework?  
 
A. Network Function Virtualization Infrastructure  
B. Network Function Virtualization Management and Orchestration  
C. Network Function Virtualization Policy Manager  
D. Virtualized Network Function/ Element Management Systems  
 
Answer: C      
 
Question: 14 
   
Refer to the exhibit.  
 
 
 This new OSPF network has four areas, but the hub-and-spoke area experiences frequent flapping. In 
order to fix this design failure, which two mechanisms can you use to isolate the data center area from 
the hub-and-spoke area without losing Ip connectivity? (Choose two)  
 
A. Use OSPF distribute-list filtering on router A  
B. Deploy a prefix summarization on router D  
C. Make the data center area a NSSA  
D. Make the data center area totally stub  
E. Convert the data center area to EIGRP protocol  
 
Answer: B, D      
 
 
Question: 15 
   
Which IEEE standard is commonly used at the data link layer for an access network, in an IoT 
environment?  
 
A. Wireless Regional Area Network  
B. Low-Rate Wireless Network  
C. Wireless Local Area Network  
D. Broadband wireless metropolitan Network  
 
Answer: B      
 
Question: 16 
   
Which feature or technology that affects the operations of IPsec should be taken into account when 
designing an IPsec network using Authentication header?  
 
A. TCP MSS adjustment  
B. Certificate-based authentication  
C. Transform set  
D. NAT  
 
Answer: D      
 
Question: 17 
   
Which option lists the cloud service models?  
 
A. Internet as a Service, Platform as a Service, and Storage as a Service.  
B. Infrastructure as a Service, Platform as a Service, and Storage as a Service.  
C. Infrastructure as a Service, Platform as a Service, and Software as a Service.  
D. Internet as a Service, Product as a Service, and Storage as a Service.  
E. Internet as a Service, Platform as a Service, and Software as a Service.  
 
Answer: C      
 
Question: 18 
   
Refer to the exhibit.  
 
 
A customer interconnected hundreds of branch offices into a single DMVPN network, with the HUB in 
the main data center. Due to security policies, the customer requires that the default route for all 
Internet traffic from the users at the branches must go through the tunnel and the only connections that 
are allowed to and from the branch router over the local internet circuit are the DMVPN tunnels. Which 
two combined actions must you take on the branch router to address these security requirements and 
keep the solution scalable? (Choose two)  
 
A. Place the WAN interface in a front-door VRF, leaving the tunnel interface in the default routing 
instance  
B. Protect the WAN interface by an inbound ACL that permits only IPsec-related traffic  
C. Implement a zone-based firewall that allows only IPsec-related traffic from zone UNTRUSTED to zone 
TRUSTED  
D. Add a host route for the public IP address of each remote branch and HUB routers that points directly 
to the local ISP, and add a default route that points to the tunnel  
E. Use a floating default route with the preferred path over the tunnel and a backup path over the 
Internet natively  
 
Answer: A, B      
 
Question: 19 
   
When you design a network that uses IPsec, where can you reduce MTU to avoid network 
fragmentation?  
 
A. on both ends of the TCP connection  
 
B. on the side closest to the client  
C. on the side closest to the server  
D. in the WAN  
 
Answer: A      
 
Question: 20 
   
Refer to the exhibit.  
 
How should you redesign this network running BGP to improve availability of the routers 1A and 1B at 
the core site?  
 
A. Deploy BGP PIC  
B. Use link bundles over multiple slots  
C. Enable graceful restart  
D. Create a multichassis system with the two routers  
 
Answer: A      
 
Question: 21 
   
Which statement about TAP and TUN devices, which are used in a Linux/KVM cloud deployment model, 
is true?  
 
A. TUN is for handling IP packets, but TAP is for handling Ethernet frames  
B. TUN is for handling Ethernet frames, but TAP is for handling IP packets  
C. TUN is for tunneling IP packets, but TAP is for tapping IP packets  
D. TUN is for tunneling Ethernet frames, but TAP is for tapping Ethernet frames  
 
Answer: A      
 
Question: 22 
 
   
Refer to the exhibit.  
 
This network is running IS-IS as the single routing protocol and the LSP and SPF timers are aggressively 
configured so the network converges in subsecond. The customer reports that router B had a memory 
crash and reloaded. Which resulted in some packets from the application being lost. The application 
servers are behind router G and the end users are behind router H, which design change should be 
made to prevent this packet-loss problem from reoccurring?  
 
A. Use asymmetric carrier delay timer  
B. Deploy all links as point-to-point  
C. Redesign the network as a flat level 2  
D. Optimize the LSP/SPF timers to send LSPs immediately after a topology change  
E. Enable the advertisement of the overload bit for a specific amount of time after reload on router B  
 
Answer: E      
 
Question: 23 
   
What is a design application of control plane policing?  
 
A. CPP protects the control plane from reconnaissance and or denial-of-service attacks  
B. CPP protects the forwarding plane by rate –limiting excessive routing protocol traffic  
C. CPP protects the forwarding plane by allowing legitimate traffic and dropping excessive traffic  
D. CPP drop malformed packet that are sent to the CPU  
 
Answer: A      
 
Question: 24 
   
A regional ISP is running MPLS TE. These tunnels are configured manually using paths. Which technology 
centralizes the traffic engineering decisions to reduce operational complexity?  
 
A. BGP Link State  
 
B. DiffServ-TE  
C. TE autobandwidth  
D. Shared Risk link Group  
 
Answer: C      
 
Question: 25 
   
In which two ways is a network design improved by including IP Event Dampening? (Choose two)  
 
A. Provides sub-second convergence  
B. Quickly detects network failures  
C. Prevent routing loops  
D. Improves network stability  
E. Reduces processing load  
 
Answer: D, E