Question 1

When designing a network, which two security features should be added to the design to protect hosts from potential IPv6 neighbor discovery denial of service attacks at the access layer? (Choose two.)

Accepted Answer

SEND (Secure Neighbor Discovery) and RA Guard are security features that can protect against IPv6 neighbor discovery denial of service attacks by ensuring the authenticity of neighbor discovery messages and filtering rogue router advertisements, respectively.

Question 2

You are the lead network designer hired by Service Provider XYZ to deploy CoS functionality on the core MPLS network (P routers). The goal of the network design is to provide a complete CoS solution to all customers that purchase services such as dedicated internet access, MPLS L3VPN, and L2VPN (pseudowire). Service Provider XYZ has these design requirements: - The network supports four service queues with equal treatment for delay, jitter, and packet loss. - Queues are numbered 0-3, where 0 is the default queue. - Three queues have one treatment. - One queue has either one or two treatments. How would you design your solution to map the DSCP value properly so that the traffic is assigned "Pass Any Exam. Any Time." - www.actualtests.com 35 Cisco 352-001 Exam to the respective queues in the Service Provider XYZ MPLS core network?

Accepted Answer

The answer of You are the lead network designer hired...

Question 3

A network designer wants to improve a company network design due to multiple network crashes. Which technology would allow for the restore of a network connection without informing the Layer 3 protocol?

Accepted Answer

Automatic protection switching allows for the restoration of a network connection at the physical layer without needing to inform or involve the Layer 3 protocol, ensuring quick recovery from failures.

Question 4

Refer to the exhibit.  An enterprise is migrating its single-area OSPF network from a Frame Relay WAN service to an MPLS L3VPN service. Frame Relay will remain in only a few sites that require increased resiliency via two different WAN connections. Which feature could be used in the ?MPLS VPN service provider network to support the design requirement by ensuring that during normal operation, intersite traffic will only use the MPLS VPN service and not the old Frame Relay service? "Pass Any Exam. Any Time." - www.actualtests.com 33 Cisco 352-001 Exam

Accepted Answer

The answer of Refer to the exhibit.  An enterprise...

Question 5

During a corporate merger, a network designer is asked for a solution that will provide connectivity between the two enterprise networks. The solution must have the ability to support video sessions so that the CEO can message merger activities to the employees. The designer decides to consider multicast as a transport with MSDP to provide redundancy. Which transport feature does the network designer need to apply to the interconnecting firewall to ensure that Source-Active messages between the MSDP peers can be sent in both enterprise networks?

Accepted Answer

MSDP (Multicast Source Discovery Protocol) uses unicast over a TCP connection to exchange Source-Active messages between peers.

Question 6

You have been hired to redesign a network due to issues with congestion. How will a router function if the QoS mechanism of congestion avoidance is integrated into the existing network design? "Pass Any Exam. Any Time." - www.actualtests.com 34 Cisco 352-001 Exam

Accepted Answer

WRED (Weighted Random Early Detection) is a congestion avoidance mechanism that helps manage packet loss by preemptively dropping packets before the queue becomes full, thus preventing congestion.

Question 7

A data center provider has designed a network using these requirements: - Two data center sites are connected to the public Internet. - Both data centers are connected to different Internet providers. - Both data centers are also directly connected with a private connection for the internal traffic, and public Internet traffic can also be routed at this direct connection. - The data center provider has only one /19 public IP address block. Under normal conditions, Internet traffic should be routed directly to the data center where the services are located. When one Internet connection fails, the complete traffic for both data centers should be routed by using the remaining Internet connection. In which two ways can this routing be achieved? (Choose two.)

Accepted Answer

Using path prepending and advertising the /19 block for backup ensures traffic is routed to the correct data center under normal conditions and rerouted during failures.

Question 8

Service provider XYZ plans to provide dedicated Internet access and MPLS L3VPN services to business customers. XYZ has these design specifications: - MP-BGP running on the core MPLS P routers with external Internet routes. - The core network will include 16 Point of Presence IP POPs throughout the Asia-Pacific region. - An additional nine non-P routers will use EBGP peering with multiple providers for Internet traffic. - An additional 50 PE routers will provide end customers with dedicated Internet access and L3VPN services throughout the Asia-Pacific region. In what two ways can the MP-BGP be removed from the MPLS P core routers and still provide dedicated Internet access and MPLS L3VPN services? (Choose two.)

Accepted Answer

The answer of Service provider XYZ plans to provide dedicated...

Question 9

Your network operations team is deploying Access Control Lists (ACLs) across your Internet gateways. They wish to place an ACL inbound on the Internet gateway interface facing the core "Pass Any Exam. Any Time." - www.actualtests.com 26 Cisco 352-001 Exam network (the "trusted" interface). Which one of these addresses would the ACL need for traffic sourced from the inside interface, to match the source address of the traffic?

Accepted Answer

The ACL should match the source address of traffic as it appears on the inside network, which is the inside local address.

Question 10

Tesla Radio GmbH is going to build a new research lab network based on a set of switches that would connect to their existing enterprise network. They are considering a design that would guarantee loop-free behavior within the set of switches. The design would also allow the group of switches to seem like a single switch to the enterprise network, because it is owned by a separate administrative group. Which Spanning Tree Protocol should be used to support the design requirements? "Pass Any Exam. Any Time." - www.actualtests.com 45 Cisco 352-001 Exam

Accepted Answer

IEEE 802.1s (Multiple Spanning Tree Protocol) allows multiple VLANs to be mapped to a single spanning tree instance, which can make a group of switches appear as a single switch to the enterprise network, meeting the design requirements.

Question 11

You are designing a wireless LAN with the following components: - High-density indoor access point deployment - 2.4-GHz and 5-GHz radios - 802.11a, 802.11g, and 802.11n mode wireless LAN clients Site survey results show negligible foreign WiFi and non-WiFi interference. What is the best method to decrease duty cycle (radio frequency utilization) and increase overall wireless LAN client performance for this design?

Accepted Answer

Disabling lower data rates forces clients to connect at higher data rates, reducing airtime usage and improving overall performance.

Question 12

When developing an MVPN design, which performance and scalability consideration must be taken into account? "Pass Any Exam. Any Time." - www.actualtests.com 40 Cisco 352-001 Exam

Accepted Answer

Multicast data sent to all PE routers on the default MDT can impact performance and scalability, as it may lead to unnecessary data replication and increased bandwidth usage across the network.

Question 13

You are designing a network using multipoint GRE tunnels and need to be able to detect when connectivity between the GRE tunnel endpoints is broken. Which statement is true about configuring keepalives for multipoint GRE tunnels?

Accepted Answer

The answer of You are designing a network using multipoint...

Question 14

You are identifying performance management requirements for a VoIP migration. What three key performance indicators would you use to track media quality? (Choose three.)

Accepted Answer

Delay, jitter, and packet loss are key performance indicators for tracking media quality in VoIP systems, as they directly affect the quality of voice transmission.

Question 15

A company has these requirements for access to their wireless and wired corporate LANs using 802.1x: - Client devices that are corporate assets and have been joined to the Active Directory domain are allowed access. - Personal devices must not be allowed access. - Clients and access servers must be mutually authenticated. Which solution meets these requirements?

Accepted Answer

EAP-TLS with machine authentication ensures that only corporate devices joined to the Active Directory domain are authenticated and allowed access, meeting the requirement for mutual authentication between clients and access servers.

Question 16

You have been tasked to create a Layer 2 network design that uses vPC to provide resiliency and avoid loops. vPC removes Layer 2 loops while providing redundancy through which mechanism? "Pass Any Exam. Any Time." - www.actualtests.com 47 Cisco 352-001 Exam

Accepted Answer

vPC (Virtual Port Channel) uses strict forwarding rules to prevent loops by ensuring that traffic is only forwarded on the active link, while the secondary link is kept in standby mode.

Question 17

"Pass Any Exam. Any Time." - www.actualtests.com 43 Cisco 352-001 Exam You are the lead IP/MPLS network designer of a service provider called XYZ. You are leading a design discussion regarding IPv6 implementation in the XYZ MPLS network, using MPLS 6PE/6VPE techniques. Currently, XYZ provides IPv4 multicast services over an MPLS network by using MVPN, and would like to provide parallel IPv6 multicast services. Which three multicast solutions should be enabled? (Choose three.)

Accepted Answer

The answer of "Pass Any Exam. Any Time." - www.actualtests.com...

Question 18

You are designing a Group Encrypted Transport virtual private network solution for an existing branch network. The existing network has the following characteristics: - 50 remote sites (with an additional 30 remote sites expected over the next 3 years) - Connectivity between all sites is via Multiprotocol Label Switching Layer 3 virtual private network service from a single provider - Open Shortest Path First is the routing protocol used between provider edge and customer edge routers - The customer edge routers will become group members performing the encryption between sites Which additional routing protocol would you use for the overlay routing between the group members?

Accepted Answer

No additional protocol is necessary because the existing OSPF routing protocol can be used for both the underlay and overlay routing.

Question 19

You are a network designer and have been asked to consult with your server operations team to further enhance the security of the network. The operations team provides you with these details about the network: - A pool of servers is accessed by numerous data centers and remote sites. - The servers are accessed via a cluster of firewalls. - The firewalls are configured properly and are not dropping traffic. - The firewalls occasionally cause asymmetric routing of traffic within the server data center. Which technology would you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

Accepted Answer

The answer of You are a network designer and have...

Question 20

Your organization is working on a design solution for a new Internet-based remote access virtual private network that has 1000 remote sites. A network administrator recommends GETVPN as the model because the network of today uses DMVPN, which results in a lot of background NHRP control traffic. What is a potential problem with using GETVPN for this design solution?

Accepted Answer

GETVPN key servers being on public space could expose them to potential attacks, requiring enhanced security measures.

Exam 44: Deploying Cisco Unified Contact Center Express