352-001 Exam Questions

Refer to the exhibit. Your company wants to sell its marketing research data to its strategic partners. All strategic partners currently have a Multipoint GRE VPN setup to your hub...

When designing large EIGRP networks, what is the benefit of route summarization when there are multiple paths to the same destination?

A network is designed to use OSPF to reach eBGP peers. Which condition should be avoided so that the eBGP peers do not flap continuously in case of link failure?

What is the definition of the TOGAF framework?

Which option described a difference between Ansible and Puppet?

You are designing a network solution to connect a primary data center to a disaster recovery site. The applications hosted on the site will be mainly web and email servers that are...

The Middle East-based cloud service provider, CSP, is planning to launch five data centers in Egypt, United Arab Emirates, Saudi Arabia, Qatar, and Turkey. CSP is looking for VLAN...

Which design option reduces the occurrence of IGP microloops?

You work for a service provider and must design a simple solution to provide Internet connectivity to an MPLS Layer 3 VPN customer whose IPv4 address block is 172.32.100.0/24. Whic...

You are reviewing the Layer 2 VPN service offering of a service provider. A top priority is meeting SLAs for its customers. Which OAM standard should you recommend to monitor custo...

You are designing a GET VPN solution for an existing branch network. The existing network has the following characteristics: 50 remote sites (with an additional 30 remote sites exp...

You are asked to design a traffic policy to restrict traffic that leaves a customer site. Which technology should you recommend to enforce a bandwidth limit, inbound and outbound,...

A service provider wants to use a controller to automate the provisioning of service function chaining. Which two overlay technologies can be used with EVPN MP-BGP to create the se...

What is a design consideration of policy-based routing?

Refer to the exhibit. Which data format is used in this REST API call?

You are the consultant network designer for a large GET VPN deployment for a large bank with national coverage. Between 1800 and 2000 remote locations connect to the central locati...

You are designing a network virtualization solution across an enterprise campus. The design requirements include the ability to virtualize the data plane and control plane using VL...

Which technology, implemented on aggregation-edge nodes at the aggregation layer, provides per-tenant isolation at Layer 3, with separate dedicated per-tenant routing and forwardin...

Which statement about TAP and TUN devices, which are used in a Linux/KVM cloud deployment model, is true?

Which two statements are design benefits of route summarization in a network? (Choose 2)

Refer to the exhibit. When data center 2 has a spanning-tree convergence event, data center 1 also sees high CPU utilization on its switches. Which mechanism can reduce high CPU is...

Refer to the exhibit. You are a network designer for AS65100, which buys transit from AS65200 and AS65300. AS65200 and AS65300 have a peering relationship and they both implement R...

Refer to the exhibit. You have designed this network using a Layer 3 MPLS service from a service provide, with dual Ethernet WAN access circuits and dual CE routers at every site....

In secure IP multicast, which protocol handles group key management?

Which item will be attacked by a DoS attack?

For the following items, which one is the weakness of rate limiting as a response to a DoS attack?

Which two benefits are of protecting the control plane of a network device? (Choose two.)

Which resource will be targeted by a TCP SYN flood attack?

You are the Cisco Network Designer for a Company. Which of these are important when determining how many users a NAS can support? (Select three)

Which action can identify and monitor denial of service attacks?

Which statement about IDS/IPS design is correct?

Which security benefit can be provided by IPv4 anycast for a service such as DNS?

What information can you get from TCP flags while assessing an attack?

You are the Cisco Network Designer in testking.com. In your company site, a NAS is both physically and logically in the traffic path. The NAS identifies clients solely based on the...

Which two disadvantages are of using proxy servers as compared to stateful firewalls? (Choose two)

Which IEEE standard is commonly used at the data link layer for an access network, in an IoT environment?

Which option lists the cloud service models?

Refer to the exhibit. A customer interconnected hundreds of branch offices into a single DMVPN network, with the HUB in the main data center. Due to security policies, the customer...

What is a design application of control plane policing?

A regional ISP is running MPLS TE. These tunnels are configured manually using paths. Which technology centralizes the traffic engineering decisions to reduce operational complexit...

An operations engineer asks for your help with a new switching deployment. The engineer confirms that STP is enabled on an edge switch, and a particular port is connected to anothe...

What are two possible drawbacks of ending Loop-Free Alternate to support fast convergence for most destination IGP prefixes? (Choose two)

Which option is a design consideration when using routers in a distributed hardware architecture?

Refer to the Exhibit. In which three Layers should you use nonstop Forwarding to reduce service impact in case of failure? (Choose three)

Which mechanism provides fast path failure detection?

A financial trading organization plans to monitor the network latency for multicast data feeds on a hop-by-hop basis. Which technology should be added to their design to support th...

A large enterprise network running IS-IS wants to deploy IGP traffic engineering, but they are concerned that the IS-IS default metrics are not flexible enough. Which feature must...

An ISP provides VoIP and internet services to its customers. For security reasons, these services must be transported in different MPLS Layer 3 VPNs over the ISP core network. The...

How can a network designer reduce the amount of LSA flooding occurring in a large, single area fully- meshed OSPF topology?

You are presented with requirements to design a development, testing and production environments. These environment should communicate with each other, yet they should be kept as s...