352-011 by Cisco Valid Free Exam Practice Test

Question 1

As part of network design, two geographically separated data centers must be interconnected using Ethernet-over-MPLS pseudowire. The link between the sites is stable, the topology has no apparent loops, and the root bridges for the respective VLANs are stable and unchanging. Which aspect must be the part of the design to mitigate the risk of connectivity issues between the data centers?

A. Ensure that the spanning tree diameter for one or more VLANs is not too large. B. Enable root guard on the link between the data centers. C. Enable UDLD on the link between the data centers. D. Enable Spanning Tree on one data center, and Rapid Reconfiguration of Spanning tree on the other

Correct Answer: A

Question 2

A financial trading organization plans to monitor the network latency for multicast data feeds on a hop-by-hop basis. Which technology should be added to their design to support this requirement?

A. SPAN B. NBAR C. IPFIX D. Precision Time Protocol

Correct Answer: D

Question 3

Which two control plane policer design options should you consider to achieve high availability? (Choose two)

A. Control plane policers must be processes before a forwarding decision is made B. Control plane policers are enforced in hardware to protect the software path, but they are hardware platform-dependent in terms of classification ability C. Control plane policers are really needed only on externally facing devices D. Control plane policers require that adequate protocols overhead are factored in to allow protocol convergence E. Control plane policers can cause the network management systems to create false alarms

Correct Answer: A,B

Question 4

Which MPLS attribute is required for links to carry a given MPLSTE tunnel?

A. Affinity B. Next-hop backup tunnel C. TE tunnel destination address D. Tunnel path-selection metric

Correct Answer: C

Question 5

Which native mechanism does OSPF use to prevent loops in MPLS VPNs?

A. CE devices that run OSPF set the DN bit toward the PE router B. CE devices that run OSPF clear the DN bit toward the PE router C. PE routers verify OSPF domain IDs used by CE OSPF processes D. Creation of PE to PE OSPF sham link across the MPLS-created super backbone E. PE devices that run OSPF set the DN bit toward the CE router F. PE devices that run OSPF clear the DN bit toward the CE router

Correct Answer: E

Question 6

What are two possible drawbacks of ending Loop-Free Alternate to support fast convergence for most destination IGP prefixes? (Choose two)

A. Loop-free alternate's are supported only for prefixes that are considered external tot the IGP B. The IGP topology might need to be adjust C. Additional path computations are needed D. Loop-free alternates are not supported in global VPN VRF OSPF instances E. Loop-free alternate's convergence in less than 100 milliseconds is not possible

Correct Answer: B,C

Question 7

What is an implication of using route reflectors in an iBGP topology?

A. Route reflection causes traffic to flow in a hub-and-spoke fashion. B. Multipath information is difficult to propagate in a route reflector topology. C. The manipulation of BGP attributes is not supported on the other routers than the route reflectors. D. Route reflectors can create routing loops when more than one router reflector is used in the same cluster. E. Route reflection limits the total number of iBGP routers.

Correct Answer: B

Question 8

Which two reasons for implementing Cisco MPLS TE in a service provider MPLS backbone are valid?
(Choose two.)

A. when Cisco MPLS TE is required to reroute traffic within Jess than 1 second in case of a link failure inside the backbone B. when Cisco MPLS TE is required to route different MPLS QoS service classes through different paths C. when Cisco MPLS TE is required to create backup paths independently from the IGP D. when Cisco MPLS TE is a prerequisite for implementing RSVP in the backbone E. when Cisco MPLS TE can detect and react to neighbor failures faster than IGPs can

Correct Answer: B,C

Question 9

You are designing a WAN network solution with EIGRP based on VPLS. The interface speed is 10Mb/s, but the access rate of the WAN connection is 256 Kb/s. What should you include in the network design, in order to avoid potential issues with EIGRP?

A. Limit traffic to the access rate with interface traffic shaping. B. Limit EIGRP traffic to the access rate with a policer. C. Tag outbound EIGRP traffic and have the WAN provider add it to the priority queue. D. Set the interface bandwidth to match the access rate.

Correct Answer: D

Question 10

As a part of a network design, you should tighten security to prevent man-in-the-middle. Which two security options ensure that authorized ARP responses take place according to know IP-to-MAC address mapping?
(Choose two)

A. ARP rate limiting B. DHCP snooping C. Port security D. ARP spoofing E. Dynamic ARP Inspection

Correct Answer: B,E

Question 11

As network designer, which option is your main concern with regards to virtualizing multiple network zones into a single hardware device?

A. Bandwidth allocation B. Fate sharing C. Congestion control D. Security E. CPU resource allocation

Correct Answer: B

Question 12

Refer to the exhibit.

How should you redesign this network running BGP to improve availability of the routers 1A and 1B at the core site?

A. Use link bundles over multiple slots B. Enable graceful restart C. Deploy BGP PIC D. Create a multichassis system with the two routers

Correct Answer: C

Question 13

You must make IGP redesign recommendations for a client that has old equipment, with low CPU power and memory, that they do not have budget replace. They are very concerned about CPU load on routers. They are using IS-IS as the IGP in a single l1 area and all routers are connected to each other with point-to-point links.
Which method do you recommend to reduce or limit CPU overhead caused by IS-IS?

A. Implement wide style metrics for IS-IS on all routers B. Select a router to act as a pseudowire to limit topology synchronization C. Divide the router into multiple areas and implement address summarization D. Use mesh groups to limit flooding of LSAs

Correct Answer: D

Question 14

An enterprise customer has a national WAN network based on DMVPN over the Internet, with sites located throughout the country. The customer has recently deployed VoIP throughout the entire network , and users report that it takes up to 2 seconds to establish a telephone call to an IP telephone at another office network.
Drag and drop the root cause and the corresponding design solution from the left onto the correct targets on the right Not all options are used

Correct Answer:

Explanation
DMVPN spoke to spoke tunnels take a few second
Use DMVPN to set up tunnels and GETVPN for encryption

Cisco Certified Design Expert Practical - 352-011 Exam Practice Test