Latest 352-001 Exam Real Tests Free Updated Today [Q38-Q58]

Share

Latest 352-001 Exam Real Tests Free Updated Today

352-001 Real Exam Question Answers Updated [Nov 18, 2021]


What is the duration of the 352-001 Exam

  • Passing Score: 70%
  • Number of Questions: 90-110
  • Length of Examination: 120 minutes
  • Format: Multiple choices, multiple answers

Cisco 352-001 Exam Topics:

SectionWeightObjectives
Layer 2 Control Plane24%

1. Describe fast convergence techniques and mechanisms

  • Down detection
  • Interface dampening

2. Describe loop detection and mitigation protocols

  • Spanning tree types
  • Spanning tree tuning techniques

3. Describe mechanisms that are available for creating loop-free topologies

  • REP
  • Multipath
  • Switch clustering
  • Flex links
  • Loop detection and mitigation

4. Describe the effect of transport mechanisms and their interaction with routing protocols over different types of links

5. Describe multicast routing concepts

6. Describe the effect of fault isolation and resiliency on network design

  • Fault isolation
  • Fate sharing
  • Redundancy
  • Virtualization
  • Segmentation
Evolving Techonologies v1.110%

1. Cloud

  • Compare and contrast public, private, hybrid, and multicloud design considerations
    - Infrastructure, platform, and software as a service (XaaS)
    -Performance, scalability, and high availability
    -Security implications, compliance, and policy
    -Workload migration
  • Describe cloud infrastructure and operations
    -Compute virtualization (containers and virtual machines)
    -Connectivity (virtual switches, SD-WAN and SD-Access
    -Virtualization functions (NFVi, VNF, and L4/L6
    -Automation and orchestration tools (CloudCenter, Cisco DNA-center, and Kubernetes)

2. Network programmability (SDN)

  • Describe architectural and operational considerations for a programmable network
    -Data models and structures (YANG, JSON and XML
    -Controller based network design (policy driven configuration and northbound/ southbound APIs
    -Configuration management tools (agent and agentless) and version control systems (Git and SVN
    -Device programmability (gRPC, NETCONF and RESTCONF)

3. Internet of things (IoT)

  • Describe architectural framework and deployment considerations for IoT
    -IoT technology stack (IoT Network Hierarchy, data acquisition and flow)
    -IoT standards and protocols (characteristics within IT and OT environment)
    -IoT security (network segmentation, device profiling, and secure remote)
Layer 3 Control Plane33%

1. Describe route aggregation concepts and techniques

  • Purpose of route aggregation
  • When to leak routes / avoid suboptimal routing
  • Determine aggregation location and techniques

2. Describe the theory and application of network topology layering

  • Layers and their purposes in various environments

3. Describe the theory and application of network topology abstraction

  • Purpose of link state topology summarization
  • Use of link state topology summarization

4. Describe the effect of fault isolation and resiliency on network design or network reliability

  • Fault isolation
  • Fate sharing
  • Redundancy

5. Describe metric-based traffic flow and modification

  • Metrics to modify traffic flow
  • Third-party next hop

6. Describe fast convergence techniques and mechanisms

  • Protocol timers
  • Loop-free alternates

7. Describe factors affecting convergence

  • Recursion
  • Microloops
  • Transport

8. Describe unicast routing protocol operation [OSPF, EIGRP, ISIS, BGP, and RIP] in relation to network design

  • Neighbor relationships
  • Loop-free paths
  • Flooding domains and stubs
  • iBGP scalability

9. Analyze operational costs and complexity

  • Routing policy
  • Redistribution methods

10. Describe the interaction between routing protocols and topologies

11. Describe generic routing and addressing concepts

  • Policy-based routing
  • NAT
  • Subnetting
  • RIB-FIB relationships

12. Describe multicast routing concepts

  • General multicast concepts
  • Source specific
  • MSDP/anycast
  • PIM
  • mVPN

13. Describe IPv6 concepts and operation

  • General IPv6 concepts
  • IPv6 security
  • IPv6 transition techniques
Design Considerations18%

1. Analyze various QoS performance metrics

  • Application requirements
  • Performance metrics

2. Describe types of QoS techniques

  • Classification and marking
  • Shaping
  • Policing
  • Queuing

3. Identify QoS strategies based on customer requirements

  • DiffServ
  • IntServ

4. Identify network management requirements

5. Identify network application reporting requirements

6. Describe technologies, tools, and protocols that are used for network management

7. Describe the reference models and processes that are used in network management, such as FCAPS, ITILĀ®, and TOGAF

8. Describe best practices for protecting network infrastructure

  • Secure administrative access
  • Control plane protection

9. Describe best practices for protecting network services

  • Deep packet inspection
  • Data plane protection

10. Describe tools and technologies for identity management

11. Describe tools and technologies for IEEE 802.11 wireless deployment

12. Describe tools and technologies for optical deployment

13. Describe tools and technologies for SAN fabric deployment

Network Virtualization15%

1. Describe Layer 2 and Layer 3 tunnelling technologies

  • Tunnelling for security
  • Tunnelling for network extension
  • Tunnelling for resiliency
  • Tunnelling for protocol integration
  • Tunnelling for traffic optimization

2. Analyze the implementation of tunnelling

  • Tunnelling technology selection
  • Tunnelling endpoint selection
  • Tunnelling parameter optimization of end-user applications
  • Effects of tunnelling on routing
  • Routing protocol selection and tuning for tunnels

 

NEW QUESTION 38
If a network design must support rapid convergence on half-duplex interfaces, which IEEE 802.1w capability should be used?

  • A. proposal-agreement handshake
  • B. loop guard
  • C. UplinkFast
  • D. root guard

Answer: A

 

NEW QUESTION 39
The enterprise customer ABC Corp will deploy a centralized unified communications application to provide voice, and instant messaging to their branch offices. Some of the branch offices are located in remote locations and are connected via a 1.5 Mb/s Layer 3 VPN connection. Which two ways are the most cost-effective to ensure that this new application is implemented properly? (Choose two)

  • A. Enable VRF-Lite on the CE router to create a separate voice VRF
  • B. Set WAN optimization on the CE router to compress the voice packets for improved bandwidth utilization and performance
  • C. Set LFI on the WAN connections to interleave the small voice packets with the large data packets
  • D. Set voice activity detection to avoid sending packets when the conversations is silent
  • E. Use a low bitrate codec such as G 711
  • F. Use a low bitrate codec such as G 729

Answer: D,F

 

NEW QUESTION 40
ABC Corporation wants to minimize the risk of users plugging unauthorized switches and hubs into the network. Which two features can be used on the LAN access ports to support this design requirement?
(Choose two.)

  • A. edge port
  • B. bridge assurance
  • C. port security
  • D. loop guard
  • E. BPDU guard
  • F. root guard

Answer: C,E

 

NEW QUESTION 41
You are the lead network designer hired by Service Provider XYZ to deploy CoS functionality on the core MPLS network (P routers). The goal of the network design is to provide a complete CoS solution to all customers that purchase services such as dedicated internet access, MPLS L3VPN, and L2VPN (pseudowire). Service Provider XYZ has these design requirements:
- The network supports four service queues with equal treatment for delay, jitter, and packet loss.
- Queues are numbered 0-3, where 0 is the default queue.
- Three queues have one treatment.
- One queue has either one or two treatments.
How would you design your solution to map the DSCP value properly so that the traffic is assigned to the respective queues in the Service Provider XYZ MPLS core network?

  • A. Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS PE routers.
  • B. Classify traffic according to DSCP value into appropriate P router queues.
  • C. Map the appropriate DSCP value into the EXP field based on the number of queues in the MPLS P routers.
  • D. Based on the DSCP value, traffic is mapped automatically into appropriate queues in the MPLS CE routers.

Answer: A

Explanation:
Explanation/Reference:
Explanation:

 

NEW QUESTION 42
You have been tasked with designing a data center interconnect to provide business continuity. You want to encrypt the traffic over the DCI using IEEE 802.1AE MACsec to prevent the deployment of any firewall or IPS. Which two interconnect technologies support MACsec? (Choose two.)

  • A. VPLS
  • B. EoMPLS
  • C. MPLS Layer 3 VPN
  • D. DMVPN
  • E. GET VPN
  • F. OTV

Answer: A,B

 

NEW QUESTION 43
On a VoIP solution design, which option shows one-way latency, packet loss, and jitter measurements that ensure acceptable voice quality?

  • A. Latency: 150 ms Packet loss: 1.25% Jitter: 20 ms
  • B. Latency: 110 ms Packet loss: 1% Jitter: 40 ms
  • C. Latency: 130 ms Packet loss: 0.5% Jitter: 30 ms
  • D. Latency: 170 ms Packet loss: 0.75% Jitter: 10 ms

Answer: C

 

NEW QUESTION 44
Refer to the exhibit.

This new OSPF network has four areas, but the hub-and-spoke area experiences frequent flapping. In order to fix this design failure, which two mechanisms can you use to isolate the data center area from the hub-and-spoke area without losing Ip connectivity? (Choose two)

  • A. Convert the data center area to EIGRP protocol
  • B. Make the data center area totally stub
  • C. Make the data center area a NSSA
  • D. Use OSPF distribute-list filtering on router A
  • E. Deploy a prefix summarization on router D

Answer: B,E

 

NEW QUESTION 45
Which three reasons are to summarize link state topology
information? (Choose three.)

  • A. to hide detailed topology information
  • B. to reduce the amount of routing information being advertised
  • C. to create boundaries for containing potential network changes and instabilities
  • D. to permit traffic engineering between areas

Answer: A,B,C

Explanation:
Section: (none)
Explanation/Reference:

 

NEW QUESTION 46
Which routing protocol supports unequal cost, multipath load balancing?

  • A. IS-IS
  • B. RIPv2
  • C. OSPFv3
  • D. EIGRP

Answer: D

 

NEW QUESTION 47
An IPsec VPN WAN network has a new requirement for passing multicast traffic between sites. Which two technologies must be added to the design to pass the multicast traffic? (Choose two)

  • A. Fast Switching
  • B. GRE
  • C. PIM dense mode
  • D. VTI
  • E. IGMP

Answer: B,D

 

NEW QUESTION 48
For the following mechanisms, which two could provide fast Layer 2 down detection in Frame Relay networks? (Choose two.)

  • A. millisecond LMI timers
  • B. A-bit signaling
  • C. asynchronous LMI
  • D. section 9 LMI convergence

Answer: B,C

Explanation:
Section: (none)
Explanation/Reference:

 

NEW QUESTION 49
You are tasked with implementing a 1000-phone remote access solution, where phones will traverse a WAN edge router. Assuming all of the following features are supported in a hardware- assisted manner, which of the following will have the most detrimental impact on the delay of the packet?

  • A. stateful firewall
  • B. MPLS encapsulation
  • C. encryption
  • D. GRE encapsulation

Answer: C

Explanation:
Explanation/Reference:
Explanation:

 

NEW QUESTION 50
Refer to the exhibit.

You are designing an IPv4 unicast Layer 3 VPN load-balancing solution. Which L3VPN feature needs to be configured on the PE routers to support the design requirement?

  • A. matching route distinguishers
  • B. nonmatching route distinguishers
  • C. matching route target values
  • D. disable split horizon on PE2 and PE3

Answer: B

 

NEW QUESTION 51
Refer to the exhibit.

You are designing a loop-free hierarchical VPLS service. Which two design considerations should be implemented for the pseudowires between the N-PE and U-PE routers? (Choose two.)

  • A. Enable split horizon toward the N-PE routers.
  • B. Enable split horizon toward the U-PE router.
  • C. Disable MAC learning on the N-PE routers.
  • D. Disable split horizon toward the U-PE router.
  • E. Disable split horizon toward the N-PE routers.
  • F. Disable MAC learning on the U-PE route.

Answer: A,D

 

NEW QUESTION 52
Your customer recently acquired a company with a national WAN of 750 locations consisting of MPLS VPN-based sales, Internet-based sites and sites with direct links to regional hub sites. The existing network has MPLS VPN-based sites. Which solution ensure security and encryption across all sites to meet an audit requirement?

  • A. Implement a hierarchical DMVPN-based hub-and-spoke network with IPsec encryption
  • B. Implement a GETVPN-based solution across all sites with selective traffic encryption
  • C. Implement a GETVPN-based solution across all sites with redundant key servers
  • D. Migrate newly acquired sites to the MPLS VPN-based service of the parent company

Answer: A

 

NEW QUESTION 53
Refer to the exhibit,

Which two design considerations should be implemented on the pseudowire between N-PE and U-PE routers for a loop-free hierarchical VPLS service? (Choose two)

  • A. Enable split horizon towards the U-PE routers.
  • B. Disable MAC learning on the U-PE routers.
  • C. Disable split horizon towards the U-PE router.
  • D. Disable MAC learning on the U-PE routers.
  • E. Disable MAC learning on the U-PE router.
  • F. Disable split horizon toward the N-PE routers.
  • G. Enable split horizon towards the N-PE routers.

Answer: C,G

 

NEW QUESTION 54
You are designing a core MPLS-based network with a single OSPF area with no external routes. Which two mechanisms can be used to improve convergence time during a failure?
(Choose two.)

  • A. incremental SPF
  • B. route filtering
  • C. BFD
  • D. graceful restart

Answer: A,C

 

NEW QUESTION 55
In a PIM sparse mode network, how is the flow of multicast traffic restored when a link fails along a branch of a multicast distribution tree?

  • A. The downstream receivers notice the loss of the multicast flow and resend IGMP Membership Reports to reestablish the tree.
  • B. The traffic reverts to the shared tree while the downstream router recalculates the RPF interface and sends a new PIM join message to the RP.
  • C. The router downstream of the break recalculates the RPF interface when it notices a change in the unicast routing table and immediately sends a new PIM join message out from the new RPF.
  • D. The downstream receivers notice the loss of the multicast flow and resend PIM join messages to reestablish the tree.

Answer: C

 

NEW QUESTION 56
An enterprise company has an audit requirement to encrypt traffic between selected development teams.
Those teams are located in multiple sites across the country. They must migrate all locations to an MPLS Layer
3 VPN-based service, but this implementation must not impact the VoIP solution. The VoIP traffic to and from the call center sites must be copied to the data center servers so that it is recorded to meet another audit requirement.
Which solution meets these requirements?

  • A. Implement GETVPN with selective encryption only for the development traffic
  • B. Implement LISP-based tunnels for the development traffic
  • C. Implement a DMVPN-based solution encrypting all traffic except the VoIP traffic
  • D. Implement site-to-site GRE tunnels only for development traffic

Answer: A

Explanation:
Section: Evolving Technologies

 

NEW QUESTION 57
A data center provider has designed a network using these requirements:
* Two data center sites are connected to the public Internet.
* Both data centers are connected to different Internet providers.
* Both data centers are also directly connected with a private connection for the internal traffic, and public Internet traffic can also be routed at this direct connection.
* The data center provider has only one /19 public IP address block.
Under normal conditions, Internet traffic should be routed directly to the data center where the services are located. When one Internet connection fails, the complete traffic for both data centers should be routed by using the remaining Internet connection. In which two ways can this routing be achieved? (Choose two.)

  • A. The data center provider must have an additional public IP address block for this routing.
  • B. BGP will always load-balance the traffic to both data center sites.
  • C. One /20 block is used for the first data center and the second /20 block is used for the second data center. The /20 block from the local data center is sent out without path prepending and the /20 block from the remote data center is sent out with path prepending at both sites.
  • D. One /20 block is used for the first data center and the second /20 block is used for the second data center. Each /20 block is only sent out locally. The /19 block is sent out at both
    Internet connections for the backup case to reroute the traffic through the remaining
    Internet connection.
  • E. One /20 block is used for the first data center and the second /20 block is used for the second data center. The /20 block from the local data center is sent out with a low BGP weight and the /20 block from the remote data center is sent out with a higher BGP weight at both sites.
  • F. One /20 block is used for the first data center and the second /20 block is used for the second data center. The /20 block from the local data center is sent out with a low BGP local preference and the /20 block from the remote data center is sent out with a higher
    BGP local preference at both sites.

Answer: C,D

 

NEW QUESTION 58
......


Who should take the 352-001 exam

CCDE Design Written 352-001 Exam certification is an internationally-recognized validation that identifies persons who earn it as possessing skilled as a CCDE Design. If a candidate wants significant improvement in career growth needs enhanced knowledge, skills, and talents. The CCDE Design Written 352-001 Exam certification provides proof of this advanced knowledge and skill. If a candidate has knowledge of associated technologies and skills that are required to pass CCDE Design Written 352-001 Exam then he should take this exam.

 

Latest 352-001 Study Guides 2021 - With Test Engine PDF: https://www.passcollection.com/352-001_real-exams.html