Cisco Cisco Certifications 352-011 Questions & Answers

• Question 21:

  The service provider that you work for wants to offer IPv6 internet service to its customers without upgrading all of its access equipment to support IPv6, which transition technology do you recommend?

  A. NAT64

  B. CGN

  C. Dual-stack CPE

  D. 6RD

  Correct Answer: D

• Question 22:

  A data center deign requires monitoring of their business critical voice and video services accessed by remote locations. Which two items are applicable? (Choose two)

  A. If multiple applications share the same DSCP or CoS values, NBAR can be utilized

  B. The applications being monitored must be assigned a unique CoS value

  C. If multiple applications share the same the same DSCP or CoS values, IPFIX can be utilized

  D. The applications being monitored must be assigned a unique QoS profile

  E. The applications being monitored must be assigned unique DSCP values

  F. The reporting data must be assigned to a QoS profile to ensure accurate statistics

  Correct Answer: CF

• Question 23:

  You work as a network designer for a company that is replacing their Frame Relay WAN with an MPLS VPN service, where the PE-to-CE routing protocol is BGP. The company has 3000 routes in their distribution routers, and they would like to advertise their access routers through the MPLS network. Their service provider, however, only supports 1000 prefixes per VRF. Which two design solutions can be applied to ensure that your access routers will be able to reach all devices in your network? (Choose two.)

  A. Configure the distribution routers to send a default route to the MPLS network

  B. Configure null routes and aggregate routes for the prefixes in your network on the distribution routers

  C. Summarize the routes on MPLS WAN interfaces of the distribution routers

  D. Use prefix lists on the distribution routers to control which routes are sent to MPLS network

  E. Configure the access routers to send a default route to the MPLS network

  Correct Answer: AC

• Question 24:

  What is a design application of control plane policing?

  A. CPP protects the control plane from reconnaissance and or denial-of-service attacks

  B. CPP protects the forwarding plane by rate -limiting excessive routing protocol traffic

  C. CPP protects the forwarding plane by allowing legitimate traffic and dropping excessive traffic

  D. CPP drop malformed packet that are sent to the CPU

  Correct Answer: A

• Question 25:

  Which two general SDN characteristics? (Choose two)

  A. Southbound interfaces are interfaces used between the control plane and the date plane

  B. OpenFlow is considered one of the first Northbound APIs used by SDN controllers

  C. Northbound interfaces are open interfaces used between the control plane and the data plane

  D. The separation of the control plane from the data plane

  E. OVSDB is an application database management protocol

  Correct Answer: AD

• Question 26:

  Which two options are Loop-Free Alternate design considerations? (Choose two)

  A. MPLS TE must be enabled because it is used for building the backup paths

  B. Backup coverage and effectiveness is dependent on the network topology

  C. It can simplify the capacity planning by matching the backup path with the post- convergence path

  D. It provides an optional backup path by avoiding low bandwidth and edge links

  E. It can impact SLA-sensitive appliance by routing traffic to low bandwidth links while IGP convergence is in progress

  Correct Answer: BE

• Question 27:

  Which statement about TAP and TUN devices, which are used in a Linux/KVM cloud deployment model, is true?

  A. TUN is for handling IP packets, but TAP is for handling Ethernet frames

  B. TUN is for handling Ethernet frames, but TAP is for handling IP packets

  C. TUN is for tunneling IP packets, but TAP is for tapping IP packets

  D. TUN is for tunneling Ethernet frames, but TAP is for tapping Ethernet frames

  Correct Answer: A

• Question 28:

  Refer to the exhibit.

  

  As part of your design to monitor reachable services, a route health injector has just been deployed on the network. The route health injector injects /32 host routes into BGP with the next hop of 192.18.0.2, but the /32 routes are not being installed into the RIB or FIB of Router A. Which BGP feature must be deployed to make be deployed to make the design to work?

  A. BGP community attributes

  B. MP-BGP

  C. BGP AS-Path prepending

  D. eBGP multihop attribute

  Correct Answer: A

• Question 29:

  A service provider is designing a new backbone based on an IGP and MPLS what are two valid reasons for implementing MPLS-TE as well? (Choose two)

  A. MPLS-TE is required to reroute traffic within less than 1 second in case of a link failure inside the backbone

  B. MPLS-TE can detect and react to neighbor failures faster than IGPs can

  C. MPLS-TE is required to route different MPLS QoS Service classes through different paths

  D. MPLS-TE is required to create backup paths independently from the IGP

  E. MPLS-TE is a prerequisite for implementing RSVP in the backbone

  Correct Answer: CD

• Question 30:

  You are asked to design an RSVP-TEL LSP protection solution for a large service provider network .Which traffic protection mechanism is highly scalable and ensure that multiple LPS always terminate at the same merge point?

  A. Shared explicit protection.

  B. Detour LSPs.

  C. 1:N protection.

  D. 1:1 protection.

  Correct Answer: C