Cisco Cisco Certifications 352-011 Questions & Answers

• Question 61:

  Which three options are important design functions of IPv6 first-hop security? (Choose three) A. It prevents rogue DHCP servers farms assigning IPv6 addresses.

  B. It prevents IPv6 packets fragmentation.

  C. It limits IPv6 route the advertisement in the network.

  D. It implements a broadcast-control mechanism.

  E. It suppresses excessive multicast neighbor discovery.

  F. It implements multihoming security.

  Correct Answer: ACE

• Question 62:

  What two options are significant drivers for 5G in IoT networks? (Choose two)

  A. Energy Efficiency

  B. Lower Latency

  C. Mass Connectivity

  D. Programmability

  E. Higher data rates

  Correct Answer: BC

• Question 63:

  Which three network management requirements are common practices in network design? (Choose three) A. Collect RMON poll information for future regression analysis

  B. Ensure that all network devices have their clocks synchronized

  C. Look at average counters instead of instantaneous counters for inconsistent and bursty KPIs, such as CPU utilization and interface utilization.

  D. Collect SNMP poll information for future regression analysis

  E. Validate data plane health, application and services availability with synthetic traffic

  F. Capture both ingress and egress flow-based packets. While avoiding duplications of flows

  Correct Answer: BCD

• Question 64:

  You are consultant network designer for a large GET VPN deployment for a large bank with International coverage. Between 1800 and 2000 remote locations connect to the central location through four hubs using an MPLS backbone and using two keys servers. The bank is concerned with security and replay attacks. Which two actions should you use to tune the GET VPN to meet the bank requirements? (Choose two)

  A. Increase the cryptographic key size.

  B. Replace unicast rekey with multicast rekey.

  C. Reduce the SAR clock interval duration

  D. Increase the TEK and KEK lifetime.

  E. Reduce the Dead Peer Detection periodic timer.

  Correct Answer: BC

• Question 65:

  Which markup language is used to format Ansible's playbook?

  A. ADML

  B. YAML

  C. HTML

  D. XML

  E. NAML

  Correct Answer: B

• Question 66:

  You are designing a WAN network solution with EIGRP based on VPLS. The interface speed is 10Mb/s, but the access rate of the WAN connection is 256 Kb/s. What should you include in the network design, in order to avoid potential issues with EIGRP?

  A. Limit EIGRP traffic to the access rate with a policer.

  B. Tag outbound EIGRP traffic and have the WAN provider add it to the priority queue.

  C. Limit traffic to the access rate with interface traffic shaping.

  D. Set the interface bandwidth to match the access rate.

  Correct Answer: D

• Question 67:

  As part of network design, two geographically separated data centers must be interconnected using Ethernet-over-MPLS pseudowire. The link between the sites is stable, the topology has no apparent loops, and the root bridges for the respective VLANs are stable and unchanging. Which aspect must be the part of the design to mitigate the risk of connectivity issues between the data centers?

  A. Enable 802.1d on one data center, and 802.1w on the other.

  B. Ensure that the spanning tree diameter for one or more VLANs is not too large.

  C. Enable UDLD on the link between the data centers.

  D. Enable root guard on the link between the data centers.

  Correct Answer: B

• Question 68:

  Which technology , implemented on aggregation -edge nodes at the aggregation layer, provides per -tenant isolation at Layer 3 , with separate dedicated per-tenant routing and forwarding tables on the inside interfaces of firewall contexts?

  A. VDC

  B. VLAN

  C. VXLAN

  D. VRF-lite

  Correct Answer: D

• Question 69:

  You are presented with requirements to design a development, testing and production environments. These environment should communicate with each other, yet they should be kept as separate failure domains. Which routing protocol should be configured on the links between the networks to support the design requirements?

  A. OSPF

  B. EIGRP

  C. IS-IS

  D. BGP

  Correct Answer: D

• Question 70:

  There is an MPLS-enabled link constantly flapping on an MPLS VPN network. Given that the network runs OSPF as the IGP protocol, which design mechanism will stabilize the network and avoid constant re-convergence?

  A. IP Event Dampening

  B. OSPF fast hellos

  C. IP SLA

  D. Partial SPF

  Correct Answer: A