Virtual CCDE 352-001 dumps

Q1. Which mechanism should be added to a network design to identify unidirectional Spanning Tree Protocol failures through BPDU loss? 

A. UDLD 

B. loop guard 

C. BPDU guard? 

D. root guard 

View Answer

Q2. Which two design aspects should a metro service provider consider when planning to deploy REP for his backbone? (Choose two.) 

A. Two REP segments can be connected redundantly at two points, one connection will be blocked as per the STP defined in IEEE 802.1d. 

B. UDLD can be enabled on REP interfaces to detect unidirectional failures. 

C. The guaranteed convergence recovery time is less than 50 ms for the local segment. 

D. A REP segment is limited to a maximum of seven devices. 

E. VLAN load balancing for optimal bandwidth usage is supported in any REP segment. 

View Answer

Q3. Refer to the exhibit. 

A customer runs OSPF with Area 5 between its aggregation router and an internal router. When a network change occurs in the backbone, Area 5 starts having connectivity issues due to the SPF algorithm recalculating an abnormal number of times in Area 5. You are tasked to redesign this network to increase resiliency on the customer network with the caveat that Router B does not support the stub area. How can you accomplish this task? 

A. Set Area 5 to stubby at the ABR anyway. 

B. Increase the bandwidth on the connection between Router A and Router B. 

C. Turn on LSA throttling on all devices in Area 5. 

D. Implement LSA filtering on the ABR, allowing summary routes and preventing more specific routes into Area 5. 

E. Create a virtual link to Area 0 from Router B to the ABR. 

View Answer

Q4. You are a network designer and have been asked to consult with your server operations team to further enhance the security of the network. The operations team provides you with these details about the network: 

A pool of servers is accessed by numerous data centers and remote sites. 

The servers are accessed via a cluster of firewalls. 

The firewalls are configured properly and are not dropping traffic. 

The firewalls occasionally cause asymmetric routing of traffic within the server data center. 

Which technology would you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers? 

A. Access control lists to limit sources of traffic that exits the server-facing interface of the firewall cluster 

B. Poison certain subnets by adding static routes to Null0 on the server farm core switches. 

C. Unicast Reverse Path Forwarding in strict mode 

D. Unicast Reverse Path Forwarding in loose mode 

View Answer

Q5. You are designing an 802.11 wireless network to include a controller as a central configuration point and access points across several remote sites. Which two aspects will manage the flow of the traffic to meet these design considerations? (Choose two.) 

A. WLAN local switching with VLAN mapping requires that VLAN ID that is mapped on the AP to match a dynamic interface that is configured on the wireless LAN controller. 

B. Layer 3 roaming is not supported for locally switched WLANs. 

C. The 802.1x authentication for a client associated to an AP on a locally switched WLAN is always handled at the wireless LAN controller side. 

D. The access point can receive multicast traffic in the form of multicast packets from the WLC. 

E. WLAN access lists can be applied only to centrally switched WLANs. 

View Answer

Q6. A multicast network is using bidirectional PIM. Which two actions, when combined, can achieve high availability so that two RPs within the same network can act in a redundant manner? (Choose two.) 

A. Use Anycast RP based on MSDP peering between the two RPs. 

B. Use a phantom RP address. 

C. Advertise routes for the two RPs with the same subnet mask through the unicast routing protocol. 

D. Advertise routes for the two RPs with different subnet mask lengths through the unicast routing protocol. 

E. Manipulate the administrative distance of the unicast routes to the two RPs. 

F. Manipulate the multicast routing table by creating static mroutes to the two RPs. 

View Answer

Q7. A company plans to include Nonstop Forwarding and Bidirectional Forwarding Detection as a part of their network redundancy plan. In which two ways do NSF and BFD work together when different hardware platforms are compared? (Choose two.) 

A. During supervisor engine or routing engine failover, the NSF feature will always ensure that the BFD at the peer router will not trigger a link down independent of the used hardware platform. 

B. At some hardware platforms, BFD and NSF are not supported together. During supervisor engine or routing engine failover, the BFD at the peer router will trigger a link down. 

C. To ensure that BFD at the peer router will not trigger a link down during NSF, the BFD packets must be processed fast enough, and, during supervisor engine or routing engine failover, by processing the BFD independent from the supervisor engine or routing engine. 

D. Because BFD is always processed at the line cards (not at the supervisor engine or routing engine), a supervisor engine or routing engine failover will not affect the BFD peer router. 

E. Because BFD is always processed at the supervisor engine or routing engine, a supervisor engine or routing engine failover will always trigger a link down at the peer router. 

View Answer

Q8. You have been tasked to create a Layer 2 network design that uses vPC to provide resiliency and avoid loops. vPC removes Layer 2 loops while providing redundancy through which mechanism? 

A. dual-active detection 

B. address synchronization 

C. strict forwarding rules 

D. Bridge Assurance 

View Answer

Q9. You are deploying a nationwide intranet solution for a company with 4 data centers and 400 remote branches connected via a provider-based solution. As part of the network design, you must ensure efficient content distribution of training material to remote sites. Which two VPN technologies leverage replication in the network core and provide for efficient bandwidth optimization? (Choose two.) 

A. VPLS 

B. EoMPLS 

C. MPLS Layer 3 VPN 

D. GRE 

E. GET VPN 

View Answer

Q10. You work for a large company that has just acquired another smaller company. You have been asked to lead a group of SAN experts from both companies to design the integration plan that will be used to interconnect the SANs and migrate the data from the newly acquired company to the main storage arrays. The first thing that the team discovers is that the two SANs have the same domain IDs. 

As the SAN team lead, what would you advise your team to do so that you can interconnect the two SANs while minimizing disruption? 

A. Use FCIP with Write Acceleration and IVR version 1 with a transit VSAN to expedite the data transfer between the two SANs. 

B. Change the domain IDs on both SANs so that they are both unique and then connect ISLs between the SANs. 

C. Use IVR NAT with a transit VSAN between the SANs. 

D. The two SANs cannot be merged without disruption. 

View Answer