352-001 Exam - CCDE Written Exam

certleader.com

Q1. Refer to the exhibit. 

Which two options are two characteristics of the single-tier headend architecture for DMVPN designs? (Choose two.) 

A. The mGRE and crypto functions are on the same router. 

B. Each DMVPN cloud has two different headend routers for high availability purposes. 

C. It is used in dual-cloud topologies for spoke-to-spoke connectivity. 

D. It only supports hub-and-spoke connectivity. 

E. Spokes cannot be used as RP in multicast deployments. 

Answer: AC 

Q2. You are designing a network that includes IP QoS. Which two architectures could be used to ensure that IP QoS is implemented properly? (Choose two.) 

A. Differentiated Services, where the user, with the assistance of the RSVP signaling protocol, reserves the resources end to end before sending the data 

B. Integrated Services, where the user, with the assistance of the RSVP signaling protocol, reserves the resources end to end before sending the data 

C. Integrated Services, which relies on the information carried within each packet to make resource-allocation decisions at each network node 

D. Differentiated Services, which relies on the information carried within each packet to make resource-allocation decisions at each network node 

E. Integrated Services, where the user, with the assistance of the DSCP signaling protocol, reserves the resources end to end before sending the data 

Answer: BD 

Q3. In a redesign of a multiple-area network, it is recommended that summarization is to be implemented. For redundancy requirements, summarization is done at multiple locations for each summary. Some customers now complain of higher latency and performance issues for a server hosted in the summarized area. What design issues should be considered when creating the summarization? 

A. Summarization adds CPU overhead on the routers sourcing the summarized advertisement. 

B. Summarization prevents the visibility of the metric to the component subnets. 

C. Summarization creates routing loops. 

D. Summarization causes packet loss when RPF is enabled. 

Answer:

Q4. A network design shows two routers directly connected to an Ethernet switch using optical connections. There is an OSPF adjacency between the routers. In this design, which solution will ensure that interface down detection is reported as quickly as possible to the IGP? 

A. optimized OSPF SPF timers 

B. Bidirectional Forwarding Detection 

C. automatic protection switching 

D. optimized OSPF LSA timers 

E. Ethernet OAM CFM monitoring 

Answer:

Q5. Which option is a BFD design consideration? 

A. BFD should not be used with RSVP-TE backup tunnels. 

B. BFD echo mode may reduce convergence time. 

C. BFD does not support sessions over MPLS LSPs. 

D. BFD is supported on indirectly connected peers. 

Answer:

Q6. You are the lead network designer for an enterprise company called ABC, and you are leading design discussions regarding IPv6 implementation into their existing network. A question is raised regarding older Layer 2 switches that exist in the network, and if any changes are required to these Layer 2 switches for successful IPv6 implementation. Which two responses should you give? (Choose two.) 

A. IPv6 is transparent on Layer 2 switches, so there is no need to make any changes to the Layer 2 switches. 

B. If IPv6 anycast deployment is planned, then make sure that Layer 2 switches support ICMPv6 snooping at Layer 2 switches. 

C. If IPv6 anycast deployment is planned, then make sure that Layer 2 switches support DHCPv6 snooping at Layer 2 switches. 

D. If IPv6 multicast deployment is planned, then make sure that Layer 2 switches support MLD snooping at Layer 2 switches. 

E. If IPv6 anycast deployment is planned, then make sure that Layer 2 switches support ND snooping at Layer 2 switches. 

Answer: AD 

Q7. Refer to the exhibit. 

Assume that no multicast optimization is done on LAN switches A and B. Which feature can be used to optimize multicast traffic forwarding in this situation? 

A. Enable IGMP snooping querier on both switches. 

B. Configure a static MAC entry for the multicast server. 

C. Disable IGMP snooping on both switches. 

D. Disable the IGMP query election process. 

E. Enable PIM Snooping on both switches. 

Answer:

Q8. A data center provider has designed a network using these requirements: 

Two data center sites are connected to the public Internet. 

Both data centers are connected to different Internet providers. 

Both data centers are also directly connected with a private connection for the internal traffic, and public Internet traffic can also be routed at this direct connection. 

The data center provider has only one /19 public IP address block. 

Under normal conditions, Internet traffic should be routed directly to the data center where the services are located. When one Internet connection fails, the complete traffic for both data centers should be routed by using the remaining Internet connection. In which two ways can this routing be achieved? (Choose two.) 

A. The data center provider must have an additional public IP address block for this routing. 

B. One /20 block is used for the first data center and the second /20 block is used for the second data center. The /20 block from the local data center is sent out with a low BGP weight and the /20 block from the remote data center is sent out with a higher BGP weight at both sites. 

C. One /20 block is used for the first data center and the second /20 block is used for the second data center. The /20 block from the local data center is sent out without path prepending and the /20 block from the remote data center is sent out with path prepending at both sites. 

D. One /20 block is used for the first data center and the second /20 block is used for the second data center. Each /20 block is only sent out locally. The /19 block is sent out at both Internet connections for the backup case to reroute the traffic through the remaining Internet connection. 

E. One /20 block is used for the first data center and the second /20 block is used for the second data center. The /20 block from the local data center is sent out with a low BGP local preference and the /20 block from the remote data center is sent out with a higher BGP local preference at both sites. 

F. BGP will always load-balance the traffic to both data center sites. 

Answer: CD 

Q9. Service provider XYZ plans to provide dedicated Internet access and MPLS L3VPN services to business customers. XYZ has these design specifications: 

.  MP-BGP running on the core MPLS P routers with external Internet routes. 

. The core network will include 16 Point of Presence IP POPs throughout the Asia-Pacific region. . An additional nine non-P routers will use EBGP peering with multiple providers for Internet traffic. . An additional 50 PE routers will provide end customers with dedicated Internet access and L3VPN services throughout the Asia-Pacific region. 

In what two ways can the MP-BGP be removed from the MPLS P core routers and still provide dedicated Internet access and MPLS L3VPN services? (Choose two.) 

A. Disable BGP from the MPLS core P routers and have the MPLS core P routers run OSPF and LDP. 

B. Enable separate BGP control plane routers using a route reflector server concept that will be fully meshed with peer route reflector servers and have clients as MPLS PE routers and EBGP peering routers. 

C. Enable all EBGP routers as route reflector servers and MPLS PE routers as their clients. 

D. It is not possible to disable BGP from the MPLS core P routers without impacting the dedicated Internet access and MPLS L3VPN services. 

Answer: BC 

Q10. A network administrator is in charge of multiple IPsec VPN headend devices that service thousands of remote connectivity, point-to-point, IPsec/GRE tunnels. During a recent power outage, in which it was found that a backup power supply in one of those headend devices was faulty, one of the headend routers suffered a complete shutdown event. When the router was successfully recovered, remote users found intermittent connectivity issues that went away after several hours. Network operations staff accessed the headend devices and found that the recently recovered unit was near 100% CPU for a long period of time. How would you redesign the network VPN headend devices to prevent this from happening again in the future? 

A. Move the tunnels more evenly across the headend devices. 

B. Implement Call Admission Control. 

C. Use the scheduler allocate command to curb CPU usage. 

D. Change the tunnels to DMVPN. 

Answer: