A network designer has provisioned a router to use IPsec to encrypt the traffic over a GRE
tunnel going to a web server at a remote location. From the router,the network designer can
ping the web server, although the users in the office comment that they are unable to reach it.
(Note: The DF bit is not set.) Which aspect should be changed in the design of the virtual
connection?
A.
IP addresses of the GRE tunnel endpoints
B.
IPsec configuration
C.
MTU size on the GRE tunnel
D.
encapsulation of the GRE tunnel
New 352-001 Exam Questions and Answers Updated Recently (26/Mar/2017):
NEW QUESTION 419
Which option should be part of your network design to support dynamic mutual redistribution between multiple OSPFv2 and IS-IS boundaries, to avoid suboptimal routing?
A. route tagging and administrative policies
B. route filtering and administrative policies
C. route aggregation and administrative policies
D. disabling IS-IS wide metrics
Answer: B
NEW QUESTION 420
After a large EIGRP network had automatic summarization enabled throughout, it started experiencing routing loops. Which action should you take to quickly resolve the routing loops yet continue to perform summarization?
A. Replace the automatic summarization with more specific summary routes.
B. Redesign the IP addressing scheme.
C. Redistribute connected routes at major IP network boundaries.
D. Increase the AD of the automatically summarized routes.
Answer: A
NEW QUESTION 421
Which openstack component implements role-based access control?
A. Horizon
B. Nova
C. Neutron
D. Keystone
Answer: A
NEW QUESTION 422
Service provider XYZ wants to implement IPv6 on their MPLS network using MPLS 6PE or 6VPE techniques. Currently XYZ providers IPv4 multicast services over an MPLS network by using MVPN, and wants to provide parallel IPv6 multicast services. Which two multicast solutions enable the IPv6 multicast services? (Choose two.)
A. MVPN for IPv6 multicast service
B. MPLS 6PE, because it provides IPv6 multicast support by default
C. PIM-DM to enable IPv6 multicast in conjunction with MPLS 6PE/6VPE
D. an overlay model using Layer 2 MPLS tunnels
E. MPLS 6VPE, because it provides IPv6 multicast support by default
Answer: AD
NEW QUESTION 423
Which statement about DHCPv6 Guard features design is true?
A. A certificate must be installed on the DHCPv6 server and relay agent.
B. DHCPv6 client requests can be rate-limited to protect the control plane.
C. Rogue DHCPv6 servers cannot assign IPv6 addresses to clients.
D. DHCPv6 client requests can be filtered to protect the data plane.
Answer: C
NEW QUESTION 424
You are designing a FabricPath network that connects to a spine-and-leaf topology using layer 2 IS-IS as the IGP. The solution should be able to detect changes in the network topology and calculate loop-free paths to other nodes in the network that are being used as top-of-rack switches. Which four options are characteristics of this FabricPath design solution? (Choose four.)
A. The FabricPath domain should be replaced because it does not run STP.
B. The switch operating system uses multiple equal-cost, parallel links that provide ECMP.
C. To use the basic FabricPath functionality, you must configure IS-IS on every interface between the leaf-and-spine switches.
D. FabricPath Layer 2 IS-IS uses the standard IS-IS functionality to populate up to 16 routes for a given destination switch.
E. This path is used for forwarding unicast Fabricpath frames.
F. Each switch computes its shortest path to every other switch in the network using the SPF algorithm.
G. The interfaces in a FabricPath network run only the FabricPath Layer 2 IS-IS protocol with FTags disabled.
Answer: BDEF
NEW QUESTION 425
Which Option is an example of SaaS?
A. Google Apps
B. Amazon AWs
C. Google App Engine
D. Microsoft Azure
Answer: A
NEW QUESTION 426
How should you compensate for jitter on an IP network so it carries real-time VolP traffic with acceptable voice transmission quality?
A. Set up VAD to replace gaps on speech with comfort noise.
B. Set up a playout buffer to play back the voice stream.
C. Deploy RSVP for dynamic VolP packet classification.
D. Change CODEC from G.729 to G.711.
Answer: B
NEW QUESTION 427
A company decided to replace IEEE 802.1s on the campus and you must propose a Layer 2 open standard technology that is highly scalable, ensures a resilient loop-free switched domain, and allows for utilizing all links in the Layer 2 domain. Which Layer 2 technology meets these requirements?
A. TRILL
B. VxLAN
C. LACP
D. FabricPath
E. MST
Answer: A
NEW QUESTION 428
A multinational enterprise company has many branches in the Americas, Europe, and Asia Pacific with headquarters in London. Branch offices use Ethernet (bandwidth range from 1 Mb/s to 10 Mb/s) as access technology to connect to the headquarters and the regional hubs. The company is currently implementing VolP and QoS in all their locations, and they are worried about jitter between their branches and the headquarters. Which option reduces the effect of jitter?
A. buffering at endpoints
B. Call Admission Control
C. increase the bandwidth of the links
D. WRED
Answer: A
NEW QUESTION 429
Which two functions are performed at the core layer of the three-layer hierarchical network design model? (Choose two.)
A. QoS classification and marking boundary
B. fast transport
C. reliability
D. fault isolation
E. load balancing
Answer: BC
NEW QUESTION 430
Which are two general SDN characteristics? (Choose two.)
A. OVSDB is an application database management protocol.
B. Northbound interfaces are open interfaces used between the control plane and the data plane.
C. OpenFlow is considered one of the first Northbound APIs used by SDN controllers.
D. Southbound interface are interfaces used between the control plane and the data plane.
E. The separation of the control plane from the data plane.
Answer: DE
NEW QUESTION 431
……
P.S. These New 352-001 Exam Questions Were Just Updated From The Real 352-001 Exam, You Can Get The Newest 352-001 Dumps In PDF And VCE From — http://www.passleader.com/352-001.html (493q VCE and PDF)
Good Luck!
By the way, part of that new 493Q 352-001 dumps are available here:
http://www.ciscobraindump.com/?s=352-001
Best Regards!