Cisco Certified Design Expert Qualification (Written) 352-001 CCDE Exam Questions

You were tasked to enhance the security of a network with these characteristics:

* A pool of servers is accessed by numerous data centers and remote sites

* The servers are accessed via a cluster of firewalls

* The firewalls are configured properly and are not dropping traffic

* The firewalls occasionally cause asymmetric routing of traffic within the server data center.

Which technology should you recommend to enhance security by limiting traffic that could originate from a hacker compromising a workstation and redirecting flows at the servers?

As network designer what will be your main concern with regards to virtualizing multiple network zones into a single hardware device?

You have been tasked to create a Layer 2 network design that uses vPC to provide resiliency and avoid loops, vPC removes Layer 2 loops while providing redundancy through which mechanism?

You are tasked to design a QoS policy for a service provider so they can include it in the design of their MPLS core network If the design must support an MPLS network with six classes, and CEs will be managed by the service provider, which QoS policy should be recommended?

Which three disadvantages of connecting an on-premises private cloud to a colocation facility versus a cloud VPN are true? (Choose three)

The network architect wants to reduce the OSPF database in the network by using summarization techniques In which two places in the network can summarization be applied to maximum effect? (Choose two.)

Which design advantage of Ethernet VPN over VPLS is true?