20:00Min. left

PDF|

Guide for 352-011: Cisco Certified Design Expert Practical Exam

Quiz 352-011: Cisco Certified Design Expert Practical Exam

Updated on 2026/06/06

PDF|

Guide for 352-011: Cisco Certified Design Expert Practical Exam

Updated on 2026/06/06

Randomized | 10 Questions per Test | 20 Minutes | 70% to pass

Learning Mode

Free Test

Question: / 10

20:00Min. left

Question: / 10

5.0

Quiz

Question 1/101/10

The cloud service provider CSP is planning to launch five data centers in Egypt, United Arab Emirates,
Saudi Arabia, Qatar and Turkey. CSP is looking for VLAN extension and DCIs between these five data
centers to allow for software replication, where original and backup VMs must be on the same
subnet. Which tunneling technology must they use?

Select the answer:Select the answer

1 correct answer

VPLS

IPsec VPN

VPWS

L2TPv3

Quiz

Question 2/102/10

As part of network design, two geographically separated data centers must be interconnected using
Ethernet-over-MPLS pseudowire. The link between the sites is stable, the topology has no apparent
loops, and the root bridges for the respective VLANs are stable and unchanging. Which aspect must
be the part of the design to mitigate the risk of connectivity issues between the data centers?

Select the answer:Select the answer

1 correct answer

Enable 802.1d on one data center, and 802.1w on the other.

Ensure that the spanning tree diameter for one or more VLANs is not too large.

Enable UDLD on the link between the data centers.

Enable root guard on the link between the data centers.

The correct answer is B. Ensure that the spanning tree diameter for one or more VLANs is not too large.
When two data centers are connected through Ethernet-over-MPLS pseudowire, the link behaves like an extended Layer 2 connection. Even if the physical link is stable, the design still has to account for spanning tree behavior across the extended topology.
Why B is correct:
Spanning tree diameter refers to the maximum number of switches a Layer 2 frame may traverse within a VLAN before reaching the root bridge. In stretched Layer 2 designs, especially across data centers, a large spanning tree diameter can cause problems such as delayed convergence, inconsistent topology perception, and connectivity issues during failures or topology changes.
Since the topology is stable and the root bridges are fixed, the main remaining design concern is making sure the spanning tree domain is not too large for the protocol and network to handle reliably. Keeping the diameter within acceptable limits helps prevent connectivity issues across the pseudowire extension.
Why the other options are incorrect:
A. Enable 802.1d on one data center, and 802.1w on the other.
This is not a proper design control for solving inter-data-center connectivity risk. Mixing spanning tree versions between sites is not the recommended mitigation and can create operational complexity rather than improve reliability.
C. Enable UDLD on the link between the data centers.
UDLD is used to detect unidirectional physical link failures, typically on direct fiber or Ethernet links. It is useful in some cases, but it does not address the main concern in a stretched Layer 2 pseudowire environment, which is spanning tree diameter and convergence behavior.
D. Enable root guard on the link between the data centers.
Root guard is used to prevent an inferior switch from becoming root bridge on a port. Since the root bridges are already stable and unchanging, root guard is not the specific design element needed here.
Summary:
In a stretched Layer 2 data center design using Ethernet-over-MPLS pseudowire, the key design consideration is to keep the spanning tree diameter small enough to avoid convergence and reachability problems. That is why B is the best answer.

Right Answer: B

Quiz

Question 3/103/10

Which load balancing option for IP-only traffic is the least efficient in terms of EtherChannel physical
links utilization?

Select the answer:Select the answer

1 correct answer

On a per source IP address basis

On a per destination MAC address basis

On a per destination IP address basis

On a per port number basis

Quiz

Question 4/104/10

A service provider wants to use a controller to automate the provisioning of service function
chaining. Which two overlay technologies can be used with EVPN MP-BGP to create the service
chains in the data center?

Select the answer:Select the answer

1 correct answer

VXLAN

MPLS L2VPN

Provider Backbone Bridging EVPN

802.1Q

Quiz

Question 5/105/10

Company ABC is using an Ethernet virtual circuit as its provider’s DCI solution. A goal is to reduce the
time to detect the link failure. Which protocol accomplishes this goal?

Select the answer:Select the answer

1 correct answer

UDLD

Spanning tree bridge assurance

Link aggregation group

Ethernet OAM

Quiz

Question 6/106/10

ACME Corporation is integrating IPv6 into their network, which relies heavily on multicast
distribution of data. Which two IPv6 integration technologies support IPv6 multicast? (Choose two.)

Select multiple answer: (Choose 2)Select the answer

2 correct answers

6VPE

6PE

dual stack

ISATAP

6to4

IPv6INIP

Quiz

Question 7/107/10

What is an implication of using route reflectors in an iBGP topology?

Select the answer:Select the answer

1 correct answer

Route reflection limits the total number of iBGP routers.

Route reflection causes traffic to flow in a hub-and-spoke fashion.

The manipulation of BGP attributes is not supported on the other routers than the route reflectors.

Route reflectors can create routing loops when more than one router reflector is used in the same cluster.

Multipath information is difficult to propagate in a route reflector topology.

The correct answer is E. Multipath information is difficult to propagate in a route reflector topology.
In a normal iBGP full-mesh topology, every iBGP router learns routes directly from every other iBGP router. This makes it easier for multiple equal-cost paths, or multipath information, to be shared consistently across the network.
Route reflectors were introduced to reduce the need for a full mesh of iBGP peerings. A route reflector receives routes from some iBGP clients and reflects them to other clients, which simplifies scalability. However, this hierarchy can interfere with the propagation of multiple paths. A route reflector may not reflect all alternate paths in the same way a full mesh would, so some routers may not learn about all available equal-cost routes. As a result, multipath information can be harder to propagate.
Why the other options are incorrect:
A. Route reflection limits the total number of iBGP routers.
This is incorrect. Route reflectors are used to improve scalability and allow larger iBGP networks, not limit the number of routers.
B. Route reflection causes traffic to flow in a hub-and-spoke fashion.
This is misleading. Route reflectors create a control-plane hierarchy, but they do not inherently force data traffic to travel in a hub-and-spoke pattern.
C. The manipulation of BGP attributes is not supported on the other routers than the route reflectors.
This is false. BGP attribute manipulation can be done on many routers using policy tools such as route maps, prefix lists, and policy statements.
D. Route reflectors can create routing loops when more than one router reflector is used in the same cluster.
This is not generally correct as stated. Route reflectors are designed with cluster IDs and originator IDs specifically to prevent routing loops. Misconfiguration can cause problems, but this is not the typical implication being tested.
Why E is the best answer:
A key drawback of route reflector topologies is that they can make multipath propagation less straightforward. Because not all routers exchange routes directly, alternate paths may not be distributed as fully as in a full-mesh iBGP design. This is a common limitation of route reflector deployments.
If you'd like, I can also explain how route reflectors work internally with client and non-client routers.

Right Answer: E

Quiz

Question 8/108/10

What are two benefits of following a structured hierarchical and modular design? (Choose two.)

Select multiple answer: (Choose 2)Select the answer

2 correct answers

Each component can be designed independently for its role.

Each component can be managed independently based on its role.

Each component can be funded by different organizations based on its role.

Each component can support multiple roles based on the requirements.

Each component can provide redundancy for applications and services.

Quiz

Question 9/109/10

Which three options are important design functions of IPv6 first-hop security? (Choose three)

Select multiple answer: (Choose 3)Select the answer

3 correct answers

It prevents rogue DHCP servers farms assigning IPv6 addresses.

It prevents IPv6 packets fragmentation.

It limits IPv6 route the advertisement in the network.

It implements a broadcast-control mechanism.

It suppresses excessive multicast neighbor discovery.

It implements multihoming security.

The correct answers are A, C, and E.
IPv6 first-hop security refers to protections applied on the local network segment, typically at the access switch, to defend against attacks that can be launched by hosts connected to the same Layer 2 domain. Its goal is to stop unauthorized devices from sending harmful IPv6 control traffic that could interfere with address assignment, routing, or neighbor discovery.
Explanation of the correct options:
A. It prevents rogue DHCP servers from assigning IPv6 addresses.
This is correct. IPv6 first-hop security includes mechanisms such as DHCPv6 guard, which blocks unauthorized DHCPv6 server messages from reaching clients. This helps prevent rogue servers from handing out invalid addresses or configuration information.
C. It limits IPv6 route advertisements in the network.
This is correct. A key function of first-hop security is controlling Router Advertisement messages through features like RA guard. This prevents unauthorized devices from advertising themselves as routers and influencing the default gateway or route selection of hosts.
E. It suppresses excessive multicast neighbor discovery.
This is correct. IPv6 depends heavily on Neighbor Discovery, which uses multicast traffic. First-hop security can include protections such as Neighbor Discovery inspection or rate limiting to reduce abuse from excessive or malicious ND traffic. This helps protect the local network from flooding or spoofing attacks.
Why the other options are incorrect:
B. It prevents IPv6 packet fragmentation.
Incorrect. First-hop security is not primarily designed to prevent fragmentation. IPv6 fragmentation is handled by protocol behavior and packet handling mechanisms, not by first-hop security features.
D. It implements a broadcast-control mechanism.
Incorrect. IPv6 does not use broadcast the way IPv4 does; it relies on multicast and unicast. First-hop security is not about broadcast control.
F. It implements multihoming security.
Incorrect. Multihoming security is not a standard design function of IPv6 first-hop security. First-hop security focuses on securing local neighbor and router discovery traffic, not multihoming.
Summary:
IPv6 first-hop security is mainly about protecting the local link from rogue control-plane messages. The important design functions are:
- A: stop rogue DHCPv6 servers
- C: limit unauthorized Router Advertisements
- E: suppress excessive Neighbor Discovery traffic
Therefore, the correct answer is A, C, and E.

Right Answer: A, C, E

Quiz

Question 10/1010/10

You have been asked to design a wireless network solution that will implement context-aware
services on an existing network that was initially deployed for data traffic only. Which two design
principles would you follow to increase the location accuracy with the least possible impact on the
current setup? (Choose two.)

Select multiple answer: (Choose 2)Select the answer

2 correct answers

Use directional antennas to provide better cell separation.

Add access points along the perimeter of the coverage area.

Install additional APs in monitor mode where the co-channel interference would otherwise be affected.

Increase the AP density to create an average inter-access point distance of less than 40 ft.| 12.2meters

Fine tune the access point’s radio configuration to have a higher average transmission power to achieve better coverage.

The correct answers are A and D.
Why these are correct
The goal is to improve location accuracy for context-aware services on an existing wireless network that was originally designed only for data. For location-based services, accuracy improves when the wireless cells are smaller and more distinct, and when the network has enough access points to provide strong triangulation or proximity data.
A. Use directional antennas to provide better cell separation.
This helps because directional antennas focus RF energy in specific directions instead of broadcasting equally in all directions. That creates more distinct coverage areas and reduces overlap between neighboring cells. Better cell separation improves the ability to determine a client’s location more accurately.
D. Increase the AP density to create an average inter-access point distance of less than 40 ft. | 12.2 meters.
This is also correct because more access points placed closer together give the system more reference points for determining location. Higher AP density generally improves location accuracy since clients can be heard by multiple APs with stronger and more differentiated signal readings. The less-than-40-foot spacing is a common design guideline for location services.
Why the other options are not best
B. Add access points along the perimeter of the coverage area.
This may help coverage at the edges, but it does not directly improve overall location accuracy as effectively as increasing density throughout the area. It is more about coverage extension than precise indoor positioning.
C. Install additional APs in monitor mode where the co-channel interference would otherwise be affected.
Monitor mode APs can help with location tracking or rogue detection in some designs, but the wording here suggests placing them specifically to avoid co-channel interference. That makes this less of a direct design principle for improving location accuracy with minimal impact on an existing data network.
E. Fine tune the access point’s radio configuration to have a higher average transmission power to achieve better coverage.
Increasing transmit power usually enlarges cell size and increases overlap, which tends to reduce location accuracy rather than improve it. For location-aware services, smaller, well-defined cells are generally better than large, overlapping ones.
Summary
To improve location accuracy with minimal disruption to a data-only WLAN, you want:
- A: directional antennas to sharpen RF boundaries
- D: higher AP density with APs spaced closely enough for accurate location determination
So the correct answer is A and D.

Right Answer: A, D

Looking for more questions?Buy now

352-011: Cisco Certified Design Expert Practical Exam Practice test unlocks all online simulator questions

Thank you for choosing the free version of the 352-011: Cisco Certified Design Expert Practical Exam practice test! Further deepen your knowledge on Cisco Simulator; by unlocking the full version of our 352-011: Cisco Certified Design Expert Practical Exam Simulator you will be able to take tests with over 249 constantly updated questions and easily pass your exam. 98% of people pass the exam in the first attempt after preparing with our 249 questions.

BUY NOW

What to expect from our 352-011: Cisco Certified Design Expert Practical Exam practice tests and how to prepare for any exam?

The 352-011: Cisco Certified Design Expert Practical Exam Simulator Practice Tests are part of the Cisco Database and are the best way to prepare for any 352-011: Cisco Certified Design Expert Practical Exam exam. The 352-011: Cisco Certified Design Expert Practical Exam practice tests consist of 249 questions and are written by experts to help you and prepare you to pass the exam on the first attempt. The 352-011: Cisco Certified Design Expert Practical Exam database includes questions from previous and other exams, which means you will be able to practice simulating past and future questions. Preparation with 352-011: Cisco Certified Design Expert Practical Exam Simulator will also give you an idea of the time it will take to complete each section of the 352-011: Cisco Certified Design Expert Practical Exam practice test . It is important to note that the 352-011: Cisco Certified Design Expert Practical Exam Simulator does not replace the classic 352-011: Cisco Certified Design Expert Practical Exam study guides; however, the Simulator provides valuable insights into what to expect and how much work needs to be done to prepare for the 352-011: Cisco Certified Design Expert Practical Exam exam.

BUY NOW

352-011: Cisco Certified Design Expert Practical Exam Practice test therefore represents an excellent tool to prepare for the actual exam together with our Cisco practice test . Our 352-011: Cisco Certified Design Expert Practical Exam Simulator will help you assess your level of preparation and understand your strengths and weaknesses. Below you can read all the quizzes you will find in our 352-011: Cisco Certified Design Expert Practical Exam Simulator and how our unique 352-011: Cisco Certified Design Expert Practical Exam Database made up of real questions:

Info quiz:

Quiz name:352-011: Cisco Certified Design Expert Practical Exam
Total number of questions:249
Number of questions for the test:50
Pass score:80%

You can prepare for the 352-011: Cisco Certified Design Expert Practical Exam exams with our mobile app. It is very easy to use and even works offline in case of network failure, with all the functions you need to study and practice with our 352-011: Cisco Certified Design Expert Practical Exam Simulator.

Use our Mobile App, available for both Android and iOS devices, with our 352-011: Cisco Certified Design Expert Practical Exam Simulator . You can use it anywhere and always remember that our mobile app is free and available on all stores.

Our Mobile App contains all 352-011: Cisco Certified Design Expert Practical Exam practice tests which consist of 249 questions and also provide study material to pass the final 352-011: Cisco Certified Design Expert Practical Exam exam with guaranteed success. Our 352-011: Cisco Certified Design Expert Practical Exam database contain hundreds of questions and Cisco Tests related to 352-011: Cisco Certified Design Expert Practical Exam Exam. This way you can practice anywhere you want, even offline without the internet.

BUY NOW

Quiz 352-011: Cisco Certified Design Expert Practical Exam

Free Test - Simulator 352-011: Cisco Certified Design Expert Practical Exam

352-011: Cisco Certified Design Expert Practical Exam Practice test unlocks all online simulator questions

What to expect from our 352-011: Cisco Certified Design Expert Practical Exam practice tests and how to prepare for any exam?