Cisco Certified Design Expert Practical Sample Questions:

1. An enterprise customer has a national WAN network based on DMVPN over the Internet, with sites located throughout the country. The customer has recently deployed VoIP throughout the entire network , and users report that it takes up to 2 seconds to establish a telephone call to an IP telephone at another office network.
Drag and drop the root cause and the corresponding design solution from the left onto the correct targets on the right Not all options are used

2. Which two statements about AToM are true? (Choose two)

A) It provides support for L2VPN features on ATM interfaces
B) The loopback address of the PE router must be either /24 or /32
C) It encapsulates Layer 2 frames at the egress PE
D) When using AToM, the IP precedence filed is not copied to the MPLS packet
E) AToM supports connecting different L2 technologies using interworking option

3. You are working on a network design plan for a company with approximately 2000 sites. The sites will be connected using the public Internet. You plan to use private IP addressing in the network design, which will be routed without NAT through an encrypted WAN network. Some sites will be connected to the Internet with dynamic public IP addresses, and these addresses may change occasionally. Which VPN solution will support these design requirements?

A) GET VPN must be used, because private IP addresses cannot be transferred with DMVPN through the public Internet.
B) DMVPN must be used, because private IP addresses cannot be transferred with GET VPN through the public Internet.
C) GET VPN must be used, because DMVPN does not scale to 2000 sites.
D) DMVPN must be used, because GET VPN does not support dynamic IP addresses for some sites.
E) DMVPN must be used, because GET VPN does not scale to 2000 sites.
F) GET VPN must be used, because DMVPN does not support dynamic IP addresses for some sites.

4. Refer to the exhibit.

An enterprise has three sites over a Layer 2 Metro Ethernet ELAN service. 100Mb/s and 10 Mb/s links have been provisioned to provide redundancy for the head office. When OSPF routing enabled to provide connectivity and the correct bandwidth statement has been applied to each interface, the branch sites observe two equal-cost routes to the head office. The enterprise wants to send all traffic through the 100 Mb/s link and use the 10Mb/S link strictly as a backup. Which OSPF network type must be set to ensure that the head office 100 Mb/s circuit is preferred over the 10 Mb/s circuit, at the same time minimize the amount of configuration required on all of the routers throughout the network?

A) Point-to-point
B) NBMA
C) Point-to-multipoint
D) Broadcast

5. Which three reasons to deploy an IDS sensor in promiscuous mode when you design a security solution are true? (Choose three.)

A) Solution should allow to deny packets inline.
B) Solution should be resistant to sensor failure.
C) Solution should allow for stream normalization.
D) Solution should not impact jitter and latency for voice traffic.
E) Solution should allow for signature-based pattern matching.

Solutions: