Cisco 200-355 Online Practice Questions and Exam Preparation

Cisco 200-355 Online Questions & Answers

• Question 131:

  Which architecture is used to divide the roles between the access point and the WLC when deploying a centralized wireless solution?

  A. Split MAC
  B. CAPWAP
  C. LWAPP
  D. Local MAC
  A. Split MAC

• Question 132:

  Drag the features that are associated with Cisco Compatible Extensions Lite from the left and drop them in the appropriate category on the right.

  Select and Place:

  

  

• Question 133:

  What two access methods are enabled by default on a Cisco WLC? (Choose two.)

  A. HTTP
  B. HTTPS
  C. Telnet
  D. SSH
  E. VPN
  F. SFTP
  B. HTTPS
  D. SSH

• Question 134:

  Which sequence of steps does the CAPWAP state machine take?

  A. join, discover, image, config, run
  B. discover, image, DTLS setup, join, config, run
  C. discover, DTLS setup, join, image, config, run
  D. discover, join, image, config, run
  C. discover, DTLS setup, join, image, config, run

  ---

  Reference: http://what-when-how.com/deploying-and-troubleshooting-cisco-wireless-lan-controllers/capwap-session-establishmentap-joining-process-cisco-wireless-lan-controllers-part-1/

• Question 135:

  Which two factors must be considered when evaluating an RF interferer for severity? (Choose two.)

  A. distance from the AP
  B. dBm
  C. the type of security crack being used
  D. duty cycle
  E. number of interfering IP stations in the cell
  F. duplicate SSID
  B. dBm
  D. duty cycle

  ---

  On controller code 7.0 and later, you can configure Event Driven RRM (EDRRM) from the Wireless >802.11a/n [802.11b/g/n] > RRM > DCA page. Enabling EDRRM allows the controller to bypass the 600-second default interval for DCA and change an AP channel immediately if a disturbing non-802.11 interference is detected on the AP channel. You can set the sensitivity threshold to High (60), Medium (50), or Low (35). This threshold refers to the Air Quality index. CleanAircapable APs (3500 and 3600 Series APs, with their CleanAir capable chipset) can detect and identify non-802.11 interferences and report them to the controller. These APs can report interferers when in local mode and monitor mode. Notice that the AP cannot report to the controller when in Spectrum Only Monitor Mode (SOMM). The controller uses the reported information to list non- 802.11 interferers along with their zone of impact and severity and establish an Air Quality Index (AQI) from 100 (perfect) to 0 (network unusable). Notice that the logic of the global AQ index (higher is better) is exactly the opposite of the logic of the individual interferer severity index (higher is more severe, and therefore worse). The severity index is calculated individually by each detecting AP based on the power (signal strength), duty cycle (how often the device uses the air per second), and detected type of interferer. The louder an interferer device, the higher the duty cycle will mean a higher severity index for the reporting AP. The severity index is calculated for a specific device, without regard to what channels are being affected.

• Question 136:

  What is max level in Cisco WLC TPC for all regulatory domain?

  A. 1
  B. 8
  C. 10
  D. 11
  A. 1

• Question 137:

  Which method is used to shield the client from class 3 management attacks?

  A. client MFP
  B. WEP
  C. WPA
  D. client protection suite
  E. 802.1X
  A. client MFP

  ---

  With MFP, all management frames are cryptographically hashed to create a Message Integrity Check (MIC). The MIC is added to the end of the frame (before the Frame Check Sequence (FCS)).

  When MFP is enabled on one or more WLANs configured in the WLC, the WLC sends a unique key to each radio on each registered AP. Management frames are sent by the AP over the MFP-enabled WLANs. These APs are labeled with a frame protection MIC IE. Any attempt to alter the frame invalidates the message, which causes the receiving AP that is configured to detect MFP frames to report the discrepancy to the WLAN controller. http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/82196-mfp.html

• Question 138:

  Strong security is required, but a centralized RADIUS authenticator has not been implemented. Which two steps must you take to provide maximum security when using a pre-shared key? (Choose two.)

  A. Change the TKIP on a weekly basis.
  B. Use a key that includes mixed-case letters, numbers, and symbols with a length greater than 10 characters.
  C. Use only with WPA and WPA2, following proper strong key guidelines.
  D. Use the longest possible WEP key in your security policy.
  B. Use a key that includes mixed-case letters, numbers, and symbols with a length greater than 10 characters.
  C. Use only with WPA and WPA2, following proper strong key guidelines.

  ---

  Another form of basic security now available is WPA or WPA2 Pre-Shared Key (PSK). The PSK verifies users via a password, or identifying code, (also called a passphrase) on both the client station and the access point. A client may only gain access to the network if the client's password matches the access point's password. The PSK also provides keying material that TKIP or AES use to generate an encryption key for each packet of transmitted data. While more secure than static WEP, PSK is similar to static WEP in that the PSK is stored on the client station and can be compromised if the client station is lost or stolen. A strong PSK passphrase that uses a mixture of letters, numbers, and non-alphanumeric characters is recommended. http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1200-access-point/prod_brochure09186a00801f7d0b.html

• Question 139:

  A lightweight AP using IOS version 8 broadcasts a Layer 3 CAPWAP discovery message on the local IP subnet. Which step does the AP take next?

  A. Determine if the controller responses include the primary controller.
  B. Send a discovery request using DHCP option 43.
  C. Send a discovery request using DNS.
  D. Send a discovery request using locally stored information on the AP.
  D. Send a discovery request using locally stored information on the AP.

• Question 140:

  Refer to the exhibit.

  

  With the current Cisco WLC version 7.0 syslog level settings set the way they are, which log levels are captured by the Syslog server?

  A. syslog level errors only
  B. all syslog levels
  C. only the syslog severity level number of error and greater
  D. only the syslog severity level number of error and less
  D. only the syslog severity level number of error and less

  ---

  Here the syslog level is set to errors, so it will send all logs with a severity level of errors, as well as all other messages with a greater severity level.