Cisco 200-355 Online Practice Questions and Exam Preparation

Cisco 200-355 Online Questions & Answers

• Question 201:

  What is an interferer that an engineer may see in Cisco CleanAir?

  A. microwave ovens
  B. rogue APs
  C. malicious clients
  D. co-channel interference
  A. microwave ovens

• Question 202:

  Which statement about configuration of Layer 2 wireless user authentication on a Cisco WLC is true?

  A. Local EAP is used only if an external RADIUS is not configured or is unreachable.
  B. The external RADIUS is used only if local EAP is not configured.
  C. The administrator chooses whether local EAP or an external RADIUS is used first.
  D. The external RADIUS is used only if local EAP is explicitly disabled.
  A. Local EAP is used only if an external RADIUS is not configured or is unreachable.

  ---

  If any RADIUS servers are configured on the controller, the controller tries to authenticate the wireless clients using the RADIUS servers first. Local EAP is attempted only if no RADIUS servers are found, either because the RADIUS servers timed out or no RADIUS servers were configured. If four RADIUS servers are configured, the controller attempts to authenticate the client with the first RADIUS server, then the second RADIUS server, and then local EAP. If the client attempts to then reauthenticate manually, the controller tries the third RADIUS server, then the fourth RADIUS server, and then local EAP. http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/ b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_0110010.html

• Question 203:

  A customer has requested a wireless configuration platform with built-in adult content filtering. What platform will accomplish this?

  A. ISE
  B. Meraki Cloud Dashboard
  C. Prime Infrastructure
  D. Cisco Wireless Controller GUI
  B. Meraki Cloud Dashboard

• Question 204:

  Which limitation applies to the use of the Cisco WLAN Solution Management over Wireless feature?

  A. Controllers must be managed using only secure protocols (that is, SSH and HTTPS), not nonsecure protocols (that is, HTTP and Telnet).
  B. Read-write access is not available; only read-only access is supported.
  C. Uploads and downloads from the controller are not allowed.
  D. Wireless clients can manage other controllers however not the same controller and AP to which the client is associated.
  C. Uploads and downloads from the controller are not allowed.

• Question 205:

  The results of a Cisco WCS client troubleshooting tool are summarized into a simple visual representation of a four-part progression of the connection status for a wireless client. What are the four parts? (Choose four.)

  A. client MAC address
  B. 802.11 authentication
  C. IP address assignment
  D. 802.11 association
  E. successful association
  F. authentication method
  G. SSID
  H. client radio type
  B. 802.11 authentication
  C. IP address assignment
  D. 802.11 association
  E. successful association

  ---

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107585-client-con.html

• Question 206:

  Which two wireless technologies can interfere with 802.11 networks? (Choose two.)

  A. DECT
  B. ZigBee
  C. WiMax
  D. GSM
  A. DECT
  B. ZigBee

  ---

  Digital Enhanced Cordless Telecommunication (DECT), also known as cordless telephones, and Zigbee are both well-known sources of interferences within an 802.11 network.

• Question 207:

  What are four features of WPA? (Choose four.)

  A. a larger initialization vector, increased to 48 bits
  B. a message integrity check protocol to prevent forgeries
  C. authenticated key management using 802.1X
  D. support for a key caching mechanism
  E. unicast and broadcast key management
  F. requires AES-CCMP
  A. a larger initialization vector, increased to 48 bits
  B. a message integrity check protocol to prevent forgeries
  C. authenticated key management using 802.1X
  E. unicast and broadcast key management

  ---

  TKIP and the related WPA standard implement three new security features to address security problems encountered in WEP protected networks. First, TKIP implements a key mixing function that combines the secret root key with the initialization vector before passing it to the RC4 initialization. WEP, in comparison, merely concatenated the initialization vector to the root key, and passed this value to the RC4 routine. This permitted the vast majority of the RC4 based WEP related key attacks. Second, WPA implements a sequence counter to protect against replay attacks. Packets received out of order will be rejected by the access point. Finally, TKIP implements a 64-bit Message Integrity Check (MIC). To be able to run on legacy WEP hardware with minor upgrades, TKIP uses RC4 as its cipher. TKIP also provides a rekeying mechanism. TKIP ensures that every data packet is sent with a unique encryption key. Key mixing increases the complexity of decoding the keys by giving an attacker substantially less data that has been encrypted using any one key. WPA2 also implements a new message integrity code, MIC. The message integrity check prevents forged packets from being accepted. Under WEP it was possible to alter a packet whose content was known even if it had not been decrypted. http://en.wikipedia.org/wiki/Temporal_Key_Integrity_Protocol http://documentation.netgear.com/reference/fra/wireless/WirelessNetworkingBasics-3-14.html

• Question 208:

  Which two statements best describe the LAG configuration between a Cisco WLC and a Cisco Catalyst switch? (Choose two.)

  A. The Catalyst switch should be configured for PAgP.
  B. The Catalyst switch should be configured only for Layer 2 load balancing.
  C. The Catalyst switch should be configured for "on" mode.
  D. The Cisco WLC relies on the connected switch to perform the load-balance of traffic.
  E. The Cisco WLC aggregates multiple management interfaces into a single virtual interface.
  C. The Catalyst switch should be configured for "on" mode.
  D. The Cisco WLC relies on the connected switch to perform the load-balance of traffic.

  ---

  Restrictions for Link Aggregation

  You can bundle all eight ports on a Cisco 5508 Controller into a single link.

  Terminating on two different modules within a single Catalyst 6500 series switch provides redundancy and ensures that connectivity between the switch and the controller is maintained when one module fails. The controller's port 1 is

  connected to Gigabit interface 3/1, and the controller's port 2 is connected to Gigabit interface 2/1 on the Catalyst 6500 series switch. Both switch ports are assigned to the same channel group. LAG requires the EtherChannel to be configured

  for 'mode on' on both the controller and the Catalyst switch.

  Once the EtherChannel is configured as on at both ends of the link, the Catalyst switch should not be configured for either Link Aggregation Control Protocol (LACP) or Cisco proprietary Port Aggregation Protocol (PAgP) but be set

  unconditionally to LAG. Because Cisco WLC relies on the connected switch to perform the load-balance of traffic, the controller does not answer to negotiation frames and the LAG is not formed if a dynamic form of LAG is set on the switch.

  Additionally, LACP and PAgP are not supported on the controller.

  http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_0100011.html

• Question 209:

  You are configuring an IP address on an autonomous access point. Which interface do you use to configure the IP address?

  A. BVI1
  B. FastEthernet 0
  C. Dot11Radio0
  D. VLAN 1
  A. BVI1

  ---

  Assigning the IP Address to the BVI When you assign an IP address to the access point by using the CLI, you must assign the address to the bridge-group virtual interface (BVI). Beginning in a privileged EXEC mode, follow these steps to assign an IP address to the access point BVI using the access point console port. Command Purpose Step 1 configure terminal Enter global configuration mode. Step 2 interface bvi1 Enters interface configuration mode for the BVI. Step 3 ip address ip_address net_mask Assigns an IP address and subnet mask address to the BVI. Reference: http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1140/autonomous/getting_started/guide/ap1140aut_getstart.html

• Question 210:

  Instructions:

  1.

  Refer to the exhibits to answer the questions related to this task.

  2.

  THIS TASK DOES NOT REQUIRE DEVICE CONFIGURATION

  3.

  To access the multiple-choice question, click on the numbered box on the left of the top panel.

  4.

  There is one multiple-choice question with this task. Be sure to answer the question before selecting the Next button.

  Scenario:

  You are deploying a small wireless test network in a lab. The network is made up a wireless controller (WLC1), a dual radio access point (AP1) and a switch that is configured as a DHCP server. The IP subnet being used for this network is

  10.10.10.0/24.

  

  

  

  In setting up the wireless network, it is desired that the DHCP server that is configured in WLC1 provides IP addressing to the WLAN. When devices attempt to join the network, they fail to receive an IP address in the range provided by the DHCP server in WLC1, but they do receive an IP address from the DHCP server in SW1. What is causing this issue?

  A. The external DHCP server in SW1 will always be the preferred DHCP server and WLC1 will always be the secondary DHCP server in the WLAN.
  B. The DHCP server address for SW1 needs to be removed from the DHCP server configuration in WLC1.
  C. The primary DHCP server address in WLC1 is incorrect.
  D. The primary DHCP server configured in WLC1 is not enabled.
  D. The primary DHCP server configured in WLC1 is not enabled.

  ---

  This can be verified by the following screen shot, showing the DHCP server is disabled at the bottom: