Cisco 200-355 Online Practice Questions and Exam Preparation

Cisco 200-355 Online Questions & Answers

• Question 291:

  What security benefit is enabled by using Management Frame Protection?

  A. Provides encryption of administrator sessions between a wireless client and a wireless LAN controller.
  B. Protects the network infrastructure from denial-of-service attacks that attempt to flood the network with associations and probes.
  C. Prevents the formation of client ad hoc networks within the RF coverage domain.
  D. Detects network reconnaissance probes, like those used by tools like NetStumbler, that attempt to discover the wireless network topology.
  B. Protects the network infrastructure from denial-of-service attacks that attempt to flood the network with associations and probes.

• Question 292:

  Which Cisco WLC command family can help to troubleshoot communication between an AP and the WLC?

  A. (Cisco Controller) >debug capwap
  B. (Cisco Controller) >debug ap
  C. (Cisco Controller) >debug cac
  D. (Cisco Controller) >debug dot11
  A. (Cisco Controller) >debug capwap

  ---

  Example debugs available for this shown below:

  WLC side debug commands:

  (Cisco Controller) >debug capwap?

  https://mrncciew.files.wordpress.com/2013/03/brkewn-3011-troubleshooting-wireless-lans.pdf

• Question 293:

  Refer to the exhibit.

  

  Which two statements about the status of the respective AP on a Cisco WCS version 7.0 map does this icon represent? (Choose two.)

  A. The 802.11a/n radio is administratively disabled.
  B. The 802.11a/n radio has a minor fault.
  C. The 802.11a/n radio has a major fault.
  D. The 802.11b/g/n radio is administratively disabled.
  E. The 802.11b/g/n radio has a minor fault.
  F. The 802.11b/g/n radio has a major fault.
  B. The 802.11a/n radio has a minor fault.
  F. The 802.11b/g/n radio has a major fault.

  ---

  The icon with the top half yellow and the lower half red indicates that the optional 802.11a Cisco Radio (top) has a minor fault, and the 802.11b/g Cisco Radio (bottom) has a major or critical fault. The worst of the two Cisco Radio colors determines the color of the large triangular pointer. http://www.cisco.com/c/en/us/td/docs/wireless/wcs/7-0MR1/configuration/guide/WCS70MR1/maps.html#wp1090761

• Question 294:

  A customer is concerned about ease of wireless management. Which deployment model requires the highest administrative overhead to deploy and manage?

  A. autonomous
  B. local mode
  C. cloud
  D. converged
  A. autonomous

• Question 295:

  Cisco Client Management Frame Protection is running on a mobility group with two controllers. Which two MFP requirements protect the network? (Choose two.)

  A. forces clients to authenticate, using a secure EAP method only
  B. implements the validation of wireless management frames
  C. requires Cisco Compatible Extensions v5
  D. requires the use of a nonbroadcast SSID
  E. requires Cisco Compatible Extensions v4
  B. implements the validation of wireless management frames
  C. requires Cisco Compatible Extensions v5

  ---

  Client MFP encrypts class 3 management frames sent between APs and Cisco Compatible Extension version 5 (CCXv5) --capable client stations, so that both AP and client can take preventive action by dropping spoofed class 3 management frames (management frames) that are passed between an AP and a client station that is authenticated and associated). Client MFP leverages the security mechanisms defined by IEEE 802.11i to protect class 3 unicast management frames. The unicast cipher suite that is negotiated by the STA in the reassociation request's Robust Security Network Information Element (RSNIE) is used to protect both unicast data and class 3 management frames. An AP in workgroup bridge mode, repeater mode, or no-root bridge mode must negotiate either Temporal Key Integrity Protocol (TKIP) or Advanced Encryption Standard-Cipher Block Chaining Message Authentication Code Protocol (AES-CCMP) to use Client MFP.

  Management Frame Protection operation requires a wireless domain service (WDS). MFP is configured at the wireless LAN solution engine (WLSE), but you can manually configure MFP on an AP and WDS. http://www.cisco.com/c/en/us/td/docs/routers/access/3200/software/wireless/3200WirelessConfigGuide/ManageFrameProt.html

• Question 296:

  When deploying a Cisco Cloud Wireless Infrastructure, what two destination ports must be open? (Choose two.)

  A. TCP/5246
  B. UDP/5246
  C. TCP/5247
  D. UDP/5247
  E. TCP/7351
  F. UDP/7351
  G. TCP/7734
  H. UDP/7734
  F. UDP/7351
  G. TCP/7734

• Question 297:

  You are designing a wireless network in a medical facility. Which three areas are bad locations in which to install a wireless access point? (Choose three.)

  A. in front of the elevators doors
  B. in the hallways
  C. next to the electrical room
  D. inside offices
  E. near medical imaging devices
  F. in the lobby
  A. in front of the elevators doors
  C. next to the electrical room
  E. near medical imaging devices

  ---

  You should not install access points in areas where interference from outside devices can occur. A great deal of electrical interference can occur near the electrical room and near medical imaging devices. Also, because elevators often have metal doors and the shafts are often concrete or contain other materials that degrade Wi-Fi coverage, it is best to avoid them.

• Question 298:

  Drag the Cisco WCS report from the left and drop it on the category it reports on to the right.

  Select and Place:

  

  

• Question 299:

  A customer would like to configure 25% of the access points on a floor to exclusively conduct spectrum analysis functions. What mode will the access points have to be configured in order to achieve this request?

  A. Local Mode
  B. Monitor mode
  C. SE-Connect mode
  D. H-Reap mode
  C. SE-Connect mode

• Question 300:

  End-to-end encryption is a management requirement for a wireless deployment. When importing the WLCs into Cisco Prime infrastructure 2.0, which two options represent the version of SNMP and remote access parameter that fulfill this requirement? (Choose two.)

  A. HTTPS
  B. SNMPv3
  C. SNMPv2c
  D. SNMPv1
  E. SSH
  A. HTTPS
  B. SNMPv3