Cisco 350-050 Online Practice Questions and Exam Preparation

Cisco 350-050 Online Questions & Answers

• Question 161:

  A wireless ISP has hired you to help set up a new Cisco WLC to provide wireless access to subscription-based customers. Each customer that uses the wireless network needs to pay their bill every 30 days. How do you configure the WLAN security to help meet this requirement?

  A. no Layer 2 security, conditional web redirect Layer 3 security
  B. WPA2 802.1X Layer 2 security, splash page web redirect Layer 3 security
  C. 802.1X Layer 2 security, splash page web redirect Layer 3 security
  D. WPA2 PSK Layer 2 security, conditional web redirect Layer 3 security
  E. no Layer 2 security, splash page web redirect Layer 3 security
  F. WPA 802.1X Layer 2 security, conditional web redirect Layer 3 security
  F. WPA 802.1X Layer 2 security, conditional web redirect Layer 3 security

• Question 162:

  Refer to the exhibit.

  

  You have setup an autonomous AP and configured an SSID to serve clients. While troubleshooting a client that is not able to associate to the SSID, you enable some debugs. Given the debug output seen in the exhibit, what is most likely the cause of association failure?

  A. The SSID is configured with TKIP encryption and the client PC is using AES encryption.
  B. The authenticating EAP method is PEAP and the username and password combination is incorrect.
  C. The SSID is secured with PSK and the shared secret is wrong.
  D. The RADIUS server is rejecting the dot1x authentication due to a message integrity check failure.
  C. The SSID is secured with PSK and the shared secret is wrong.

• Question 163:

  Refer to the exhibit.

  

  All the guest users that associate to the guest SSID on the Cisco WLC are receiving this message from their browser each time that they try to reach an Internet website. Which two changes will allow the guest users to avoid this message in a simple and secure way? (Choose two.)

  A. Generate and install a new certificate for the Cisco WLC web-auth, signed by the Cisco CA.
  B. Configure a FQDN in the management interface of the Cisco WLC and add that FQDN to the DNS server.
  C. Configure a FQDN in the virtual interface of the Cisco WLC and add that FQDN to the DNS server.
  D. Generate and install a new certificate for the Cisco WLC web-auth, signed by a CA trusted by the browser.
  E. Generate and install a new certificate for the Cisco WLC web-auth, signed by the local CA.
  C. Configure a FQDN in the virtual interface of the Cisco WLC and add that FQDN to the DNS server.
  D. Generate and install a new certificate for the Cisco WLC web-auth, signed by a CA trusted by the browser.

• Question 164:

  You are deploying a wireless network in a warehouse located next to an airport. Which two of these 5-GHz channels would avoid potential radar interference, considering that many airport radars use the UNII-2 frequency ranges? (Choose two.)

  A. 36
  B. 52
  C. 140
  D. 153
  A. 36
  D. 153

• Question 165:

  Cisco WiSM controllers have multiple interface types. Which two interfaces must be present and configured at setup time? (Choose two.)

  A. virtual
  B. virtual gateway
  C. service port
  D. operator defined
  A. virtual
  C. service port

• Question 166:

  Asset tags are not being detected correctly and re-verification of the correct configuration should be performed. It is also recommended that verification of correct asset tag RSSI detection and message forwarding is conducted. Which statement is correct about the RFID tag timeout settings, as you would see in a show advanced location summary on a Cisco WLC?

  A. The RFID tag timeout should be set to two to five times the longest tag transmission interval found in the tag population, including stationary and any in-motion tag transmission intervals.
  B. The RFID tag timeout should be set to four to six times the longest tag transmission interval found in the tag population, including stationary and any in-motion tag transmission intervals.
  C. The RFID tag timeout should be set to three to eight times the longest tag transmission interval found in the tag population, including stationary and any in-motion tag transmission intervals.
  D. The RFID Tag RSSI expiry timeout cannot be configured; it is a fixed value (1200 seconds).
  C. The RFID tag timeout should be set to three to eight times the longest tag transmission interval found in the tag population, including stationary and any in-motion tag transmission intervals.

• Question 167:

  You are designing an autonomous wireless network for an office building that is located near a local airport. The customer requires the use of 802.11a/n clients only, and the APs must never change their channel after they are configured. Which two UNII bands and channels should you restrict the APs to use on the 5 GHz radios? (Choose two.)

  A. UNII-1 and UNII-3
  B. UNII-1 and UNII-2 extended
  C. 36-52 and 149-161
  D. 36-48 and 100-140
  E. 52-64 and 149-161
  F. 36-48 and 149-161
  A. UNII-1 and UNII-3
  F. 36-48 and 149-161

• Question 168:

  Infrastructure Management Frame Protection enables the wireless infrastructure to detect management frames spoofed by an attacker. Which two of these mechanisms does infrastructure MFP introduce to access points in order to protect against such attacks? (Choose two.)

  A. management frame validation
  B. management frame encryption
  C. cryptographically-hashed message integrity check
  D. cryptographically-hashed frame check sequence
  E. 802.1x authentication
  A. management frame validation
  C. cryptographically-hashed message integrity check

• Question 169:

  The QoS implementation for WLANs differs from QoS implementations on other Cisco devices. Which two actions do QoS enabled autonomous bridges perform? (Choose two)

  A. They do not classify packets; they prioritize packets based on DSCP value, client type (such as a wireless phone), or the priority value in the 802.1q or 802.1p tag.
  B. They construct internal DSCP values and support mapping by assigning IP Differentiated Services Code Point (DSCP), Precedence, or Protocol values to Layer 2 COS values.
  C. They do not match packets using ACL; they use only modular quality of service (MQC) class-map for matching clauses.
  D. They do not construct internal DSCP values; they only support mapping by assigning IP Differentiated Services Code Point (DSCP), Precedence, or Protocol values to Layer 2 COS values.
  A. They do not classify packets; they prioritize packets based on DSCP value, client type (such as a wireless phone), or the priority value in the 802.1q or 802.1p tag.
  D. They do not construct internal DSCP values; they only support mapping by assigning IP Differentiated Services Code Point (DSCP), Precedence, or Protocol values to Layer 2 COS values.

• Question 170:

  Which of the following are required components for Client MFP? (Choose two.)

  A. CCXv4
  B. CCXv5
  C. 802.11n
  D. WPA2 w/TKIP or AES-CCMP
  E. AnyConnect 3.0
  B. CCXv5
  D. WPA2 w/TKIP or AES-CCMP