Cisco 350-050 Online Practice Questions and Exam Preparation

Cisco 350-050 Online Questions & Answers

• Question 201:

  You have implemented a branch network using H-REAP local switching. You have been asked to enable an acceptable use-policy web authentication page, without requiring users to enter credentials and login. Users should only have to accept the login terms. Which two solutions should you implement? (Choose two.)

  A. Enable a web policy of conditional web redirect.
  B. Use an external web server for the web authentication page.
  C. Use the internal web server for the web authentication page.
  D. Implement a pre-authentication ACL to allow web authentication page traffic.
  E. Enable a web policy of passthrough.
  C. Use the internal web server for the web authentication page.
  E. Enable a web policy of passthrough.

• Question 202:

  Which two statements about the IPv4 ToS byte are true? (Choose two.)

  A. The ToS byte is located in the Layer 2 header.
  B. The ToS byte is located in the Layer 3 header.
  C. The DSCP values range from 0 to 7.
  D. The IP precedence and the DSCP fields have two overlapping bits.
  E. The class selector in the DSCP field is defined for backward compatibility with IP precedence.
  B. The ToS byte is located in the Layer 3 header.
  E. The class selector in the DSCP field is defined for backward compatibility with IP precedence.

• Question 203:

  Corporation XYZ is enabling wireless guest access for its guests. You will be using the Cisco WCS Lobby Ambassador feature to provision guest user accounts and want to make sure that the web authentication for guest access is not

  susceptible to brute force attacks.

  What is the best way to accomplish this?

  A. Configure web authentication max retries on the WCS.
  B. Implement a CPU ACL on the terminating WLC.
  C. Configure web authentication max retries on the WLC.
  D. Configure client exclusion.
  D. Configure client exclusion.

• Question 204:

  Your customer is attempting to create two WLANs with identical SSIDs and identical Layer 2 security policies on their WLC 5508, without success. Which two of these actions would help them? (Choose two.)

  A. Assign the WLANs to different AP groups.
  B. Assign each WLAN to a different interface.
  C. Set the WLAN IDs to a number greater than 17.
  D. Use different radio policies for each WLAN.
  A. Assign the WLANs to different AP groups.
  C. Set the WLAN IDs to a number greater than 17.

• Question 205:

  If you are restricted from using 5 Ghz channels that require DFS and TPC for a 7925 VoWLAN customer deployment in the United States, how many channels can you use?

  A. 4
  B. 8
  C. 12
  D. 16
  B. 8

• Question 206:

  When implementing context-aware location services on the Cisco WCS through the MSE, which two types of data or functionality are only available after adding an MSE? (Choose two.)

  A. location of only one wireless client at a time on the WCS map
  B. location of multiple wireless clients at a time on the WCS map
  C. client location history
  D. ability to define WCS map boundaries
  E. ability to set email alerting options for rogue access points
  B. location of multiple wireless clients at a time on the WCS map
  C. client location history

• Question 207:

  You have been getting reports of voice disruption over wireless communications in your network. Your SSID is configured to use WPA1 with TKIP and Cisco Centralized Key Management. You see a lot of TKIP replay messages on the WLC logs.

  What is the most probable reason for the voice disruptions?

  A. TKIP replay causes access point to reboot as a security measure. This causes voice disruptions for the associated clients until they scan and reconnect to another AP.
  B. The TKIP countermeasure timer is putting the AP down for a specified time and causing the voice disruptions.
  C. TKIP replay activates MFP. If MFP detects the replays, it will trigger a disassociation to all wireless clients.
  D. The use of WPA1 with TKIP is the main reason for the voice disruptions. It is better to use WPA2 with AES to avoid this problem.
  B. The TKIP countermeasure timer is putting the AP down for a specified time and causing the voice disruptions.

• Question 208:

  Which two methods can be used in Cisco Secure ACS 5.2 to assign client authentication requests to different access services or authorization policies, based on the SSID to which the client is associated? (Choose two.)

  A. DNIS-based end station filter
  B. CLI-based end station filter
  C. condition based on the RADIUS-IETF. Filter-ID(11) attribute
  D. condition based on the RADIUS-IETF:Called-Station-ID(30) attribute
  E. condition based on the RADIUS-IETF:Calling-Station-ID(31) attribute
  A. DNIS-based end station filter
  D. condition based on the RADIUS-IETF:Called-Station-ID(30) attribute

• Question 209:

  Which two statements are not correct about client MFP? (Choose two.)

  A. Client MFP can replace infrastructure MFP if only CCXv5 clients are used.
  B. Client MFP encrypts class 3 unicast management frames using the security mechanisms defined by 802.11i.
  C. In order to use client MFP, the client must support CCXv5 and negotiate WPA2 with AES-CCMP or TKIP.
  D. The only supported method to obtain the pre-user MFP encryption keys is EAP authentication.
  E. The CCXv5 client and access points must discard broadcast class 3 management frames.
  A. Client MFP can replace infrastructure MFP if only CCXv5 clients are used.
  D. The only supported method to obtain the pre-user MFP encryption keys is EAP authentication.

• Question 210:

  Which two statements about virtual interfaces on a WLC are true? (Choose two.)

  A. A virtual interface serves as the redirect address for the web authentication login page.
  B. A virtual interface must have a DNS host name in order to prevent web authentication clients from getting a security warning on their web browser.
  C. A virtual interface acts as the DHCP server placeholder for wireless clients that obtain their IP address from a DHCP server.
  D. A virtual interface acts as a RADIUS proxy for wireless clients.
  A. A virtual interface serves as the redirect address for the web authentication login page.
  C. A virtual interface acts as the DHCP server placeholder for wireless clients that obtain their IP address from a DHCP server.