Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 581:

  Refer to the exhibit.

  

  Cisco IOS routers R1 and R2 are interconnected using interface Gi0/0. Which configuration allows R1 and R2 to form an OSPF neighborship on interface Gi0/0?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

  Gi0/0 on R1 is not sending hellos on that interface.

• Question 582:

  What is a characteristic of a traditional WAN?

  A. low complexity and high overall solution scale

  B. centralized reachability, security, and application policies

  C. operates over DTLS and TLS authenticated and secured tunnels

  D. united data plane and control plane

  Correct Answer: D

• Question 583:

  What is one role of the VTEP in a VXLAN environment?

  A. to forward packets to non-LISP sites

  B. to encapsulate the tunnel

  C. to maintain VLAN configuration consistency

  D. to provide EID-to-RLOC mapping

  Correct Answer: B

• Question 584:

  What is a client who is running 802.1x for authentication reffered to as?

  A. supplicant

  B. NAC device

  C. authenticator

  D. policy enforcement point

  Correct Answer: A

• Question 585:

  Refer to the exhibit.

  

  Which configuration must be applied to ensure that the preferred path for traffic from AS 65010 toward AS 65020 uses the R2 to R4 path?

  A. R4(config)# router bgp 65020 R4(config-router)# bgp default local-preference 300 R5(config)# router bgp 65020 R5(config-router)# bgp default local-preference 200

  B. R2(config)# router bgp 65010 R2(config-router)# bgp default local-preference 300 R1(config)# router bgp 65010 R1(config-router)# bgp default local-preference 200

  C. R2(config)# router bgp 65010 R2(config-router)# bgp default local-preference 200 R1(config)# router bgp 65010 R1(config-router)# bgp default local-preference 300

  D. R4(config)# router bgp 65020 R4(config-router)# bgp default local-preference 200 R5(config)# router bgp 65020 R5(config-router)# bgp default local-preference 300

  Correct Answer: B

• Question 586:

  What is one characteristic of Cisco DNA Center and vManage northbound APIs?

  A. They push configuration changes down to devices.

  B. They implement the RESTCONF protocol.

  C. They exchange XML-formatted content.

  D. They implement the NETCONF protocol.

  Correct Answer: B

• Question 587:

  Refer to the exhibit.

  

  Which antenna emits this radiation pattern?

  A. omnidirectional

  B. RP-TNC

  C. dish

  D. Yagi

  Correct Answer: A

• Question 588:

  Refer to the exhibit.

  

  Which two commands ensure that DSW1 becomes root bridge for VLAN 10? (Choose two.)

  A. DSW1(config)#spanning-tree vlan 10 priority 4096

  B. DSW1(config)#spanning-tree vlan 10 priority root

  C. DSW2(config)#spanning-tree vlan 10 priority 61440

  D. DSW1(config)#spanning-tree vlan 10 port-priority 0

  E. DSW2(config)#spanning-tree vlan 20 priority 0

  Correct Answer: AB

• Question 589:

  Which behavior can be expected when the HSRP versions is changed from 1 to 2?

  A. Each HSRP group reinitializes because the virtual MAC address has changed.

  B. No changes occur because version 1 and 2 use the same virtual MAC OUI.

  C. Each HSRP group reinitializes because the multicast address has changed.

  D. No changes occur because the standby router is upgraded before the active router.

  Correct Answer: A

  Even though HSRP version 2 uses the new IP multicast address 224.0.0.102 to send hello packets instead of the multicast address of 224.0.0.2, used by HSRP version 1; when the HSRP version is changed, each group will reinitialize because it now has a new virtual MAC address.

• Question 590:

  An engineer must configure a new WLAN that allows a user to enter a passphrase and provides forward secrecy as a security measure. Which Layer 2 WLAN configuration is required on the Cisco WLC?

  A. WPA2 Personal

  B. WPA3 Enterprise

  C. WPA3 Personal

  D. WPA2 Enterprise

  Correct Answer: C

  WPA3-Personal provides the following key advantages:

  ?Creates a shared secret that is different for each SAE authentication.

  ?Protects against brute force "dictionary" attacks and passive attacks.

  ?Provides forward secrecy.<;--Reference: https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/wpa3-dep-guide-og.pdf

  WPA3 Personal provides forward secrecy.

  Reference: https://blogs.cisco.com/networking/wpa3-bringing-robust-security-for-wi-fi-networks