Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 641:

  Which two steps are required for a complete Cisco DNA Center upgrade? (Choose two.)

  A. golden image selection

  B. automation backup

  C. proxy configuration

  D. application updates

  E. system update

  Correct Answer: DE

  A complete Cisco DNA Center upgrade includes "System Update" and "Appplication Updates"

  Reference:

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/upgrade/ b_cisco_dna_center_upgrade_guide/m_upgrade_to_cisco_dna_center_2_2_2_x.html

• Question 642:

  Refer to the exhibit. Why was the response code generated?

  

  A. The resource was unreachable.

  B. Access was denied based on the user permissions.

  C. Access was denied based on the credentials.

  D. The resource is no longer available on the server.

  Correct Answer: B

  401 = Unauthorized (Bad credentials)

  403 = Forbidden (Service refused, for insufficient permissions)

• Question 643:

  Which two methods are used to interconnect two Cisco SD-Access Fabric sites? (Choose two.)

  A. SD-Access transit

  B. fabric interconnect

  C. wireless transit

  D. IP-based transit

  E. SAN transit

  Correct Answer: AD

• Question 644:

  Refer to the exhibit. What is the value of the variable list after the code is run?

  

  A. [1, 10, 10, 10]

  B. [1, 2, 10]

  C. [1, 2, 10, 4]

  D. [1, 2, 3, 10]

  Correct Answer: D

  The first element of an array is at index 0 so list[3] gets the fourth element of the array.

• Question 645:

  A customer wants to connect a device to an autonomous Cisco AP configured as a WGB. The WGB is configured properly: however, it fails to associate to a CAPWAP- enabled AP. Which change must be applied in the advanced WLAN settings to resolve this issue?

  A. Enable Aironet IE.

  B. Enable passive client.

  C. Disable AAA override.

  D. Disable FlexConnect local switching.

  Correct Answer: A

  To enable the WGB to communicate with the lightweight access point, create a WLAN and make sure that Aironet IE is enabled. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/workgroup_bridges.pdf

• Question 646:

  Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33?

  Nov 20 13:47:32/553 %DOT1X-5-FAIL:Authentication failed for client (e04f.438e.de4f) on interface Gi1/0/1 AudtiSessionID 0A0B50A5000004543910739E

  A. logging discriminator DOT1X facility drops DOT1X logging host 10.15.20.33 discriminator DOT1X

  B. logging discriminator DOT1X msg-body drops DOTX logging host 10.15.20.33 discriminator DOTX

  C. logging discriminator DOT1X mnemonics includes DOTX logging host 10.15.20.33 discriminator DOT1X

  D. logging discriminator DOT1X mnemonics includes DOT1X logging host 10.15.20.33 discriminator DOTX

  Correct Answer: A

• Question 647:

  If AP power level is increased from 25 mW to 100 mW. what is the power difference in dBm?

  A. 6 dBm

  B. 14 dBm

  C. 17 dBm

  D. 20 dBm

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/23231-powervalues-23231.html

• Question 648:

  Refer to the exhibit.

  

  A company has an internal wireless network with a hidden SSID and RADIUS-based client authentication for increased security. An employee attempts to manually add the company network to a laptop, but the laptop does not attempt to connect to the network. The regulatory domains of the access points and the laptop are identical.

  Which action resolves this issue?

  A. Ensure that the "Connect even if this network is not broadcasting" option is selected.

  B. Limit the enabled wireless channels on the laptop to the maximum channel range that is supported by the access points.

  C. Change the security type to WPA2-Personal AES.

  D. Use the empty string as the hidden SSID network name.

  Correct Answer: A

• Question 649:

  Refer to the exhibit.

  

  Which configuration set implements Control plane Policing for SSH and Telnet?

  A. Router(config)#/class-map match-all class-control Router(config-cmap)#match access-group 100 Router(config-cmap)#match access-group 101 Router(config)#policy-map COPP Router(config-pmap)#class class-control Router(config-pmap-c)#police 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy output CoPP

  B. Router(config)#class-map type inspect match-all Router(config-cmap)#match access-group 100 Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-control Router(config-pmap-c)#police 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy output CoPP

  C. Router(config)#class-map class-telnet Router(config-cmap)#match access-group 100 Router(config)#class-map class-ssh Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-telnet-ssh Router(config-pmap-c)#police 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy input CoPP

  D. Router(config)#class-map match-any class-control Router(config-cmap)#match access-group 100 Router(config-cmap)#match access-group 101 Router(config)#policy-map CoPP Router(config-pmap)#class class-control Router(config-pmap-c)#police 1000000 conform-action transmit Router(config)#control-plane Router(config-cp)#service-policy input CoPP

  Correct Answer: D

• Question 650:

  By default, which virtual MAC address does HSRP group 15 use?

  A. 05:5e:ac:07:0c:0f

  B. c0:42:34:03:73:0f

  C. 00:00:0c:07:ac:0f

  D. 05:af:1c:0f:ac:15

  Correct Answer: C

  interface Ethernet0/0.100 encapsulation dot1Q 100 ip address 10.0.111.1 255.255.255.0 standby 15 ip 10.0.111.254 !

  cisco(config-subif)#do s stand

  Ethernet0/0.100 - Group 15 State is Speak Virtual IP address is 10.0.111.254 Active virtual MAC address is unknown Local virtual MAC address is 0000.0c07.ac0f (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 1.200 secs Preemption disabled Active router is unknown Standby router is unknown