Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 691:

  Refer to the exhibit

  

  Remote users cannot access the Internet but can upload files to the storage server.

  Which configuration must be applied to allow Internet access?

  A. ciscoasa(config)# access-list MAIL_AUTH extended permit udp any any eq http ciscoasa(config)# aaa authentication listener http outside redirect

  B. ciscoasa(config)# access-list MAIL_AUTH extended permit tcp any any eq www ciscoasa(config)# aaa authentication listener http inside redirect

  C. ciscoasa(config)# access-list MAIL_AUTH extended permit tcp any any eq http ciscoasa(config)# aaa authentication listener http inside port 43

  D. ciscoasa(config)# access-list HTTP_AUTH extended permit udp any any eq http ciscoasa(config)# aaa authentication listener http outside port 43

  Correct Answer: B

• Question 692:

  Refer to the exhibit.

  

  Why does OSPF fail to establish an adjacency between R1 and R2?

  A. authentication mismatch

  B. interface MTU mismatch

  C. area mismatch

  D. timers mismatch

  Correct Answer: B

• Question 693:

  An engineer must configure a multicast UDP jitter operation. Which configuration should be applied?

  A. Router(config)#ip sla 1 Router(config)#udp-jitter 192.0.2.115 65051

  B. Router(config)#ip sla 1 Router(config)#udp jitter 239.1.1.1 65051 end-point list List source-ip 192.168.1.1

  C. Router(config)#ip sla 1 Router(config)#udp-jitter 192.0.2.115 65051 num-packets 20

  D. Router(config)#ip sla 1 Router(config)#udp jitter 10.0.0.1 source-ip 192.168.1.1

  Correct Answer: B

  Basically you could argue that A, B and D are correct answers but only with regards to UDP Jitter IP SLA configuration. This question refers to multicast network meaning only B is correct as it identifes a multicast responder in the command line https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipsla/configuration/15-s/sla-15-s-book/sla_mcast_suppt.pdf

• Question 694:

  Which configuration restricts the amount of SSH traffic that a router accepts to 100 kbps?

  

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 695:

  Which function is performed by vSmart in the Cisco SD-WAN architecture'?

  A. distribution of IPsec keys/

  B. execution of localized policies

  C. redistribution between OMP and other routing protocols

  D. facilitation of NAT detection and traversal

  Correct Answer: A

  Authentication: As mentioned, the Cisco SD-WAN control plane contributes the underlying infrastructure for data plane security. In addition, authentication is enforced by two other mechanisms:

  In the traditional key exchange model, the Cisco vSmart Controller sends IPsec encryption keys to each edge device

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge-20-x/security-book/security-overview.html

• Question 696:

  Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

  A. DVPN

  B. NAT

  C. stateful packet inspection

  D. application-level inspection

  E. integrated intrusion prevention

  Correct Answer: DE

• Question 697:

  Which A record type should be configured for access points to resolve the IP address of a wireless LAN controller using DNS?

  A. CISCO.CONTROLLER.localdomain

  B. CISCO.CAPWAP.CONTROLLER.localdomain

  C. CISCO-CONTROLLER.localdomain

  D. CISCO-CAPWAP-CONTROLLER.localdomain

  Correct Answer: D

• Question 698:

  Refer to the exhibit.

  

  The traceroute fails from R1 to R3. What is the cause of the failure?

  A. The loopback on R3 Is in a shutdown stale.

  B. An ACL applied Inbound on loopback0 of R2 Is dropping the traffic.

  C. An ACL applied Inbound on fa0/1 of R3 is dropping the traffic.

  D. Redistribution of connected routes into OSPF is not configured.

  Correct Answer: C

  We see in the traceroute result the packet could reach 10.99.69.5 (on R2) but it could not go any further so we can deduce an ACL on R3 was blocking it. Note: Record option displays the address(es) of the hops (up to nine) the packet goes through.

• Question 699:

  Refer to the exhibit.

  

  Hosts PC1 PC2 and PC3 must access resources on Serve 1. An engineer configures NAT on Router R1 1e enable the communication and enters the show command to verify operation.

  Which IP address is used by the hosts when they communicate globally to Server1?

  A. 155.1.1.1

  B. randorm addresses in the 155.1.1.0/24 range

  C. their own address in the 10.10.10.0/24 rance

  D. 155.1.1.5

  Correct Answer: A

  from inside host perspective the global address is 15.1.1.1

• Question 700:

  What function does VXLAN perform in a Cisco SD-Access deployment?

  A. policy plane forwarding

  B. control plane forwarding

  C. data plane forwarding

  D. systems management and orchestration

  Correct Answer: C