Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 721:

  Refer to the exhibit.

  

  A network engineer is troubleshooting an issue with the file server based on reports of slow file transmissions. Which two commands or command sets are required to switch SW1 to analyze the traffic from the file server with a packet analyzer? (Choose two.)

  A. SW1#show monitor

  B. SW1(config)#monitor session 1 source interface gigabitethernet0/3 SW1(config)#monitor session 1 destination interface gigabitethernet0/1 encapsulation replicate

  C. SW1#show ip route

  D. SW1#show vlan

  E. SW1(config)#monitor session 1 source interface gigabitethernet0/1 SW1(config)#monitor session 1 destination interface gigabitethernet0/3 encapsulation replicate

  Correct Answer: AB

• Question 722:

  Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3.

  

  Which configuration corrects the issue?

  A. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed vlan 1-9,11-4094

  B. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed vlan 10

  C. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed vlan 1-9,11-4094

  D. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed vlan 10

  Correct Answer: C

• Question 723:

  Which mobility role is assigned to a client in the client table of the new controller after a Layer 3 roam?

  A. anchor

  B. foreign

  C. mobility

  D. transparent

  Correct Answer: D

• Question 724:

  Which Quality of Service (QoS) mechanism allows the network administrator to control the maximum rate of traffic received or sent on a given interface?

  A. Policing

  B. Marking

  C. Queueing

  D. Classification

  Correct Answer: A

  Traffic Policing

  In general, traffic policing allows you to control the maximum rate of traffic sent or received on an interface and to partition a network into multiple priority levels or class of service (CoS).

• Question 725:

  Refer to the exhibit.

  

  What is the cause of the communication failure between R1 and R4?

  A. R1 is configured with the no ip unreachables command.

  B. R2 is denying ICMP

  C. R4 is denying ICMP.

  D. R3 is denying ICMP.

  Correct Answer: A

• Question 726:

  Refer to the exhibit.

  

  An engineer must allow the FTP traffic from users on 172.16.1.0 /24 to 172.16.2.0 /24 and block all other traffic. Which configuration must be applied?

  A. R1(config)# access-list 120 permit tcp 172.16.1.0 0.0.0.255 21 172.16.2.0 0.0.0.255 R1 (config)#interface giga 0/2 R1 (config-if)#ip access-group 120 in

  B. R1(config)# access-list 120 permit tcp 172.16.1.0 0.0.0.255 172.16.2.0 0.0.0.255 20 R1(config)# access-list 120 permit tcp 172.16.1.0 0.0.0.255 172.16.2.0 0.0.0.255 21 R1(config)#interface giga 0/2 R1 (config-if)#ip access-group 120 in

  C. R1 (config)# access-list 120 deny any any R1(config)# access-list 120 permit tcp 172.16.1.0 0.0.0.255 172.16.2.0 0.0.0.255 21 R1 (config)#interface giga 0/0 R1(config-if)#ip access-group 120 out

  D. R1(config)# access-list 120 permit tcp 172.16.1.0 0.0.0.255 21 172.16.2.0 0.0.0.255 R1(config)# access-list 120 permit udp 172.16.1.0 0.0.0.255 21 172.16.2.0 0.0.0.255 R1 (config)#interface giga 0/2 R1(config-if)#ip access-group 120 out

  Correct Answer: B

• Question 727:

  Refer to the exhibit.

  

  Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction, but it does not have the expected behavior of allowing only packets to or from 192 168 0.0/16

  Which command set properly configures the access list?

  A. R1(config)#no access-list 100 deny ip any any

  B. R1(config)#no access-list 100 seq 10 R1(config)#access-list 100 seq 40 deny ip any any

  C. R1(config)#ip access-list extended 100 R1(config-ext-nacl)#5 permit ip any any

  D. R1(config)#ip access-list extended 100 R1(config-ext-nacl)#no 10

  Correct Answer: D

  The first ACL statement of "10 deny ip any any" will match and drop all traffic so we have to remove this statement.

• Question 728:

  Refer to the exhibit.

  

  Clients report that they cannot connect to this SSID using the provided PSK. Which action will resolve this issue?

  A. Apply the correct interface to this WLAN.

  B. Apply the changes this SSID.

  C. Select the PSK under authentication key management.

  D. Define the correct Radio Policy.

  Correct Answer: C

  As it stands it is configured for radius auth and must be changed to PSK.

• Question 729:

  Refer to the exhibit.

  

  An engineer configures a trunk between SW1 and SW2 but tagged packets are not passing. Which action fixes the issue?

  A. Configure SW1 with dynamic auto mode on interface FastEthernet0/1.

  B. Configure the native VLAN to be the same VLAN on both switches on interface FastEthernet0/1.

  C. Configure SW2 with encapsulation dot1q on interface FastEthernet0/1.

  D. Configure FastEthernet0/1 on both switches for static trunking.

  Correct Answer: C

• Question 730:

  The following system log message is presented after a network administrator configures a GRE tunnel:

  %TUN-RECURDOWN Interface Tunnel 0 temporarily disabled due to recursive routing.

  Why is Tunnel 0 disabled?

  A. Because dynamic routing is not enabled

  B. Because the tunnel cannot reach its tunnel destination

  C. Because the best path to the tunnel destination is through the tunnel itself

  D. Because the router cannot recursively identify its egress forwarding interface.

  Correct Answer: C

  The %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing error message means that the generic routing encapsulation (GRE) tunnel router has discovered a recursive routing problem. This condition is usually due to one of these causes:

  + A misconfiguration that causes the router to try to route to the tunnel destination address using the tunnel interface itself (recursive routing) + A temporary instability caused by route flapping elsewhere in the network Reference: https:// www.cisco.com/c/en/us/support/docs/ip/enhan