Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 741:

  When a wired client connects to an edge switch in an SDA fabric, which component decides whether the client has access to the network?

  A. control-plane node

  B. Identity Service Engine

  C. RADIUS server

  D. edge node

  Correct Answer: B

  Eventhought 802.1X can run with a 3rd party radius server, for SDA policy to work must be with ISE as use trusect for the security plane.

  ex. https://community.cisco.com/t5/networking-documents/how-to-use-group-based-policies-with-3rd-party-radius-using/ta-p/3930041

• Question 742:

  In a campus network design, what are two benefits of using BFD for failure detection? (Choose two.)

  A. BFD speeds up routing convergence time.

  B. BFD is an efficient way to reduce memory and CPU usage.

  C. BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router.

  D. BFD provides path failure detection in less than a second.

  E. BFD enables network peers to continue forwarding packets in the event of a restart.

  Correct Answer: AD

• Question 743:

  Why would a customer implement an on-premises solution instead of a cloud solution?

  A. On-premises Offers greater compliance for government regulations than cloud

  B. On-premises offers greater scalability than cloud.

  C. On-premises oilers shorter deployment time than cloud.

  D. On-premises is more secure man cloud.

  Correct Answer: D

• Question 744:

  Which DNS lookup does an AP perform when attempting CAPWAP discovery?

  A. CAPWAP-CONTROLLER.Iocal

  B. CISCO-CAPWAP-CONTROLLER.Iocal

  C. CISCO-DNA-CONTROLLER.Iocal

  D. CISCO-CONTROLLER.Iocal

  Correct Answer: B

• Question 745:

  Which version of NetFlow does Cisco Threat Defense utilize to obtain visibility into the network?

  A. NBAR2

  B. IPFIX

  C. 8

  D. flexible

  Correct Answer: D

  https://community.cisco.com/t5/security-knowledge-base/configuring-nsel-netflow-on-cisco-firepower-threat-defense-ftd/ta-p/3646300

• Question 746:

  Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.)

  A. Utilize DHCP option 17.

  B. Configure WLC IP address on LAN switch.

  C. Utilize DHCP option 43.

  D. Configure an ip helper-address on the router interface

  E. Enable port security on the switch port

  Correct Answer: CD

  In a Cisco Unified Wireless network, the LAPs must first discover and join a WLC before they can service wireless clients.

  However, this presents a question: how did the LAPs find the management IP address of the controller when it is on a different subnet? If you do not tell the LAP where the controller is via DHCP option 43, DNS resolution of "Cisco-capwapcontroller.local_domain", or statically configure it, the LAP does not know where in the network to find the management interface of the controller.

  Reference: https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/119286-lap-notjoin-wlc-tshoot.html

• Question 747:

  What is a command-line tool for consuming REST APIs?

  A. Python requests

  B. Postman

  C. cURL

  D. Firefox

  Correct Answer: C

  curl is a command-line tool for transferring data, and it supports about 22 protocols, including HTTP. This combination makes it a very good ad-hoc tool for testing our REST services.

• Question 748:

  What is the function of vBond in a Cisco SDWAN deployment?

  A. initiating connections with SD-WAN routers automatically

  B. pushing of configuration toward SD-WAN routers

  C. onboarding of SD-WAN routers into the SD-WAN overlay

  D. gathering telemetry data from SD-WAN routers

  Correct Answer: C

  Orchestration plane (vBond) assists in securely onboarding the SD-WAN WAN Edge routers into the SD-WAN overlay.

  References: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-wan-edge-onboarding-deploy-guide-2020nov.pdf

• Question 749:

  Refer to the exhibit.

  

  The inside and outside interfaces in the NAT configuration of this device have been correctly identified. What is the effect of this configuration?

  A. dynamic NAT

  B. NAT64

  C. PAT

  D. static NAT

  Correct Answer: C

  The command "ip nat inside source list 1 interface gigabitethernet0/0 overload" translates all source addresses that pass access list 1, which means 172.16.1.0/24 subnet, into an address assigned to gigabitethernet0/0 interface. Overload keyword allows to map multiple IP addresses to a single registered IP address (many- to-one) by using different ports so it is called Port Address Translation (PAT).

• Question 750:

  Using the EIRP formula, what parameter is subtracted to determine the EIRP value?

  A. transmitter power

  B. antenna cable loss

  C. antenna gain

  D. signal-to-noise ratio

  Correct Answer: B

  Once you know the complete combination of transmitter power level, the length of cable, and the antenna gain, you can figure out the actual power level that will be radiated from the antenna. This is known as the effective isotropic radiated power (EIRP), measured in dBm. EIRP is a very important parameter because it is regulated by governmental agencies in most countries. In those cases, a system cannot radiate signals higher than a maximum allowable EIRP. To find the EIRP of a system, simply add the transmitter power level to the antenna gain and subtract the cable loss.