Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 781:

  An engineer is configuring Local WebAuth on a Cisco Wireless LAN Controller. According to RFC 5737

  Which VIRTUAL IP address must be used in this configuration?

  A. 192.0.2.1

  B. 172.20.10.1

  C. 1.1.1.1

  D. 192.168.0.1

  Correct Answer: A

  The virtual interface IP address (IPv4 or IPv6) is used only in communications between the controller and wireless clients. It serves as the redirect address for the web authentication login page. It is recommended that you configure a nonroutable IP address for the virtual interface, ideally not overlapping with the network infrastructure addresses. Use one of the options proposed in RFC 5737, for example, 192.0.2.0/24, 198.51.100.0/24, and 203.0.113.0/24 networks.

• Question 782:

  What is an OVF?

  A. a package that is similar to an IMG and that contains an OVA file used to build a virtual machine

  B. an alternative form of an ISO that Is used to install the base operating system of a virtual machine

  C. the third step in a P2V migration

  D. a package of files that is used to describe a virtual machine or virtual appliance

  Correct Answer: D

• Question 783:

  Refer to the exhibit.

  

  A network engineer checks connectivity between two routers. The engineer can ping the remote endpoint but cannot see an ARP entry. Why is there no ARP entry?

  A. The ping command must be executed in the global routing table.

  B. Interface FastEthernet0/0 Is configured in VRF CUST-A, so the ARP entry is also in that VRF.

  C. When VRFs are used. ARP protocol must be enabled In each VRF.

  D. When VRFs are used. ARP protocol is disabled in the global routing table.

  Correct Answer: B

• Question 784:

  Which IPv4 packet field carries the QoS IP classification marking?

  A. ID

  B. TTL

  C. FCS

  D. ToS

  Correct Answer: D

  The classification is carried in the IP packet header, using 6 bits from the deprecated IP type of service (ToS) field to carry the classification (class) information. Classification can also be carried in the Layer 2 frame.

• Question 785:

  Refer to the exhibit. An engineer must set up connectivity between a campus aggregation layer and a branch office access layer. The engineer uses dynamic trunking protocol to establish this connection, however, management traffic on VLAN1 is not passing. Which action resolves the issue and allow communication for all configured VLANs?

  

  A. Allow all VLANs on the trunk links

  B. Disable Spanning Tree for the native VLAN.

  C. Configure the correct native VLAN on the remote interface

  D. Change both interfaces to access ports.

  Correct Answer: C

• Question 786:

  Refer to the exhibit.

  A network engineer must log in to the router via the console, but the RADIUS servers are not reachable. Which credentials allow console access?

  

  A. the username "cisco" and the password "cisco123"

  B. no username and only the password "test123"

  C. no username and only the password "cisco123"

  D. the username "cisco" and the password "cisco"

  Correct Answer: C

  We tested with GNS3 and the router only requires password "cisco123" configured under line console to authenticate. So we can deduce the "password" command under line interface is preferred over "login authentication" command.

• Question 787:

  Refer the exhibit. Which configuration elects SW4 as the root bridge for VLAN 1 and puts G0/2 on SW2 into a blocking state?

  

  A. SW4(config)#spanning-tree vlan 1 priority 32768 ! SW2(config)#interface G0/2 SW2(config-if)#spanning-tree vlan 1 port-priority 0

  B. SW4(config)#spanning-tree vlan 1 priority 32768 ! SW2(config)#int G0/2 SW2(config-if)#spanning-tree cost 128

  C. SW4(config)#spanning-tree vlan 1 priority 0 ! SW2(config)#int G0/2 SW2(config-if)#spanning-tree cost 128

  D. SW4(config)#spanning-tree vlan 1 priority 0 ! SW2(config)#interface G0/2 SW2(config-if)#spanning-tree vlan 1 port-priority 64

  Correct Answer: C

• Question 788:

  A large campus network has deployed two wireless LAN controllers to manage the wireless network. WLC1 and WLC2 have been configured as mobility peers. A client device roams from AP1 on WLC1 to AP2 on WLC2, but the controller's client interfaces are on different VLANs.

  How do the wireless LAN controllers handle the inter-subnet roaming?

  A. WLC1 marks the client with an anchor entry in its own database. The database entry is copied to the new controller and marked with a foreign entry on WLC2.

  B. WLC2 marks the client with an anchor entry in its own database. The database entry is copied to the new controller and marked with a foreign entry on WLC1.

  C. WLC1 marks the client with a foreign entry in its own database. The database entry is copied to the new controller and marked with an anchor entry on WLC2.

  D. WLC2 marks the client with a foreign entry in its own database. The database entry is copied to the new controller and marked with an anchor entry on WLC1.

  Correct Answer: A

  Inter-subnet roaming is similar to inter-controller roaming in that the controllers exchange mobility messages on the client roam. However, instead of moving the client database entry to the new controller, the original controller marks the client with an "Anchor" entry in its own client database. The database entry is copied to the new controller client database and marked with a "Foreign" entry in the new controller. The roam remains transparent to the wireless client, and the client maintains its original IP address. reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-3/configuration/guide/b_cg73/b_wlc-cg_chapter_01111.html

• Question 789:

  Refer to the exhibit.

  

  A network administrator configured RSPAN to troubleshoot an issue between switchl and switch2. The switches are connected using interface GigabitEthernet 1/1 An external packet capture device is connected to swich2 interface GigabitEthernet1/2 Which two commands must be added to complete this configuration? (Choose two)

  A. switch2(config-if)# switchport trunk allowed vlan 10,20,30,40,50,60,70-80

  B. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/2

  C. switch1(config)# interface GigabitEthernet 1/1 switch1(config-if)# switchport mode access switch1(config-if)# switchport access vlan 10 switch2(config)# interface GigabitEthernet 1/1 switch2(config-if)# switchport mode access switch2(config-if)# switchport access vlan 10

  D. switch2(config)# monitor session 2 destination vlan 10

  E. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/1

  Correct Answer: AB

• Question 790:

  Refer to the exhibit.

  

  An engineer tries to log in to router R1. Which configuration enables a successful login?

  A. R1#aaa new-model aaa authorization exec default local enable aaa admin privilege 15

  B. R1#username admin privilege 15 aaa authorization exec default local netconf-yang

  C. R1#netconf-yang username admin privilege 15 secret cisco123 aaa new-model aaa authorization exec default local

  D. R1#username admin privilege 15 aaa authorization exec default local

  Correct Answer: C

  https://www.cisco.com/c/en/us/support/docs/storage-networking/management/200933-YANG-NETCONF-Configuration-Validation.html#:~:text=Configure-,1.%20Basic%20Configuration%20of%20a%20Catalyst%203850%20Running%20IOS %2DXE%2016.3.3%20Software%20to%20Support%20NETCONF/YANG%20Data%20Modeling,-3850%2D1%23