Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 821:

  What is the recommended minimum SNR for voice applications on wireless networks?

  A. 10

  B. 15

  C. 20

  D. 25

  Correct Answer: D

  Generally, a signal with an SNR value of 20 dB or more is recommended for data networks where as an SNR value of 25 dB or more is recommended for networks that use voice applications.

• Question 822:

  How are map-register messages sent in a LISP deployment?

  A. egress tunnel routers to map resolvers to determine the appropriate egress tunnel router

  B. ingress tunnel routers to map servers to determine the appropriate egress tunnel router

  C. egress tunnel routers to map servers to determine the appropriate egress tunnel router

  D. ingress tunnel routers to map resolvers to determine the appropnate egress tunnel router

  Correct Answer: C

  During operation, an Egress Tunnel Router (ETR) sends periodic Map-Register messages to all its configured map servers.

• Question 823:

  An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionally?

  A. CCKM

  B. WPA2 Policy

  C. Local Policy

  D. Web Policy

  Correct Answer: D

• Question 824:

  What is a characteristic of Cisco DNA Northbound APIs?

  A. They simplify the management of network infrastructure devices.

  B. They enable automation of network infrastructure based on intent.

  C. They utilize RESTCONF.

  D. They utilize multivendor support APIs.

  Correct Answer: C

• Question 825:

  Refer to the exhibit. Which python code parses the response and prints "18:32:21.474 UTC sun Mar 10 2019?

  

  A. print(response['resut'][0||'simple_time']}

  B. print(response[result']['body']['simple_time']}

  C. print(response['body']['simple_time']}

  D. print(response[jresult']['body']['simple_time']}

  Correct Answer: B

  response['result']['body']['simple_time']

  {

  "jsonrpc": "2.0",

  "result": {

  "body": {

  "simple_time": "17:53:49.435 UTC Tue Nov 22 2022\n",

  "time_source": "NTP"

  }

  },

  "id": 1

  }

• Question 826:

  Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?

  A. IKE

  B. TLS

  C. IPsec

  D. ESP

  Correct Answer: B

  The Cisco SD-WAN control plane has been designed with network and device security in mind. The foundation of the control plane is one of two security protocols derived from SSL (Secure Sockets Layer)-the Datagram Transport Layer

  Security (DTLS) protocol and the Transport Layer Security (TLS) protocol.

  Reference:

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/securitybook/security-overvi

• Question 827:

  Which two GRE features are configured to prevent fragmentation? (Choose two.)

  A. TCP MSS

  B. PMTUD

  C. DF bit Clear

  D. MTU ignore

  E. IP MTU

  F. TCP window size

  Correct Answer: AE

  Reference: https://www.cisco.com/c/en/us/support/docs/ip/generic-routing-encapsulation-gre/25885-pmtud-ipfrag.html

• Question 828:

  Refer to the exhibit.

  

  Which privilege level is assigned to VTY users?

  A. 1

  B. 7

  C. 13

  D. 15

  Correct Answer: A

  Lines (CON, AUX, VTY) default to level 1 privileges.

• Question 829:

  Refer to exhibit.

  

  What are two reasons for IP SLA tracking failure? (Choose two )

  A. The destination must be 172.30 30 2 for icmp-echo

  B. The threshold value is wrong

  C. A route back to the R1 LAN network is missing in R2 D. The source-interface is configured incorrectly.

  E. The default route has the wrong next hop IP address

  Correct Answer: CD

  Timeout (in milliseconds) sets the amount of time an IP SLAs operation waits for a response from its request packet. In other words, the timeout specifies how long the router should wait for a response to its ping before it is considered

  failed.Threshold (in milliseconds too) sets the upper threshold value for calculating network monitoring statistics created by an IP SLAs operation. Threshold is used to activate a response to IP SLA violation, e.g. send SNMP trap or start

  secondary SLA operation. In other words, the threshold value is only used to indicate over threshold events, which do not affect reachability but may be used to evaluate the proper settings for the timeout command.

  For reachability tracking, if the return code is OK or OverThreshold, reachability is up; if not OK, reachability is down.

  This tutorial can help you revise IP SLA tracking topic:

  http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/813-cisco-router-ipslabasic.html

  Note: Maybe some of us will wonder why there are these two commands:

  R1(config)#ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10

  R1(config)#no ip route 0.0.0.0 0.0.0.0 172.20.20.2

  In fact the two commands:

  ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10

  ip route 0.0.0.0 0.0.0.0 172.20.20.2

  are different. These two static routes can co-exist in the routing table. Therefore if the tracking goes down, the first command will be removed but the second one still exists and the backup path is not preferred. So we have to remove the

  second one.

• Question 830:

  Refer to the exhibit.

  

  After an engineer configures an EtherChannel between switch SW1 and switch SW2, this error message is logged on switch SW2.

  

  Based on the output from SW1 and the log message received on Switch SW2, what action should the engineer take to resolve this issue?

  A. Configure the same protocol on the EtherChannel on switch SW1 and SW2.

  B. Connect the configuration error on interface Gi0/1 on switch SW1.

  C. Define the correct port members on the EtherChannel on switch SW1.

  D. Correct the configuration error on interface Gi0/0 switch SW1.

  Correct Answer: A

  In this case, we are using your EtherChannel without a negotiation protocol. As a result, if the opposite switch is not also configured for EtherChannel operation on the respective ports, there is a danger of a switching loop. The EtherChannel Misconfiguration Guard tries to prevent that loop from occuring by disabling all the ports bundled in the EtherChannel.