Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 921:

  If a client's radio device receives a signal strength of -67 dBm and the noise floor is -85 dBm, what is the SNR value?

  A. 15 dB

  B. 16 dB

  C. 18 dB

  D. 20 dB

  Correct Answer: C

  -67 - (-85)=18

• Question 922:

  An engineer must configure AAA on a Cisco 9800 WLC for central web authentication Which two commands are needed to accomplish this task? (Choose two.)

  A. (Cisco Controller) > config wlan aaa-override disable

  B. (Cisco Controller) > config radius acct add 10.10.10.12 1812 SECRET

  C. (Cisco Controller) > config wlan aaa-override enable

  D. Device(config-locsvr-da-radius)# client 10.10.10.12 server-key O SECRET

  E. Device(config)# aaa server radius dynamic-author

  Correct Answer: DE

• Question 923:

  An engineer must enable a login authentication method that allows a user to log in by using local authentication if all other defined authentication methods fail Which configuration should be applied?

  A. aaa authentication login CONSOLE group radius local-case enable aaa

  B. authentication login CONSOLE group radius local enable none

  C. aaa authentication login CONSOLE group radius local enable

  D. aaa authentication login CONSOLE group tacacs+ local enable

  Correct Answer: D

• Question 924:

  Refer to the exhibit. Which two facts does the device output confirm? (Choose two) A. The device is using the default HSRP hello timer

  

  B. The standby device is configured with the default HSRP priority

  C. The device's HSRP group uses the virtual IP address 10.0.3.242.

  D. The device is configured with the default HSRP priority

  E. The device sends unicast messages to its peers

  Correct Answer: AD

  hsrp uses multicast: 224.0.0.2 v1, 224.0.0.102 v2, 224.0.0.18 vrrp. default hsrp hello time is 3 sec, hold timer is 10 sec

• Question 925:

  Which deployment option of Cisco NGFW provides scalability?

  A. tap

  B. inline tap

  C. high availability

  D. clustering

  Correct Answer: D

  https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/asa-cluster-solution.html

  Clustering lets you group multiple Firepower Threat Defense (FTD) units together as a single logical device. Clustering is only supported for the FTD device on the Firepower 9300 and the Firepower 4100 series. A cluster provides all the convenience of a single device (management, integration into a network) while achieving the increased throughput and redundancy of multiple devices.

• Question 926:

  An engineer configures a WLAN with fast transition enabled Some legacy clients fail to connect to this WLAN.

  Which feature allows the legacy clients to connect while still allowing other clients to use fast transition based on then OLTIs?

  A. over the DS

  B. adaptive R

  C. 802.11V

  D. 802.11k

  Correct Answer: B

• Question 927:

  In a three-tier hierarchical campus network design, which action is a design best-practice for the core layer?

  A. provide QoS prioritization services such as marking, queueing, and classification for critical network traffic

  B. provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence

  C. provide advanced network security features such as 802. IX, DHCP snooping, VACLs, and port security

  D. provide redundant aggregation for access layer devices and first-hop redundancy protocols such as VRRP

  Correct Answer: B

  All policies are configured an the access and distribution layer, CORE must be use ony to forward packets and be highly redundant an usually be on L3

• Question 928:

  Refer to the exhibit.

  

  An engineer is designing a guest portal on Cisco ISE using the default configuration. During the testing phase, the engineer receives a warning when displaying the guest portal. Which issue is occurring?

  A. The server that is providing the portal has an expired certificate

  B. The server that is providing the portal has a self-signed certificate

  C. The connection is using an unsupported protocol

  D. The connection is using an unsupported browser

  Correct Answer: B

• Question 929:

  Refer to the exhibit.

  

  All switches are configured with the default port priority value. Which two commands ensure that traffic from PC1 is forwarded over Gi1/3 trunk port between DWS1 and DSW2? (Choose two)

  A. DSW2(config-if)#spanning-tree port-priority 128

  B. DSW2(config-if)#spanning-tree port-priority 16

  C. DSW2(config-if)#interface gi1/3

  D. DSW1(config-if)#interface gi1/3

  E. DWS1(config-if)#spanning-tree port-priority 0

  Correct Answer: BC

• Question 930:

  How does the EIGRP metric differ from the OSPF metric?

  A. The EIGRP metric is calculated based on bandwidth only. The OSPF metric is calculated on delay only.

  B. The EIGRP metric is calculated based on delay only. The OSPF metric is calculated on bandwidth and delay.

  C. The EIGRP metric Is calculated based on bandwidth and delay. The OSPF metric is calculated on bandwidth only.

  D. The EIGRP metric Is calculated based on hop count and bandwidth. The OSPF metric is calculated on bandwidth and delay.

  Correct Answer: C

  By default, EIGRP metric is calculated:

  metric = bandwidth + delay

  While OSPF is calculated by:

  OSPF metric = Reference bandwidth / Interface bandwidth in bps (Or Cisco uses 100Mbps (108) bandwidth as reference bandwidth.

  With this bandwidth, our equation would be:

  Cost = 108/interface bandwidth in bps)