Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 931:

  Refer to the exhibit. After configuring HSRP an engineer enters the show standby command. Which two facts are derived from the output? (Choose two.)

  

  A. The router with IP 10.10 1.3 is active because it has a higher IP address

  B. If Fa0/0 is shut down, the HSRP pnonty on R2 becomes 80

  C. R2 Fa1/0 regains the primary role when the link comes back up

  D. R2 becomes the active router after the hold time expires.

  E. R2 is using the default HSRP hello and hold timers.

  Correct Answer: BE

  Very tricky question, but i will try to explain.

  That is position of darude or the AandE guys:

  R2 is in standby with prio 90.

  R1 is active with prio 85.

  Fa0/0 is down, because otherwise R2 would have prio 80.

  Assuming Fa0/0 is the keep-alive between R2 and R1, R1 is down.

  R2 will detect, that R1 is down in 8.672sec and will take over the active role.

  But from my point of view we can not assume, that Fa0/0 is the keep-alive, because the hold time is 10sec and hello time 3sec. The hold time is expired by only 1.328sec, so we can't know, if the hello message could have reached R1,

  because the hello time is 3sec.

• Question 932:

  What does the LAP send when multiple WLCs respond to the CISCO_CAPWAPCONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

  A. broadcast discover request

  B. join request to all the WLCs

  C. unicast discovery request to each WLC

  D. Unicast discovery request to the first WLS that resolves the domain name

  Correct Answer: C

  The AP will attempt to resolve the DNS name CISCO-CAPWAP- CONTROLLER.localdomain. When the AP is able to resolve this name to one or more IP addresses, the AP sends a unicast CAPWAP Discovery Message to the resolved IP address(es). Each WLC that receives the CAPWAP Discovery Request Message replies with a unicast CAPWAP Discovery Response to the AP.

  Reference: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107606-dns-wlc-config.html

• Question 933:

  What are two benefits of implementing a Cisco SD-WAN architecture? (Choose two)

  A. It provides resilient and effective traffic flow using MPLS.

  B. It improves endpoint protection by integrating embedded and cloud security features.

  C. It allows configuration of application-aware policies with real time enforcement.

  D. It simplifies endpoint provisioning through standalone router management

  E. It enforces a single. scalable. hub-and-spoke topology.

  Correct Answer: CD

  The top SD-WAN benefits are:

  +

  Increased bandwidth at a lower cost

  +

  Centralized management across branch networks

  +

  Full visibility into the network

  +

  Providing organizations with more connection type options and vendor selection when building a network. Reference: https://www.sdxcentral.com/networking/sd-wan/definitions/sd-wan-technology/

  -> We can provision endpoints (vEdges) through a centralized router vManage -> Answer D is correct.

  Answer A is not correct as we can use different kind of connections on SD-WAN: MPLS, LTE, 4G, xDSL, Internet connections...

  Application-Aware Routing policy is configured in vManage as a centralized data policy that maps the serviceside application(s) to specific SLA requirements. The centralized policies provisioned in vSmart controller is pushed to relevant WAN

  Edge devices for enforcement. The defined policy consists of matchaction pairs, where the match statement defines the application-list or the type of traffic to match, and the action statement defines the SLA action the WAN Edge devices

  must enforce for the specified traffic.

  Reference: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwanapplication-awarerouting-deploy-guide.html

• Question 934:

  Refer to the exhibit.

  

  Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

  A. 192.168.101.18

  B. 192.168.101.6

  C. 192.168.101.10

  D. 192.168.101.14

  Correct Answer: A

  The `>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path. Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer '192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100. Therefore we can find the two next best paths with the next hop of 192.168.101.18 and 192.168.101.10. We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated. The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop 192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.

• Question 935:

  Refer to the exhibit. VPN-A sends point-to-point traffic to VPN-B and receives traffic only from VPN-C VPN-B sends point-to-point traffic to VPN-C and receives traffic only from VPN-A. Which configuration is applied?

  

  A. PE-2 vrf VPN-B address-family ipv4 unicast import route-target 100:1 export route-target 100:2

  B. PE-3 vrf VPN-B address-family ipv4 unicast import route-target 100:1 export route-target 100:2

  C. PE-2 vrf VPN-B address-family ipv4 unicast import route-target 100:1 export route-target 100:2

  D. PE-3 vrf VPN-B address-family ipv4 unicast import route-target 100:2 export route-target 100:2

  Correct Answer: B

• Question 936:

  What is a VPN in a Cisco SD-WAN deployment?

  A. common exchange point between two different services

  B. attribute to identify a set of services offered in specific places in the SD-WAN fabric

  C. virtualized environment that provides traffic isolation and segmentation in the SD-WAN fabric

  D. virtual channel used to carry control plane information

  Correct Answer: C

  Ref: Cisco SD-WAN (Viptela) Configuration Guide, Release 18.1

  "...

  Segmentation (VPN) Overview

  This article illustrates the segmentation and VPN capabilities of the Viptela overlay network solution.

  Network segmentation has existed for over a decade and has been implemented in multiple forms and shapes. At its most rudimentary level, segmentation provides traffic isolation. The most common forms of network segmentation are virtual

  LANs, or VLANs, for Layer 2 solutions, and virtual routing and forwarding, or VRF, for Layer 3 solutions.

  ..."

• Question 937:

  Refer to the exhibit.

  

  A network operator is attempting to configure an IS-IS adjacency between two routers, but the adjacency cannot be established. To troubleshoot the problem, the operator collects this debugging output. Which interfaces are misconfigured on these routers?

  A. The peer router interface is configured as Level 1 only, and the R2 interface is configured as Level 2 only.

  B. The R2 interface is configured as Level 1 only, and the Peer router interface is configured as Level 2 only.

  C. The R2 interface is configured as point-to-point, and the peer router interface is configured as multipoint.

  D. The peer router interface is configured as point-as-point, and the R2 interface is configured as multipoint.

  Correct Answer: B

• Question 938:

  A network engineer configures a WLAN controller with increased security for web access. There is IP connectivity with the WLAN controller, but the engineer cannot start a management session from a web browser. Which action resolves the issued?

  A. Disable JavaScript on the web browser

  B. Disable Adobe Flash Player

  C. Use a browser that supports 128-bit or larger ciphers.

  D. Use a private or incognito session.

  Correct Answer: C

• Question 939:

  Refer to the exhibit.

  

  A company requires that all wireless users authenticate using dynamic key generation. Which configuration must be applied?

  A. AP(config-if-ssid)# authentication open wep wep_methods

  B. AP(config-if-ssid)# authentication dynamic wep wep_methods

  C. AP(config-if-ssid)# authentication dynamic open wep_dynamic

  D. AP(config-if-ssid)# authentication open eap eap_methods

  Correct Answer: D

• Question 940:

  A network administrator is Implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process.

  Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.)

  A. Configure the logging synchronous global configuration command

  B. Configure the logging delimiter feature

  C. Configure the logging synchronous command under the vty

  D. Press the TAB key to reprint the command in a new line

  E. increase the number of lines on the screen using the terminal length command

  Correct Answer: CD