Cisco CCIE Enterprise Wireless 350-401 Questions & Answers

• Question 951:

  An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN?

  A. ISE server

  B. local WLC

  C. RADIUS server

  D. anchor WLC

  Correct Answer: B

  "The next step is to configure the WLC for the Internal web authentication. Internal web authentication is the defaultweb authentication type on WLCs." In step 4 of the link above, we will configure Security as described in this question. Therefore we can deduce thisconfiguration is for Internal web authentication.

  This paragraph was taken from the link https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web-auth-config.html#c5 :

• Question 952:

  Refer to the exhibit. An engineer must create a configuration that prevents R3from receiving the LSA about 172.16.1.4/32. Which configuration set achieves this goal?

  

  A. On R3 ip access-list standard R4_L0 deny host 172.16.1.4 permit any router ospf 200 distribute-list R4_L0 in

  B. On R3 ip prefix-list INTO-AREA1 seq 5 deny 172.16.1.4/32 ip prefix-list INTO-AREA1 seq 10 permit 0.0.0.0/0 le 32 router ospf 200 area 1 filter-list prefix INTO-AREA 1 in

  C. On R1 ip prefix-list INTO-AREA1 seq 5 deny 172.16.1.4/32 ip prefix-list INTO-AREA 1 seq 10 permit 0.0.0.0/0 le 32 router ospf 200 area 1 filter-list prefix IN TO-AREA1 in

  D. On R1 ip prefix-list INTO-AREA1 seq 5 deny 172.16.1.4/32 ip prefix-list INTO-AREA1 seq 10 permit 0.0.0.0/0 le 32 router ospf 200 area 1 filter-list prefix INTO-AREA1 out

  Correct Answer: C

  in - Filters networks sent TO this area out - Filters network sent FROM this area

• Question 953:

  An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane. Which two commands or command sets must be used? (Choose two.)

  

  A. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2 class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action drop control-plane Service-policy input CoPP-policy

  B. show ip interface brief

  C. show quality-of-service-profile

  D. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action transmit control-plane Service-policy input CoPP-policy

  E. show policy-map control-plane

  Correct Answer: AE

• Question 954:

  Which Python code snippet must be added to the script to save the returned configuration as a JSON-formatted file?

  

  A. with open("ifaces.json", "w") as OutFile: OutFile.write(Response.text)

  B. with open("ifaces.json", "w") as OutFile: OutFile.write(Response.json())

  C. with open("ifaces.json", "w") as OutFile: JSONResponse = json.loads(Response.text) OutFile.write(JSONResponse)

  D. with open("ifaces.json", "w") as OutFile: OutFile.write(Response)

  Correct Answer: B

  The json() method of the Response interface takes a Response stream and reads it to completion. It returns a promise which resolves with the result of parsing the body text as JSON.

• Question 955:

  Refer to the exhibit.

  

  An engineer is installing a new pair of routers in a redundant configuration.

  Which protocol ensures that traffic is not disrupted in the event of a hardware failure?

  A. HSRPv1

  B. GLBP

  C. VRRP

  D. HSRPv2

  Correct Answer: A

  The virtual MAC address is 0000.0c07.acXX (XX is the hexadecimal group number) so it is using HSRPv1. Note: HSRP Version 2 uses a new MAC address which ranges from 0000.0C9F.F000 to 0000.0C9F.FFFF.

• Question 956:

  What does the Cisco DNA Center use to enable the delivery of applications through a network and to yield analytics for innovation?

  A. process adapters

  B. Command Runner

  C. intent-based APIs

  D. domain adapters

  Correct Answer: C

  The Cisco DNA Center open platform for intent-based networking provides 360- degree extensibility across multiple components, including:

  + Intent-based APIs leverage the controller to enable business and IT applications to deliver intent to the network and to reap network analytics and insights for IT and business innovation. These enable APIs that allow Cisco DNA Center to

  receive input from a variety of sources, both internal to IT and from line-of-business applications, related to application policy, provisioning, software image management, and assurance.

  ...

  Reference: https://www.cisco.com/c/en/us/products/collateral/cloud-systemsmanagement/ dna-center/nb-06-dna-cent-plat-sol-over-cte-en.html

• Question 957:

  What is a characteristic of Cisco StackWise technology?

  A. It uses proprietary cabling

  B. It supports devices that are geographically separated

  C. lt combines exactly two devices

  D. It is supported on the Cisco 4500 series.

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9200-series-switches/nb-06-stackwise-architecture-cte-en.html

• Question 958:

  Refer to the exhibit. What does the output confirm about the switch's spanning tree configuration?

  

  A. The spanning-tree mode stp ieee command was entered on this switch

  B. The spanning-tree operation mode for this switch is PVST.

  C. The spanning-tree operation mode for this switch is PVST+.

  D. The spanning-tree operation mode for this switch is IEEE

  Correct Answer: C

  PVST+ enables support to IEEE Devices, "SPanning tree enabled protocol IEEE" output confirms PVST+

• Question 959:

  Refer to the exhibit.

  

  An engineer reconfigures the port-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log:

  *Mar 1 09:47:22.245: %PM-4-ERR_DISABLE: bpduguard error detected on Gi0/0, putting Gi0/0 in err-disable state

  Which command set resolves this error?

  A. SW1(config-if)#interface G0/0 SW1(config-if)#no spanning-tree bpdufilter SW1(config-if)#shut SW1(config-if)#no shut

  B. SW1(config-if)#interface G0/0 SW1(config-if)#no spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut

  C. SW1(config-if)#interface G0/0 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut

  D. SW1(config-if)#interface G0/1 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut

  Correct Answer: B

• Question 960:

  Refer to the exhibit.

  

  What is required to configure a second export destination for IP address 192.168.10.1?

  A. Specify a VRF.

  B. Specify a different UDP port.

  C. Specify a different flow ID

  D. Configure a version 5 flow-export to the same destination.

  E. Specify a different TCP port.

  Correct Answer: B

  To configure multiple NetFlow export destinations to a router, use the following commands in global configuration mode: Step 1: Router(config)# ip flow-export destination ip-address udp-port Step 2: Router(config)# ip flow-export destination ip-address udp-port The following example enables the exporting of information in NetFlow cache entries: ip flow-export destination 10.42.42.1 9991 ip flow-export destination 10.0.101.254 1999 Reference: https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/12s_mdnf.html