Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 101:

  what are two differences between wireless QoS and wired QoS on an autonomous AP?(choose two)

  A. WirelessQoS dose FIFO and RED on Ethernet egress ports
  B. WirelessQoS can prioritize packet based on DSCP,TOS, COS or EXP values.
  C. WirelessQoS MQC policy-maps support only set cos act1on
  D. WirelessQoS carries out WMM type of queuing on the radio egress port
  E. WirelessQoS support ISL 802.10 and 802.1p tagged packets.
  B. WirelessQoS can prioritize packet based on DSCP,TOS, COS or EXP values.
  C. WirelessQoS MQC policy-maps support only set cos act1on

• Question 102:

  What are the three components that are used within the authentication process on an 802.1x/EAP- enabled WLAN? (Choose three.)

  A. wireless web server
  B. supplicant
  C. authenticator
  D. Cisco WCS
  E. authentication server F. key management server
  B. supplicant
  C. authenticator
  E. authentication server F. key management server

• Question 103:

  You are troubleshooting a wireless mesh API join issue. Which feature helps to prevent a mesh AP from being stranded after going through a timer reboot?

  A. universal access
  B. passive beaconing
  C. daisy chaining
  D. background scanning
  B. passive beaconing

• Question 104:

  Refer to the exhibit.

  

  Wireless voice users on VLAN 2150 report poor voice quality during heavy network usage. The WLC is configured correctly. Given the configuration in the exhibit, which possible cause of the problem is true?

  A. MLSQoS is not enabled on the switch.
  B. VLAN 2150 is not allowed on the trunkport of the switch
  C. The WLC switch port dose not trust CoS values for Voice traffic that traverses the WLC
  D. The wireless voice VLAN does not have the proper QoS settings.
  C. The WLC switch port dose not trust CoS values for Voice traffic that traverses the WLC

• Question 105:

  You have been asked to configure multiple AAA servers on the WLC for network user authentication. During 802.1x authentication, if the username does not show up in the first RADIUS server, what will the WLC do next?

  A. The user will be prompted for web authentication
  B. The WLC will continue to try all RADIUS servers in round-robin fashion until the username is found in one of them.
  C. The second RADIUS server will be checked.
  D. The RADIUS server will most probably send back a RADIUS reject which means the WLC should not authenticate the user.
  D. The RADIUS server will most probably send back a RADIUS reject which means the WLC should not authenticate the user.

• Question 106:

  After taking a routine wireless sniffer capture on your wireless network, you found that an access point has rejected associations for a few clients with status code 30 "Association request rejected temporarily; Try again later." Which statement explains this behavior?

  A. This is a common behavior when the Call Admission Control feature is in use. The available admission capacity on the AP has been exhausted.
  B. The AP was working on a DFS channel and a RADAR pulse was detected by the AP while taking the capture. This is normal behavior of the Channel Switch Announcement functionality.
  C. The Protected Management Frames feature is enabled on the WLAN. The association request from the 802.11w client is received with the MAC address of a client that already has a valid security association with the AP.
  D. There is a high channel utilization condition on the operating channel of the AP, which results in the AP temporarily dropping any new connections.
  E. There is a possible CRC error on the capture because the reason code 30 is an invalid code. APs never reject associations temporarily.
  C. The Protected Management Frames feature is enabled on the WLAN. The association request from the 802.11w client is received with the MAC address of a client that already has a valid security association with the AP.

• Question 107:

  Refer the exhibit.

  

  The created dynamic interfaces are bound to an interface group for a specific WLAN profile in a Cisco Wireless LAN Controller. You have noticed duplicated multicast streams on the wireless medium for the given WLAN profile. Which statement is correct?

  A. Global multicast mode, globai 1Pv6 config, and multicast listener discovery snooping have not been enabled. Enable this to avoid duplicate streams.
  B. Global multicast mode and internet group management protocol snooping have not been enabled. To avoid stream enable both .
  C. The controller creates different multicast groups IDs for each multicast address and VLAN and a result the upstream router sends one copy for each VLAN. Enable Multicast VLAN to avoid duplicate streams.
  D. The controller always uses layer 3 multicast group 10 for all layer 3 multicast traffic sent to the access point internet group management protocol snooping should be disabled to avoid duplicate streams.
  C. The controller creates different multicast groups IDs for each multicast address and VLAN and a result the upstream router sends one copy for each VLAN. Enable Multicast VLAN to avoid duplicate streams.

• Question 108:

  Which three AP modes are supported by Converged Access WLC (3650/3850/5760) in cisco ISO-XE software 3.6E? (Choose three)

  A. sniffer
  B. local
  C. Fiexconnect
  D. monitor
  E. office extend
  F. Mesh
  A. sniffer
  B. local
  D. monitor

• Question 109:

  Which two advanced WLAN options are required when deploying central web authentication with Cisco ISE? (Choose two.)

  A. P2P Blocking Action set to Drop.
  B. NAC State RADIUS NAC
  C. NAC State SNMPNAC.
  D. DHCP Addr. Assignment disabled.
  E. Allow AAA override enabled.
  B. NAC State RADIUS NAC
  E. Allow AAA override enabled.

• Question 110:

  Refer to the exhibit.

  

  Your colleague a junior network engineer is struggling to enable DHCP option 82 in the layer 3 switch which is in the DMZ for a mobile client under a guest anchor Cisco wireless LAN controller deployment . What is your answer?

  A. DHCP proxy must be enabled for DHCP option 82 to operate correctly . All Cisco WLCsthat will be in the setup must have the same DHCP proxy setting.
  B. DHCP option 82 must be enabled on the dynamic interface with which theWLANis associated
  C. DHCP option 82 is not supported when it is used with auto-anchor mobility
  D. The mobility tunnel datapath control path or both between the anchor cisco WLC and foreign WLC are down.
  C. DHCP option 82 is not supported when it is used with auto-anchor mobility