Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 141:

  Which two statements about VXLAN are true?(Choose two.)

  A. VXLAN overcomes the 802.1Q virtual LAN address space limitation.
  B. VXLAN is an encapsulation method used to create a Layer 3 overlay network
  C. VXLAN uses the Spanning Tree Protocol for loop prevention.
  D. VXLAN is a Cisco proprietary standard.
  E. VXLAN can be used to enforce Layer 2 isolation in a multitenant infrastructure.
  A. VXLAN overcomes the 802.1Q virtual LAN address space limitation.
  E. VXLAN can be used to enforce Layer 2 isolation in a multitenant infrastructure.

• Question 142:

  DRAG DROP

  Drag and drop the WLAN organizations and regulations from the left onto the correct role of on the right.

  Select and Place:

  

  

• Question 143:

  Which two settings are recommended when deploying Cisco Wireless IP 8821 phones within a Cisco Autonomous AP deployment? (Choose two.)

  A. Enable Public Secure Packet Forwarding
  B. Enable WMM on Radio0 interface only
  C. Ensure Aironet Extensions is Disabled
  D. Enable DTPC
  E. Set IGMP Snooping to Enabled
  B. Enable WMM on Radio0 interface only
  C. Ensure Aironet Extensions is Disabled

• Question 144:

  Which two statements about a FlexConnect AP are true? (Choose two.)

  A. In connected mode, the AP provides minimal information about the locally authenticated client to the controller. This information is not available to the controller: policy type, access VLAN, VLAN name, supported rates, encryption cipher.
  B. In connected mode, the access point provides minimal information about the locally authenticated client to the controller. However, the following information is available to the controller policy type, acces VLAN, VLAN name, supported rates and, encryption cipher.
  C. Careful planning must be undertaken when setting up local authentication as it increases the latency requirements of the branch office.
  D. Setting up local authentication is connected mode is the fastest way of enabling wireless at a remote location as it does not require any WLAN configuration.
  E. Local authentication can be enabled only on the WLAN of a FlexConnect AP that is in local switching mode.
  A. In connected mode, the AP provides minimal information about the locally authenticated client to the controller. This information is not available to the controller: policy type, access VLAN, VLAN name, supported rates, encryption cipher.
  C. Careful planning must be undertaken when setting up local authentication as it increases the latency requirements of the branch office.

• Question 145:

  Which two impact dose TSPEC admission controlhave as it relates to 802.11e clients? (choose two)

  A. Enforce airtime entitlement for wireless voice applications.
  B. Ensure that call quality dose not degrade for existing VoWLAN calls.
  C. Deny client access to the WLAN that do not meet the standard.
  D. Allow access only for VoWLAN traffic when interference is detected.
  A. Enforce airtime entitlement for wireless voice applications.
  B. Ensure that call quality dose not degrade for existing VoWLAN calls.

• Question 146:

  Drag and drop.

  Drag and drop the AVC configuration features from the left onto their respective function on the right.

  Select and Place:

  

  

• Question 147:

  Which two statements about deploying a mesh network by MAPs/RAP?

  A. A MAP/RAP must be authorized by either PSK or EAP before joining a controller in bridge mode.
  B. The backhaul client access feature cannot be enabled on a RAP that is, a RAP does not allow clients on its 802.11a radio.
  C. The three main type of mesh type under the neighbor information are neighbor,parent, and child. For types default neighbor, default parent, and default child, default is used when the neighbor BGN is not known or different from the current AP BGN if the strict matching BGN feature is disabled.
  D. Radius and Local authentications are supported with both PSK and EAP.
  E. VLAN tags are always forward across Mesh links.
  C. The three main type of mesh type under the neighbor information are neighbor,parent, and child. For types default neighbor, default parent, and default child, default is used when the neighbor BGN is not known or different from the current AP BGN if the strict matching BGN feature is disabled.
  D. Radius and Local authentications are supported with both PSK and EAP.

• Question 148:

  Which statement about Wired Guest Access is true?

  A. The wired guest traffic terminates only on the anchor Cisco WLC
  B. Wired Guest Access is not supported in the Cisco 5760 WLC.
  C. The Cisco 5760 WLC supports Wired Guest Access only in conjunction with the converged access switches.
  D. The guest traffic can terminate on the foreigh WLC, but egress interface must be defined on the guest SSID.
  A. The wired guest traffic terminates only on the anchor Cisco WLC

• Question 149:

  Refer to the exhibit.

  

  You enabled NAT to make sure that your WLC is publicly reachable . if other NAT parameters are left to default1 which statement is true?

  A. The AP WLC discovery fails for APs int local mode using 209.165.200
  B. The AP WLC discovery fails for APs int local mode using 209.165.200
  C. The AP WLC discover succeeds for OEAPsJoning the WLC using 192.168.3.44 or 209 165.200.44D.
  D. The AP WLC discover Fail for APs in local mode using 192.168.3.44
  C. The AP WLC discover succeeds for OEAPsJoning the WLC using 192.168.3.44 or 209 165.200.44D.

• Question 150:

  Which major drawback of configuring machine access restriction on the RADIUS server for a wireless deployment is true?

  A. This scenario is possible only with EAP-Chaining, which is not yet an industry standard.
  B. If the user pits his PC to sleep overnight, the OS sends only a user authentication when the session is resumed and no machine authentication. Depending on the time for which the RADIUS server caches the MAR, this can create issues.
  C. It is possible to do machine authentication only when using a Windows machine with the Microsoft default supplicant.
  D. Regardless of the client and/or protocols being used, at this moment in time, MAR is possible only when using Cisco ISE as the AAA RADIUS server. No other AAA servers currently support MAR.
  B. If the user pits his PC to sleep overnight, the OS sends only a user authentication when the session is resumed and no machine authentication. Depending on the time for which the RADIUS server caches the MAR, this can create issues.