Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 151:

  Which three types of ACLs are supported by the Cisco 5760 WLC? (Choose three.)

  A. Port ACLs.
  B. VLAN ACLs(VLAN maps).
  C. Router port ACLs.
  D. AP Radio ACL Switch port ACLs.
  E. Router ACLs.
  A. Port ACLs.
  B. VLAN ACLs(VLAN maps).
  E. Router ACLs.

• Question 152:

  Refer to the exhibit. It belongs to a Cisco IOS AP with just one radio. This portion of configuration refers to a multiple SSID/VLAN configuration. Which statement is correct?

  

  Refer to the exhibit. It belongs to a Cisco IOS AP with just one radio. This portion of configuration refers to a multiple SSID/WLAN configuration. Which statement is correct?

  A. The configuration does not allow for non-corporate clients to connect to any SSID Guest traffic.There fore will not allowed.
  B. 'mbssid guest-mode' is used to allow broad cat of multiple SSIDs on the radio interface. No other 'mbssid" commands are needed to achieve this functionality.
  C. The AP must have subinterfaces 80,81,and 82 configured on the Radio 0 and Ethernet interfaces.
  D. The SSID "EAP" will allow clients to connect to it using any EAP authentication method such as EAP-TLS.
  C. The AP must have subinterfaces 80,81,and 82 configured on the Radio 0 and Ethernet interfaces.

• Question 153:

  Which description of how SKC roaming operates is true?

  A. All APs share the same PMK.
  B. A client must perform full authentication only on the first AP.
  C. PMKID can be implemented locally by autonomous-independent APs as long as a centralized device is used to manage the cached keys.
  D. A client must perform full authentication per each new AP.
  C. PMKID can be implemented locally by autonomous-independent APs as long as a centralized device is used to manage the cached keys.

• Question 154:

  Why would you enable the RFC 3578 option when adding a new RADIUS authentication server to a WLC?

  A. you want to run both RADIUS and TACACS
  B. to support Disconnect and Change of Authorization
  C. to encrypt communications between the WLC and the RADIUS server
  D. to support RADIUS key wrapping
  B. to support Disconnect and Change of Authorization

• Question 155:

  You must configure user management access on Cisco Prime Infrastructure. Each user that requires access belongs to a department and each department needs to have specific access. Which configuration in Cisco Prime is the best way to easily administer these users?

  A. Configure access for each user individually
  B. Create one user account for each department and each department shares it internally
  C. Configure user groups
  D. Create virtual domains
  D. Create virtual domains

• Question 156:

  Your customer has two Cisco Unified Wireless LAN Controllers deployed in high availability SSO. Which statement about client SSO is true?

  A. New mobility is supported.
  B. CCX-based applications must be restarted after switchover.
  C. All clients are synced between active and standby WLC.
  D. OEAP clients are supported.
  E. For SSO to work, both WLCs must have a high availability SKU UDI.
  B. CCX-based applications must be restarted after switchover.

• Question 157:

  During the Cisco 5760 WLC high availability active and standby process (elected or re- elected) which factor can determine which Cisco 5760 WLC become active?

  A. The cisco 5760 WLC the highest stack member priority value
  B. the cisco 5760 WLC the highest IP address
  C. the cisco 5760 WLC the lowest stack member priority value.
  D. the cisco 5760 WLC the highest Mac address
  A. The cisco 5760 WLC the highest stack member priority value

• Question 158:

  Which option is a feature of a Cisco Autonomous AP that prevents over-the-air direct P2P communication, which forces all traffic to hit the first-hop router where security policy is enforced?

  A. Publicly Secure Packet Forwarding
  B. Wi-Fi Direct Clients Policy
  C. P2P Blocking Action
  D. P2P Secure Packet
  A. Publicly Secure Packet Forwarding

• Question 159:

  Which two actions will happen when a wireless client deploys a Layer 2 roam between two WLCs with management IP addresses on different IP subnets but dynamic interfaces in the same VLAN? (Choose two.)

  A. The new WLC exchanges mobility messages with the original WLC and the client database entry is moved to the new WLC.
  B. The original WLC marks the client with an "Anchor" entry in its own client database.
  C. The client database entry is maintained on both the original and newWLCs.
  D. The client database entry is removed from the original WLC once it has been entered into the new WLC.
  A. The new WLC exchanges mobility messages with the original WLC and the client database entry is moved to the new WLC.
  D. The client database entry is removed from the original WLC once it has been entered into the new WLC.

• Question 160:

  Which type of traffic can be filtered by using a Cisco WLC ACL?

  A. It is not possible to filter any kind of multicast traffic using the Cisco WLC ACLs.
  B. Traffic that is initiated from the IP address of the virtual interface and destined for wireless clients.
  C. Multicast traffic that is initiated from wireless clients and destined for wired networks or other wireless clients on the same Cisco WLC.
  D. Multicast traffic that is received from wired networks and destined for wireless clients.
  C. Multicast traffic that is initiated from wireless clients and destined for wired networks or other wireless clients on the same Cisco WLC.