Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 11:

  Which major block is not included in the ETSI Network Function Virtualization reference framework?

  A. Network Function Visualization Infrastructure.
  B. Network Function Virtualization Management and Orchestration.
  C. Network Function Virtualization Policy Manager.
  D. Virtualized Network Function/ Element Management Systems.
  C. Network Function Virtualization Policy Manager.

• Question 12:

  DRAG DROP

  Drag and drop the characteristic on the left to the appropriate EAP type on the right.

  Select and Place:

  

  

• Question 13:

  Which option describes the function of the Intercloud Fabric Extender?

  A. It provides the network overlay functionality between the used clouds or cloud models.
  B. It establishes a secure site-to-site tunnel to the intercloud fabric agent in the private cloud.
  C. It applies network policies and collects and reports VEM-related intercloud statistics.
  D. It establishes a secure site-to-site tunnel to the intercloud fabric switch in the provider cloud.
  D. It establishes a secure site-to-site tunnel to the intercloud fabric switch in the provider cloud.

• Question 14:

  You are a network administrator and have been asked to enable wireless IPv6 support for client connectivity on your WLC 5520 running AireOS code 8.x. Which three prerequisites must be in place? (Choose three.)

  A. The VLAN must be untagged when entering the controller interfaces.
  B. The wireless LAN controller must have Layer 3 adjacency to the IPv6 router.
  C. The VLAN must be tagged when entering the controller interfaces.
  D. The underlying wired network must support IPv6 routing and an address assignment mechanism such as SLAAC or DHCPv6.
  E. The wireless LAN controller must have Layer 2 adjacency to the IPv6 router.
  F. An IPv6-capable router and/or switch are optional because the wireless LAN controller can use internal DHCPv6 address assignments.
  C. The VLAN must be tagged when entering the controller interfaces.
  D. The underlying wired network must support IPv6 routing and an address assignment mechanism such as SLAAC or DHCPv6.
  E. The wireless LAN controller must have Layer 2 adjacency to the IPv6 router.

• Question 15:

  Which two statements about deploying a mesh network by MAPs and RAPs are true on AireOS 8.0?(Choose two.)

  A. The backhaul client access feature cannot be enabled on a RAP that is, a RAP does not allow clients on its 302.11a radio.
  B. The three main types of mesh type under the neighbor information are neighbor, parent, and child. For types default neighbor, default parent, and default child, default is used when the neighbor BGN is not known or different from the current AP BGN if the strict matching BGN feature is disabled.
  C. A MAP/RAP must be authorized by either PSK or EAP before joining a controller in bridge mode
  D. RADIUS and Local authentications are supported with both PSK and EAP. VLAN tags are always forwarded across Mesh links.
  E. VLAN tags are always forwarded across Mesh links.
  B. The three main types of mesh type under the neighbor information are neighbor, parent, and child. For types default neighbor, default parent, and default child, default is used when the neighbor BGN is not known or different from the current AP BGN if the strict matching BGN feature is disabled.
  D. RADIUS and Local authentications are supported with both PSK and EAP. VLAN tags are always forwarded across Mesh links.

• Question 16:

  A corporation has recently deployed wireless network in their new branch office. All access points in that office are operating in FlexConnect mode and providing network access via single SSID - "BRANCH_AC" with central auth/local switching and VLAN-based central switching. Users connected to this SSID are authenticated by WLC against ISE server in HQ site and users are authorized to certain VLAN based on group membership. All access points are part of a FlexConnect group and VLANs are provisioned to AP on per group level using VLAN-ACL mapping.

  Which action occurs if the VLAN that is provided from the ISE server does not exist on the local database of the access point?

  A. The client is deauthenticated by access point because of authorization failure due to nonexisting VLAN.
  B. Client traffic is sent back to the WLC and terminated in the management VLAN.
  C. The client is locally switched to native VLAN because authentication was successful and the VLAN does not exist locally on the AP.
  D. Client traffic is sent back to the WLC and terminated in the VLAN provided in the AAA attributes because this VLAN is present on the WLC.
  E. Client is locally switched to the VLAN that is statically configured for that WLAN under FlexConnect WLAN to VLAN mapping.
  C. The client is locally switched to native VLAN because authentication was successful and the VLAN does not exist locally on the AP.

• Question 17:

  Refer to the exhibit.

  

  You company has recently deployed a new branch office. After installation was done, you notice that the access points are constantly disconnecting from the WLC. When disconnection happens, this set of events is seen in the logs.

  Which cause of the issue is the most likely?

  A. There is an issue with image download to the access points.
  B. The WLC has not been configured with a proper country code for which the APs were manufactured.
  C. The time of the WLC is not set correctly, which is affecting the DTLS process because certificate validation is failing.
  D. There are link stability issues between the access points and the WLC.
  C. The time of the WLC is not set correctly, which is affecting the DTLS process because certificate validation is failing.

• Question 18:

  An existing network has five switches running VTPv3 with Switch1 and Switch2 configured in server mode. Switch1 is the current primary server and the only parameter configured on this switch is: VTP domain name, CCIE. All switches have synchronization their VLAN database with primary server and the current revision number is 50.

  Which description of what happens if another switch - Switch6 (in server mode) - is added to the network with revision number 200 and the same domain name, CCIE?

  A. All switches in the existing network update their VLAN database based on the updates received from Switch6 because it has a higher revision number.
  B. No VLAN information changes, and updates from Switch 6 are ignored.
  C. Updates are ignored by all the switches until Switch1 synchronizes its VLAN data based on information received from Switch6. After this step is complete, the other switches resynchronize their VLAN database with Switch1.
  D. Switch6 updates its own database with the VLAN information received from Switch1.
  B. No VLAN information changes, and updates from Switch 6 are ignored.

• Question 19:

  Which two configuration are required on the Cisco 5760 WLC to ensure that APs will successfully join the Cisco WLC? (Choose two)

  A. Enable IP DHCP SNOOPING TRUST on the wireless controller port-channel interface
  B. Activate the apocopate Right-to-use AP license on the wireless LAN controller
  C. Ensure that port-fast is enabled on each access point switch port
  D. Ensure accurate configuration of the correct time and date on the wireless LAN controller
  B. Activate the apocopate Right-to-use AP license on the wireless LAN controller
  D. Ensure accurate configuration of the correct time and date on the wireless LAN controller

• Question 20:

  Which four options are the HTTP methods supported by a reset API?

  A. RETRIEVE
  B. GET
  C. PUT
  D. DELETE
  E. COPY
  F. POST
  G. SET
  B. GET
  C. PUT
  D. DELETE
  F. POST