Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 211:

  Refer to the exhibit.

  

  A wireless user has roamed from an AP connected to MA 1to AP connected to MA 3the traffic flow for the user between roam is shown . Which option shows the traffic flow for the user after roam, considering default sticky anchoring is enabled on the WLAN?

  A. MA-3>Distribution switch>core>mc>distribution switch >MA-1
  B. MA-3>Distribution switch>MA-1distribution switch >core
  C. MA-3> Distribution switch>MA-2>Distribution switch >core
  D. MA-3> Distribution switch >ma -2> MA-l>Distribution switch>core
  A. MA-3>Distribution switch>core>mc>distribution switch >MA-1

• Question 212:

  What is the minimum VMware ESXi version you need to install Cisco prime infrastructure 2.2 virtual appliance?

  A. ESxi 4.1
  B. ESxi 5.0
  C. ESxi 4.0
  D. ESxi 5.5
  E. ESxi 5.1
  B. ESxi 5.0

• Question 213:

  Which two IETF RADIUS attributes sent by the Cisco WLC can be used to differentiate authentication requests based on the user location?(Choose two.)

  A. RADIUS attribute [31] Calling-Station-ld
  B. RADIUS attribute [4] NAS-IP-Address
  C. RADIUS attribute [95] NAS-IPv6-Address
  D. RADIUS attribute [32] NAS-ldentifier
  E. RADIUS attribute [303] Source-IP
  F. RADIUS attribute [30] Called-Station-ld
  D. RADIUS attribute [32] NAS-ldentifier
  F. RADIUS attribute [30] Called-Station-ld

• Question 214:

  Which statement is true when setting up switch ports for APs?

  A. Only Aps in FlexConnect mode are susceptible to round-trip latency problems (between the access point and the controller).
  B. Aps in FlexConnect local switching must always connect to an access switch port.
  C. With PortFast, there is always a risk of loops because local mode Aps bridge traffic directly between VLANs.
  D. For APs in local mode, or FlexConnect mode doing only central switched WLANs, it is recommended to configure the switch port with PortFast.
  D. For APs in local mode, or FlexConnect mode doing only central switched WLANs, it is recommended to configure the switch port with PortFast.

• Question 215:

  Refer to the exhibit,

  

  based upon the given configuration which two statement are true? (choose two)

  A. local RADIUS server is used
  B. No password is required everyone can join wireless network
  C. Users will be required to provide a username and password for authentication
  D. User will be required to provide a password only order to get access
  E. Remote RADIUS servers is used
  A. local RADIUS server is used
  C. Users will be required to provide a username and password for authentication

• Question 216:

  When deploying Local Web Authentication on a Cisco WLC, you can authenticate users externally via RADIUS. Which two authentication methods are supported by the Cisco WLC to authenticate guest users to a RADIUS server? (Choose two.)

  A. LEAP
  B. CHAP
  C. MD5-CHAP
  D. EAP-FAST
  E. PEAP MS-CHAPv2
  B. CHAP
  C. MD5-CHAP

• Question 217:

  You have deployed a Cisco ISE deployment that controls wireless access. RFC 3576 is allowed for all of the PSNs. Which two events can occur without the PSNs issuing a CoA? (Choose two.)

  A. An endpoint is deleted and removed from the network.
  B. An endpoint is created through the Guest Device Registration flow.
  C. An endpoint is profiled for the first time.
  D. An endpoint is discovered as wireless.
  E. An endpoint is assigned to an endpoint profiling statically, which is associated to a logical profile.
  C. An endpoint is profiled for the first time.
  E. An endpoint is assigned to an endpoint profiling statically, which is associated to a logical profile.

• Question 218:

  Which two option are new feature that are supported by IGMPv3 Compared to IGMPv2 (Choose two)

  A. It adds support for IGMP Leave Message
  B. Routers can now send a group-specific query
  C. It extends IGMP, which allows for an explicit maximum response time field
  D. It supports the link local address 224.0.0.22, which is the destination IP address for membership reports
  E. It adds support for source filtering
  B. Routers can now send a group-specific query
  E. It adds support for source filtering

• Question 219:

  Which two options are new features that are supported by IGMPv3compared to IGMPv2.(Choose two)

  A. It extends IGMP. which allows for an explicit maximum response time field.
  B. It adds support for source filtering.
  C. Router can now send a group-specific query.
  D. It adds support for IGMP Leave Message.
  E. It supports the link local address 224.0.0.22. which is the destination IP address for membership reports.
  B. It adds support for source filtering.
  E. It supports the link local address 224.0.0.22. which is the destination IP address for membership reports.

• Question 220:

  Which two statements about client management frame protection are true? (Choose two.)

  A. CCXv5 client and access points must discard broadcast Class 3 management frames.
  B. Client MFP can replace infrastructure MFP in case only CCXv5 clients are used.
  C. To use client MFP, the client must support CCXv4 and negotiate WPA with TKIP or higher.
  D. Client MFP encrypts Class 3 Unicast management frames using the security mechanisms defined by 802.11i.
  E. The only supported method to obtain the preuser MFP encryption keys is EAP authentication.
  B. Client MFP can replace infrastructure MFP in case only CCXv5 clients are used.
  D. Client MFP encrypts Class 3 Unicast management frames using the security mechanisms defined by 802.11i.