Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 221:

  You have been hired to install new Cisco switches at ACME Corporation. The company has an existing Cisco network comprised of access layer switches that use multiple VLANs and VLAN trunking protocol to distribute the VLANs to the switches throughout the network. Which two methods are best to accomplish your task? (Choose two.)

  A. Configure the VLAN Trunking Protocol pruning on the new switches because they may not need all of the VLANs.
  B. Prior to installation, ensure that all switches are running the same Cisco IOS software version as the VTP server.
  C. Ensure that all the new Cisco switches have their VTP domain name set to the default value of null
  D. Configure one of the new switches as a VTP server to distribute the VLANs appropriately.
  E. Ensure that all switches have the same VLAN Trunking Protocol password and encryption level.
  F. Configure all new switches as VTP clients and relocated switches as VTP server because the already have all the VLANs in their database.
  G. Ensure that all switches are running the same VTP version.
  E. Ensure that all switches have the same VLAN Trunking Protocol password and encryption level.
  G. Ensure that all switches are running the same VTP version.

• Question 222:

  You are the network administrator of a Cisco Autonomous AP deployment. You want to stop a client with MAC address 5057.a89e.b1f7 and IP address 10.0.0.2 from associating to your APs. Which configuration do you use?

  A. access-list 700 deny 5057.a89e.b1f7 0000.0000.0000!dot11 association mac-list 700
  B. access-list 700 permit 5057.a89e.b1f7 0000.0000.0000!dot11 association mac-list 700
  C. ip access-list 25 deny host 10.0.0.2!interface Dot11Radio0ip access-group 25 in!interface Dot11Radio1ip access-group 25 in
  D. ip access-list 25 deny host 10.0.0.2!interface Dot11Radio0ip access-group 25 out!interface Dot11Radio1ip access-group 25 out
  A. access-list 700 deny 5057.a89e.b1f7 0000.0000.0000!dot11 association mac-list 700
  C. ip access-list 25 deny host 10.0.0.2!interface Dot11Radio0ip access-group 25 in!interface Dot11Radio1ip access-group 25 in

• Question 223:

  Which configuration step can be used to prevent or block a wired or wireless client from accessing the management interface on a controller (from the wireless client dynamic interface or VLAN) to ensure that only authorized clients gain access to the management interface?

  A. Configure the AAA policy with a network management username and password.
  B. Configure a preauthentication ACL on the WLC.
  C. Configure a Layer 2 ACL with a firewall at the core switch.
  D. Configure a CPU ACL.
  D. Configure a CPU ACL.

• Question 224:

  Refer to the exhibit.

  

  APs on VLAN 2100 can get IP address but cannotregister to the WLC TheiP address of the WLC management interface is 24.244.4.227 which option is the correct DHCP option 43 configuration.?

  A. f10412f41cd9
  B. f10418f404227
  C. f10818f41cd0a181cf4a01c
  D. f10418f404e3E. f1040a3f0701
  D. f10418f404e3E. f1040a3f0701

• Question 225:

  DRAG DROP

  Prime infrastructure allows you to change an alarm status, drag and drop the status on the left correct description on the right?

  Select and Place:

  

  

• Question 226:

  DRAG DROP

  Drag and drop the AP actions during the process of connecting a lightweight access point to a switch port from the left into the correct order on the right.

  Select and Place:

  

  

• Question 227:

  Drag and drop.

  Drag and drop the events involved in a typical location tracking workflow from the left into the correct order on the right. Not all items are used.

  Select and Place:

  

  

• Question 228:

  You are a wireless network administrator preparing a plan for a HDX deployment. Which feature do you use to minimize co-channel interference?

  A. Load Balancing
  B. RX-SOP
  C. CleanAir
  D. Band Select
  B. RX-SOP

• Question 229:

  Which statement about wireless LAN security in a Cisco Unified Wireless Network VoWLAN deployment is false?

  A. EAP-FAST, if available, is the recommended EAP type for use in VoWLAN deployments.
  B. Although LEAP is considered secure for VoWLAN handsets when correctly deployed, it is recommended that a different EAP method (FAST, PEAP, TLS) is used, if available.
  C. Dynamic WEP mitigates the security weaknesses in static WEP, making it a viable option that can be relied upon to secure a VoWLAN deployment.
  D. When using EAP authentication, the EAP-Request timeout value should be adjusted based only on the advice of the VoWLAN handset vendor.
  E. When using WPA Personal, strong keys should be used to avoid a dictionary attack.
  D. When using EAP authentication, the EAP-Request timeout value should be adjusted based only on the advice of the VoWLAN handset vendor.

• Question 230:

  Which IEEE protocol can help a wireless client device to identify nearby APs that are available as roaming targets?

  A. 802.11h
  B. 802.11ac
  C. 802.11k
  D. 802.11n
  E. 802.11w
  C. 802.11k