Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 231:

  You are working on a deployment that uses two Cisco APs as wireless bridges. One of the bridges is configured as a root bridge and the second bridge is configured as a nonroot bridge. Client A associates to the root bridge and client B associates to the nonroot bridge. Which two statements about this scenario are true? (Choose two)

  A. The default setting of a bridge is nonroot bridge.
  B. For two bridges to communicate with each other, one of the bridges must be in root mode and the other bridge must be in nonroot mode.
  C. Only one device can connect to the Ethernet port of a nonroot bridge.
  D. Two bridges that are in root mode can talk to each other.
  E. In point-to-multipoint bridging, WGB is not recommended with the root bridge. WGB must be associated to the root AP in point-to-multipoint bridging setup.
  A. The default setting of a bridge is nonroot bridge.
  E. In point-to-multipoint bridging, WGB is not recommended with the root bridge. WGB must be associated to the root AP in point-to-multipoint bridging setup.

• Question 232:

  A corporation wants to deploy a Cisco wireless solution with one Cisco 5520 WLC and 200 Cisco 3800 Series APs. 802.1X-based port security is planned for the switch ports where the APs will be connecting.

  Which statement about EAP supplicant support on the Cisco APs is true?

  A. EAP-PEAP is the preferred EAP protocol for AP dot1X authentication, and it is the default method in Cisco APs.
  B. A Local-EAP profile can be used in FlexConnect groups for AP dot1X authentication.
  C. The APs use the CLI logon credentials (if configured), if the dot1X supplicant credentials fail five times.
  D. It is recommended to use the build-in MIC certificate as the 802.1X credential for the APs.
  E. EAP-FAST with anonymous Protected Access Credentials provisioning is supported.
  B. A Local-EAP profile can be used in FlexConnect groups for AP dot1X authentication.

• Question 233:

  Refer to exhibit. The dynamic interfaces shown above are bound to an interface group for a specific WLAN profile in the Cisco Wireless LAN Controller. You notice duplicated multicast streams on the wireless medium for the given WLAN

  profile.

  Which statement is correct?

  

  A. The controller always uses Layer 3 multicast group ID for all Layer 3 multicast traffic sent to the access point. Internet Group Management Protocol snooping should be disabled to avoid duplicate streams.
  B. The controller creates different multicast group IDs for each multicast address and VLAN, and as a result, the upstream router sends one copy for each VLAN. Enable Multicast VLAN to avoid duplicate streams.
  C. Global multicast mode and Internet Group Management Protocol snooping have not been enabled. To avoid duplicate streams, enable both.
  D. Global multicast mode, global IPv6 config, and multicast listener discovery snooping have not been enabled. Enable these to avoid duplicate streams.
  A. The controller always uses Layer 3 multicast group ID for all Layer 3 multicast traffic sent to the access point. Internet Group Management Protocol snooping should be disabled to avoid duplicate streams.

• Question 234:

  VLAN Trunking Protocol is a Cisco proprietary protocol that propagates the definition of VLANs over the local area network. Which two statements are true?(Choose two.)

  A. VTP requires access mode interfaces to propagate.
  B. VTP requires trunk mode interfaces to propagate.
  C. VTP transparent mode forwards VTP packets and can act as a client or a server.
  D. VTP config revision increases base on switch uptime.
  E. When Cisco switches are started from scratch, they are in server mode and their domain is set to null.
  B. VTP requires trunk mode interfaces to propagate.
  E. When Cisco switches are started from scratch, they are in server mode and their domain is set to null.

• Question 235:

  Your customer needs the list of all the guest client that connected to Wi-Fi successfully but have not yet authenticated. The customer decides to create an advanced filter in Cisco Pounder monitor >client and user which two conditions should be included in the filter? (Choose two)

  A. PEM state =WebauthReqD
  B. On Network= Yes
  C. Status =Associated
  D. Type =Lightweight client
  C. Status =Associated
  D. Type =Lightweight client

• Question 236:

  You have an AP group called APGroup-1, which has an RF profile called Profile-A associated to its 802.11a band. Which two steps can be used to modify the data rates of the RF profile? (Choose two.)

  A. Disable the 802.11a radios of the APs in the AP group and then modify the data dates of the RF profile.
  B. Disable the 802.11a band globally on the controller and then modify the data rates on the RF profile.
  C. Remove the RF profile from the AP group, modify the data rates and then apply it back to the AP group.
  D. Disable the 802.11a band globally of the RF group leader for 802.11a and then modify the data rates on the RF profile.
  E. Freeze TPC for the 802.11a band and then change the data rates.
  A. Disable the 802.11a radios of the APs in the AP group and then modify the data dates of the RF profile.
  C. Remove the RF profile from the AP group, modify the data rates and then apply it back to the AP group.

• Question 237:

  Which two statements about the FastLocate feature in CMX are true? (Choose two.)

  A. CMX FastLocate is applicable only to local mode access points and not to FlexConnect mode access points.
  B. For resiliency purposes, when using CMX FastLocate, all devices (APs, WLC, CMX) must be synchronized to different clock sources.
  C. CMX FastLocate is a feature supported only by Wave2 access points.
  D. RSSI from data packets and probe frames, when available, is used for calculating location.
  E. CMX FastLocate technology enables quick location refresh for connected Wi-Fi clients.
  D. RSSI from data packets and probe frames, when available, is used for calculating location.
  E. CMX FastLocate technology enables quick location refresh for connected Wi-Fi clients.

• Question 238:

  A corporation has hired you to understand more about the Fastlane feature on the Cisco wireless LAN controller because the majority of the clients in their network are iOS and Mac OS devices. Which statement do you mark as a correct explanation of this feature, on software version 8.3 or above?

  A. An EDCA profile must be manually set to Voice and Video optimized when the Fastlane feature is enabled on a SSID.
  B. Enabling Fastlane on a SSID automatically creates and applies a new AVC profile, which ensures appropriate QoS marking for well-known applications such as Jabber and WebEx.
  C. Enabling Fastlane on a SSID automatically creates a new EDCA profile named "Fastlane", which applies to the 5 GHz band only.
  D. Enabling Fastlane on a SSID automatically creates a new AVC profile, which ensures appropriate QoS marking for well-known applications such as Lync and WebEx.
  B. Enabling Fastlane on a SSID automatically creates and applies a new AVC profile, which ensures appropriate QoS marking for well-known applications such as Jabber and WebEx.

• Question 239:

  DRAG DROP

  Regarding mesh access points, map the bridge group name characteristics on the left to the maximum BGN length and BGN of an out-of-the-box AP on the right.

  Select and Place:

  

  

• Question 240:

  You are the wireless administrator for ACME corporation. You must configure a Cisco Catalyst 3850 Series Switch to work as mobility agent to allow access point association to this switch.

  A. Access point must be connected to an access port that has the access VLAN configured to be the same as the service port VLAN on the Catalyst 3850 switch.
  B. Access point must be connected to an access port with the access VLAN configured to be any VLAN that has a Layer 3 interface (SVI) on the Catalyst 3850 switch.
  C. Access point must be connected to an access port with the access VLAN configured to be the same as the wireless management VLAN on the Catalyst 3850 switch.
  D. Access point must be connected to an access port that has the access VLAN configured to be the same as the management VLAN for the switch stack.
  E. Access point must be connected to a trunk port with the native VLAN set to 1 in order to join the WLC on the Catalyst 3850 switch.
  E. Access point must be connected to a trunk port with the native VLAN set to 1 in order to join the WLC on the Catalyst 3850 switch.