Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 251:

  Which two statements about configuring guest access with mobility anchoring are true? (Choose two.)

  A. The dynamic interface linked to the WLAN must exist in the foreign WLC and in the anchor WLC.
  B. The foreign WLC and anchor WLC can be configured in different mobility groups.
  C. The internal guest portal of the foreign WLC must match the configuration of the internal guest portal of the anchor WLC.
  D. The foreign WLC and the anchor WLC must run the same AireOS version.
  E. The WLAN ID of the foreign WLC and the anchor WLC can be different.
  F. The WLAN ID on the anchor WLC must match the WLAN ID on the foreign WLC.
  A. The dynamic interface linked to the WLAN must exist in the foreign WLC and in the anchor WLC.
  E. The WLAN ID of the foreign WLC and the anchor WLC can be different.

• Question 252:

  You have been asked to change your 7925 wireless IP phone scan mode from Auto to Continuous. Which two statements about Continuous scan mode are true? (Choose two.)

  A. The mode is recommended for environments where frequent roams occur or where smaller cells (pico cells) exist.
  B. The phone scans only when on a call or when the signal strength (RSSI) is low.
  C. The phone scans continuously, even when it is not in a call.
  D. The phone scans only when the basic service set is lost.
  E. Idle battery life is increased slightly when using this scan mode because the client does not have to send any association probe requests.
  A. The mode is recommended for environments where frequent roams occur or where smaller cells (pico cells) exist.
  C. The phone scans continuously, even when it is not in a call.

• Question 253:

  DRAG DROP

  Refer to the exhibit.

  

  Drag and drop steps of the 802.1x authentication process on the left to the corresponding number on the right.

  Select and Place:

  

  

• Question 254:

  Two wireless IP phones are never able to call each other when connected to the same autonomous AP. However, they can place calls to other wireless IP phones that are connected to other APs or to wired IP phones. The wireless phones are operating on VLAN 100. Based on this output, which statement about the problem is true?

  

  A. P2P blocking is enabled via the bridge-group 100 block-unknow-source command.
  B. P2P blocking is enabled via the no bridge-group 100 unicast-flooding. command.
  C. P2P blocking is enabled via the bridge-group 100 port-protected. command.
  D. P2P blocking is enabled via the no bridge-group 100 source-learning command.
  E. P2P blocking is enabled via the bridge-group 100 subscriber-loop-control command.
  C. P2P blocking is enabled via the bridge-group 100 port-protected. command.

• Question 255:

  Which statement about configuring the date and time on a wireless LAN controller is true?

  A. As part of their built-in resilience mechanism, Cisco Aironet lightweight access points always connect to the wireless LAN controller independently if the date and time has been set or not.
  B. You can configure an authentication channel between the controller and the NTP server.
  C. When configuring wIPS on the wireless LAN controller, you should not use the Universal Time Zone. All logs and reports must be time-stamped with the localized time to assist with troubleshooting.
  D. To set the wireless LAN controller date and time, only NTP should be used. Manually configuring data and time is not supported.
  B. You can configure an authentication channel between the controller and the NTP server.

• Question 256:

  802.11k and 802.Ilk-enabled client devices send a request for a list of neighbor Aps (a neighbor list) from the APs they are currently associated with What is this 802.11 management frame also known as?

  A. Association packet
  B. Beacon frame
  C. Action frame
  D. Reassociation response.
  C. Action frame

• Question 257:

  Which option is a feature of a Cisco Autonormous AP that prevents over-the-air direct P2P communication, which forces all traffic to hit the first-hop router where security policy is enforced?

  A. Wi-Fi Direct Client Policy
  B. P2P Secure Packet Public
  C. Secure Packet Forwarding
  D. P2P Blocking Action
  C. Secure Packet Forwarding

• Question 258:

  

  Refer to the exhibit. An Apple TV is associated to the wireless network. Wireless users attempt to connect to it, but they report that they cannot discover the Apple TV on their devices. What is most likely the root cause?

  A. The mDNS Origin is not set to wireless.
  B. The "Service ID" must be changed to 1 in order to ensure the highest priority for the traffic.
  C. The mDNS Service Provider is not associated to a profile.
  D. The "Service Provider Name" must not include "airplay" on it.
  C. The mDNS Service Provider is not associated to a profile.

• Question 259:

  Refer to the exhibit.

  

  What is the best way to resolve this issue?

  A. Install a publicity signed wildcard certificate by a well-known CA on the RADIUS server
  B. Disable certificate checks on the client.
  C. Use the certificate authority on the Cisco identity services Engine.
  D. Install a publicly signed server certificate by a well-known CA on the RADIUS server
  A. Install a publicity signed wildcard certificate by a well-known CA on the RADIUS server

• Question 260:

  Refer to the exhibit. APs on VLAN 2100 can get IP addresses but cannot register to the WLC. The IP address of the WLC management interface is 24.244.4.227. What is the correct DHCP option 43 configuration?

  

  A. f10418f404e3E. f1040a3f0701
  B. f10418f41cd9
  C. f10418f404e3
  D. f10418f404227
  A. f10418f404e3E. f1040a3f0701