Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 351:

  Which statement is true about using fast-secure roaming 802.11r and Cisco Centralized Key Management in a hybrid VoWLAN deployment that has legacy Cisco 7925 and newer Cisco 8821 wireless IP phones, using 802.1X PEAP security?

  A. Only the FSR method can be configured per WLAN, either 802.11r FT or Cisco CKM. The Cisco 7925 and the Cisco 8821 phones support both of these FSR standards
  B. You can have only Cisco CKM and not FT 802.1X enabled on the WLAN. In this scenario, the Cisco 7925 and the Cisco 8821 uses Cisco CKM
  C. You can have only FT 802.1X and not Cisco CKM enabled on the WLAN. The Cisco 8821 uses FT 802.1X and the Cisco 7925 resorts to regular reauthentication
  D. You can have Cisco CKM and FT 802.1X enabled on the WLAN. The Cisco 7925 uses Cisco CKM, and the Cisco 8821 uses FT 802.1X
  D. You can have Cisco CKM and FT 802.1X enabled on the WLAN. The Cisco 7925 uses Cisco CKM, and the Cisco 8821 uses FT 802.1X

• Question 352:

  Refer to the exhibit.

  

  Which two statements are true based upon the output in the exhibit? (Choose two.)

  A. Operation will be effective only if the video profile on the WLC is mapped to the 802.1p protocol with a tagged value of 5.
  B. It is recommended to configure IP multicast on the WLC in multicast-multicast mode.
  C. CAC must be enabled to avoid channel oversubscription and guarantee the configured media bandwidth.
  D. In case of a violation after an RRC re-evaluation, the stream is demoted to the best- effort class.
  B. It is recommended to configure IP multicast on the WLC in multicast-multicast mode.

• Question 353:

  Refer to the exhibit. Which two statements are true? (Choose two.)

  

  A. After the switch is configured for 802.1X authentication, it does not allow any traffic other than 802.1X traffic to pass through the port until the device connected to the port authenticates successfully.
  B. On AireOS controllers, you can configure the 802.1X authentication between a Cisco Aironet access point and a Cisco switch. The access point acts as the 802.1X supplicant and is authenticated by the switch against a RADIUS server that uses PEAP with MSCHAPv2.
  C. An access point can be authenticated either before it joins a WLC or after it has joined a WLC, in which case you configure 802.1X on the switch after the LAP joins the WLC.
  D. This AP is using the default login credentials of "cisco/cisco".
  E. After these credentials are saved, they are retained across WLC and AP reboots, and cannot be changed anymore.
  D. This AP is using the default login credentials of "cisco/cisco".
  E. After these credentials are saved, they are retained across WLC and AP reboots, and cannot be changed anymore.

• Question 354:

  You are installing Converged Access controllers that run Cisco IOS-XE and you are ready to implement QoS. From the below, choose all the possible QoS target levels that would apply to downstream traffic (toward the client)?

  A. Client, SSID, Radio, Port
  B. Client, SSID, Radio
  C. Client, Radio
  D. Client, SSID
  A. Client, SSID, Radio, Port

• Question 355:

  You are the network administrator for ACME corporation. Your organization has deployed a single Cisco 5500 Series Wireless Controller with 100 Cisco Aironet 3500 Series Aps. A new IT member is worried that most of these Aps are working at a power Ievel3 on the 5GHz radio specially. As this power level setting is causing issues in your wireless network. Which option describes the likely cause of this behavior?

  A. The WLC has been recently rebooted, which causes the TPC algorithm to set power level 3 on all APs for 90 seconds.
  B. The controller TPC algorithm seems to have a problem. It might have been set to work in TPCv2 mode instead of TPCvl.
  C. The WLC is misconfigured because the static power of level 3 has been set for all the APs under TPC settings.
  D. Cisco 7925 wireless IP Phones are in use and the DTPC feature is enabled on the 5 GHz radio.
  D. Cisco 7925 wireless IP Phones are in use and the DTPC feature is enabled on the 5 GHz radio.

• Question 356:

  In a Cisco Mobility Express deployment, the master AP experiences a power outage. Which option lists the priority order for electing the new master AP?

  A. 1. most capable access point 2. user-defined master 3. least client load 4. lowest MAC address
  B. 1. user-defined master 2. most capable access point 3. least client load 4. lowest MAC address
  C. 1. user-defined master 2. most capable access point 3. lowest MAC address 4. least client load
  D. 1. most capable access point 2. least client load 3. lowest MAC access 4. user-defined master
  B. 1. user-defined master 2. most capable access point 3. least client load 4. lowest MAC address

• Question 357:

  DRAG DROP

  Drag and drop the radio frequency characteristic from the left onto its correct definition on the right.

  Select and Place:

  

  

• Question 358:

  Which two effects does TSPEC-based admission control have as it relates to WMM clients? (Choose two)

  A. Deny clients access to the WLAN that do not support WMM.
  B. Allow access only for VoWLAN traffic when interference is detected.
  C. Enforce airtime entitlement for wireless voice applications.
  D. Ensure that call quality does not degrade for existing VoWLAN calls.
  E. Deny clients access to the WLAN if then do not comply with the TERP standard.
  C. Enforce airtime entitlement for wireless voice applications.
  D. Ensure that call quality does not degrade for existing VoWLAN calls.

• Question 359:

  You are the wireless administrator for ACME corporation. You must configure a Cisco Catalyst 3850 Series Switch to work as mobility agent to allow access point association to this switch. Which statement about this scenario is true?

  A. Access points must be connected to an access port that has the access VLAN configured to be the same as the service port VLAN on the Catalyst 3850 switch. Access points must be connected to a trunk port with the native VLAN set to 1 in order to join the WLC on the Catalyst 3850 switch.
  B. Access points must be connected to an access port with the access VLAN configured to the same as the wireless management VLAN on the Catalyst 3850 switch.
  C. Access points must be connected to an access port that has the access VLAN configured to be the same as the management VLAN for the switch stack.
  D. Access points must be connected to an access port with the access VLAN configured to be any VLAN that has a Layer 3 interface (SVI) on the Catalyst 3850 switch.
  C. Access points must be connected to an access port that has the access VLAN configured to be the same as the management VLAN for the switch stack.

• Question 360:

  

  Refer to the exhibit. Which statement about this CPU ACL is correct?

  A. This CPU ACL is used as a redirection aCLto redirect all traffic except Telnet to 172.21.153.37.
  B. A user on the 10.64.0.0/24 network can use Telnet to access the WLC IP address on 172.21.153.37.
  C. A user on the 10.64.0.0/24 network cannot use Telnet to access the WLC IP address on 172.21.153.37.
  D. A user on the 10.64.0.0/24 network cannot use HTTPS to 172.21.153.37.
  E. No subnets other than 10.64.0.0/24 can manage the WLC.
  C. A user on the 10.64.0.0/24 network cannot use Telnet to access the WLC IP address on 172.21.153.37.