Cisco 400-351 Online Practice Questions and Exam Preparation

Cisco 400-351 Online Questions & Answers

• Question 411:

  Which statement about the location tracking methods supported on Cisco CMX 10.3 when used in a Cisco Unified WLAN network is true?

  A. Fast locate technology does not work for APs working in FlexConnect mode.
  B. Angle of arrival technology works with hyperlocation module and a hyperlocation antennas.
  C. Angle of arrival is independent of antenna types and works with all 802.11ac wave 2 access points.
  D. Fast locate technology takes advantage of angle of arrival technology and RSSI-based location tracking.
  D. Fast locate technology takes advantage of angle of arrival technology and RSSI-based location tracking.

• Question 412:

  Refer to the exhibit.

  

  You are troubleshooting a wireless network because the customer reports that they are not able to get the web login page in a wireless guest WLAN. You open the WLC GUI and inside the Layer 3 security policies you find the configuration shown in the exhibit. Which option is the most likely root cause of the problem?

  A. No RADIUS server is configured for the backend authentication.
  B. The WLC is not configured for secure web redirection.
  C. The SSID has the option Override Global Config enabled, but with the wrong "Web Auth type". The Web Auth type must be internal.
  D. No Pre-Auth ACL is defined or assigned, however there must be a Pre-Auth ACL that allows DNS and DHCP traffic on the guest subnet.
  B. The WLC is not configured for secure web redirection.

• Question 413:

  Your customer needs a list of all the guest clients that connected to Wi-Fi successfully but have not yet authenticated. The customer decides to create an advanced filter in Cisco PI, under Monitor > Clients and Users. Which two conditions must be included in the filter? (Choose two.)

  A. Authentication Type = Web Auth
  B. On Network = Yes
  C. PEM State = WebAuth ReqD
  D. Type = Lightweight client
  E. Status = Associated
  C. PEM State = WebAuth ReqD
  E. Status = Associated

• Question 414:

  Which two options are correct according to debug output presented in the following exhibit ? (Choose two.) Exhibit:

  

  A. The wireless client "hangs" in probes (does not proceed with 802.11 authentication and association). It is likely that the "encryption" or "key-management" advertised in the probe response does not match.
  B. Since the AP receives a probe request from the wireless client, the Access Point Functions state for the machine changes from "Idle" to "Probe."
  C. The wireless client uses a static IP address, so "0.0.0.0 START (0)" can be found in the logs.
  D. The wireless client has been successfully authenticated.Reauthentication is set to occur on an extremely aggressive schedule (every five seconds).
  A. The wireless client "hangs" in probes (does not proceed with 802.11 authentication and association). It is likely that the "encryption" or "key-management" advertised in the probe response does not match.
  B. Since the AP receives a probe request from the wireless client, the Access Point Functions state for the machine changes from "Idle" to "Probe."

• Question 415:

  Your customer plans to deploy a location-aware WLAN in a campus.which statements about the planning considera tion for location-aware WLAN are true ?

  (Choose two)

  A. Cisco PI allow as APS that are defined equipped with third-party antennas participate in client tag or rogue on demand location tracking
  B. Perimeter APs should complement APs located w1thin floor intenor areas m add1 t1on APs should be place m each of the four corners of the floor and at any other corner that are encountered along the floor perimeters.
  C. Onsite calibration is require otherwise location tracking for clients cannot be performed
  D. At least one AP are resident in each quadrant that surrounds the pomt-in-QUESTION NO:
  E. At least one AP that resides in each of at least three of the surrounding quadrant IS located within 70feet(-21.3meters) of the point-in- QUESTION NO:
  F. active RFID tags transmit directly to the APs and require 802.11authentication and require 802.11 authentication and association to pass data traffic to the realtime locating.
  C. Onsite calibration is require otherwise location tracking for clients cannot be performed
  E. At least one AP that resides in each of at least three of the surrounding quadrant IS located within 70feet(-21.3meters) of the point-in- QUESTION NO:

• Question 416:

  When configuring an autonomous access point, which configuration broadcasts two SSIIDs?

  A. dot11 ssiddata1vlan 10authentication openauthentication key-management wpa version 1wpa-psk asci cisco123guset-modeend!dot11 ssiddata2vlan 11authentication openauthentication key-management wpa version 2wpa-psk asci Cisco12345guset-modeend
  B. dot11 ssiddata1vlan 10authentication openauthentication key-management wpa version 1wpa-psk asci cisco123mbssid guset-modeend!dot11 ssiddata2vlan 11authentication openauthentication key-management wpa version 2wpa-psk asci Cisco12345mbssid guset-modeend
  C. dot11 ssiddata1vlan 10authentication openauthentication key-management wpa version 1wpa-psk asci cisco123end!dot11 ssiddata2vlan 11authentication openauthentication key-management wpa version 2wpa-psk asci Cisco12345end
  D. dot11 ssiddata1vlan 10authentication openauthentication key-management wpa version 1wpa-psk asci cisco123mbssidend!dot11 ssiddata2vlan 11authentication openauthentication key-management wpa version 2wpa-psk asci Cisco12345mbssidend
  E. mbssid!dot11 ssiddata1vlan 10authentication openauthentication key-management wpa version 1wpa-psk asci cisco123end!dot11 ssiddata2vlan 11authentication openauthentication key-management wpa version 2wpa-psk asci Cisco12345guset-modeend
  B. dot11 ssiddata1vlan 10authentication openauthentication key-management wpa version 1wpa-psk asci cisco123mbssid guset-modeend!dot11 ssiddata2vlan 11authentication openauthentication key-management wpa version 2wpa-psk asci Cisco12345mbssid guset-modeend

• Question 417:

  You are the network administrator and your company has deployed a single Cisco 5500 Series Wireless Controller with 100 Cisco Aironet 3500 Series APs A new IT member is worried that all of these APs are working at a power level 3 on the 5 GHz radio, particularly as this power level setting is causing issues in your wireless network Which issue will cause this behavior?

  A. The problem has to do with the TPC version in use which has been setup to TPCv1 as this is a high density deployment in this mode there could be higher roaming delays and coverage hole incidents
  B. The WLC is misconfigured because the static power of level 3 has been set for all the APs under TPC settings
  C. Cisco 7925 wireless IP Phones are in use and the DTPC feature is enabled on the 5 GHz radio
  D. The WLC has been recently rebooted which causes the TPC algorithm to set power level 3 on all APs for 90 seconds
  B. The WLC is misconfigured because the static power of level 3 has been set for all the APs under TPC settings

• Question 418:

  DRAG DROP

  When a client associates to an H-REAP access point, the access point sends all authentication messages to the controller and either switches the client data packets locally(locally switched) or sends them to the controller(centrally switched), depending on the WLAN configuration. With respect to client authentication and data packes, the WLAN can be in any one of the following states, depending on the configuration and state of controller connectivity. Map the states on the left to the correct description on the right.

  Select and Place:

  

  

• Question 419:

  Which three common network transport ingredients for hybrid and multicloud networking are true? (Choose three.)

  A. encryption
  B. management
  C. encapsulation
  D. routing
  E. tunneling
  F. switching
  A. encryption
  C. encapsulation
  E. tunneling

• Question 420:

  Which two statements about verifying the switch port configurations of an access point and a wireless LAN controller are true? (Choose two.)

  A. If a guest anchor WLC is deployed, the guest client VLAN must be permitted on the switch trunk port of the anchor WLC.
  B. In central switching, client VLANs must be permitted on the switch trunk port where the AP is connected.
  C. If a guest anchor WLC is deployed, the guest client VLAN must be permitted on the switch trunk port of the foreign WLC.
  D. In local switching, client VLANs must be permitted on the switch trunk port where the AP is connected.
  E. In local switching, client VLANs must be permitted on the switch trunk port where the WLC is connected.
  C. If a guest anchor WLC is deployed, the guest client VLAN must be permitted on the switch trunk port of the foreign WLC.
  E. In local switching, client VLANs must be permitted on the switch trunk port where the WLC is connected.