400-351 Premium Bundle

400-351 Premium Bundle

CCIE Wireless Written Exam Certification Exam

4.5 
(32625 ratings)
0 QuestionsPractice Tests
0 PDFPrint version
November 21, 2024Last update

Cisco 400-351 Free Practice Questions

Q1. Your customer is thinking of migrating the exiting IEEE 802.11b/g network to an IEEE 802.11ac network which two statement are true ?(choose two) 

A. Backward compatibility need to be considered for the existing legacy IEEE 802.11b/g mobile devices. 

B. Channel option are limited on the radio band UNII 3 due to DFS 

C. Ensure that the WLANs have WMM enabled and support open or WPA2/AES encryption 1n order to reach IEEE 802.11ac speeds even on IEEE. 802.11ac clients 

D. Fewer APs have to be proposed because the IEEE 802.llac network provides a faster speed and larger converge area compared with the IEEE 802.11b/g network. 

Answer: A, C 

Q2. In a VWLAN deployment, what autonomous ISO command should be used to ensure that VWLAN performance is not adversely impacted by an unexpected channel change resulting from a DFS event triggered by a nearby airport radar system? 

A. ap(config-if)#DFs band 1block 

B. ap(config-if)#DFs band 23 block 

C. ap(config-if)#DFs band 123 block 

D. ap(config-if)#DFs band 13 block 

E. ap(config-if)#DFs band 2 block 

Answer:

Q3. An autonomous AP is configured with the infrastructure –client command. What is this command used for? 

A. to allow more than 20 client associations 

B. to send reliable multicast traffic 

C. to enable multiple VLANs to cross the bridge link 

D. to allow only infrastructure device associations 

Answer:

Q4. Which two statement about AP local authentication by FlexConnect AP in standalone mode are true?(choose two) 

A. Only LEAP,EAP F AST,PEAP and EAP-TLS authentication are supported 

B. Only the vendor certificate authority (CA) certificate has to be downloaded to the Cisco wireless LAN controller for EAP-TLS authentication 

C. Cisco wireless LAN controller must generate a certificate signing request by itself for submitting to a certificate authority for signing. 

D. A flexconnect group must be created so that the cisco wireless LAN Controller can push the certificate to the flexconnect AP in the Flexconnect group. 

Answer: A, D 

Q5. What two statements are true with regards to the UNII brands? (Choose two) 

A. All channels in the UNII-2 band require DFS and TPC 

B. The UNII-3 band provides channel that ate spaced 20 MHz apart 

C. The channels in UNII-3 band require DFS and TPC 

D. The UNII-1band provides 4 non-overlapping channels 

E. Different channels within the UNII-1band have different restrictions including transmit power antenna gain antenna style usage 

Answer: A, D 

Q6. which two types of interface events are common for cleanAir?(choose two) 

A. Microwave interference 

B. Co-channel interference 

C. Spontaneous interference 

D. Persistent mterference 

Answer: C, D 

Q7. Which two statements about accessing the GUIand CLI of Cisco WlC are true? (choose two) 

A. The feature " Management using dynamic interface" can be configures in CLI only. 

B. The wireless client can access the Cisco WLC only when the option "Enable controller wireless Management to be accessible from Wireless clients is checked". 

C. Wired clients can have only eli access with the dynamic interface of the Cisco WLC while wireless clients have both CLI and GUI access with the dynamic interface when the feature management using dynamic interface is enabled . 

D. The feature management using dynamic interface can be applied to one of the dynamic interface only. 

Answer: B, D 

Q8. 802.11k and 802.11k-enabled client devices send a request for a list of neighbor APs (a neighbor list) from the APs they are currently associated with. What is this 802.11management frame also known as? 

A. association response 

B. association packet 

C. beacon frame 

D. action packet 

Answer:

Q9. Exhibit 

Which AAA attribute is not used by the Cisco WLC running AireOS 8.0 ? 

A. Tunnel-Pnvate-Group-10 

B. Tunnel-Type 

C. Airespace-QOS-Level 

D. DACL 

Answer:

Q10. While troubleshooting a failed central web authentication configuration on cisco WLC you discover that the Cisco WLC policy manager state is showing RUN For new client and not CENTRAL_WEB_AUTH what is most likely the issue.? 

A. The WLAN Layer 2 security should be sent to WPA+WPA2 

B. The WLAN NAC state should be set to RADIUS NAC 

C. The web login page under the cisco WLC security should be set to external (redirect to external server) 

D. The WLAN layer 3 security should be set to web page policy with condition web redirect. 

Answer:

Q11. Which option in the cisco identity service engine allows for authorization based on Active Directory user and domain computer login? 

A. Machine access restriction 

B. Active directory group 

C. Active directory attributes 

D. Identity source sequences 

Answer:

Q12. You are working on a deployment that uses two Cisco APs as wireless bridges. One of the bridges is configured as a root bridge and the second bridge is configured as a nonroot bridge. Client A associates to the root bridge and client B associates to the nonroot bridge. Which two statements about this scenario are true? (Choose two) 

A. The default setting of a bridge is nonroot bridge. 

B. For two bridges to communicate with each other, one of the bridges must be in root mode and the other bridge must be in nonroot mode. 

C. Only one device can connect to the Ethernet port of a nonroot bridge. 

D. Two bridges that are in root mode can talk to each other. 

E. In point-to-multipoint bridging, WGB is not recommended with the root bridge. WGB must be associated to the root AP in point-to-multipoint bridging setup. 

Answer: A, E 

Q13. Your customer wants to configure LSCs and asks for specific information about which number to configure in the text box right next to the "Number of Attempts" 

.Which statement is true? 

A. The default number of attempts is 100. 

B. A value of 2 means that if an AP fails to join the Cisco WLC using an LSC, the AP attempts to Join the Cisco WLC using the default certificate 

C. A value of 255 means that if an AP fails to join the Cisco WLC using an LSC, the AP does not attempt to join the Cisco WLC using the default . 

D. A value of 3 means that if a user fails to authenticate, the user is disconnected after three retries. 

Answer:

Q14. Your customer has high availability Clint SSO configure using a pair of Cisco 5508 WlCs running 8.0 code. The primary unit failed over and the secondary unit is now active. Which two statement are true. (Choose two) 

A. Both controller RMIcan be in different subnets. 

B. Only the clients that are in the run state are maintained during failover 

C. Clients that are in transition such as roaming are dissociated 

D. New mobility is supported 

Answer: B, C 

Q15. Your customer is having wireless VoIP problems. When the Cisco 7925 phones roam from APtlo AP2, the voice drops out and comes back. The phones are set up for PEAP/WPA2-AES with CCKM to an external RADIUS server .The APs and WLAN are setup in FlexConnect mode. Which statement explains the issue? 

A. PEAP with WPA2-AES is not supported with Cisco Centralized Key Management, use EAP-FAST. 

B. The APs have not been added to the FlexConnectgroup . 

C. PEAP with WPA2-AES is not supported with Cisco Centralized Key Management, use LEAP. 

D. The APs have been added to the FlexConnectgroup . 

Answer:

Q16. Why would you enable the RFC 3578 option when adding a new RADIUS authentication server to a WLC? 

A. you want to run both RADIUS and TACACS 

B. to support Disconnect and Change of Authorization 

C. to encrypt communications between the WLC and the RADIUS server 

D. to support RADIUS key wrapping 

Answer:

Explanation: 

If you are configuring a new RADIUS authentication server, choose Enabled from the Support for RFC 3576 drop-down list to enable RFC 3576, which is an extension to the RADIUS protocol that allows dynamic changes to a user session, or choose Disabled to disable this feature. The default value is Enabled. RFC 3576 includes support for disconnecting users and changing authorizations applicable to a user session and supports disconnect and change-of-authorization (CoA) messages. Disconnect messages cause a user session to be terminated immediately where CoA messages modify session authorization attributes such as data filters. 

Q17. Which two statements are true based upon the output in the exhibit? (Choose two.) 

A. Operation will be effective only if the video profile on the WLC is mapped to the 802.1p protocol with a tagged value of 5. 

B. It is recommended to configure IP multicast on the WLC in multicast-multicast mode. 

C. CAC must be enabled to avoid channel oversubscription and guarantee the configured media bandwidth. 

D. In case of a violation after an RRC re-evaluation, the stream is demoted to the best- effort class. 

Answer: B, ? 

START 400-351 EXAM