File Info
| Exam | CCIE Wireless Written Exam |
| Number | 400-351 |
| File Name | CCIE Wireless Written Exam.examlabs.400-351.2019-10-09.1e.159q.vcex |
| Size | 4.46 Mb |
| Posted | October 09, 2019 |
| Downloads | 18 |
| Download | CCIE Wireless Written Exam.examlabs.400-351.2019-10-09.1e.159q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which AireOS release is the first to support New Mobility on the Cisco 2504 WLC?
- A: 8.1.x
- B: 7.6.x
- C: 7.4.x
- D: 8.0.x
Correct Answer: B
Please refer to this link:http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_010010110.html
Question 2
VLAN Trunking Protocol is a Cisco protocol that propagates the definition of VLANs over the local area network. Which two statements are true? (Choose two.)
- A: When Cisco switches are started from scratch, they are in server mode and their domain is set to null.
- B: VTP transparent mode forwards VTP packets and can act as a client or a server.
- C: VTP requires trunk mode interfaces to propagate.
- D: VTP config revision increases based on switch uptime.
- E: VTP requires access mode interfaces to propagate.
Correct Answer: AC
When a new switch is added to the network, by default it is configured with no VTP domain name or password, but in VTP server mode. If no VTP Domain Name has been configured, it assumes the one from the first VTP packet it receives. Since a new switch has a VTP configuration revision of 0, it will accept any revision number as newer and overwrite its VLAN information if the VTP passwords match.
Reference:https://en.wikipedia.org/wiki/VLAN_Trunking_Protocol
Reference:https://en.wikipedia.org/wiki/VLAN_Trunking_Protocol
Question 3
Refer to the exhibit, which is a configuration snippet of a Cisco 5760 controller code IOS XE 3.6.3. Which statement about wlan 11 is true?
Refer to the exhibit, which is a configuration snippet of a Cisco 5760 controller code IOS XE 3.6.3. Which statement about wlan 11 is true?
- A: This configuration is for external WebAuth with an external Radius server.
- B: This configuration is for WebAuth with local authentication.
- C: This configuration is for WebAuth with an external RADIUS server.
- D: This configuration is for custom WebAuth with local authentication.
- E: This configuration is for custom WebAuth with an external RADIUS server.
Correct Answer: D
Parameter-MapHere is the configuration for the Parameter-Map. This section provides insight on the how to configure the Virtual IP address on the WLC and how to set the parameter type, which helps to specify the redirect URL, Login Page, Logout page, and Failure page. You must make sure that the flash has these files.
parameter-map type webauth globalvirtual-ip ipv4 1.1.1.1parameter-map type webauth customtype webauthredirect on-success http://www.cisco.combanner text ^C CC global ip for redirect ^C custom-page login device flash:webauth_login.html custom-page success device flash:webauth_success.html custom-page failure device flash:webauth_failure.html custom-page login expired device flash:webauth_expired.html
Wireless LAN (WLAN) ConfigurationHere is the configuration for WLAN. The WLAN is configured for Layer 3 security. This configuration maps the authentication list to Local_webauth and ensures that the authentication is handled by the local net users. This calls the AAA configuration that is in the initial step.
wlan webauth 1 webauthclient vlan Vlanxno security wpano security wpa akm dot1xno security wpa wpa2no security wpa wpa2 ciphers aessecurity web-authsecurity web-auth authentication-list local_webauthsecurity web-auth parameter-map customsession-timeout 1800no shutdown
Reference:http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117728-configure-wlc-00.html
parameter-map type webauth globalvirtual-ip ipv4 1.1.1.1parameter-map type webauth customtype webauthredirect on-success http://www.cisco.combanner text ^C CC global ip for redirect ^C custom-page login device flash:webauth_login.html custom-page success device flash:webauth_success.html custom-page failure device flash:webauth_failure.html custom-page login expired device flash:webauth_expired.html
Wireless LAN (WLAN) ConfigurationHere is the configuration for WLAN. The WLAN is configured for Layer 3 security. This configuration maps the authentication list to Local_webauth and ensures that the authentication is handled by the local net users. This calls the AAA configuration that is in the initial step.
wlan webauth 1 webauthclient vlan Vlanxno security wpano security wpa akm dot1xno security wpa wpa2no security wpa wpa2 ciphers aessecurity web-authsecurity web-auth authentication-list local_webauthsecurity web-auth parameter-map customsession-timeout 1800no shutdown
Reference:http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117728-configure-wlc-00.html
Question 4
Which three conditions can trigger a client exclusion policy? (Choose three.)
- A: excessive 802.11 association failures
- B: excessive 802.1x authentication failures
- C: IP theft or IP reuse
- D: excessive 802.11 probe request failures
- E: excessive 802.1x authorization failures
- F: excessive 802.11 packet retries
Correct Answer: ABC
The Cisco WLC will exclude clients when specific conditions are met:
Excessive 802.11 Association Failures after five consecutive failures.
Excessive 802.11 Authentication Failures after five consecutive failures.
802.1X Authentication Failures after three consecutive failures.
IP Theft or IP Reuse if the IP address, being obtained by the client, is already assigned to another device.
Excessive Web AuthenticationFailures after three consecutive failures.
Reference:https://www.packet6.com/should-you-disable-cisco-wlc-client-exclusion-policies-hint-nope/
Excessive 802.11 Association Failures after five consecutive failures.
Excessive 802.11 Authentication Failures after five consecutive failures.
802.1X Authentication Failures after three consecutive failures.
IP Theft or IP Reuse if the IP address, being obtained by the client, is already assigned to another device.
Excessive Web AuthenticationFailures after three consecutive failures.
Reference:https://www.packet6.com/should-you-disable-cisco-wlc-client-exclusion-policies-hint-nope/
Question 5
Which statement is true when setting up switch ports for APs?
- A: Only Aps in FlexConnect mode are susceptible to round-trip latency problems (between the access point and the controller).
- B: Aps in FlexConnect local switching must always connect to an access switch port.
- C: With PortFast, there is always a risk of loops because local mode Aps bridge traffic directly between VLANs.
- D: For APs in local mode, or FlexConnect mode doing only central switched WLANs, it is recommended to configure the switch port with PortFast.
Correct Answer: D
Question 6
Which AP allows you to change the regulatory domain of a Cisco access point in the field?
- A: AIR-SAP16021-Z-K9
- B: AIR-AP1852E-S-K9
- C: AIR-CAP3502I-N-K9
- D: AIR-AP2702I-UXK9
Correct Answer: D
Question 7
When aggressive load-balancing is enabled on the WLAN, by default how many clients must connect before the load-balancing kicks in?
- A: 10
- B: 3
- C: 12
- D: 5
Correct Answer: D
Question 8
Which two statements about verifying the switch port configurations of an access point and a wireless LAN controller are true? (Choose two.)
- A: If a guest anchor WLC is deployed, the guest client VLAN must be permitted on the switch trunk port of the anchor WLC.
- B: In central switching, client VLANs must be permitted on the switch trunk port where the AP is connected.
- C: If a guest anchor WLC is deployed, the guest client VLAN must be permitted on the switch trunk port of the foreign WLC.
- D: In local switching, client VLANs must be permitted on the switch trunk port where the AP is connected.
- E: In local switching, client VLANs must be permitted on the switch trunk port where the WLC is connected.
Correct Answer: CE
Question 9
Which WLAN organization and regulation promotes and tests for WLAN interoperability?
- A: FCC
- B: ETSI
- C: ITU-R
- D: Wi-Fi Alliance
Correct Answer: A
Question 10
Which statement about how wireless access points use Cisco Discovery Protocol and PoE related to power negotiation is true?
- A: Without Cisco Discovery Protocol, if a powered device is connected but the class is 0 (default) or cannot be identified, the switch must reserve the minimum per-port PoE for the powered device.
- B: When a Cisco access point powers on, LLDP sends a message that tells the switch how much power the AP actually needs. The switch CPU adjusts the power allocation for the port and adjusts the power budget.
- C: Cisco PoE switches using Cisco Discovery Protocol can recognize Cisco powered devices such as IP phones and wireless access points. The actual power requirement can be advertised by the powered device, and the unused class power is returned to the switch power budget.
- D: To use Cisco Discovery Protocol for powered device discovery, enable it on the switch and on the PoE ports. (Cisco Discovery Protocol is not enabled by default.)
Correct Answer: A
