File Info
| Exam | CCIE Wireless Written Exam |
| Number | 400-351 |
| File Name | CCIE Wireless Written Exam.lead2pass.400-351.2019-02-07.1e.83q.vcex |
| Size | 4.15 Mb |
| Posted | February 07, 2019 |
| Downloaded | 3 |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Refer to the exhibit. You have been asked to troubleshoot why VTP is not distributing new VLANs to a VTP client switch. Which option is the most likely root cause of this VTP problem?
Refer to the exhibit. You have been asked to troubleshoot why VTP is not distributing new VLANs to a VTP client switch. Which option is the most likely root cause of this VTP problem?
- A: The VTP password is incorrect on the client switch.
- B: The client switch is set to transparent mode, which ignores VLAN configuration updates from VTP servers.
- C: The VTP encryption level does not match on the client switch.
- D: The VTP password encryption level is not set on the client switch.
- E: The VTP is not set to level 15 on the client switch.
Correct Answer: A
This log message does usually indicate a password or vtp domain name issue (case sensitive and watch for spaces)
Question 2
Refer to the exhibit. It belongs to a Cisco IOS AP with just one radio. This portion of configuration refers to a multiple SSID/VLAN configuration. Which statement is correct?
Refer to the exhibit. It belongs to a Cisco IOS AP with just one radio. This portion of configuration refers to a multiple SSID/VLAN configuration. Which statement is correct?
- A: The SSID “EAP” will allow clients to connect to it using any EAP authentication method such as EAP-TLS.
- B: The AP must have subinterfaces 80, 81, and 82 configured; on the Radio 0 and Ethernet interfaces.
- C: “mbssid guest-mode” is used to allow broadcast of multiple SSIDs on the radio interface. No other “mbssid” commands are needed to achieve this functionality.
- D: The configuration does not allow for non-corporate clients to connect to any SSID. Guest traffic, therefore, will not be allowed.
Correct Answer: C
Question 3
Which AireOS release is the first to support New Mobility on the Cisco 2504 WLC?
- A: 8.1.x
- B: 7.6.x
- C: 7.4.x
- D: 8.0.x
Correct Answer: B
Please refer to this link:http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_010010110.html
Question 4
Which three types of ACLs are supported by the Cisco 5760 WLC? (Choose three.)
- A: Router ACLs.
- B: VLAN ACLs (VLAN maps).
- C: Port ACLs.
- D: Switch port ACLs.
- E: AP Radio ACL.
- F: Router port ACLs.
Correct Answer: ABC
Question 5
Refer to the exhibit, which is a configuration snippet of a Cisco 5760 controller code IOS XE 3.6.3. Which statement about wlan 11 is true?
Refer to the exhibit, which is a configuration snippet of a Cisco 5760 controller code IOS XE 3.6.3. Which statement about wlan 11 is true?
- A: This configuration is for external WebAuth with an external Radius server.
- B: This configuration is for WebAuth with local authentication.
- C: This configuration is for WebAuth with an external RADIUS server.
- D: This configuration is for custom WebAuth with local authentication.
- E: This configuration is for custom WebAuth with an external RADIUS server.
Correct Answer: D
Parameter-MapHere is the configuration for the Parameter-Map. This section provides insight on the how to configure the Virtual IP address on the WLC and how to set the parameter type, which helps to specify the redirect URL, Login Page, Logout page, and Failure page. You must make sure that the flash has these files.
parameter-map type webauth globalvirtual-ip ipv4 1.1.1.1parameter-map type webauth customtype webauthredirect on-success http://www.cisco.combanner text ^C CC global ip for redirect ^C custom-page login device flash:webauth_login.html custom-page success device flash:webauth_success.html custom-page failure device flash:webauth_failure.html custom-page login expired device flash:webauth_expired.html
Wireless LAN (WLAN) ConfigurationHere is the configuration for WLAN. The WLAN is configured for Layer 3 security. This configuration maps the authentication list to Local_webauth and ensures that the authentication is handled by the local net users. This calls the AAA configuration that is in the initial step.
wlan webauth 1 webauthclient vlan Vlanxno security wpano security wpa akm dot1xno security wpa wpa2no security wpa wpa2 ciphers aessecurity web-authsecurity web-auth authentication-list local_webauthsecurity web-auth parameter-map customsession-timeout 1800no shutdown
Reference:http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117728-configure-wlc-00.html
parameter-map type webauth globalvirtual-ip ipv4 1.1.1.1parameter-map type webauth customtype webauthredirect on-success http://www.cisco.combanner text ^C CC global ip for redirect ^C custom-page login device flash:webauth_login.html custom-page success device flash:webauth_success.html custom-page failure device flash:webauth_failure.html custom-page login expired device flash:webauth_expired.html
Wireless LAN (WLAN) ConfigurationHere is the configuration for WLAN. The WLAN is configured for Layer 3 security. This configuration maps the authentication list to Local_webauth and ensures that the authentication is handled by the local net users. This calls the AAA configuration that is in the initial step.
wlan webauth 1 webauthclient vlan Vlanxno security wpano security wpa akm dot1xno security wpa wpa2no security wpa wpa2 ciphers aessecurity web-authsecurity web-auth authentication-list local_webauthsecurity web-auth parameter-map customsession-timeout 1800no shutdown
Reference:http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117728-configure-wlc-00.html
Question 6
Which two statements about accessing the GUI and CLI of Cisco WLC are true? (Choose two.)
- A: The feature “Management using Dynamic Interfaces” can be configured in CLI only.
- B: The feature “Management using Dynamic Interfaces” can be applied to one of the Dynamic Interfaces only.
- C: The wireless clients can access the Cisco WLC only when the option “Enable Controller Management to be accessible from Wireless Clients” is checked.
- D: Wired clients can have only CLI access with the dynamic interface of the Cisco WLC, while wireless clients have both CLI and GUI access with the dynamic interface when the feature “Management using Dynamic Interfaces” is enabled.
- E: Wireless management access is only possible through the default management WLAN “CiscoMGMT”.
- F: Wireless management access is only possible through the default management WLAN – WLAN ID 1.
Correct Answer: BC
Question 7
Which two statements about local profiling on a Cisco WLC running AireOS are true? (Choose two.)
- A: Profiling is performed on IPv4 and IPv6 clients.
- B: Wired clients behind the workgroup bridge are not profiled and no policy action is taken.
- C: Wired clients behind the workgroup bridge are profiled and a policy action is taken.
- D: Profiling is performed only on IPv4 clients.
- E: When local profiling is enabled, RADIUS profiling is allowed.
Correct Answer: BD
Question 8
Which two effects does TSPEC-based admission control have as it relates to WMM clients? (Choose two.)
- A: Allow access only for VoWLAN traffic when interference is detected.
- B: Enforce airtime entitlement for wireless voice applications.
- C: Deny clients access to the WLAN that do not support WMM.
- D: Ensure that call quality does not degrade for existing VoWLAN calls.
- E: Deny clients access to the WLAN is they not comply with the TERP standart.
Correct Answer: BD
Question 9
A Cisco Unified 7925G Wireless IP Phone is operating on the 5 GHz band and transmitting at a power level of 40 mW. Which configuration must be done on the controller to avoid one-way audio?
- A: Set the maximum power level assignment to 16 dBm.
- B: Set the maximum power level assignment to 26 dBM.
- C: In DCA, enable UNII-I channels only.
- D: In DCA, enable UNII-II channels only.
Correct Answer: A
One-Way Audio During a Connected Call
Use the following list to identify possible causes for the problem:
* Check the access point to see that the transmit power setting matches the transmit power setting on the phone. One-way audio is common when the access point power setting is greater (100mW) than that of the phone (20mW).
Cisco Unified Wireless IP Phone 7925G Firmware supports dynamic transmit power control (DTPC). The phone uses the transmit power that the access point advertises upon association.
Note With DTCP, if Client Transmit Power is set in the access point, the phone automatically uses the same client power setting. If the access point is set for the maximum setting (Max), the access point uses the Transmit Power setting on the phone.
* Check that the access point is enabled for ARP caching. When the Cisco Unified Wireless IP Phone 7925G is in power save mode or scanning, the access point can respond to the wireless IP phone only when ARP caching is enabled.
* Check your gateway and IP routing for voice problems.
* Check if a firewall or NAT is in the path of the RTP packets. If so, you can use Cisco IOS and PIXNAT to modify the connections so that two-way audio is possible.
* Check that the Data Rate setting for the phone and the access point are the same. These settings should match or the phone should be set for Auto.
* Check the phone hardware to be sure the speaker is functioning properly.
* Check the volume settings in the Phone Settings menu.
Reference:http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7925g/7_0/english/administration/guide/7925trb.html#wp1106778
Use the following list to identify possible causes for the problem:
* Check the access point to see that the transmit power setting matches the transmit power setting on the phone. One-way audio is common when the access point power setting is greater (100mW) than that of the phone (20mW).
Cisco Unified Wireless IP Phone 7925G Firmware supports dynamic transmit power control (DTPC). The phone uses the transmit power that the access point advertises upon association.
Note With DTCP, if Client Transmit Power is set in the access point, the phone automatically uses the same client power setting. If the access point is set for the maximum setting (Max), the access point uses the Transmit Power setting on the phone.
* Check that the access point is enabled for ARP caching. When the Cisco Unified Wireless IP Phone 7925G is in power save mode or scanning, the access point can respond to the wireless IP phone only when ARP caching is enabled.
* Check your gateway and IP routing for voice problems.
* Check if a firewall or NAT is in the path of the RTP packets. If so, you can use Cisco IOS and PIXNAT to modify the connections so that two-way audio is possible.
* Check that the Data Rate setting for the phone and the access point are the same. These settings should match or the phone should be set for Auto.
* Check the phone hardware to be sure the speaker is functioning properly.
* Check the volume settings in the Phone Settings menu.
Reference:http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7925g/7_0/english/administration/guide/7925trb.html#wp1106778
Question 10
FlexConnect APs have already been deployed in a branch office for local switching. Currently the WLAN in the large audition is proposed to change to a high-density design and thus some low data rates are proposed to be disabled while keeping the data rates in other areas under the same Cisco WLC. Which two configuration settings must be modified in the Cisco WLC to achieve this configuration? (Choose two.)
- A: Fape Profile
- B: FlexConnect Groups
- C: AP Groups
- D: RF Profiles
- E: Mobility Groups
Correct Answer: CD
