Breathing 400-351 Braindumps 2021

NEW QUESTION 1
Which two advanced WLAN options are required when deploying central web authentication with Cisco ISE? (Choose two.)

• A. P2P Blocking Action set to Drop.
• B. NAC State RADIUS NAC
• C. NAC State SNMPNAC.
• D. DHCP Add
• E. Assignment disabled.
• F. Allow AAA override enable

Answer: BE

Explanation: From

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-webauth- 00.html

NEW QUESTION 2
Refer to the exhibit.

An Apple TV is associated to the wireless network. Wireless users attempt to connect to it, but they report that they cannot discover the Apple TV on their devices. What is most likely the root cause?

• A. The mDNS Origin is not set to wireless.
• B. The "Service ID" must be changed to 1 in order to ensure the highest priority for the traffic.
• C. The mDNS Service Provider is not associated to a profile.
• D. The "Service Provider Name" must not include "airplay" on i

Answer: C

Explanation: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/ BYOD_Design_Guide/BYOD_Bonjour.html

NEW QUESTION 3
You have a Cisco ISE deployment that controls wireless access. Which two actions cause the ISE policy service to issue a CoA? (Choose two.)

• A. An endpoint is assigned to a new policy statically
• B. An endpoint is created through the Guest Device Registration flow
• C. An endpoint is profiled for the first time.
• D. An endpoint is disconnected from the network
• E. Packet-of-Disconnect CoA (Terminate Session) is issued when a wireless endpoint is detecte

Answer: AC

NEW QUESTION 4
DRAG DROP

Answer:

Explanation:

NEW QUESTION 5
The IT department has completed the installation and configuration of the wireless network in their campus. They have a tot of access points and

• A. controllers to support the huge volume of Wi-Fi devices They have enabled load balancing but they cannot see this function work Which root of the problem is true?
• B. Access points must be on the same controller to load balance wireless clients
• C. Band steering is disabled so load balancing cannot work properly
• D. Load balancing is a client decision and some of the client devices may not support this feature
• E. Controllers must have the same virtual interface IP address to load balance wireless clients

Answer: B

NEW QUESTION 6
Refer to the exhibit.

You enabled NAT to make sure that your WLC is publicly reachable . if other NAT parameters are left to default1 which statement is true. ?

• A. The AP WLC discovery fails for APs int local mode using 209.165.200.44
• B. The AP WLC discover succeeds for OEAPsjoning the WLC using 192.168.3.44
• C. The AP WLC discover succeeds for OEAPsJoning the WLC using 192.168.3.44 or 209 165.200.44
• D. The AP WLC discover Fail for APs in local mode using 192.168.3.44

Answer: C

Explanation: Section: 2.0 Network Infrastructure

NEW QUESTION 7
Which description of how SKC roaming operates is true?

• A. All APs share the same PMK.
• B. PMKID can be implemented locally by autonomous-independent APs as long as a centralized device is used to manage the cached keys.
• C. A client must perform full authentication only on the first AP.
• D. A client must perform full authentication per each new AP.

Answer: B

NEW QUESTION 8
If a guest anchor controller is used outside the firewall. Which firewall ports must you open for guest access including SNMP and mobility failover features to work in a Cisco Unified Wireless Network?

• A. UDP 16666. IP protocol 90. UDP 162 163
• B. UDP 16667. IP protocol 97. UDP 500 501
• C. UDP 16666. IP protocol 97. UDP 161 162
• D. UDP 12223. IP protocol 97. UDP 161 162
• E. UDP 12222. IP protocol 90. UDP 161 162

Answer: C

Explanation: http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/configurationguide/b_cg80/b_cg80_chapter_010011.html

NEW QUESTION 9
You are installing CA controllers that run Cisco ISO-XE and you are ready to implement QoS. Which QoS target level apply to downstream traffic (toward the client)?

• A. Client SSID
• B. Client SSID radio
• C. Client SSID Radio port
• D. Client radio

Answer: C

NEW QUESTION 10
Which statement about ACLs used on a Cisco WLC is true?

• A. A WLAN ACL will override an interface access-list.
• B. An interface ACL will override a WLAN ACL.
• C. A WLAN ACL will get applied first followed by an interface ACL.
• D. An interface ACL will get applied first followed by a WLAN AC

Answer: A

NEW QUESTION 11
Which protocol allows for IP mobility in-between Data Centers?

• A. LISP
• B. FABRIC PATH
• C. XLAN
• D. OTV

Answer: A

NEW QUESTION 12
Refer to the exhibit.

You enabled NAT to make sure that your WLC is publicly reachable If other NAT parameters are left to default which statement is true?

• A. The AP WLC discovery fails for APs in local mode using 209.165.200.44
• B. The AP WLC discovery succeeds for OEAPs joining the WLC using 192.168.3.44.
• C. The AP WLC discovery fails for APs in local mode using 192.168.3.44.
• D. The AP WLC discovery succeeds for OEAPs joining the WLC using 192.168.3.44 or 209.165.200.44.

Answer: A

NEW QUESTION 13
Which two AP join process are supported by the cisco 5760 WLC ?(choose Two)

• A. Layer 2 CAPWAP discovery
• B. Remotely stored controller IP address discovery
• C. DNS discovery
• D. Layer 3 CAPWAP discovery

Answer: CD

NEW QUESTION 14
Harry is a network engineer for a company, he is now upgrading a large autonomous WLAN deployment to LWAPP operation. He has successfully imported a X.509 self-signed certificate into the WLC. But, when he tries to add additional self-signed certificates, the WLC GUI reports a "Failed to Add entry" error.
Which command can diagnose the root cause of this problem?

• A. Show wps summary
• B. Show database summary
• C. Show exlusionlist
• D. Show sysinfo

Answer: B

NEW QUESTION 15
You notice error messages that say that the broadcast'multicast queue on your Cisco 5508 WLC is full You have several gateways present in the client subnet and this subnet is IPv6-enabled No multicast application is being used You want to fix this problem without reducing the amount of features on your network Which action can help mitigate this problem?

• A. Enable RA throttling on the WLC
• B. Disable broadcast on the WLC
• C. Disable multicast on the WLC
• D. Enable mDNS snooping on the WLC

Answer: A

NEW QUESTION 16
Which AireOS release is the first to support New Mobility on the Cisco 2504 WLC?

• A. 8.0x
• B. 8.1x
• C. 7.6x
• D. 7.4

Answer: A

Explanation: http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html http://www.cisco.com/c/en/us/support/docs/wireless/2500-series-wireless-controllers/113034- 2500-deploy-guide-00.html

NEW QUESTION 17
You are getting the following error message. Which reason for this issue true?

%DOT11-4-CANT_ASSOC Interface Dot 11 Radio0. Cannot associate NO Aironet Extension IE.

• A. “dot11 extension ” is missing under the interface Dot11Radio 0 interface.
• B. When repeater mode is used, unicast-flooding must be enabled to allow Aironet IE communications.
• C. The parent AP MAC address has not been defined.
• D. Repeater mode only works between Cisco access poin

Answer: A

Explanation:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/12-2_11_JA/configuration/guide/b12211sc/s11rep.html

NEW QUESTION 18
DRAG DROP
Drag and drop the RRM function on the left to the entity that performs the function on the right

Answer:

Explanation:

NEW QUESTION 19
In a converged access deployment, which two statements about mobility agents are true? (Choose two.)

• A. It maintains a client database of locally served clients.
• B. It manages mobility-related configuration.
• C. It handles RF functions.
• D. It is the first level in the converged access hierarchy.
• E. It is a mandatory element in the converged access desig

Answer: AD

Explanation: From:
CT5760 Controller Deployment Guide - Mobility Architecture [Cisco 5700 Series Wireless LAN Controllers] – Cisco http://www.cisco.com/c/en/us/td/docs/wireless/technology/5760_deploy/CT5760_Controller_Depl oyment_Guide/Mobility_Architecture.html
Mobility Agent
A mobility agent manages AP connectivity, CAPWAP tunnel terminations from APs and builds a database of client stations (endpoints) that are served locally as well as roamed from an Anchor WLC. Mobility agent can be either a Catalyst 3850 or a CT5760 mobility controller with an internal mobility agent running on it.
Mobility Controller:
A mobility controller provides mobility management tasks including inter-SPG roaming, RRM, and guest access. Mobility roaming, where a wireless client moves from one physical location to another without losing connectivity and services at any time, can be managed by a single mobility controller if roaming is limited to a mobility sub-domain. Roaming beyond a mobility sub-domain can be managed by multiple mobility controllers in a mobility group. The mobility controller is responsible for caching the Pairwise Master Key (PMK) of all clients on all the mobility controllers, enabling fast
roaming of the clients within its sub-domain and mobility group. All the mobility agents in the subdomain form CAPVVAP mobility tunnels to the mobility controller and report local and roamed client
states to the mobility controller. The mobility controller builds a database of client stations across all the mobility agents.
Mobility Oracle
Mobility oracle further enhances mobility scalability and performance by coordinating roaming activities among multiple mobility groups, which removes the need for N2 communications between mobility controllers in different mobility groups to improve efficiency and performance.
Mobility Sub-domain
Multiple SPGs can be grouped together and collectively managed as a mobility sub-domain. One mobility controller is required for each mobility sub-domain.
Switch Peer Group
The Converged Access deployment defines an SPG as a logical group of mobility agents within one mobility controller (or mobility sub-domain). The main advantage of configuring SPGs is to constrain the roaming traffic to switches that form the SPG. When the mobility agents are configured in one SPG on the mobility controller, the software automatically forms full mesh CAPWAP tunnels between the mobility agent switches. These CAPWAP tunnels can be formed in a multi-layer network design (where the mobility agent switches are L2 adjacent on a VLAN spanned across) or a routed access design (where the mobility agent switches are L3 adjacent).
The SPGs should be designed as a group of mobility agent switches to where the users frequently roam.