Virtual 400-351 Exam Questions 2021

NEW QUESTION 1
You are the network administrator and your company has deployed a single Cisco 5500 Series Wireless Controller with 100 Cisco Aironet 3500 Series APs A new IT member is worried that all of these APs are working at a power level 3 on the 5 GHz radio, particularly as this power level setting is
causing issues in your wireless network Which issue will cause this behavior?

• A. The problem has to do with the TPC version in use which has been setup to TPCv1 as this is a high density deployment in this mode there could be higher roaming delays and coverage hole incidents
• B. The WLC is misconfigured because the static power of level 3 has been set for all the APs under TPC settings
• C. Cisco 7925 wireless IP Phones are in use and the DTPC feature is enabled on the 5 GHz radio
• D. The WLC has been recently rebooted which causes the TPC algorithm to set power level 3 on all APs for 90 seconds

Answer: B

NEW QUESTION 2
Which major drawback of configuring machine access restriction on the RADIUS server for a wireless deployment is true?

• A. This scenario is possible only with EAP-Chaining, which is not yet an industry standard.
• B. If the user pits his PC to sleep overnight, the OS sends only a user authentication when the session isresumed and no machine authenticatio
• C. Depending on the time for which the RADIUS server caches theMAR, this can create issues.
• D. It is possible to do machine authentication only when using a Windows machine with theMicrosoft default supplicant.
• E. Regardless of the client and/or protocols being used, at this moment in time, MAR is possible only when using Cisco ISE as the AAA RADIUS serve
• F. No other AAA servers currently support MAR.

Answer: B

NEW QUESTION 3
Which parameter is a functionality of Micro segmentation in the Data Center?

• A. Intemperate transparently with a wide variety of hypervisors
• B. Enhanced security for east-west traffic
• C. Packet filtering for North-South traffic
• D. Inter-operate transparently with a wide variety of Layer 1 to Layer 7 devices

Answer: B

NEW QUESTION 4
Your customer wants to configure LSCs and asks for specific information about which number to configure in the text box right next to the "Number of Attempts" .Which statement is true?

• A. The default number of attempts is 100.
• B. A value of 2 means that if an AP fails to join the Cisco WLC using an LSC, the AP attempts to Join the Cisco WLC using the default certificate
• C. A value of 255 means that if an AP fails to join the Cisco WLC using an LSC, the AP does not attempt to join the Cisco WLC using the default .
• D. A value of 3 means that if a user fails to authenticate, the user is disconnected after three retrie

Answer: B

NEW QUESTION 5
When your wireless client device roams from one AP to another on the same network, which IEEE protocol can be used to authenticate the clients faster?

• A. A.802.11r also called Assisted Roaming
• B. 802.11k also called Assisted Roaming
• C. 802.11r also called Fast BSS Transition
• D. 802.11k also called Predictive Based Roaming
• E. 802.llr also called Predictive Based Roaming
• F. 802.11k also called Fast BSS Transition

Answer: C

NEW QUESTION 6
DRAG DROP
Drag and drop the facts from the left to the technology they describe best on the right.

Answer:

Explanation:

NEW QUESTION 7
Which three statements about enabling the wireless feature on Cisco Catalyst 4500E Supervisor Engine 8-E are true?(Choose three.)

• A. Only the install boot method is supported.
• B. Access points must terminate on the same chassis/SUP to join the wireless controller.
• C. Visual Switching System must be disabled.
• D. Maximum number of access points that can join the wireless controller is 200, and the maximum number of wireless clients that can be supported by wireless controller is 4000.
• E. Bundle and install boot modes are supported.
• F. Virtual Switching System must be enable

Answer: ABC

Explanation:
https://supportforums.cisco.com/document/12515266/sup8e-4500-wireless-installation

http://www.cisco.com/c/en/us/support/docs/switches/catalyst-4500-series-switches/200082-Getting-Started-with-SUP8E-4500-Wireless.html

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/guidec07- 733704.html

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-seriesswitches/data_sheet_c78-728191.html

http://www.cisco.com/c/en/us/products/switches/catalyst-4500-series-switches/index.html

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/guidec07- 733704.html

NEW QUESTION 8
A wireless engineer has completed the configuration of the QoS profiles on the WLC and has assigned them to the WLANs The engineer applies the profiles, tests them, and notices that traffic is blocked for some of the WLANs. Which problem is true?

• A. The QoS profiles have 802 1p tagging disabled and the WLANs that are assigned use tagged interfaces on the controller.
• B. The QoS profiles and the traffic restrictions of the WLANs are different
• C. The QoS profiles have 802 1p tagging configured, and the WLANs that are assigned use untagged interfaces on the controller.
• D. AVC must be enabled for the QoS profiles to work property

Answer: A

NEW QUESTION 9
You have deployed a Cisco ISE deployment that controls wireless access. RFC 3576 is allowed for all of the PSNs. Which two events can occur without the PSNs issuing a CoA? (Choose two)

• A. An endpoint is discovered as wireless
• B. An endpoint is profiled for the first time
• C. An endpoint is created through the Guest Device Registration flow
• D. An endpoint is assigned to an endpoint profiling policy statically which is associated to a logical profile
• E. An endpoint is deleted and removed from the network

Answer: BD

NEW QUESTION 10
You are trying to connect a Cisco wireless phone to your network Based on the device manual. Admission Control must be enabled on the wireless network for the device to connect When you enable Admission Control you get an error message and the operation is aborted What is the root of the problem?

• A. Admission Control is an unsupported feature of Cisco APs unless the client supports CCXv5
• B. You cannot enable Admission Control if the radio is enabled
• C. Admission Control is not supported in all radios Verify that the wireless phone is connecting to the correct radio
• D. The wireless phone is incompatible with the wireless infrastructure

Answer: B

NEW QUESTION 11
Which two options are new features that are supported by IGMPv3compared to IGMPv2.(Choose two)

• A. It extends IGM
• B. which allows for an explicit maximum response time field.
• C. It adds support for source filtering.
• D. Router can now send a group-specific query.
• E. It adds support for IGMP Leave Message.
• F. It supports the link local address 224.0.0.22. which is the destination IP address for membership reports.

Answer: BE

Explanation: Do not understanding difference between IGMPv2 and v3 | LAN, Switching and Routing | Cisco Support Community
https://supportforums.cisco.com/discussion/10948466/do-not-understanding-difference-betweenigmpv2- and-v3
IGMP Version 3 Cisco http://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/12s_igmp.html Feature Overview
Internet Group Management Protocol (IGMP) is a protocol used by IPv4 systems to report IP multicast memberships to neighboring multicast routers.
This feature module introduces support for Version 3 of IGMP. In previous versions of Cisco IOS software only Version 1 and Version 2 were supported. IGMP Version 3 (IGMPv3) adds support for "source filtering," which enables a multicast receiver host to signal to a router which groups it wants to receive multicast traffic from, and from which source(s) this traffic is expected. This membership information enables Cisco IOS software to forward traffic only from those sources from which receivers requested the traffic.
IGMPv3 supports applications that explicitly signal sources from which they want to receive traffic. With IGMPv3, receivers signal membership to a multicast host group in the following two modes:
INCLUDE mode—In this mode, the receiver announces membership to a host group and provides a
list of IP addresses (the INCLUDE list) from which it wants to receive traffic. EXCLUDE mode—In this mode, the receiver announces membership to a host group and provides a list of IP addresses (the EXCLUDE list) from which it does not want to receive traffic. This indicates that the host wants to receive traffic only from other sources whose IP addresses are not listed in the EXCLUDE list. To receive traffic from all sources, like in the case of the Internet Standard Multicast (ISM) service
model, a host expresses EXCLUDE mode membership with an empty EXCLUDE list. IGMPv3 is the industry-designated standard protocol for hosts to signal channel subscriptions in
Source Specific Multicast (SSM). SSM was introduced in Cisco IOS Release 12.1(3)1, however SSM support for IGMPv3 was introduced in 12.1(5)T. For SSM to rely on IGMPv3; IGMPv3 must be available in last hop routers and host operating system network stacks, and be used by the applications running on those hosts.
In SSM deployment cases where IGMPv3 cannot be used because it is not supported by the receiver host or the receiver applications, there are two Cisco-developed transition
solutions that enable the immediate deployment of SSM services: URL Rendezvous Directory (URD) and IGMP Version 3 lite (IGMP v3lite). Both of these features are documented in the Cisco IOS Release 12.0(15)S Source Specific Multicast with IGMPv3, IGMP vSlite, and URD feature module.
IGMP
Version Description IGMPvl
Provides the basic query-response mechanism that allows the multicast
router to determine which multicast groups are active and other processes that enable hosts to join and leave a multicast group. RFC 1112 defines the IGMPvl host extensions for IP multicasting. IGMPv2
Extends IGMP. allowing such capabilities as the IGMP leave process, group-specific queries, and an explicit maximum response time field. IGMPv2 also adds the capability for routers to elect the IGMP querier without dependence on the multicast protocol to perform this task. RFC 2236 defines IGMPv2.
IGMPv3
Provides for source filtering. which enables a multicast receiver host to
signal to a router which groups it wants to receive multicast traffic from, and from which sources this traffic is expected. In addition, IGMPv3 supports the link local address 224.0.0.22. which is the destination IP address for IGMPv3 membership reports; all IGMPv3-capable multicast routers must listen to this address. RFC 3376 defines IGMPv3.

NEW QUESTION 12
Which two statements about 802.11are true? (Choose two}

• A. MIC is appended for robust management frame.
• B. IGTK is used to protect robust broadcast and multicast management frames
• C. Association and disassociation frames are protected.
• D. PKC is used to protect robust unicast management frames .
• E. Association responses are not protected

Answer: BE

NEW QUESTION 13
Which three conditions can trigger a client exclusion policy?(Choose three.)

• A. Excessive 802.11 probe request failures
• B. Excessive 802.lx authorization failures
• C. IP theft or IP reuse
• D. Excessive 802.lx authentication failures
• E. Excessive 802.11 association failures
• F. Excessive 802.11 packet retries

Answer: CDE

Explanation: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/117714-technoteaireoswlc- 00.html

NEW QUESTION 14
DRAG DROP

Answer:

Explanation:

NEW QUESTION 15
You are a wireless network administrator preparing a plan for a HDX deployment. Which feature do you use to minimize co-channel interference'?

• A. CleanAir
• B. Load Balancing
• C. Band Select
• D. RX-SOP

Answer: D

NEW QUESTION 16
Which mechanism incorporates the channel capacity into the CAC destermination and gives a much more accurate assessment of the current call-carrying capacity of the AP?

• A. reserved roaming bandwidth (%)
• B. expedited bandwidth
• C. metrics collection
• D. admission control
• E. load-based AC
• F. max RF bandwidth(%)

Answer: E

NEW QUESTION 17
Why would you enable the RFC 3578 option when adding a new RADIUS authentication server to a WLC?

• A. you want to run both RADIUS and TACACS
• B. to support Disconnect and Change of Authorization
• C. to encrypt communications between the WLC and the RADIUS server
• D. to support RADIUS key wrapping

Answer: B

Explanation: If you are configuring a new RADIUS authentication server, choose Enabled from the Support for RFC 3576 drop-down list to enable RFC 3576, which is an extension to the RADIUS protocol that allows dynamic changes to a user session, or choose Disabled to disable this feature. The default value is Enabled. RFC 3576 includes support for disconnecting users and changing authorizations applicable to a user session and supports disconnect and change-of-authorization (CoA) messages. Disconnect messages cause a user session to be terminated immediately where CoA messages modify session authorization attributes such as data filters.

NEW QUESTION 18
Prime Infrastructure will trigger alarms indicating that the Prime Infrastructure physical or virtual server is low on disk space. As the administrator, Which three actions can you take to increase disk space immediately upon receiving a Major alert ( 60 percent disk usage)? (Choose three.)

• A. Enable cron job on ade for disk clean up using $du -sh.
• B. Change the disk controller RAID.
• C. Conpacting the PI database using the ncs database purge command.
• D. Reduce the storage load on the local disk by setting up and using remote trackup reponitories.
• E. Reduce the length of time you store client association data and related events.
• F. Compacting the PI database using the ncs cleanup comman

Answer: DEF

NEW QUESTION 19
In a VWLAN deployment, what autonomous ISO command should be used to ensure that VWLAN performance is not adversely impacted by an unexpected channel change resulting from a DFS event triggered by a nearby airport radar system?

• A. ap(config-if)#DFs band 1block
• B. ap(config-if)#DFs band 23 block
• C. ap(config-if)#DFs band 123 block
• D. ap(config-if)#DFs band 13 block
• E. ap(config-if)#DFs band 2 block

Answer: B