New 400-351 exam questions from PassLeader 400-351 dumps! Welcome to download the newest PassLeader 400-351 VCE and PDF dumps: http://www.passleader.com/400-351.html (305 Q&As –> 305 + 197 Q&As)
P.S. Free 400-351 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpWTFGcGFzN0JuYkE
QUESTION 76
Which will trigger client exclusion policy?
A. Excessive 802.11 Association Failures — Clients are excluded on the sixth 802.11 association attempt, after five consecutive failures.
B. Excessive 802.1x Authentication Failures — Clients are excluded on the fourth 802.1x authentication attempt, after three consecutive failures.
C. IP Theft or IP Reuse — Clients are excluded if the IP address is already assigned to another device.
D. Pending
Answer: ABC
QUESTION 77
What are the three components that are used within the authentication process on an 802.1x/EAP-enabled WLAN? (Choose three.)
A. wireless web server
B. supplicant
C. authenticator
D. Cisco WCS
E. authentication server
F. key management server
Answer: DEF
QUESTION 78
You are a network administrator at ACME corporation where you have a pair of Cisco 5760 Wireless LAN Controllers deployed for HA AP SSO mode. A failover event occurs and the secondary Cisco 5760 controller moves into the active role. Which three statements about the failover event are true? (Choose three.)
A. Rogue APs and clients are not synced to the standby and are releamed upon switchover.
B. With SSO, wIPS information is already synced with the stanby unit and this information need not be releamed upon switchover.
C. Upon guest anchor controller switchover, mobility tunnels stay active, APs remain connected, clients rejoin at MA or MC, and clients are anchored on the new active controller.
D. Switchover during AP preimage download causes the APs to start image download all over again from the new active controller.
E. The new active controller does not need to releam the shun list from IPS and other MCs, which eliminates the need to redistribute it to the MCs.
F. Netflow records are already exported upon switchover and collection starts resuming in the new active controller.
Answer: ACD
QUESTION 79
Which feature insersection of a Cisco 5760 Wireless LAN Controller with HA AP SSO is not true?
A. Upon guest anchor controller switchover, mobility tunnels stay active, APs remain connected, clients rejoin at MA or MC, and clients are anchored on the new active controller.
B. Roamed clients that have their data path going through the mobility tunnel endpoint “become Local” in case of Layer 2 with sticky anchoring an Layer3 roam.
Layer 2 roamed clients are not affected except when roaming occurs between Cisco Unified Wireless Network and CA controllers.
C. wIPS information is synced to the standby unit.
The standby unit does not have to relarn wIPS information upon switchover.
D. Switchover during AP preimage download caused the APs to start image download all over again from the new active controller.
Answer: C
QUESTION 80
AireOS, which version support a feature?
A. AireOS 7.0
B. AireOS 7.4
C. AireOS 8.0
D. AireOS 8.1
Answer: A
QUESTION 81
Drag and Drop Question
In multiple-controller deployments, if one controller fails, the access points perform these tasks. Drag and drop the tasks on the left into the correct order on the right.
Answer:
Explanation:
In multiple-controller deployments, if one controller fails, the access points perform the following tasks:If the lightweight access point has a primary, secondary, and tertiary controller assigned, it attempts to associate with that controller.If the access point has no primary, secondary, or tertiary controllers assigned or if its primary, secondary, or tertiary controllers are unavailable, it attempts to associate with a master controller.If the access point finds no master controller, it attempts to contact stored mobility group members by the IP address.If the mobility group members are available, and if the lightweight access point has no primary, secondary, and tertiary controllers assigned and there is no master controller active, it attempts to associate with the least-loaded controller to respond to its discovery messages.
QUESTION 82
Which statement about Wired Guest Access is true?
A. The wired guest traffic terminates only on the anchor Cisco WLC.
B. Wired Guest Access is not supported in the Cisco 5760 WLC.
C. The Cisco 5760 WLC supports Wired Guest Access only in conjunction with the converged access switches.
D. The guest traffic can terminate on the foreigh WLC, but egress interface must be defined on the guest SSID.
Answer: A
QUESTION 83
You are working on a deployment that uses two Cisco APs as wireless bridges. One of the bridges is configured as a root bridge and the second bridge is configured as a nonroot bridge. Client A associates to the root bridge and client B associates to the nonroot bridge. Which two statements about this scenario are true? (Choose two.)
A. The default setting of a bridge is nonroot bridge.
B. For two bridges to communicate with each other, one of the bridges must be in root mode and the other bridge must be in nonroot mode.
C. Only one device can connect to the Ethernet port of a nonroot bridge.
D. Two bridges that are in root mode can talk to each other.
E. In point-to-multipoint bridging, WGB is not recommended with the root bridge. WGB must be associated to the root AP in point-to-multipoint bridging setup.
Answer: BE
QUESTION 84
Which statement about deploying web authentication within a Cisco Unified (AireOS controllers) wireless solution is true?
A. When configuring Layer3 security, the controller forwards DNS traffic to and from wireless clients prior to authentication in absence of an explicit deny rule for DNS traffic in the pre-auth ACL.
B. When doing local web authentication, the user must obtain an IP address and must be able to resolve the WLC hostname.
C. When configuring a WLAN for local web authentication you must configure a pre-auth ACL to allow DNS traffic.
D. When configring a WLAN for local web authentication you must use the WLC login page.
Answer: D
QUESTION 85
Which mechanism incorporates the channel capacity into the CAC destermination and gives a much more accurate assessment of the current call-carrying capacity of the AP?
A. reserved roaming bandwidth(%)
B. expedited bandwidth
C. metrics collection
D. admission control
E. load-based AC
F. max RF bandwidth(%)
Answer: E
QUESTION 86
Which three steps are required during the intial configuration of a Cisco Converged Access controller so that the access points can join? (Choose three.)
A. The Cisco 5760 controller that acts as a mobility controller can support up to 10000APs.
B. Ensure that an active license is enabled with the proper AP count.
C. Ensure that the wireless management interface is correctly configured.
D. In a Converged Access deployment, the APs must be on the same VLAN as the wireless management interface.
E. To enable wireless services, the Cisco 3850 switch must run an ipservices or ipbase license.
F. Network connectivity is not necessary because all the APs connect directly to the Converged Access controller.
Answer: BCE
QUESTION 87
Which AireOS release is the first to support new Mobility on the Cisco 2504 WLC?
A. 8.1x
B. 7.6x
C. 7.4x
D. 8.0x
Answer: D
QUESTION 88
Refer to the exhibit. You enabled NAT to make sure that your WLC is publicly reachable. If other NAT parameters are left to default1, which statement is true?
A. The AP WLC discovery fails for APs int local mode using 209.165.200.44
B. The AP WLC discover succeeds for OEAPsjoning the WLC using 192.168.3.44
C. The AP WLC discover succeeds for OEAPsJoning the WLC using 192.168.3.44 or 209 165.200.44
D. The AP WLC discover Fail for APs in local mode using 192.168.3.44
Answer: C
QUESTION 89
Which two statements about local profiling on a Cisco WLC running AireOS are true? (Choose two.)
A. Profiling is performed on IPV4 and IPV6 client.
B. When local profiling is enabled , RADIUS profiling is allowed.
C. Wired clients behind the workgroup bridge are profiled and a policy action is taken.
D. Profiling is performed only on IPV4 clients.
E. Wired clients behind the workgroup bridge are not profiled and no policy action is taken.
Answer: DE
QUESTION 90
Which two impacts dose TSPEC admission control have as it relates to 802.11e clients? (Choose two.)
A. Enforce airtime entitlement for wireless voice applications.
B. Ensure that call quality dose not degrade for existing VoWLAN calls.
C. Deny client access to the WLAN that do not meet the standard.
D. Allow access only for VoWLAN traffic when interference is detected.
Answer: AB
New 400-351 exam questions from PassLeader 400-351 dumps! Welcome to download the newest PassLeader 400-351 VCE and PDF dumps: http://www.passleader.com/400-351.html (305 Q&As –> 305 + 197 Q&As)
P.S. Free 400-351 dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=0B-ob6L_QjGLpWTFGcGFzN0JuYkE
