[Free] Download New Updated (October 2016) Cisco 400-351 Real Exam 31-40

Ensurepass

QUESTION 31

Which two statement about AP local authentication by FlexConnect AP in standalone mode are true? (Choose two)

 

A.

Only LEAP,EAP F AST,PEAP and EAP-TLS authentication are supported

B.

Only the vendor certificate authority (CA) certificate has to be downloaded to the Cisco wireless LAN controller for EAP-TLS authentication

C.

Cisco wireless LAN controller must generate a certificate signing request by itself for submitting to a certificate authority for signing.

D.

A flexconnect group must be created so that the cisco wireless LAN Controller can push the certificate to the flexconnect AP in the Flexconnect group.

 

Correct Answer: AD

 

 

 

 

QUESTION 32

Which two statements about 802.11are true? (Choose two)

 

A.

MIC is appended for robust management frame.

B.

IGTK is used to protect robust broadcast and multicast management frames

C.

Association and disassociation frames are protected.

D.

PKC is used to protect robust unicast management frames .

E.

Association responses are not protected

 

Correct Answer: BE

 

 

QUESTION 33

Which three options are valid AP modes for lightweight APS in the WLC 7.0.116 release? (Choose three.)

 

A.

SE-Connect

B.

WPS

C.

RAM

D.

OEAP

E.

Rogue Detector

F.

Sniffer

 

Correct Answer: AEF

Explanation:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0MR1/configuration/guide/wlc_cg70MR1.pdf

 

 

QUESTION 34

Refer to the exhibit. After the AP mode is changed from local mode to bridge mode the AP cannot register the WLC considering the debug output into the exhibit. Which description of the issue is true?

 

clip_image002

 

A.

DTLS is not supported in bridge mode

B.

The AP priority exceeds the number of joining APs

C.

The AP MAC address is not added in the MAC filter list of the WLC

D.

The date and time on the WLC and AP do not match

E.

The AP does not have a valid certificate

F.

The WLC does not have the image for the AP

 

Correct Answer: C

 

 

QUESTION 35

What are the three components that are used within the authentication process on an 802.1x/EAP- enabled WLAN? (Choose three.)

 

A.

wireless web server

B.

supplicant

C.

authenticator

D.

Cisco WCS

E.

authentication server

F.

key management server

 

Correct Answer: DEF

 

 

QUESTION 36

Refer to the exhibit. You enabled NAT to make sure that your WLC is publicly reachable. If other NAT pa
rameters are left to default1 which statement is true?

 

clip_image004

 

A.

The AP WLC discovery fails for APs int local mode using 209.165.200.44

B.

The AP WLC discover succeeds for OEAPsjoning the WLC using 192.168.3.44

C.

The AP WLC discover succeeds for OEAPsJoning the WLC using 192.168.3.44 or 209.165.200.44

D.

The AP WLC discover Fail for APs in local mode using 192.168.3.44

 

Correct Answer: C

QUESTION 37

Refer to the exhibit. A wireless user has roamed from an AP connected to MA-1 to AP connected to MA-3 the traffic flow for the use
r between roam is shown. Which option shows the traffic flow for the user after roam, considering default sticky anchoring is enabled on the WLAN?

 

clip_image006

 

A.

MA-3>Distribution switch>core>mc>Distribution switch>MA-1

B.

MA-3>Distribution switch>MA-1>Distribution switch>core

C.

MA-3>Distribution switch>MA-2>Distribution switch>core

D.

MA-3>Distribution switch >MA-2>MA-1>Distribution switch>core

 

Correct Answer: A

 

 

QUESTION 38

Which mechanism incorporates the channel capacity into the CAC determination. And gives a much more accurate assessment of the current Call-carrying capacity of the AP ?

 

 

Correct Answer: D

QUESTION 39

Which two statement are true about adding identity services engines 1.3 to prime infrastructure 2.2? (Choose two)

 

A.

Expedited bandwidth

B.

Admission control

C.

Reserved roaming bandwidth(%)

D.

Load-based AC

E.

Max RF bandwidth(%)

F.

Metrics collection

A.

You need to use super user credential on ISE for PI integration to work.

B.

A maximum of three ISEs can be added to Pl.

C.

)lf you add two ISEs one should be primary and the other should be standby.

D.

configuration templates within PIcan be used to set up ISE.

 

Correct Answer: AC

 

 

QUESTION 40

You are working on a deployment that uses two Cisco APs as wireless bridges. One of the bridges is configured as a root bridge and the second bridge is configured as a nonroot bridge. Client A associates to the root bridge and client B associates to the nonroot bridge. Which two statements about this scenario are true? (Choose two)

 

A.

The default setting of a bridge is nonroot bridge.

B.

For two bridges to communicate with each other, one of the bridges must be in root mode and the other bridge must be in nonroot mode.

C.

Only one device can connect to the Ethernet port of a nonroot bridge.

D.

Two bridges that are in root mode can talk to each other.

E.

In point-to-multipoint bridging, WGB is not recommended with the root bridge. WGB must be associated to the root AP in point-to-multipoint bridging setup.

 

Correct Answer: AE

 

Free VCE & PDF File for Cisco 400-351 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …