cisco 400-351 practice test

Your customer has a Cisco Unified Wireless Network running AireOS 8.0 and wants to learn about
the FlexConnect mode that is available on his APs. Which two statements are true? (Choose two.)

• A. A newly connected AP can be booted in FlexConnect mode.
• B. When an AP is changed from Local mode to FlexConnect mode, a reboot is required.
• C. Enhanced FlexConnect mode allows to enable wIPS on FlexConnect APs.
• D. When an AP is changed from Local mode to FlexConnect mode, reboot is not required.
• E. Using CCKM with FlexConnect APs requires the use of FlexConnect Groups.
• F. FlexConnect was previously know as "H-TEEP"

Refer to the exhibit.

You are troubleshooting location accuracy problems on a customer deployment. You have done the
wireless design and you are sure that the As are correctly placed on the Cisco Prime map. Everything
is correctly synchronized between WLC, PI, and MSE but, you are sometimes getting elements
tracked on the wrong floor. After you get this debug output from MSE, which step is next?

• A. Reduce the confidence level on MSE when the last heard value is higher than 150 seconds.
• B. Run a new calibration model and ensure that it is applied on the floor.
• C. Discard RSSI values lower than – 75 dbm.
• D. Check it the AP with MAC address 001c 0f 4c 45 60 is physically located on the floor where the element was wrongly located and if the inter-floor attenuation is weak.

Which two statements about deploying a mesh network by MAPs and RAPs are true on AireOS
8.0?(Choose two.)

• A. The backhaul client access feature cannot be enabled on a RAP that is, a RAP does not allow clients on its 302.11a radio.
• B. The three main types of mesh type under the neighbor information are neighbor, parent, and child. For types default neighbor, default parent, and default child, default is used when the neighbor BGN is not known or different from the current AP BGN if the strict matching BGN feature is disabled.
• C. A MAP/RAP must be authorized by either PSK or EAP before joining a controller in bridge mode
• D. RADIUS and Local authentications are supported with both PSK and EAP. VLAN tags are always forwarded across Mesh links.
• E. VLAN tags are always forwarded across Mesh links.

Which three conditions can trigger a client exclusion policy?(Choose three.)

• A. Excessive 802.11 probe request failures
• B. Excessive 802.lx authorization failures
• C. IP theft or IP reuse
• D. Excessive 802.lx authentication failures
• E. Excessive 802.11 association failures
• F. Excessive 802.11 packet retries

Which two features were added as part of the 802.llh amendment?

• A. Dynamic Frequency Selection and Direct Link Setup.
• B. Dynamic Frequency Selection and Transmit Power control.
• C. Dynamic Frequency Selection and Wireless Performance Prediction.
• D. Dynamic Frequency Selection and Inter-Access Point Protocol.

VLAN Trunking Protocol is a Cisco proprietary protocol that propagates the definition of VLANs over
the local area network. Which two statements are true?(Choose two.)

• A. VTP requires access mode interfaces to propagate.
• B. VTP requires trunk mode interfaces to propagate.
• C. VTP transparent mode forwards VTP packets and can act as a client or a server.
• D. VTP config revision increases base on switch uptime.
• E. When Cisco switches are started from scratch, they are in server mode and their domain is set to null.

Which two statements are true about adding Identity Services Engines 1.3 to Prime Infrastructure
2.2?(Choose two.)

• A. You need to use super user credentials on ISE for PI integration to work.
• B. If you add two ISEs, one should be primary and the other should be standby.
• C. Configuration templates within PI can be used to set up ISE.
• D. A maximum of three ISEs can be added to PI.

Which two statements about VXLAN are true?(Choose two.)

• A. VXLAN overcomes the 802.1Q virtual LAN address space limitation.
• B. VXLAN is an encapsulation method used to create a Layer 3 overlay network
• C. VXLAN uses the Spanning Tree Protocol for loop prevention.
• D. VXLAN is a Cisco proprietary standard.
• E. VXLAN can be used to enforce Layer 2 isolation in a multitenant infrastructure.

Which statement about Wired Guest Access is true?

• A. The guest traffic can terminate on the foreign WLC, but egress interface must be defined on the guest SSID
• B. Wired Guest Access is not supported in the Cisco 5760 WLC
• C. The wired guest traffic terminates only on the anchor Cisco WLC
• D. The Cisco 5760 WLC supports Wired Guest Access only in conjunction with the converged access switches.

You are the network administrator at ACME Corporation and currently troubleshooting a Central
Web Authentication issue where the guest users are not being redirected to the ISE guest login
portal. You have verified that all configuration on the ISE is correct and that the ISE is sending the
redirect URL for the client. Which configuration check can help to resolve the issue?

• A. Verify if DADIUS accounting interim update is enabled on the guest SSID.
• B. Verify if SNMP NAC is enabled on the guest SSID.
• C. Verify if the SSID is configured for VVPA2-AES Layer 2 security.
• D. Verify if AAA override is enabled for the guest SSID.
• E. Verify if the RFC 3567 support is enabled under ISE configuration on the Cisco WLC.
• F. Verify if authentication priority for web-auth is set to RADIUS.