Cisco 400-351 CCIE Wireless Written Exam Online Training
Cisco 400-351 Online Training
The questions for 400-351 were last updated at Oct 23,2025.
- Exam Code: 400-351
- Exam Name: CCIE Wireless Written Exam
- Certification Provider: Cisco
- Latest update: Oct 23,2025
Which two statements about accessing the GUI and CLI of Cisco WLC are true? (Choose two.)
- A . The feature “Management using Dynamic Interfaces” can be configured in CLI only.
- B . The feature “Management using Dynamic Interfaces” can be applied to one of the Dynamic Interfaces only.
- C . The wireless clients can access the Cisco WLC only when the option “Enable Controller Management to be accessible from Wireless Clients” is checked.
- D . Wired clients can have only CLI access with the dynamic interface of the Cisco WLC, while wireless clients have both CLI and GUI access with the dynamic interface when the feature “Management using Dynamic Interfaces” is enabled.
- E . Wireless management access is only possible through the default management WLAN “CiscoMGMT”.
- F . Wireless management access is only possible through the default management WLAN C WLAN ID 1.
Which two statements about local profiling on a Cisco WLC running AireOS are true? (Choose two.)
- A . Profiling is performed on IPv4 and IPv6 clients.
- B . Wired clients behind the workgroup bridge are not profiled and no policy action is taken.
- C . Wired clients behind the workgroup bridge are profiled and a policy action is taken.
- D . Profiling is performed only on IPv4 clients.
- E . When local profiling is enabled, RADIUS profiling is allowed.
When your wireless client device roams from one AP to another on the same network, which IEEE protocol can be used to authenticate the clients faster?
- A . 802.11k also called Predictive Based Roaming.
- B . 802.11k also called Assisted Roaming.
- C . 802.11r also called Predictive Based Roaming.
- D . 802.11r also called Fast BSS Transition.
- E . 802.11k also called Fast BSS Transition.
- F . 802.11r also called Predictive Based Roaming.
Which two configurations are required on the Cisco 5760 WLC to ensure that APs will successfully join the Cisco WLC? (Choose two.)
- A . Enableip dhcp snooping truston the wireless controller port-channel interface.
- B . Activate the appropriate Right-to-Use AP license on the wireless LAN controller.
- C . Ensure that Port-Fast is enabled on each access point switch port.
- D . Ensure accurate configuration of the correct time and the date on the wireless LAN controller.
Refer to the exhibit.
Which statement about this CPU is correct?
- A . A user on the 10.64.0.0/24 network cannot use SSH to access the WLC IP address on 172.21.153.37.
- B . A user on the 10.64.0.0/24 network cannot use Telnet to access the WLC IP address on 172.21.153.37.
- C . A user on the 10.64.0.0/24 network cannot use HTTPS to access the WLC IP address on 172.21.153.37.
- D . No subnets other than 10.64.0.0/24 can manage the WLC.
- E . A user on the 10.64.0.0/24 network can use Telnet to access the WLC IP address on 172.21.153.37.
- F . This CPU ACL is used as a redirection ACL to redirect all traffic, except Telnet to 172.21.153.37.
Which two effects does TSPEC-based admission control have as it relates to WMM clients? (Choose two.)
- A . Allow access only for VoWLAN traffic when interference is detected.
- B . Enforce airtime entitlement for wireless voice applications.
- C . Deny clients access to the WLAN that do not support WMM.
- D . Ensure that call quality does not degrade for existing VoWLAN calls.
- E . Deny clients access to the WLAN is they not comply with the TERP standart.
Which event happens when a wireless client connects to a Cisco 5760 Converged Access Controller with a WLAN configured for AAA override enabled and an invalid VLAN (not configured on the Cisco 5760) is returned as part of RADIUS accept message by the CISCO ISE server?
- A . The client is put in exclusion list by the WLC.
- B . The client is marked as authenticated but does not get an IP address.
- C . The client is marked as associated and DHCP required state.
- D . The client is out in the RUN state and is mapped to the wireless management VLAN.
A Cisco Unified 7925G Wireless IP Phone is operating on the 5 GHz band and transmitting at a power level of 40 mW.
Which configuration must be done on the controller to avoid one-way audio?
- A . Set the maximum power level assignment to 16 dBm.
- B . Set the maximum power level assignment to 26 dBM.
- C . In DCA, enable UNII-I channels only.
- D . In DCA, enable UNII-II channels only.
You are the wireless administrator for ACME corporation. You must configure a Cisco Catalyst 3850 Series Switch to work as mobility agent to allow access point association to this switch.
- A . Access point must be connected to an access port that has the access VLAN configured to be the same as the service port VLAN on the Catalyst 3850 switch.
- B . Access point must be connected to an access port with the access VLAN configured to be any VLAN that has a Layer 3 interface (SVI) on the Catalyst 3850 switch.
- C . Access point must be connected to an access port with the access VLAN configured to be the same as the wireless management VLAN on the Catalyst 3850 switch.
- D . Access point must be connected to an access port that has the access VLAN configured to be the same as the management VLAN for the switch stack.
- E . Access point must be connected to a trunk port with the native VLAN set to 1 in order to join the WLC on the Catalyst 3850 switch.
While troubleshooting a failed central web authentication configuration on Cisco WLC, you discover that the Cisco WLC Policy Manager State is showing RUN for new clients and not CENTRAL_WEB_AUTH.
Which of the below is most likely causing this issue?
- A . The Web Login Page under the Cisco WLC security settings should be set to External (Redirect to external server).
- B . The WLAN NAC State should be set to RADIUS NAC.
- C . The WLAN Layer 2 security should be set to WPA+WPA2.
- D . The WLAN Layer 3 security should be set to Web Policy with Conditional Web Redirect.
Latest 400-351 Dumps Valid Version with 192 Q&As
Latest And Valid Q&A | Instant Download | Once Fail, Full Refund
