Cisco 400-351 CCIE Wireless Written Exam Online Training

Question #31

You have received a new Cisco 5760 Controller and have gone through the initial startup wizard. You are now trying to add APs to the controller, but these are not joining.

Which three checks should you do next? (Choose three.)

A . Check that the correct time is set on the controller.
B . Check that the controller has enough AP licenses.
C . Check that the controller has enough AP licenses.
D . Check that option 53 has been set in the DHCP scope.
E . Check that the radios are not in a shutdown state.
F . Check the country code of the controller. The APs do not join the controller if the country code does not match.

Reveal Solution Hide Solution

Question #32

Refer to the exhibit.

Which three statements about this extract of the configuration of an autonomous AP are true? (Choose three.)

A . The administrator cannot access the AP via the web GUI using a secure connection.
B . This configuration is of a non-root bridge access point.
C . The RADIUS server IP address is misconfigured. It points to the AP itself, which creates a loop for the RADIUS packets.
D . The SSID is not visible for clients probing the wireless medium.
E . This configuration allows bridging of VLANs 3 and 4.
F . The native VLAN must be VLAN 1 to match the native VLAN configured on the switch to which the AP is connecting.

Reveal Solution Hide Solution

Question #33

Refer to the exhibit.

Which feature (and associated show output) is seen here?

A . Controller>show client detail 00:01:02:03:04:05
B . Controller> show client wmm 802.11 a 00:01:02:03:04:05 all
C . Controller> show app stats 802.11 a 00:01:02:03:04:05
D . Controller> show client tsm 802.11 a 00:01:02:03:04:05 all

Reveal Solution Hide Solution

Question #34

When connecting an autonomous access point in workgroup bridge mode to a WLAN configured on a Cisco WLC, which two options are true? (Choose two.)

A . The WGB could serve wireless clients only in the other radio not connecting to the WLAN.
B . The WGB creates a network extension for the wired clients.
C . The traffic of the wired client behind the WGB can be tunneled only to the Cisco WLC on the VLAN configured for the dynamic interface of the WLAN.
D . The traffic of the wired client tagged on a specific VLAN behind the WGB can be tunneled to the same VLAN behind the Cisco WLC.
E . The WGB mode allows to connect only one wired client behind the WGB to the WLAN.
F . The WGB cannot serve wireless clients.

Reveal Solution Hide Solution

Question #35

On a Cisco autonomous AP, the maximum number of attempts to send a packet (packet retries) is set to 32 by default.

Which statement about the result when the AP has tried to send a packet for that number of attempts and no response is received from the client is true?

A . The access point drops the packet.
B . The access point resets the radio interface.
C . The access point disassociates the client.
D . The client MAC address is excluded for 60 seconds.

Reveal Solution Hide Solution

Question #36

You are the network administrator of a Cisco Autonomous AP deployment. You want to stop a client with MAC address 5057.a89e.b1f7 and IP address 10.0.0.2 from associating to your APs.

Which configuration do you use?

A . access-list 700 deny 5057.a89e.b1f7 0000.0000.0000!dot11 association mac-list 700
B . access-list 700 permit 5057.a89e.b1f7 0000.0000.0000!dot11 association mac-list 700
C . ip access-list 25 deny host 10.0.0.2!interface Dot11Radio0ip access-group 25 in!interface Dot11Radio1ip access-group 25 in
D . ip access-list 25 deny host 10.0.0.2!interface Dot11Radio0ip access-group 25 out!interface Dot11Radio1ip access-group 25 out

Reveal Solution Hide Solution

Correct Answer: AC
AC

Explanation:

Filters Using MAC-Based ACLs

You can use MAC address-based filters in order to filter client devices based on the hard coded MAC address. When a client is denied access through a MAC-based filter, the client cannot associate with the AP. MAC address filters allow or disallow the forwarding of unicast and multicast packets either sent from or addressed to specific MAC addresses.

This is the command syntax to create a MAC address-based ACL on the AP:

Note: This command has been wrapped to two lines because of spatial considerations.

access-listaccess-list-number{permit | deny}

48-bit-hardware-address 48-bit-hardware-address-mask

In Cisco IOS Software Release 12.3(7)JA, MAC address ACLs can use numbers in the range of 700 to 799 as the ACL number. They can also use numbers in the expanded range of 1100 to 1199.

This example illustrates how to configure a MAC-based filter through the CLI, in order to filter the client with a MAC address of0040.96a5.b5d4:

– Log in to the AP through the CLI.

Use the console port or Telnet in order to access the ACL through the Ethernet interface or the wireless interface.

– Enter global configuration mode on the AP CLI:

– AP#configure terminal

– Create a MAC address ACL 700.

This ACL does not allow the client 0040.96a5.b5d4 to associate with the AP.

access-list 700 deny 0040.96a5.b5d4 0000.0000.0000

!— This ACL denies all traffic to and from !— the client with MAC address 0040.96a5.b5d4.

– Issue this command in order to apply this MAC-based ACL to the radio interface:

dot11 association mac-list 700

Filters Using Standard Access ListsYou can use standard ACLs to allow or disallow the entry of client devices into the WLAN network based on the IP address of the client. Standard ACLs compare the source address of the IP packets to the addresses that are configured in the ACL in order to control traffic. This type of ACL can be referred to as a source IP address-based ACL.

The command syntax format of a standard ACL isaccess-listaccess-list-number{permit | deny} {hostip-address|source-ip source-wildcard| any}.

In Cisco IOS® Software Release 12.3(7)JA, the ACL number can be any number from 1 to 99. Standard ACLs can also use the extended range of 1300 to 1999. These additional numbers are expanded IP ACLs.

When a standard ACL is configured to deny access to a client, the client still associates to the AP. However, there is no data communication between the AP and the client.

This example shows a standard ACL that is configured to filter the client IP address 10.0.0.2 from the wireless interface (radio0 interface). The IP address of the AP is 10.0.0.1.

After this is done, the client with IP address 10.0.0.2 cannot send or receive data through the WLAN network even though the client is associated to the AP.

Complete these steps in order to create a standard ACL through the CLI:

Log in to the AP through the CLI.

Use the console port or use Telnet in order to access the ACL through the Ethernet interface or the wireless interface.

– Enter global configuration mode on the AP:

– AP#configure terminal

– Issue these commands in order to create the standard ACL:

– AP<config>#access-list 25 deny host 10.0.0.2

–

– !— Create a standard ACL 25 to deny access to the !— client with IP address 10.0.0.2.

–

– AP<config>#access-list 25 permit any

–

– !— Allow all other hosts to access the network.

–

– Issue these commands in order to apply this ACL to the radio interface:

– AP<config>#interface Dot11Radio 0

AP<config-if>#ip access-group 25 in

Reference:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/68097-accesspt.html

Question #37

Which feature intersection of a Cisco 5760 Wireless LAN Controller with HA AP SSO is not true?

A . Upon guest anchor controller switchover, mobility tunnels stay active, APs remain connected, clients rejoin at MA or MC, and clients are anchored on the new active controller.
B . wIPS information is synced to the standby unit. The standby unit does not have to relearn wIPS information upon switchover.
C . Roamed clients that have their data path going through the mobility tunnel endpoint “become Local” in case of Layer 2 with sticky anchoring and Layer 3 roam. Layer 2 roamed clients are not affected except when roaming occurs between Cisco Unified Wireless Network and CA controllers.
D . Switchover during AP preimage download causes the Aps to start image download all over again from the new active controller.

Reveal Solution Hide Solution

Question #38

DRAG DROP

Drag and drop the Cisco AVVID IP DSCP values on the left to its matching traffic type on the right. Not all options are used.

Reveal Solution Hide Solution

Question #39

Refer to the exhibit.

An Apple TV is associated to the wireless network. Wireless users attempt to connect to it, but they report that they cannot discover the Apple TV on their devices.

What is most likely the root cause?

A . The mDNS Origin is not set to wireless.
B . The “Service Provider Name” must not include “airplay” on it.
C . The mDNS Service Provider is not associated to a profile.
D . The “Service ID” must be changed to 1 in order to ensure the highest priority for the traffic.

Reveal Solution Hide Solution

Question #40

DRAG DROP

Prime infrastructure allows you to change an alarm status. Drag and drop the status on the left to the correct description on the right.