350-401 practice questions 161–170

1. Question 161 · 1003 in bank

   Select 2

   A customer has completed the installation of a Wi-Fi 6 greenfield deployment at their new campus. They want to leverage Wi-Fi 6 enhanced speeds on the trusted employee WLAN. To configure the employee WLAN, which two Layer 2 security policies should be used? (Choose two.)

   • AWPA2 (AES)
   • B802.1X
   • COPEN
   • DWEP
   • EWPA (AES)

   Show answer

   Answer: AB

   Explanation

   Is this about wifi 6E? Do they mean OWE or Open SSID? Anyway, WPA2 seems to be out of support on wifi 6/6E. 802.1x and Open (OWE?) seem to be working. Could someone check this please? A couple of good sources: https://www.cisco.com/c/en/us/products/collateral/wireless/nb-06-preparing-for-wifi-6-ebook-cte-en.html "WPA3 is a mandatory requirement for the Wi-Fi 6E network" https://blogs.cisco.com/networking/wlan-ssid-security-migration-into-6ghz-networks "any new device supporting 6GHz, will be required to “only” support the following security standards while in the new band: WPA3..., OWE..., SAE..." https://www.cisco.com/c/en/us/products/wireless/what-is-wifi-6-vs-wifi-6e.html#~benefits "Wi-Fi Protected Access 3 (WPA3) mandatory for all Wi-Fi 6E devices, without backward compatibility for WPA2"

   Source: Adapted from community discussion — HungarianDish_111

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

2. Question 162 · 1003 in bank

   Select 2

   Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.)

   • AUtilize DHCP option 43.
   • BUtilize DHCP option 17.
   • CConfigure an ip helper-address on the router interface.
   • DEnable port security on the switch port.
   • EConfigure WLC IP address on LAN switch

   Show answer

   Answer: AC

   Next question

3. Question 163 · 1003 in bank

   What is the difference between CEF and process switching?

   • ACEF processes packets that are too complex for process switching to manage.
   • BProcess switching is faster than CEF.
   • CCEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.
   • DCEF is more CPU-intensive than process switching.

   Show answer

   Answer: C

   Explanation

   Agree that C is the way more correct answer. "Punt" is often used to describe the action of moving a packet from the fast path (CEF) to the route processor for handling. Cisco Express Forwarding (CEF) provides the ability to switch packets through a device in a very quick and efficient way while also keeping the load on the router‘s processor low. CEF is made up of two different main components: the Forwarding Information Base (FIB) and the Adjacency Table. Process switching is the slowest switching methods (compared to fast switching and Cisco Express Forwarding) because it must find a destination in the routing table. Process switching must also construct a new Layer 2 frame header for every packet. With process switching, when a packet comes in, the scheduler calls a process that examines the routing table, determines which interface the packet should be switched to and then switches the packet. The problem is, this happens for the every packet.

   Source: Adapted from community discussion — certtaker202

   Next question

4. Question 164 · 1003 in bank

   

   Refer to the exhibit. Which action resolves the EtherChannel issue between SW2 and SW3?

   • AConfigure switchport mode trunk on SW2.
   • BConfigure switchport nonegotiate on SW3.
   • CConfigure channel-group 1 mode desirable on both interfaces.
   • DConfigure channel-group 1 mode active on both interfaces.

   Show answer

   Answer: C

   Explanation

   The answer is C because SW2 is running PAgP (Cisco Proprietary). "channel-group 1 mode desirable" enables PAgP. "channel-group 1 mode active on" enables LACP. This also concludes that both switches are Cisco switches.

   Source: Adapted from community discussion — gtddrf

   Next question

5. Question 165 · 1003 in bank

   

   Refer to the exhibit. A network engineer configures OSPF and reviews the router configuration. Which interface or interfaces are able to establish OSPF adjacency?

   • AGigabitEthernet0/0 and GigabitEthernet0/1
   • Bonly GigabitEthernet0/1
   • Conly GigabitEthernet0/0
   • DGigabitEthernet0/1 and GigabitEthernet0/1.40

   Show answer

   Answer: C

   Explanation

   “No Hellos (Passive Interface)”. If you configure passive interface then the network on the interface will still be advertised but it won’t send any OSPF hello packets. This way it’s impossible to form an OSPF neighbor adjacency.

   Source: Adapted from community discussion — SandyIndia

   Next question

6. Question 166 · 1003 in bank

   DRAG DROP - Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

7. Question 167 · 1003 in bank

   Select 2

   Which two methods are used by an AP that is trying to discover a wireless LAN controller? (Choose two.)

   • ACisco Discovery Protocol neighbor
   • Bquerying other APs
   • CDHCP Option 43
   • Dbroadcasting on the local subnet
   • EDNS lookup CISCO-DNA-PRIMARY.localdomain

   Show answer

   Answer: CD

   Explanation

   1) LAP does automatically look on the local subnet for controllers with a 255.255.255.255 local broadcast. 2) Management IP addresses of controllers the LAP remembers previously. Therefore, if you put the LAP first on the local subnet of the management interface, it will find the controller's management interface and remember the address. This is called priming. 3) DHCP option 43 (good for global companies where offices and controllers are on different continents). 4) DNS resolution of "Cisco-capwap-controller.local_domain", (good for local businesses - can also be used to find where brand new APs join) https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/119286-lap-notjoin-wlc-tshoot.html

   Source: Adapted from community discussion — SandyIndia

   References

   • Cisco documentation

   Next question

8. Question 168 · 1003 in bank

   What is the responsibility of a secondary WLC?

   • AIt enables Layer 2 and Layer 3 roaming between itself and the primary controller.
   • BIt registers the LAPs if the primary controller fails.
   • CIt avoids congestion on the primary controller by sharing the registration load on the LAPs.
   • DIt shares the traffic load of the LAPs with the primary controller.

   Show answer

   Answer: B

   Explanation

   Logically the Vice President will replace the president when he is unable to serve the country for some reason and the same in networking the secondary will take over the primary when the primary is down. This is matter of common sense to have a secondary for backup purposes

   Source: Adapted from community discussion — Nhan

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 169 · 1003 in bank

   Refer to the exhibit.

   

   Based on the configuration in this WLAN security setting, which method can a client use to authenticate to the network?

   • Atext string
   • Busername and password
   • CRADIUS token
   • Dcertificate

   Show answer

   Answer: A

   Explanation

   https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01010000.html "Select or unselect the PMF PSK check box to configure the preshared keys for PMF. Choose the PSK format as either ASCII or Hexadecimal and enter the PSK."

   Source: Adapted from community discussion — edg

   References

   • Cisco documentation

   Next question

10. Question 170 · 1003 in bank

    A client device fails to see the enterprise SSID, but other client devices are connected to it. What is the cause of this issue?

    • AThe client has incorrect credentials stored for the configured broadcast SSID.
    • BThe hidden SSID was not manually configured on the client.
    • CThe broadcast SSID was not manually configured on the client.
    • DThe client has incorrect credentials stored for the configured hidden SSID.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 161. 1003 questions available.