[Free] 2017(Oct) Dumps4cert Testinsides Cisco 400-351 Dumps with VCE and PDF Download 21-30

Dumps4Cert 2017 Oct Cisco Official New Released 400-351
100% Free Download! 100% Pass Guaranteed!
http://www.Dumps4Cert.com/400-351.html

CCIE Wireless (v3.1)

Question No: 21 – (Topic 1)

Which two features were added as part of the 802.llh amendment?

  1. Dynamic Frequency Selection and Direct Link Setup.

  2. Dynamic Frequency Selection and Transmit Power control.

  3. Dynamic Frequency Selection and Wireless Performance Prediction.

  4. Dynamic Frequency Selection and Inter-Access Point Protocol.

Answer: B Explanation:

Dumps4Cert 2017 PDF and VCE

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/80211/200069-Overview-on- 802-11h-Transmit-Power-Cont.html

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1- Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/wlanrf.html

Question No: 22 – (Topic 1)

Which option describes the function of the Intercloud Fabric Extender?

  1. It provides the network overlay functionality between the used clouds or cloud models.

  2. It establishes a secure site-to-site tunnel to the intercloud fabric agent in the private cloud.

  3. It applies network policies and collects and reports VEM-related intercloud statistics.

  4. It establishes a secure site-to-site tunnel to the intercloud fabric switch in the provider cloud.

Answer: D Explanation: From:

Dumps4Cert 2017 PDF and VCE

Dumps4Cert 2017 PDF and VCE

Dumps4Cert 2017 PDF and VCE

Dumps4Cert 2017 PDF and VCE

Dumps4Cert 2017 PDF and VCE

http://www.cisco.com/c/en/us/td/docs/cloud-systems-management/cisco-intercloud- fabric/cisco-intercloud-fabric-for-business/2-3-1/getting-started- guide/b_Cisco_Intercloud_Fabric_Getting_Started_Guide_Release_2_3_1/b_Cisco_Intercl oud_Fabric_Getting_Started_Guide_Release_2_3_1_chapter_00.pdf

Cisco Inter cloud Fabric Architectural Overview – Cisco

http://www.cisco.com/c/en/us/td/docs/solutions/Hybrid_Cloud/Intercloud/Intercloud_Fabric/I ntercloud_Fabric_2.html

Cisco Intercloud Fabric Secure Extension

All data in motion is cryptographically isolated and encrypted within the Cisco Intercloud Fabric Secure Extender. This data includes traffic exchanged between the private and public clouds (site to site) and the virtual machines running in the cloud (VM to VM). A Datagram Transport Layer Security (DTLS) tunnel is created between these endpoints to more securely transmit this data. DTLS is a User Datagram Protocol (UDP)-based highly secure transmission protocol. The Cisco Intercloud Fabric Extender always initiates the creation of a DTLS tunnel.

The encryption algorithm used is configurable, and different encryption strengths can be used depending on the level of security desired.

The encryption algorithm used is configurable, and different encryption strengths can be used depending on the level of security desired.

Dumps4Cert 2017 PDF and VCE

Dumps4Cert 2017 PDF and VCE

Question No: 23 – (Topic 1)

Your customer has a Cisco Unified Wireless Network running AireOS 8.0 and wants to learn about the FlexConnect mode that is available on his APs. Which two statements are true? (Choose two.)

  1. A newly connected AP can be booted in FlexConnect mode.

  2. When an AP is changed from Local mode to FlexConnect mode, a reboot is required.

  3. Enhanced FlexConnect mode allows to enable wIPS on FlexConnect APs.

  4. When an AP is changed from Local mode to FlexConnect mode, reboot is not required.

  5. Using CCKM with FlexConnect APs requires the use of FlexConnect Groups.

  6. FlexConnect was previously know as quot;H-TEEPquot;

Answer: D,E Explanation:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7- 4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_ chapter_01000010.html http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/emob73dg/emob73/ch7

_HREA.html

Question No: 24 – (Topic 1)

When configuration an autonoumous access point, which configuration broadcasts two SSIDs?

A.

dot11 ssid data1 vlan 10 authentication open

authentication key-managerment wpa version 1 wpa-psk ascii cisco123

end

!

dot11 ssid data2 vlan 11 authentication open

authentication key-management wpa version 2 wps-psk accii Cisco12345

end

B.

dot11 ssid data1 vlan 10 authentication open

authentication key-management wpa version 1 wpa-psk ascii cisco123

mbssid guest-mode end

!

dot11 ssid data2 vlan 11 authentication open

authentication key-management wpa version 2 wpa-psk accii Cisco12345

mbssid guest-mode end

C.

mbssid

!

dot11 ssid data1 vlan 10

authentication open

authentication key-management wpa version 1 wpa-psk ascii cisco123

end

!

dot11 ssid data2 vlan 11 authentication open

authentication key-management wpa version 2 wpa-psk accii Cisco12345

end

D.

dot11 ssid data1 vlan 10 authentication open

authentication key-management wpa version 1 wpa-psk ascii cisco123

guest-mode end

!

dot11 ssid data2 vlan 11 authentication open

authentication key-management wpa version 2 wpa-psk ascii cisco12345

guest-mode end

E.

dot11 ssid data1 vlan 10 authentication open

authentication key-management wpa version 1 wpa-psk ascii cisco123

mbssid end

!

dot11 ssid data2 vlan 11 authentication open

authentication key-management wpa version 2 wpa-psk accii Cisco12345

mbssid end

Answer: B

Explanation:

Dumps4Cert 2017 PDF and VCE

http://www.cisco.com/c/en/us/td/docs/routers/access/1800/wireless/configuration/guide/awg

/s37ssid.pdf

Question No: 25 – (Topic 1)

You are the network administrator of a Cisco Autonomous AP deployment. You want to stop a client with MAC address 5057.a89e.b1f7 and IP address 10.0.0.2 from

associating to your APs. Which configuration do you use ?

A.

access-list 700 permit 5057.a89e.b1f7 0000.0000.0000

!

dot11 association mac-list 700

B.

ip access-list 25 deny host 10.0.0.2

!

interface Dot11Radio0 ip access-group 25 out

!

interface Dot11Radio1 ip access-group 25 out C.

ip access-list 25 deny host 10.0.0.2

!

interface Dot11Radio0 ip access-group 25 in

!

interface Dot11Radio1 ip access-group 25 in

D.

access-list 700 deny 5057.a89e.b1f7 0000.0000.0000

!

dot11 association on mac-list 700

Answer: D

Question No: 26 – (Topic 1)

802.11k and 802.Ilk-enabled client devices send a request for a list of neighbor Aps (a neighbor list) from the APs they are currently associated with What is this 802.11 management frame also known as?

  1. Association packet

  2. Beacon frame

  3. Action frame

  4. Reassociation response.

Answer: C Explanation:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/5700/software/release/i os_xe_33/11rkw_DeploymentGuide/b_802point11rkw_deployment_guide_cisco_ios_xe_rel ease33/b_802point11rkw_deployment_guide_cisco_ios_xe_release33_chapter_010.html

Question No: 27 – (Topic 1)

Which two statements about accessing the GUI and CLI of Cisco WLC are true? (Choose two.)

  1. The feature quot;Management using Dynamic Interfacesquot; can be applied to one of the Dynamic Interfaces only.

  2. Wireless management access is only possible through the default management WLAN quot;thazzquot;

  3. The wireless clients can access the Cisco WLC only when the option quot; Enable Controller Management to be accessible from Wireless Clientsquot; is checked.

  4. The feature quot;Management using Dynamic Interfacesquot; can be configured in CLI

    onlyWireless management access is only possible through the default management WLAN

    – WLAN ID

  5. Wired clients |can have only CLI access with the dynamic interface of the Cisco WLC, while wireless clients have both CLI and GUI access with the dynamic interface when the feature quot;Management using Dynamic Interfacesquot; is enabled.

Answer: A,C

Question No: 28 – (Topic 1)

Which two IETF RADIUS attributes sent by the Cisco WLC can be used to differentiate authentication requests based on the user location?(Choose two.)

  1. RADIUS attribute [31] Calling-Station-ld

  2. RADIUS attribute [4] NAS-IP-Address

  3. RADIUS attribute [95] NAS-IPv6-Address

  4. RADIUS attribute [32] NAS-ldentifier

  5. RADIUS attribute [303] Source-IP

  6. RADIUS attribute [30] Called-Station-ld

Answer: D,F Explanation:

Dumps4Cert 2017 PDF and VCE

https://supportforums.cisco.com/sites/default/files/ise_location-based_web_portals-v2.pdf

Question No: 29 – (Topic 1)

While troubleshooting a failed central web authentication configuration on Cisco WLC, you discover that the Cisco WLC Policy Manager State is showing RUN for new clients and not CENTRAL_WEB_AUTH. Which of the below is most likely causing this issue?

  1. The WLAN NAC state should be set to RADIUIS NAC.

  2. The WLAN Layer 2 security should be set to WPA WPA2.

  3. The WLAN Layer 3 security should be set to Web Policy with Conditional Web Redirect.

  4. The Web Login Page under the Cisco WLC security settings should be set to External(Redirect to external server).

Answer: A Explanation:

Dumps4Cert 2017 PDF and VCE

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732- central-web-auth-00.html

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/69340-web- auth-config.html

Question No: 30 – (Topic 1)

Which two statements about AP Local Authentication by FlexConnect AP in standalone mode are true? (Choose two)

  1. From AireOS release 8.0, Cisco Extended Keying Groups (CEKG) is a supported Local Authentication Protocol when deploying FlexConnect.

  2. Only LEAP, EAP-FAST, PEAP, and EAP-TLS authentications are supported.

  3. Cisco Wireless LAN Controller must generate a certificate signing request by itself for submitting to a certificate authority for signing.

  4. Only the vendor Certificate Authority (CA) certificate has to be downloaded to the Cisco Wireless LAN Controller for EAP-TLS authentication.

  5. When using EAP-TLS, a FlexConnect Group must be created so that the Cisco Wireless LAN Controller can push the certificates to the FlexConnect AP in the FlexConnect Group.

Answer: B,E

100% Free Download!
Download Free Demo:400-351 Demo PDF
100% Pass Guaranteed!
Download 2017 Dumps4Cert 400-351 Full Exam PDF and VCE

Dumps4Cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Dumps4Cert IT Certification PDF and VCE

Leave a Reply

Your email address will not be published. Required fields are marked *