IT認証試験問題集
毎月、GOWUKAKUは1500人以上の受験者が試験準備を助けて、試験に合格するために受験者にご協力します
 ホームページ / 400-351 問題集  / 400-351 問題練習

Cisco 400-351 問題練習

CCIE Wireless Written Exam 試験

最新更新時間: 2024/03/18,合計192問。

【2024年3月キャンペーン】:400-351 最新真題を買う時、日本語版と英語版両方を同時に獲得できます。

実際の問題集を練習し、試験のポイントを了解し、テストに申し込むするかどうかを決めることができます。

さらに試験準備時間の35%を節約するには、400-351 問題集を使用してください。

 / 4

Question No : 1
DRAG DROP
Drag and drop the OpenStack function from the left onto the corresponding OpenStack project on the right.



正解:


Explanation:
Reference: http://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/UCS_CVDs/ ucs_openstack_osp7_design.html

Question No : 2
Which statement about the high availability feature on Cisco Prime Infrastructure version 2.2 is correct?

正解:

Question No : 3
What are two features that help to mitigate man-in-the-middle attacks? (Choose two.)

正解:
Explanation:
The primary Cisco IOS Software features on the Cisco Catalyst 6500E (Cisco IOS Software 12.2(33)SXI1) that was used to mitigate the MITM (ARP Poisoning) attack are DHCP Snooping and Dynamic ARP Inspection (referred to as DAI throughout this paper). DAI has a dependency on DHCP Snooping. In order to run DAI, DHCP Snooping must be enabled.
Reference: http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6500-series-switches/ white_paper_c11_603839.html

Question No : 4
Which two IETF RADIUS attributes the Cisco WLC can be used to differentiate authentication requests based on the user location? (Choose two.)

正解:

Question No : 5
Which option in the Cisco Identity Services Engine check that the user authentication comes from a domain computer?

正解:

Question No : 6
Which two advanced WLAN options are required when deploying central web authentication with Cisco ISE? (Choose two.)

正解:
Explanation:
The WLC configuration is fairly straightforward. Atrickis used (same as on switches) in order to obtain the dynamic authentication URL from the ISE (since it uses Change of Authorization (CoA), a session must be created and the session ID is part of the URL). The SSID is configured in order to use MAC filtering. The ISE is configured in order to return an access-accept even if the MAC address is not found, so that it sends the redirection URL for all users.
In addition to this, RADIUS Network Admission Control (NAC) and Authentication, Authorization, and Accounting (AAA) Override must be enabled. The RADIUS NAC allows the ISE to send a CoA request that indicates that the user is now authenticated and is able to access the network. It is also used for posture assessment, in which case the ISE changes the user profile based on the posture result.
Ensure that the RADIUS server has RFC3576 (CoA) enabled, which is by default.
Reference: http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central­web-auth-00.html

Question No : 7
DRAG DROP
Drag and drop the AVC configuration features from the left onto their respective function on the right:



正解:

Question No : 8
Which two statements are true about adding Identity Services Engines 1.3 to Prime Infrastructure 2.2?
(Choose two.)

正解:

Question No : 9
DRAG DROP
Consider the association process of a wireless client to an SSID. Drag and drop the client actions from left into the correct order of operation on the right.



正解:

Question No : 10
Refer to the exhibit.



Your customer is testing native supplicant provisioning using Cisco ISE (192.168.1.2) and a Cisco WLC. The Cisco WLS has an ACL configured on it called onboarding. During the testing of many different client devices (Android, Apple, Windows) it appears that these devices are never redirected to the onboarding portal, though they can access the Internet.
Which statement explains this behavior?

正解:

Question No : 11
Which statement about the integration of ISE with Cisco Prime Infrastructure version 2.2 is true?

正解:
Explanation:
A maximum of two ISEs can be added toPrime Infrastructure. If you add two ISEs, one should be primary and the other should be standby. When you are adding a standalone node, you can add only one standalone node and cannot add a second node.
Reference: http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-2/user/guide/pi_ug/ setup_monitor.html

Question No : 12
Which two statements about header attacks are true? (Choose two.)

正解:

Question No : 13
You have been hired to install new Cisco switches at ACME Corporation. The company has an existing Cisco network comprised of access layer switches that use multiple VLANs and VLAN trunking protocol to distribute the VLANs to the switches throughout the network.
Which two methods are best to accomplish your task? (Choose two.)

正解:
Explanation:
By the way, the way to connect the switch is to set it as a vtp mode transparent or vtp mode client.
Reference: http://www.tek-tips.com/viewthread.cfm?qid=1464289

Question No : 14
Which major block is not included in the ETSI Network Function Virtualization reference framework?

正解:

Question No : 15
Your customer has a Cisco Unified Wireless Network running AireOS 8.0 and wants to learn about the FlexConnect mode that is available on his Aps.
Which two statements are true?

正解:

 / 4