Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 221:

  An engineer failed to run diagnostic commands on devices using Cisco DNA center, which action in Cisco DNA center resolves the issue?

  A. Enable Secure Shell.

  B. Enable Command Runner.

  C. Enable APIs

  D. Enable CDP.

  Correct Answer: A

• Question 222:

  Which configuration feature should be used to block rogue router advertisements instead of using the IPv6 Router Advertisement Guard feature?

  A. VACL blocking broadcast frames from nonauthorized hosts

  B. IPv4 ACL blocking route advertisements from nonauthorized hosts

  C. PVLANs with promiscuous ports associated to route advertisements and isolated ports for nodes

  D. PVLANs with community ports associated to route advertisements and isolated ports for nodes

  Correct Answer: C

• Question 223:

  What is a characteristic of an AP operating in FlexConnect Mode?

  A. All traffic traverses the WLC to ensure policy enforcement on client traffic

  B. Forwarding continues when the AP loses connectivity to the WLC

  C. APs connect in a mesh topology and elect a root AP

  D. FlexConnect enables an AP to connect to multiple WLCs

  Correct Answer: B

  The AP can locally switch traffic between a VLAN and SSID when the CAPWAP tunnel to the WLC is down. Reference: https://networklessons.com/cisco/ccna-200-301/cisco-wireless-ap-modes

• Question 224:

  Which statement must be used to export the contents of the devices object in JSON format?

  

  A. json.repr(Devices)

  B. json.loads(Devices)

  C. json.print(Devices)

  D. json.dumps(Devices)

  Correct Answer: D

• Question 225:

  Which mechanism can be used to enforce network access authentication against an AAA server if the endpoint does not support the 802.1X supplicant functionality?

  A. private VLANs

  B. port security

  C. MAC Authentication Bypass

  D. MACsec

  Correct Answer: C

• Question 226:

  When voice services are deployed over a wireless environment, which service must be disabled to ensure the quality of calls?

  A. Aggressive load balancing

  B. Dynamic transmit power control

  C. Priority queuing

  D. Fastlane

  Correct Answer: A

  To have a successful voice deployment with 792x phones, not only do you need a professional site survey, you also need to make sure that the controller and the switched network are properly configured for voice.

  The controller has several settings for a proper voice configuration:

  Aggressive Load Balancing should be disabled.

  Reference: http://what-when-how.com/deploying-and-troubleshooting-cisco-wireless-lan-controllers/configuration-cisco-wireless-lan-controllers/

• Question 227:

  Refer to the exhibit.

  

  An engineer is troubleshooting an issue with client devices triggering excessive power changes on APs in the 2.4 GHz band. Which action resolves this issue?

  A. Disable Aironet IE.

  B. Set the 802.11b/g/n DTIM interval to 0.

  C. Enable MFP Client Protection.

  D. Disable Coverage Hole Detection.

  Correct Answer: D

  "The device discriminates between coverage holes that can and cannot be corrected. For coverage holes that can be corrected, the device mitigates the coverage hole by increasing the transmit power level for that specific access point" https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/16-12/config-guide/ewc_cg_16_12/coverage_hole_detection.pdf

• Question 228:

  Which IEEE standard provides the capability to permit or deny network connectivity based on the user or device identity?

  A. 802.1d

  B. 802.1w

  C. 802.1q

  D. 802.1x

  Correct Answer: D

• Question 229:

  Refer to the exhibit.

  

  The CPE router acts as a DHCP server for the locally attached LAN. After DHCP snooping is enabled on the switch where the DHCP clients are connected, clients are unable to obtain their configuration from the DHCP server. What is the cause of this issue?

  A. The IP address of the DHCP server is in the excluded DHCP range.

  B. The configuration of Gi0/1 is missing the ip helper-address 192.168.255.1 command.

  C. The DHCP server drops DHCP packets carrying Option 82 and an empty relay agent IP address.

  D. The excluded DHCP range contains the subnet address of the entire LAN network.

  Correct Answer: C

• Question 230:

  When a wireless client roams between two different wireless controllers, a network connectivity outage is experience for a period of time. Which configuration issue would cause this problem?

  A. Not all of the controllers in the mobility group are using the same mobility group name.

  B. Not all of the controllers within the mobility group are using the same virtual interface IP address.

  C. All of the controllers within the mobility group are using the same virtual interface IP address.

  D. All of the controllers in the mobility group are using the same mobility group name.

  Correct Answer: B

  A prerequisite for configuring Mobility Groups is "All controllers must be configured with the same virtual interface IP address". If all the controllers within a mobility group are not using the same virtual interface, inter-controller roaming may appear to work, but the handoff does not complete, and the client loses connectivity for a period of time. -> Answer B is correct.

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/configguide/b_cg85/mobility_groups.html