CCIE Wireless Exam (V2.0) (350-050) Free Practice Test

Question 1

Which statement about H-REAP and FlexConnect APs on a Cisco WLC is false?

A. Cisco CKM roaming is unsupported between local mode APs and H-REAP APs.

B. H-REAP APs can have some locally switched WLANs and some centrally switched WLANs.

C. HREAP AP in standalone mode can authenticate new clients for CCKM roaming.

D. Cisco CKM roaming is supported within an H-REAP group of APs.

Correct Answer: C

Question 2

Refer to the exhibit. The IT manager is monitoring the wireless coverage of a floor. The manager sees the floor view that is shown. Which identifying information is displayed for the APs on the map view?

A. Tx power level

B. coverage hole

C. associated clients

D. average air quality

E. profiles

F. utilization

Correct Answer: B

Question 3

Which of the below statement is correct with regards to configuring local MAC
authentication on an AP?

A. A MAC address can be spoofed, so it is insecure.

B. The MAC address may be used in the key hash, if WEP is used as a key cipher.

C. The MAC address is used in stead of the username in the EAP certificate exchange.

D. MAC address authentication can not co-exist with EAP authentication.

Correct Answer: A

Question 4

Which three of the below values does a wireless client use, when operating in DCF mode, to calculate the duration field in the 802.11 MAC header for transmitting a non-fragmented unicast data packet? (Choose three.)

A. PIFS interval

B. ACK length

C. SIFS interval

D. DIFS interval

E. MPDU length

F. transmit rate

Correct Answer: B,C,F

Question 5

Which authentication method is not supported when using the local RADIUS server feature of an autonomous AP?

A. MAC

B. EAP-FAST

C. EAP-TLS

D. LEAP

Correct Answer: C

Question 6

A router has two interfaces: Ethernet 0 is connected to the LAN and Ethernet 1 is connected to the Internet. The LAN is 20.20.20.0/24. All hosts on the LAN must be able to form TCP connections to any host on the Internet. Hosts on the Internet may not form TCP connections to hosts on the LAN, except to port 25 of a mail server on the LAN. The web server IP address is 20.20.20.100. Which configuration fulfills all the requirements?

A. interface ethernet 1 ip access-group 123 in ! access-list 123 permit tcp any 20.20.20.0 0.0.0.255 access-list 123 permit tcp any host 20.20.20.100 eq 25

B. interface ethernet 1 ip access-group 123 in ! access-list 123 permit tcp any host 20.20.20.100 eq 25 access-list 123 deny tcp any 20.20.20.0 0.0.0.255

C. interface ethernet 1 ip access-group 123 in ! access-list 123 permit tcp any host 20.20.20.100 eq 25 access-list 123 permit tcp 20.20.20.0 0.0.0.255 any access-list 123 deny tcp any 20.20.20.0 0.0.0.255

D. interface ethernet 1 ip access-group 123 in ! access-list 123 deny tcp any 20.20.20.0 0.0.0.255 access-list 123 permit tcp any host 20.20.20.100 eq 25

E. interface ethernet 1 ip access-group 123 in ! access-list 123 permit tcp any 20.20.20.0 0.0.0.255 established access-list 123 permit tcp any host 20.20.20.100 eq 25

Correct Answer: E

Question 7

According to Cisco best practices, many features require the WLC to be synchronized with an NTP server. For which of these options is time synchronization not required?

A. MFP

B. SNMPv3

C. Location

D. CAPWAP

Correct Answer: D

Question 8

When you have an AP in autonomous mode, you can configure the AP to only allow console or Telnet access to authorized users. What is the correct command sequence to achieve RADIUS login authentication via console?

A. configure terminal aaa new-model aaa authentication login default group radius line console 0 login authentication default radius-server host 172.10.0.1 auth-port 1645 acct-port 1646

B. configure terminal aaa new-model aaa authentication login default line console 0 login authentication default radius-server host 172.10.0.1 auth-port 1645 acct-port 1646

C. configure terminal aaa new-model aaa authentication login default group radius line console 0 login authentication default group radius radius-server host 172.10.0.1 auth-port 1645 acct-port 1646

D. configure terminal aaa new-model aaa authentication login default group radius login authentication default radius-server host 172.10.0.1 auth-port 1645 acct-port 1646

Correct Answer: A

Question 9

You are configuring an access point in a mobile scenario (on a train) which is connected to a L2 switch that has multiple clients attached. The access point must be configured to connect to the mesh network. Which two of the below bridge configuration settings need to be configured? (Choose two.)

A. station-role non-root bridge

B. infrastructure-ssid

C. station-role workgroup-bridge universal

D. station-role workgroup-bridge

Correct Answer: B,D

Question 10

Refer to the exhibit.

Which DHCP option is shown?

A. 43

B. 241

C. 60

D. 32

E. 150

Correct Answer: C

Question 11

When viewing the configuration of an autonomous AP, you see these SNMP commands:
snmp-server community comaccess ro 4
snmp-server enable traps snmp authentication
snmp-server host cisco.com version 2c public
Which statement about these commands is true?

A. These commands allow write-only access for all objects to access list 4 members that use the comaccess community string. No other SNMP managers have access to any objects. SNMPv2c sends SNMP Authentication Failure traps to the host cisco.com, using the public community string.

B. These commands allow read-only access to access list 4 members that use the comaccess community string. SNMPv2c sends SNMP Authentication Failure traps to the host cisco.com, using the public community string.

C. These commands allow read-only access for all objects to access list 4 members that use the comaccess community string. No other SNMP managers have access to any objects. SNMPv2c sends SNMP Authentication Failure traps to the host cisco.com, using the public community string.

D. These commands block read-only access for all objects to access list 4 members that use the comaccess community string. All other SNMP managers have access to any objects. SNMPv2c sends SNMP Authentication Failure traps to the host cisco.com, using the public community string.

Correct Answer: C

Welcome to TestSimulate

Cisco CCIE Wireless Exam (V2.0) (350-050) Free Practice Test