350-050試験無料問題集（315題）「Cisco CCIE Wireless Exam (V2.0) 認定」

出題：1

Which of the following statements are not correct about Client Management Frame Protection (MFP)? (Choose 2.)

A. Client MFP can replace Infrastructure MFP in case only CCXv5 clients are used.

B. Client MFP encrypts class 3 Unicast management frames using the security mechanisms defined by 802.11i.

C. CCXv5 client and access points must discard broadcast class 3 management frames.

D. The only supported method to obtain the pre-user MFP encryption keys is EAP authentication.

E. In order to use Client MFP the client must support CCXv5 and negotiate WPA2 with AES-CCMP or TKIP.

正解：A,D 解答を投票する

出題：2

To have the CleanAir feature merge reports from APs from different controllers, what do you need?

A. CleanAir APs and Cisco WLCs in the same mobility group

B. CleanAir APs, Cisco WLCs, and Cisco WCS

C. CleanAir APs, Cisco WLCs, Cisco WCS PLUS, and a Cisco MSE with CleanAir tracking license

D. CleanAir APs in the same RF group and Cisco WLCs

E. CleanAir APs, Cisco WLCs, Cisco WCS PLUS, and a Cisco MSE

正解：E 解答を投票する

出題：3

DRAG DROP

正解：

出題：4

Refer to the exhibit.

Cisco Secure ACS 5.2 shows successful TACACS+ authentication and authorization for the user, but access to the Cisco WLC GUI fails. What is the reason for this failure?

A. The assigned role is incorrect.

B. The user password is incorrect.

C. The received TACACS+ packet is not encrypted.

D. The authorization response does not include a Privilege-Level attribute.

正解：A 解答を投票する

出題：5

Refer to the exhibit.

You want to use 3500e APs to setup an indoor mesh deployment. After you change the AP mode, the AP will not rejoin the Cisco WLC. Which debug command was run, according to the exhibit, and why is the AP not rejoining the Cisco WLC?

A. debug pm pki was run, and you must disable VLAN transparent for 3500e indoor mesh deployments.

B. debug ap join was run, and you must disable VLAN transparent for 3500e indoor mesh deployments.

C. debug capwap packet was run, and 3500e APs do not support indoor mesh.

D. debug mesh security was run, and the 3500e radio MAC address is not in the local MAC filter list on the Cisco WL

E. debug capwap events enable was run, and the 3500e Ethernet MAC address is not in the local MAC filter list on the Cisco WLC.

正解：E 解答を投票する

出題：6

Refer to the exhibit.

The autonomous AP has a corporate and guest SSID configured. The security team requested that you limit guest user traffic to DHCP, DNS, and web browsing on the AP. Which configuration best satisfies the request?

A. access-list 101 permit udp any any eq 67 access-list 101 permit udp 10.28.128.0 255.255.255.0 host 10.28.10.5 eq 53 access-list 101 permit tcp 10.28.128.0 255.255.255.0 any eq 80 access-list 101 deny ip any any interface dot11radio 0 ip access-group 101 in

B. access-list 101 permit udp any any eq 67 access-list 101 permit udp 10.28.128.0 255.255.255.0 host 10.28.10.5 eq 53 access-list 101 permit tcp 10.28.128.0 255.255.255.0 any eq 80 access-list 101 deny ip any any interface FastEthernet 0
ip access-group 101 in

C. access-list 101 permit udp any any eq 67 access-list 101 permit udp 10.28.128.0 0.0.0.255 host 10.28.10.5 eq 53 access-list 101 permit tcp 10.28.128.0 0.0.0.255 any eq 80 access-list 101 deny ip any any interface FastEthernet 0 ip access-group 101 in

D. access-list 101 permit udp any any eq 67 access-list 101 permit udp 10.28.128.0 0.0.0.255 host 10.28.10.5 eq 53 access-list 101 permit tcp 10.28.128.0 0.0.0.255 any eq 80 access-list 101 deny ip any any interface dot11radio 0 ip access-group 101 in

正解：D 解答を投票する

出題：7

What does RLDP do?

A. makes APs stop servicing clients and tries to associate to the unsecured AP, to send special UDP packet to the Cisco WLC

B. allows APs to determine whether undetected rogue APs or clients are in the area

C. makes APs try to break the security of rogue APs, to allow better containment

D. allows the Cisco MSE or location appliance to calculate the location of rogues

E. allows APs to detect rogues

正解：A 解答を投票する

出題：8

A user reported that, when viewing a video over the wireless network, the video keeps dropping every 30 minutes. What is the most likely cause?

A. The WLC, by default, changes channel every 30 minutes.

B. The default session timeout is deauthenticating the client.

C. Interference is causing the connection to drop.

D. The idle timeout is disassociating the client.

正解：B 解答を投票する

出題：9

Refer to the exhibit.

The ACS RADIUS Authentication Report shows the output for a failed client authentication. Which action can resolve this issue?

A. Re-generate the client certificate, which is expired.

B. Install the complete ACS certificate CA chain on the client operating system.

C. Import the complete client certificate CA chain on the ACS.

D. Re-generate the local ACS certificate, which was issued by an unknown CA.

正解：C 解答を投票する

出題：10

Wireless client location tracking provided by the Cisco MSE relies heavily on the number of access points that can hear a particular wireless client. What are the minimum and optimal numbers of access points required to cover an area in order to provide location tracking?

A. minimum 4 access points, optimal 5 or more access points

B. minimum 5 access points, optimal 6 or more access points

C. minimum 1 access point, optimal 3 or more access points

D. minimum 2 access points, optimal 4 or more access points

E. minimum 3 access points, optimal 4 or more access points

正解：E 解答を投票する

出題：11

On a Cisco WLC, which NTP authentication type or types are supported?

A. MD5, DES, and DES-CBC

B. DES

C. MD5

D. DES-CBC

E. MD5 and DES

正解：C 解答を投票する

出題：12

The IEEE 802.11i standard defines mechanisms for wireless client authentication and data encryption. During 802.1X EAP authentication, a number of keys are used in order to establish a secure encrypted link between the access point and the client. Which two of these keys are derived via the WPA four-way handshake? (Choose two.)

A. MSK

B. PTK

C. GMK

D. GTK

E. PMK

正解：B,D 解答を投票する

出題：13

The helpdesk is reporting that many users are reporting slow wireless connections in one of the office buildings. You look at the CleanAir statistics and do not see any interferers, but you see very high 2.4-GHz channel utilization from the Wi-Fi devices. WCS is reporting the following mix of 802.11 chipsets in the building: 10 percent 802.11b, 75 percent 802.11g and 15 percent 802.11a. You do a survey and see that you have a very dense deployment of APs and a lot of co-channel interference.
Which two steps would help lower your channel utilization in this area? (Choose two.)

A. Enable 1-, 2-, 5.5-, 6-, and 9-Mb data rates.

B. Lower the power on the 2.4-GHz radios.

C. Raise the DTIM.

D. Disable 1-, 2-, 5.5-, 6-, and 9-Mb data rates.

E. Raise the power on the 2.4-GHz radios.

F. Lower the DTIM.

正解：B,D 解答を投票する

出題：14

Which three statements about workgroup bridges in a unified environment are true? (Choose three)

A. Wired clients that connect to a workgroup bridge inherit the QoS and AAA override attributes of the bridge.

B. If your AP has two radios, then you can configure both for workgroup bridge mode.

C. The lightweight feature Cisco CKM is supported for use with a workgroup bridge.

D. VLANs are supported for use with workgroup bridges.

E. Web authentication is not supported for use with workgroup bridges.

F. If a workgroup bridge associates to a web-authentication WLAN, then the bridge is added to the exclusion list and all the workgroup bridge wired clients are deleted.

正解：A,E,F 解答を投票する

350-050試験無料問題集「Cisco CCIE Wireless Exam (V2.0) 認定」