PrepKing - GRATIS EXAM · 2019-10-25 · Certkey 350-050 C. The wireless client "hangs" in probes...

PrepKing

Number: 350-050Passing Score: 800Time Limit: 120 minFile Version: 9.3

http://www.gratisexam.com/

PrepKing 350-050

Exam A

QUESTION 1Which two options are correct according to debug output presented in the following exhibit? (Choose two.)

A. The wireless client uses a static IP address, so "0.0.0.0 START (0)" can be found in the logs.B. The wireless client has been successfully authenticated. Reauthentication is set to occur on an extremely

aggressive schedule (every five seconds).Certkey.com - Make You Succeed To Pass IT Exams

Certkey 350-050C. The wireless client "hangs" in probes (does not proceed with 802.11 authentication and association). It is

likely that the "encryption" or "key-management" advertised in the probe response does not match.D. Since the AP receives a probe request from the wireless client, the Access Point Functions state for the

machine changes from "Idle" to "Probe."

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 2Lightweight Access Point Protocol or LWAPP is the name of a protocol that can control multiple Wi-Fi wirelessaccess points at once. How does the Cisco WCS know what has happened in an LWAPP system when anAP's interface goes down and then comes up again?

A. The Cisco WCS polls the APs and when the AP is unreachable, reports "Max retransmissions reached onAP <name>".

B. The AP sends a linkDown then linkUp trap to the Cisco WCS; these are two of the six traps defined in RFC1215, A Convention for Defining Traps for use with the SNMP.

C. The AP cannot send a linkDown trap, as per RFC 1215, because the link is down; when the link comesback up, the AP sends a linkup trap to the Cisco WLC, which then forwards the trap to the Cisco WCS.

D. The Cisco WLC sends a trap to the Cisco WCS when it detects that an AP is down.

Correct Answer: DSection: (none)Explanation


QUESTION 3When using the enterprise-based authentication method for WPA2, a bidirectional handshake exchange occursbetween the client and the authenticator. Which five options will be the results of that exchange by use ofcontroller based network? (Choose five.)


A. proof that each side is aliveB. creation of the Pairwise Transient KeyC. distribution of the Group Transient KeyD. binding of a Pairwise Master Key at the client and the controllerE. distribution of the Pairwise Master key for caching at the access pointF. a bidirectional exchange of a nonce used for key generation

Correct Answer: ABCDFSection: (none)

Explanation

Explanation/Reference:Answer: A, B, C, D, F

QUESTION 4You can click on the buttons at the bottom of the screen to access resources associated with this item. Thefollowing resources are available to you:

show run - show run on AP-1debug logs - Logs/debugs on AP-1

Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

Radius sniffer trace taken betwen AP-1 and AAA-Server. packet-overview frame-1frame-2 frame-3 frame-4

Given:Wireless-Client (CB21) configured for SSID "CCIE-2"Standalone AP (autonomous), configured with 3 SSID's and 3 Data-Vlan plus the native VLAN. AAA serverconfigured for LEAP and EAP-FAST authentication and dynamic VLAN assignment. Question:Why is this wireless client not able to associate to the network?

A. Pending

Correct Answer: ASection: (none)Explanation


QUESTION 5According to the troubleshooting actions, choose proper troubleshooting process order.

1. Create a testing action plan based on the information gathered.2. Clearly define the trouble reported.3. If the problem has not been solved, change vanables and repeat process.4. Collect data to isolate possible causes.5. Analyze the results.6. Execute tests to identify the actual source of the problem.

A. Step1II.Step2III.Step3IV.Step4

B. Step5VI.Step6

C. I-2,II-4,III-1,IV-5,V-6,VI-3D. I-2,II-4,III-1,IV-5,V-3,VI-6E. I-2,II-4,III-1,IV-3,V-6,VI-5F. I-2,II-4,III-1,IV-3,V-5,VI-6




QUESTION 6Study the exhibit carefully. You are deploying a site survey for a new implementation and see this information inCisco Spectrum Expert. Which option is true?

A. The capture shows radar. It is most probably military radar because of the frequency hopping in the "SweptSpectrogram." The workaround is to disable DFS on the AP.

B. There is general background noise of -70dBm, which is not an issue at all for an 802.11b/g deployment.C. The location of this capture is most likely near a kitchen, because it is clear that there is a microwave oven

disrupting channel 1-13. There will be some packet loss while cooking, which is not a problem, becauseemployees will not be working during lunch time.

D. This is a typical Bluetooth pattern. The source needs to be identified and eliminated because it will affect an802.11b/g deployment.



QUESTION 7ETSI produces globally-applicable standards for Information and Communications Technologies (ICT). Whatdoes the current European Telecommunications Standards Institute rule state is the 2.4-GHz maximumtransmitter output power for point-to-point installations?

A. 20 dBmCertkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

B. 17 dBmC. 30 dBmD. 16 dBm

Correct Answer: BSection: (none)Explanation


QUESTION 8Which three statements best describe the communication between the Cisco Catalyst 6500 Series SupervisorEngine and the Cisco WiSM module? (Choose three.)

A. The communication between the Catalyst Supervisor Engine and Cisco WiSM goes to the service port onthe Cisco WiSM.

B. WLCCP is used to communicate between the Cisco WiSM and Catalyst Supervisor Engine.C. WCP runs on UDP/IP port 10000.D. WCP is used to communicate between the Cisco WiSM and Catalyst Supervisor Engine.

Correct Answer: ACDSection: (none)Explanation


QUESTION 9How to apply WMM access categories in an autonomous AP?

A. The autonomous AP automatically converts the DSCP values of the incoming packets based on aconversion table in the AP.

B. Policy maps are used on the autonomous AP to apply CoS values to frames coming into the AP, based onthe ACLs associated with the policy MAP. If no policy maps are applied, the AP will use the incomingframe's CoS to map the frame to the appropriate WMM access category.

C. AP policy maps allow the DSCP to be set for packets to and from the autonomous AP.These DSCP values are translated to CoS values by the upstream switch.

D. Autonomous APs do not support WMM access categories.

Correct Answer: B

Section: (none)Explanation


QUESTION 10Key Encryption Key is used for the group key handshake to send to the Group Transient Key, so it can bedelivered securely to the client.

A. TrueB. False



QUESTION 11The office is now operational using one 2106 WLAN controller with six 1131 APs and one 526 WLAN controllerwith three 521 APs. When the 526 loses power, the 521 APs do not build up a


connection with the 2106 WLAN controller. What will most likely cause this problem?

A. The 2106 controller and 526 controller do not share the same mobility group name.B. The 521 APs were not configured with the 2106 controller as the secondary controller.C. The 2106 controller and 526 controller were not configured correctly using the sysname and MAC address

for a mobility group.D. The 2106 controller does not support the 521 APs.



QUESTION 12You have been called to a customer's site to troubleshoot an EAP-FAST deployment by use of a Cisco 7921Gwireless IP phone within the Cisco Unified Wireless Network. After examining the logs, you discover thefollowing error:[SECURITY] 1x_auth_pae.c 2417: Reached Max EAP-Identity Request retries (#) for STA##:##:##:##:##:##:Which command is the best solution to this problem?

A. config advanced eap identity-request-timeout 0B. config advanced eap request-retries 20C. config advanced eap identity-request-timeout 20D. config advanced eap request-retries 0

Correct Answer: BSection: (none)

Explanation


QUESTION 13You work as a network engineer .If the WLAN interfaces configured on the different controllers are on differentIP subnets (Layer 3 inter-controller roaming), can you telle me what will happen when a client roams from onecontroller (controller A) to a new controller (controller B)?

A. Controller A will mark the client's entry in its client database as an anchor, controller B will not update itsclient database because of the anchored entry in controller A, and all ingress and egress traffic will flowthrough controller A.

B. Controller A will mark the client with an anchor entry in its client database, the database, and the databaseentry will be copied to controller B and marked with a foreign entry.

C. Controller A will mark the client's entry in its client database as foreign, controller B will update its clientdatabase, all ingress traffic will flow through controller A, and egress traffic will flow through controller Bwhen symmetric tunneling is disabled.

D. Controller B will update its client database and all client ingress and egress traffic will transition to the newcontroller.


Explanation/Reference:Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

QUESTION 14The PassGuide company has a WLC at 192.168.1.3 on network 192.168.1.0/24 with a default gateway of192.168.1.1. It also has a network 10.1.1.0/24 with a default gateway of 10.1.1.1. There is a GRE tunnel on theWAN between the two default gateways. Which ACL would allow encrypted management of the WLC from host10.1.1.3 on the 10.1.1.0/24 network, but deny other traffic when applied inbound on the 10.1.1.1 interface?

A. access-list 101 permit gre host 10.1.1.3 host 192.168.1.3B. access-list 101 permit tcp host 10.1.1.3 eq 443 host 192.168.1.3C. access-list 101 permit tcp host 10.1.1.3 host 192.168.1.3 eq 443 access-list 101 permit tcp host 10.1.1.3

host 192.168.1.3 eq 22D. access-list 101 permit tcp host 10.1.1.3 host 192.168.1.3 eq 80

Correct Answer: CSection: (none)Explanation


QUESTION 15The Wi-Fi Alliance develops testing and certification programs to help ensure the best user experience with Wi-Fi technology. Which three options are correct? (Choose three.)

A. WPA2 includes interoperability tests of WEP, TKIP, and AES-CCMP functionalityB. WPA2-Enterprise uses 802.1X and does not include EAP interoperability testsC. WPA2-Personal uses pre-shared keysD. WPA2-Enterprise uses 802.1X and includes EAP interoperability tests



QUESTION 16Which two attributes are used to characterize antenna performance? (Choose two.)

A. harmonyB. gainC. beamwidthD. attenuation

Correct Answer: BCSection: (none)Explanation


QUESTION 17Which components are required to generate a visual diagram such as the exhibit below?


A. Cisco WCS with a location license and a controller

B. Cisco WCS with base license, Cisco 2700 Series Wireless Location Appliance, and a controllerC. Cisco 2700 Series Wireless Location Appliance and a controllerD. Cisco WCS with a location license, Cisco 2700 Series Wireless Location Appliance, and a controller



QUESTION 18Which is the most likely cause that an autonomous AP does not have IP connectivity?

A. no IP address on the BVI interfaceB. all radio interfaces are shut downC. no IP address on the Fast Ethernet interfaceD. no IP address on the radio interface



QUESTION 19The WLAN controller in the Split-MAC architecture can handle which four functions?

A. 802.1XCertkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

B. key managementC. 802.11e resource reservationD. association and disassociation messages

Correct Answer: ABCDSection: (none)Explanation


QUESTION 20Which statement is true about the procedure for a lightweight AP to successfully establish a connection to acontroller?

A. AP sends its certificate to the RADIUS server. AP then authenticates the controller certificate as valid.B. AP sends its certificate to the controller. AP then authenticates the received Cisco WLC certificate as valid.C. AP sends its certificate to the RADIUS server. AP then authenticates the RADIUS certificate as valid.D. AP authenticates the received Cisco WLC certificate as valid. AP then sends its certificate to the controller.



QUESTION 21One of your Cisco WLCs is on a segment separated from all other devices on the network by a firewall. Yousee the following error message on the Cisco WLC when the AP is trying to join:Thu Feb 3 03:20:47 2028: 00:0B:85:68:F4:F0 is trying to join: LWAPP Join-Request does not include validcertificate in CERTIFICATE_PAYLOAD from AP 00:0b:85:68:f4:f0. Thu Feb 3 03:20:47 2028: Unable to freepublic key for AP 00:0B:85:68:F4:F0.What causes this error?

A. Probably a firewall is blocking udp/123 traffic, or there is an incorrect clock setting on the Cisco WLC.B. The DHCP server on the AP segment is including the Cisco WLC's AP Manager interface in DHCP option

43. Therefore, the IP address from the certificate does not match.C. The DHCP server has the incorrect value for option 60. Therefore, the AP is not finding the virtual IP

address from the Cisco WLC.D. Probably a firewall is allowing the discovery on UDP port 12222, but is blocking UDP port 12223. Therefore,

the second fragment from the certificate is not arriving on the controller.



QUESTION 22You work as a network administrator for Company A. This company has a network with multiple controllers andwants to have the most cost-effective controller redundancy. In order to accomplish this, which option will yourecommend?


A. 1+1B. N+1C. N+ND. N+N+1



QUESTION 23You are running the initial configuration of a particular AP in a Cisco WLC on menu Wireless > Access Points >802.11B/G Radio. The Cisco WLC has three SSIDs: A, B, and C. How to use the WLAN override option on thisCisco WLC?

A. If the AP is part of a group of APs, WLAN override will allow you to configure a particular interfaceassociated with the SSID.

B. If WLAN override is selected for SSID A, only SSID A will send beacons. The other SSIDs, B and C, willrespond to probes and allow associations, but there will be no beacons.

C. If WLAN override is selected for SSID A, SSID A will be operational on that AP but the other SSIDs will not

be.D. If all three SSIDs are configured but disabled globally, by choosing 'WLAN override' for SSID A, you can

make SSID A operational on this AP, as well as any other AP where WLAN override for SSID A has beenchosen.



QUESTION 24You work as a network technician at certways.com, read this subject carefully ,then answer the question. Theexisting Cisco Unified Wireless Controller is running v5.0 code for both the controllers and the Cisco WCS. Acontroller has been configured with an appropriate rogue rule condition to report discovered APs to the CiscoWCS. What default alarm level is used to display all rogue APs in the Alarm Summary?

A. MajorB. CriticalC. FlashD. Minor



QUESTION 25What is the reason that wireless analog video signals that are operating in the 2.4-GHz band are particularlyharmful to Wi-Fi service?

A. Analog Video modulation is the same as Wi-Fi and causes interference.Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

B. Analog video is a constant signal with 100% duty cycle.C. Analog video is a strong signal and increases the SNR.D. Analog video signals are slow frequency hopping and tend to affect the entire band.



QUESTION 26Which description about Cisco 7920 wireless IP phones is correct?

A. Voice quality is inversely related to channel utilization value sent within QBSS-Load-Element:the lower the value, the higher the voice quality.

B. Voice quality is inversely related to RSSI: the lower the RSSI, the higher the voice quality.C. These phones have exactly the same characteristics as the newer Cisco 7921 and 7925 wireless IP

phones, and do not needs special care when you are configuring security and QoS.

D. WPA2 is the recommended security method for deployment, along with Cisco Centralized Key Managementfor fast and secure roaming.



QUESTION 27When increasing the beacon interval, what will happen?

A. Stations in power-save mode will conserve more power, because they will have to awaken less often;however, this may delay packet delivery or cause the buffer to overflow.

B. There will be no effect on the network.C. Stations in power-save mode will use more power, because they will have to awaken more often; however,

this will positively impact stations looking for APs with which to associate.D. The network will be more secure.



QUESTION 28IEEE 802.11h-2003, or just 802.11h, refers to the amendment added to the IEEE 802.11standard for Spectrumand Transmit Power Management Extensions. IEEE 802.11h was originally defined to provide spectrummanagement for Europe in the 5-GHz band. Which three uses does IEEE 802.11h now support? (Choosethree.)

A. TPC for the protection of radars from interferenceB. TPC for the protection of satellites from interferenceC. Mechanisms to reduce power consumptionD. DFS for the protection of radars from interference


Correct Answer: BCDSection: (none)Explanation


QUESTION 29One of the advantages of implementing EAP-FAST is that it is not necessary to implement which item as part ofyour authentication infrastructure?

A. a RADIUS serverB. a Certificate Authority infrastructureC. a client that supports EAP-FASTD. an access control server



QUESTION 30Which statement correctly describes client STA roam in a Cisco CKM setup?

A. All the necessary key information is exchanged within reassociation request and response.Therefore, no interaction with the AAA server or EAPOL Key handshake is needed.

B. There is no need for a new EAP authentication or reauthentication, because the Authenticator (WDS)maintain a copy of the PMKID. Therefore, the AP and STA only need to complete the EAPOL Keyhandshake.

C. Due to the design of Cisco CKM, the STA authenticates against evey AP "in range" before trying toassociate or reassociate. Therefore, once roaming occurs, there is no need for authentication.

D. The STA maintains a list of APs it has already authenticated once. Therefore, the STA only needs toauthenticate a maximum of one time per AP.



QUESTION 31What is the reason that omnidirectional antennas pick up noise from more sources than directional antennas?

A. An omnidirectional antenna's main lobe is wider, causing it to detect signals from every direction.B. It is incorrect that omnidirectional antennas pick up noise from more sources than directional antennas.C. A directional antenna is an active RF element therefore it has less dBi.D. The ratio of the height to width of an omnidirectional antenna makes it more likely to receive noise than a

directional antenna.



QUESTION 32Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

Assuming that the antenna system characteristics (for example, gain VSWR, polarization, and beam width) aresimilar for a 5-GHz and 2.4-GHz radio. While conducting a dual-band site survey, how to configure the 5-GHzradio, relative to the 2.4-GHz radio, in order to achieve similar cell size?

A. The 5-GHz radio power level should be higher than the 2.4-GHz radio.B. The 5-GHz radio should use BPSK modulation and the 2.4-GHz radio should use CCK modulation.C. The 5-GHz radio power level should be lower than the 2.4-GHz radio.D. The 5-GHz radio should use CCK modulation and the 2.4-GHz radio should use BPSK modulation.



QUESTION 33An indoor 1240 AP is booting and has obtained an IP address by use of DHCP. The AP has confirmed priorcontroller IP addresses from a previously joined mobility group stored in NVRAM.Which action will AP take next?

A. DHCP option 43.B. Layer 2 LWAPP discovery broadcast.C. Layer 3 LWAPP discovery broadcast.D. DNS resolution of CISCO-LWAPP-CONTROLLER.localdomain.



QUESTION 34How to secure the LWAPP control channel?

A. IPsecB. 802.11iC. GRED. AES-CCM



QUESTION 35802.11i is a forthcoming specification that will clear up a number of security problems in 802.11.For the following items, which 802.11i key can provide data origin authenticity during the four-way handshakeand the group key handshake messages?

A. Key Caching KeyCertkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

B. Key Encryption KeyC. Groupwise Master KeyD. Key Confirmation Key



QUESTION 36The IEEE 802.11 standards define different encryption mechanisms. Which is the basic of defining the mostsecure encryption solution in IEEE 802.11 standards?

A. IPSECB. WEPC. AES-CCMPD. TKIP



QUESTION 37Comparing with LEAP, which is the advantage of EAP-FAST?

A. EAP-FAST allows authenticated in-band PAC provisioning, whereas LEAP uses anonymous in-band PACprovisioning, which is transparent to the user.

B. LEAP only supports user and password changes in conjunction with MS-CHAPv2, whereas EAP-FASTsupports user and password changes when using MS-CHAPv2 or OTP or PAC.

C. EAP-FAST exchanges user credentials within a TLS tunnel whereas LEAP exchanges credentialsinformation in clear, which allows possible offline "dictionary attacks."

D. EAP-FAST works with the 802.11 authentication algorithm "open eap," and also with "network- eap,"whereas LEAP is limited to the 802.11 authentication algorithm "network-eap" only.



QUESTION 38You work as a network engineer at certways.com, study the subject carefully.A WLAN deployment will use acombination of Cisco Aironet AP 1240s and multiple Cisco 4404 Wireless LAN Controllers to provide wirelessLAN access to end-users. The network administrator has decided to use DHCP Option 43 to enable the APs todiscover the wireless LAN controllers.When configuring the DHCP scope, which format should be used for the Cisco WLC addresses?

A. a comma-separated ASCII string of Cisco WLC virtual IP addressesB. a comma-separated ASCII string of Cisco WLC AP-manager addressesC. a comma-separated ASCII string of Cisco WLC management addresses Certkey.com - Make You Succeed

To Pass IT ExamsCertkey 350-050

D. a hexadecimal string of Cisco WLC management addresses



QUESTION 39For the following cipher suites, which were defined in the IEEE 802.11i-2004 standard, and then again in the802.11-2007 standard?

A. AES-CCMPB. WEP-40C. TKIPD. WEP-104



QUESTION 40What type of EAP will the diagram below illustrate?

A. EAP-MD5B. PEAPC. EAP-GTCD. EAP-FAST



QUESTION 41Understanding the distances between the access points is very important while designing a


WLAN network. Which two tools could measure the distances on floor plans? (Choose two.)

A. AutoCADB. Cisco WCS Planning ModeC. Cisco WCS Map EditorD. Cisco Spectrum Expert

Correct Answer: ACSection: (none)Explanation


QUESTION 42A lightweight AP has been deployed in local mode in a network consisting of 10 wireless LAN controllers in asingle mobility group. The AP has been configured to use primary, secondary, and tertiary WLCs. Because of amajor power failure, the AP's primary, secondary, and tertiary Cisco WLCs are all unavailable. Which action willbe taken next by the AP?

A. The AP will attempt to join the Cisco WLC with the greatest amount of available capacity.B. The AP will attempt to join a Cisco WLC configured as a "Master Controller."C. The AP state will transition to AP Fallback Mode and continue providing limited WLAN services (that is, no

new client authentications) until a WLC is again available.D. The AP will reboot and repeatedly attempt to join the configured primary, secondary, and tertiary Cisco

WLCs in that order. The process will continue until one of the configured WLCs is again available.



QUESTION 43Given: LAG bundles all distribution ports on a WLC into a single 802.3ad port channel. The system load-balances access points transparently to the user. Question: Which two items should be taken into considerationwhen configuring the neighbor Ethernet switch? (Choose two.)

A. LAG requires the EtherChannel to be configured for the "on" mode on the Catalyst switch.B. The load-balancing method configured on the Catalyst switch must be based on Layer 2, not Layer 3.

Failure to follow this recommendation may result in problems with access pointassociation.C. LAG requires that the Catalyst switch be configured with Cisco PAgP. Link Aggregation Control Protocol is

not supported.D. The Cisco WLC relies on the neighbor switch to load-balance traffic across the EtherChannel. The Cisco

WLC does not perform any EtherChannel load-balancing on its own.

Correct Answer: ADSection: (none)Explanation


QUESTION 44Which method can be used by the Cisco Wireless LAN Controller system to determine


whether there is a rogue AP or not?

A. observation of unencrypted traffic that should be encrypted for an SSID that it ownsB. detection of an organizationally unique identifier not assigned to Cisco devicesC. detection of a AP MAC address not registered to itD. rejection of a SNMP poll by the rogue AP



QUESTION 45RADIUS authentication requires that a shared secret be configured into the RADIUS server and RADIUS client.In your centralized or autonomous wireless system, users are authenticating through RADIUS to a certainWLAN/SSID. After each user connects, the authenticator sends an authentication request to the RADIUSserver, and then what will happen?

A. If the username and password are correct, it receives an access-accept in response. If the authenticationoperation was successful, the authenticator sends an authorization request to the RADIUS server with theWLAN/SSID information.

B. If the username and password are correct, and the WLAN/SSID information that is sent in the requestmatches the information in the user profile, the RADIUS server sends back an access- accept in response.

C. If the username and password are correct, it receives an access-accept in response, along with a list ofcheck items for the user, including WLAN/SSID information.

D. If the username and password are correct, it receives an access-accept in response, along with a list ofreply attributes for the user, including WLAN/SSID information.



QUESTION 46For the following commands, which one can determine the health of a RADIUS server on an autonomous AP?

A. show radius statisticsB. debug radius-serverC. show radius table {server_ip}D. show radius-server {server_ip}

Correct Answer: A



QUESTION 47Which primary methods is of configuration management for the Mobility Express Solution?

A. CLI and Web GUICertkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

B. CCA and Web GUIC. CCA and CLID. CLI, Web GUI, and CCA



QUESTION 48What is the major use of the Network Allocation Vector?

A. The NAV is a value that indicates to a station the delivery traffic indication map information that is currentlybeing provided by the MAC layer.

B. The NAV is a value that indicates to a station the remaining time allocated prior to releasing access control.C. The NAV is a value that indicates to a station the amount of time that remains before a medium will become

available.D. The NAV is a value that indicates to a station the present utilization of the access point through the

information elements.



QUESTION 49Observe the following WLC debug commands, which one can display the self-signed certificate key hash for anaccess point that is unable to associate to a WLC?

A. debug cert ssc enableB. debug lwapp errors enableC. debug crypto trace enableD. debug pm pki enable



QUESTION 50How does the Cisco Location Appliance locate a client or rogue access point?

A. Use Time Difference of ArrivalB. Use triangulationC. Use RF fingerprintingD. Use closest access point method



QUESTION 51On a Cisco Unified Wireless Controller, which three Access Point modes allow for client connectivity? (Choosethree.)


A. Local ModeB. Bridge ModeC. H-REAP ModeD. Monitor Mode

Correct Answer: ABCSection: (none)Explanation


QUESTION 52Which one of the following commands could limit WLC output from subsequent debug commands to show onlyinformation associated with a specific wireless client device that has the MAC address 00:0c:41:07:33:a6?

A. debug mac addr 00:0c:41:07:33:a6B. debug mobility addr 00:0c:41:07:33:a6C. debug mobility addr 00:0c:41:07:33:a6 enableD. debug mac addr 00-0c-41-07-33-a6 enable



QUESTION 53While using a WLC solution, how is it necessary to differentiate traffic from different WLANs in a wirelesssniffer trace?

A. An AP uses one radio interface per WLAN. A station selects the radio interface as a kind of WLAN

selection.B. The WLAN is visible in the 802.11 fixed parameters with the IDs 64, 65, and 81.C. An AP uses one BSSID per WLAN. A station uses the corresponding BSSID in all its data frames.D. An AP uses one SSID per WLAN. A station tags its data frames with the corresponding SSID.



QUESTION 54When performing a Layer 2 intra-controller roam on a WLC, an 802.11i client is experiencing greater latencythan expected. You guess that PKC is not working correctly. Which two CLI commands can verify your theory?(Choose two.)

A. show pmk-cache all will verify the existence of a valid PMK on the WLC.B. show advanced eap will show PKC state and timeout values.C. debug dot1x aaa enable will show the WLC communicating with the AAA server during client roaming, if

PKC is not functioning.D. show advanced client-handoff will show which client has a PKC entry that can be used for Certkey.com -

Make You Succeed To Pass IT ExamsCertkey 350-050roaming.



QUESTION 55What information is needed to add a Cisco WLC into the Cisco WCS?

A. IP address of virtual interfaceB. IP address of AP manager interfaceC. IP address of management interfaceD. IP address of service port



QUESTION 56The following message can be seen on a wireless LAN controller: Reached Max EAP Identity Request retries(5) for STA 00:11:22:33:44:55What does this message indicate?

A. The WLC has requested initial EAP authentication information from the NIC, but has not received aresponse after five tries.

B. The initial access request from the WLC to the RADIUS server was successful, but the NIC at

00:11:22:33:44:55 did not respond to five subsequent access-challenges.C. The RADIUS server was unresponsive to five WLC access requests to authenticate the user with the MAC

address 00:11:22:33:44:55.D. The authentication sequence completed with an access-reject from the RADIUS server five times, after

which the NIC card was excluded by the WLC.



QUESTION 57In order to be able to communicate with the WDS master, what must be configured on the APs while setting upa WLAN for Wireless Domain Services?

A. username and password valid on the AAA serverB. multicast group for the WDSC. IP address of the master WDS and any backup master WDSD. pre-shared key which matches that of the master WDS



QUESTION 58You work as a network administrator for company A. Study the exhibit carefully. Intermittent outages areoccurring in a WLAN environment on a large corporate campus. No rogue APs


have been detected and Cisco Spectrum Expert is now being utilized to help discover the source ofinterference. Judging from this Cisco Spectrum Expert screen, which interference type will you suspect?

A. BluetoothB. wireless video cameraC. DECT phoneD. microwave oven



QUESTION 59Which statement accurately describes AP power as related to Cisco 7921 wireless IP phone deployment?

A. AP power should be set to a value that ensures 15-20% overlap between cells.B. A 7921 wireless IP phone will roam to the AP with the most powerful signal prior to an outgoing call only.C. AP power should be set to the maximum, in order to ensure good signal strength.D. A 7921 wireless IP phone will roam to the AP with the most powerful signal before or during an outgoing

call.Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

Correct Answer: A



QUESTION 60The proper design of a VoWLAN network can be supported by which two guidelines? (Choose two.)

A. In order to prevent multipathing, the distance between access points should not exceed the heights of therooms in which they are installed.

B. For an ideal voice-ready wireless cell size, the radius or size of each cell should be -67 dBm.C. A VoWLAN network using 802.11a radio needs an access point approximately every 4 meters (13 feet). A

VoWLAN network using 802.11b/g radio needs an access point approximately every 8 meters (26 feet).D. If there are numerous clients in an area, or the supported data applications require significant bandwidth,

capacity can be added to the network by using more access points on spectrally exclusive (in other words,non-overlapping) channels.

Correct Answer: BDSection: (none)Explanation


QUESTION 61You are a network technician. Study the following exhibit carefully. A Cisco Aironet 1131 Access Point hasfailed and should be replaced. Both DHCP Option 43 and DNS discovery have not been used in this network. Areplacement Aironet 1131 Access Point is retrieved from the spares inventory and plugged into the sameEthernet jack that the failed AP was using. The AP has been configured with the wrong IP address. Which stepis the next in repairing the failed AP?


A. Create and apply a Cisco WCS migration template.B. Prime the AP with the correct controller IP address by placing it in the same VLAN as the Cisco WLC

management address.C. Connect a serial console cable to a laptop and correct the AP IP address.D. Clear the AP by holding down the reset button while rebooting.



QUESTION 62Which statements are true about noise in an 802.11b/g environment (2.4-GHz)?

A. Noise is defined as a 2.4-GHz signal that is not in an 802.11 DSSS format but is in the frequency range ofthe access point's configured channel.

B. Microwave Oven, Cordless Phones, JammersC. Any signal that the access point cannot decode is considered noise.D. 802.11 2.4-GHz frequency-hopping radio



QUESTION 63

In the process of deploying a Cisco 7921G wireless IP phone within the Cisco Unified Wireless Network, whichfeature will be implemented between the phone and the access point to mitigate one-way audio?


A. NMSPB. DTPCC. DCA and TPCD. AKM



QUESTION 64Which statement correctly describes preambles?

A. It may be necessary to configure an AP for long preambles, because some clients are not capable of usingshort preambles.

B. Support for short preambles is mandatory.C. It may be necessary to configure an AP for short preambles, because some clients do not understand the

additional information transmitted in long preambles.D. For maximum throughput for both types of cards, short preambles should be turned off when there is a

mixture of 802.11b and 802.11g clients.



QUESTION 65What is the reason that interference is generally more of an issue at the receiver than the transmitter?

A. Signal levels at the receiver are logarithmically less than signal levels at the transmitter.B. There are more receivers than transmitters.C. Signal levels at the transmitter are logarithmically less than signal levels at the receiver.D. It is unusual in wireless to receive and transmit at the same time, therefore the receiver can't detect the

interference.



QUESTION 66Which feature should be provisioned on all controllers in order for Radio Resource Management to operatecorrectly amongst multiple controllers in which APs are able to hear each other?

A. the same mobility groupB. the same ASCII RF group nameC. Layer 2 LWAPP onlyD. the same WEP Key



QUESTION 67Which description is correct with regard to the operation of an access point in Rogue Location DiscoveryProtocol mode?

A. The AP determines whether or not a rogue access point is on a trusted network. It does not provide RFservice of any kind, but rather receives periodic rogue access point reports from the controller, and sniffs allARP packets. If it finds a match between an ARP request and a MAC address it receives from thecontroller, it generates a rogue access point alert to the controller.

B. The AP uses the existing wireless infrastructure in order to scan for rogue APs. Once discovered, theserogues are added to a local list that includes the rogues' BSSIDs, MAC addresses, and any discoveredsecurity provisions (WPA, WEP, etc.).

C. The AP moves to the rogue channel and attempts to connect to the rogue as a client. The AP then tries toobtain an IP address and forwards a UDP packet to the controller through the rogue. If the controllerreceives this packet, the network administrator is notified that a rogue AP has been discovered on the wirednetwork.

D. The AP detects a rogue client, and then the network administrator is able to contain both the rogue AP andthe rogue clients. This can be achieved because 802.11 deauthentication packets are sent to clients thatare associated to rogue APs, so threats such as holes are mitigated.



QUESTION 68Cisco Client Management Frame Protection is running on a mobility group with two controllers. For the followingoptions, which two MFP requirements protect the network? (Choose two.)

A. requires the use of a nonbroadcast SSIDB. requires CCXv5C. implements the validation of wireless management framesD. forces clients to authenticate, using a secure EAP method only



QUESTION 69

How to differ EAP-TLS from Microsoft PEAP?

A. EAP-TLS requires a client certificate.B. EAP-TLS does not require a certificate.C. Both EAP-TLS and Microsoft PEAP require client certificates but Microsoft PEAP is described in RFC 2716.D. Microsoft PEAP is more secure.



QUESTION 70You work as a network administrator. Your company has two WLCs correctly configured for redundancy. Youused the default AP Fallback settings. Because of a power problem, the primary controller fails and then thesecondary controller takes over operation of the LWAPP APs.Which action will be taken by the APs after restoring the power to the primary controller?

A. The APs will automatically rejoin the primary WLC. Because WLC redundancy is stateful, service to the APswill not be interrupted while they are rejoining the primary WLC.

B. The APs will remain joined to the secondary WLC until the network administrator manually forces themback to the primary WLC. During the process of forcing them back, service to the APs will be interrupted.

C. The APs will automatically rejoin the primary WLC. While the APs are rejoining the primary WLC, service tothem will be interrupted.

D. The APs will remain joined to the secondary WLC and the configuration will be updated (the secondaryWLC will become the primary WLC, and the primary the secondary).



QUESTION 71Which four components are of CSMA/CA?

A. fragmentation, PCF, collision, backoffB. carrier sense, DCF, acknowledgment frames, RTS/CTS medium reservationC. fragmentation, PCF, acknowledgment frames, RTS/CTS medium reservationD. carrier sense, collision, jam sequence, backoff



QUESTION 72Observe the following error message carefully:Error Message DOT11-TKIP_MIC_FAILURE_REPEATED: Two TKIP Michael MIC failures were detectedwithin [number] seconds on [interface] interface. The interface will be put on MIC failure hold state for next

[number] secondsWhich option is correct about this error message?

A. Because MIC failures usually indicate an active attack on your network, the access point is throttled and puton hold for the configured time. Access by new stations is restricted until the timer expires.

B. Because MIC failures usually indicate an active attack on your network, the interface will be put on hold forthe configured time. During this hold time, stations using TKIP ciphers are disassociated and cannotreassociate until the hold time ends. Once the hold time ends, the interface will begin to operate normallyagain.Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

C. Because MIC failures usually indicate a passive attack on your network, the interface input queues areplaced on hold for the configured time. During this hold time, all traffic is dropped until the hold timerexpires. Once the hold time ends, the interface will begin to operate normally again.

D. Because MIC failures usually indicate a passive attack on your network, the interface MIB counter will beincremented. During hold time, stations using TKIP ciphers are still allowed to associate and establishauthentication.



QUESTION 73Which two items are the purposes of a pre-site survey walkthrough? (Choose two.)

A. identify potential problem areasB. define intended coverage areasC. determine the final location of APs and antennasD. identify sources of RF signal attenuation and RF interference

Correct Answer: ABSection: (none)Explanation


QUESTION 74For the following statements, what are the key RF deployment guidelines for WLAN phones?

A. VoWLAN handsets should use static WEP, since it provides the fastest roam times and the security ofVoWLAN calls is not a high priority.

B. Follow standard WLAN site survey procedures to minimize cell overlap and interference. In addition, ensurethat the cell edge has a minimum power level of -67 dBm and an error rate less than 1%. The power level ofthe APs and the handset should match, and should also provide sufficient call capacity.

C. The RF deployment guidelines are the same as those for any other WLAN client: perform a site survey toensure appropriate coverage for the required bit rate and minimize channel overlap.

D. Use patch antennas to provide higher gain and better coverage and use the highest power on the AP. Thiswill ensure maximum coverage and minimize the number of dropped calls.



QUESTION 75Your company has just completed constructing a new automobile parts manufacturing facility. The facility ITmanager would like to implement voice over WLAN. During your initial walkthrough, you see numerous highlyreflective surfaces on the manufacturing equipment and in the building construction itself. What potentialproblem exists that should be accounted for during your site survey?


A. RF signal absorptionB. multipath distortionC. RF signal attenuationD. Fresnel zone impedance



QUESTION 76Can you tell me which three of the following items are configurable settings on each SSID for the Cisco 802.11Access Point High Speed WAN Interface Card? (Choose three.)

A. guest modeB. quality of serviceC. infrastructure SSIDD. maximum number of client associations



QUESTION 77How to connect the new bridge to the old antenna while installing an outdoor bridge which is replacing anothervendor's bridge?

A. FCC and ETSI regulations do not permit the connection of disparate systems without certification.B. The 802.11 standard requires that all connectors be N-type connectors, so the bridge and antenna will

interoperate with no changes.C. The connectors are proprietary to the vendor, so using an adapter that is approved by the vendor would be

necessary.D. The connectors are proprietary to the vendor, so using an adapter available from either vendor would be

necessary, but no regulatory approval is required.



QUESTION 78Dynamic Host Configuration Protocol (DHCP) is a protocol used by networked devices (clients) to obtain theparameters necessary for operation in an Internet Protocol network. While using an enterprise DHCP server tofacilitate WLAN controller discovery by both Cisco Aironet 1000 Series and 1250 Series Lightweight AccessPoints, which two DHCP options could be supported by the DHCP server? (Choose two.)

A. Option 43B. Option 48C. Option 60D. Option 82




QUESTION 79Refer to the following options, which two are long-term solutions to hidden node problems? (Choose two.)

A. enable CTS to SelfB. change the RF situation by increasing the power on client work stations (None-AP-STA)C. increase the radio speed to at least 24 Mb/sD. change the RF situation by adding additional access points



QUESTION 80According to FCC Rule # 15.407(h)(2), it is required that products operating in certain bands need to supportDynamic Frequency Selection to detect and automatically adjust channels to protect WLAN communicationsfrom interfering with military or weather radar systems. Which two 5-GHz bands must support DynamicFrequency Selection? (Choose two.)

A. UNII-1B. UNII-0C. UNII-2D. UNII-2 Extended



QUESTION 81In order to provide end-to-end QoS, how to send traffic classification information between the LWAPP AP andthe WLAN controller?

A. There is no end-to-end QoS, only WMM on the WLAN. This is all that is required, because campusnetworks typically have greater than 1 Gb/s backbones and WLANs operate at only 11 or 54 Mb/s.

B. LWAPP APs map the WMM CoS values of the client traffic to the Ethernet frames and the CoS value of theEthernet frames sent to the AP to the WMM access category. The switch upstream from the AP isresponsible for converting between 802.1D classification and DSCP.

C. The WMM CoS values are carried within the LWAPP tunnels and translated from CoS to DSCP to ensurethat the correct priority is given to different LWAPP packets.

D. LWAPP packets from the controller and the AP are marked by DSCP based on the DSCP of the tunneledtraffic. This DSCP is converted to a CoS by a table in the AP. The access category used for each framedepends on the table CoS and QoS profile of the WLAN.



QUESTION 82In a calibrated system, how statistically accurate is the Cisco Location Appliance at tracking thelocation of aclient?

A. within 5m, 90% of the timeB. within 50cm, 90% of the timeC. within 1m, 90% of the timeD. within 10m, 90% of the time



QUESTION 83Which three statements correctly describe configuring the Cisco Catalyst 6500 Series WiSM module? (Choosethree.)

A. Each WLC on the Cisco WiSM supports up to 150 access points.B. When LAG is disabled, the management interface must be configured on port 1.C. LAG is enabled automatically and bundles all of the distribution ports of a controller into a single

EtherChannel.D. The AP Manager interface may be on the same VLAN or IP subnet as the management interface.



QUESTION 84How to monitor CPU utilization on a wireless LAN controller?

A. Define the network management system in the WLC with a matching read-write SNMP community toenable the WLC CPU OID to be polled with an SNMP set by the network management system.

B. Define the network management system as a trap receiver and enable the default RFC 1213 traps, whichinclude SysCPUUtilization.

C. Define an external syslog receiver in the WLC that will receive a syslog message when the percentage ofCPU processing ability reaches a preconfigured percentage.

D. Define the network management system and community in the WLC and a matching V1 or V community-string in the network management system to enable the WLC CPU OID to be polled.



QUESTION 85Which data can be passed down to an LWAPP AP by use of DHCP option 43?


A. The IP address, subnet mask, and default gateway assigned to the AP.B. The Cisco WLC management interface IP address.C. The AP's ARP timeout value.D. The IP address of the Cisco WCS server, or other SNMP management system.



QUESTION 86You see a lot of retransmissions being sent between client devices and a management server on the networkwhile implementing the Cisco Unified Wireless Network at a customer's site. After investigating, you find outthat the wireless clients see several access points, but the RSSI is very poor. After onsite evaluation, you notethat there are many manufacturing machines within the factory that are highly metallic. Which type of RFproblem can be fixed while performing an RF analysis within the environment?

A. multipath distortionB. excessive client roamingC. free space path lossD. binary phase shift keying



QUESTION 87Assume that A WLAN controller has two AP and three Cisco 7921 IP phones. In order to have good Voicequality, which item is true with regard to the RF configuration displayed?

A. The configured "Fragmentation Threshold" (2346) is too low for a voice deploymentB. Cisco recommends using 802.11b/g deployment for voice to prevent interferences with microwave ovens

and Bluetooth devices.C. The configured channels (Ch-36 and Ch-40) are "side/adjacent channels". The 5 GHz channels overlap

their adjacent channels, so there should be at least 1 channel of separation for adjacent APs.D. 802.11a channels are manually configured. This is not allowed in a DFS environment.



QUESTION 88In computer networking, CSMA/CA belongs to a class of protocols called multiple access methods. CSMA/CAstands for: Carrier Sense Multiple Access with Collision Avoidance. What is the objective for the randombackoff algorithm selecting a value in CSMA/CA?

A. to initialize the session frame sequenceB. to determine the number of slot times the station waits to transmitC. to set the length of the short interframe spaceD. to minimize collisions



QUESTION 89Which three descriptions are correct with regard to traffic classification in Wi-Fi Multimedia? (Choose three.)

A. Wi-Fi Multimedia defines four access categories: AC_BK, AC_BE, AC_VI and AC_VO.B. Each access category corresponds to one of four transmit queues.C. Once traffic is classified by Wi-Fi Multimedia, HCCA distributes the the transmit opportunities according to

the traffic priority.

D. Wi-Fi Multimedia maps the eight 802.1P (now part of 802.1D) classification schemes to four accesscategories. In contrast, the 802.1D classification is still sent in the actual 802.11 frame.

Correct Answer: ABDSection: (none)Explanation


QUESTION 90A user complains about problems authenticating via wireless. Which two of the Cisco WLC debug commandsbelow would solve this problem? (Choose two.)

A. debug mac { addr MAC}B. debug client authentication enableC. debug dot1x events enableD. debug client events enable



QUESTION 91Which three actions will happen when a wireless client implements a Layer 3 roam between two WLCs withmanagement interfaces on the same IP subnet and configured in Layer 3 LWAPP mode? (Choose three.)

A. The client database entry is removed from the original WLC once it has been entered into the new WLC.Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

B. The original WLC marks the client with an "Anchor" entry in its own client database.C. The database entry is copied to the new controller client database and marked with a "Foreign" entry in the

new WLC.D. The client database entry is maintained on both the original and new WLCs.



QUESTION 92You are a network engineer for a company. You are asked to configure an EtherChannel for ports 49 and 50 ona Cisco Catalyst 3750 Series Switch after enabling LAG on a Cisco 4404 Wireless LAN Controller. TheEtherChannel need to support VLANs 8, 16, 24, and 32. In order to finish this task, which configuration isneeded?

A. interface Port-channel1switchport trunk encapsulation dot1q switchport trunk allowed vlan 8,16,24,32 switchport mode trunk

B. interface GigabitEthernet1/0/49 channel-group 1 mode on interface GigabitEthernet1/0/50 channel-group 1mode on interface Port-channel1switchport trunk encapsulation dot1q switchport trunk allowed vlan 8,16,24,32 switchport mode trunk

C. interface GigabitEthernet1/0/49switchport trunk encapsulation dot1q switchport trunk allowed vlan 8-32 switchport mode trunk channel-group 1 mode on interface Port-channel1switchport trunk encapsulation dot1q switchport trunk allowed vlan 8,16,24,32 switchport mode trunk

D. interface GigabitEthernet1/0/49 switchport trunk encapsulation isl switchport trunk allowed vlan 8,16,24,32switchport mode trunkchannel-group 1 mode on



QUESTION 93A customer tries to connect to an access point and reports that the access point could only be connected at 54Mb/s while deploying the Cisco Unified Wireless Network to support 802.11n with encryption. Which is thereason for this problem?

A. The client is set for open authentication.B. The client has DTPC enabled.C. The client does not have WPA2 AES enabled.D. The client adapter is not capable of 40 MHz.




Which statement best describes the function of a rogue detector access point?

A. It searches the switch CAM tables in order to determine which wired port the rogue AP is connected to, andthen shuts that port down.

B. It can detect rogue APs and clients, while at the same time associating normal clients to the WLAN.C. Its radios are shut off, and it listens only to the wired-side ARP packets on a VLAN trunk, in order to find

rogue clients and APs.D. It associates to the rogue AP as a client in order to disrupt service.



QUESTION 95Cisco Wireless LAN Controllers are responsible for system wide wireless LAN functions, such as securitypolicies, intrusion prevention, RF management, quality of service (QoS), and mobility.When receiving a shun command from a Cisco IPS, how does the WLAN controller block a client?

A. by using the client nameB. by using the client RF fingerprintC. by setting up an ACL in the WLAN controller to block client IP connectivityD. by using the MAC address



QUESTION 96When receiving a CTS frame, what will an 802.11a station (STA) do?

A. Respond with an RTS frame.B. Respond with a CTS ACK frame.C. Check the network allocation vector, and update it, if appropriate.D. Check the MAC address in the receiver address field to determine if it matches the frame's own address,

and, if so, respond with a CTS ACK frame.



QUESTION 97Quality of Service (QoS) refers to the capability of a network to provide better service to selected network trafficover various technologies. In wireless networks, what is the QoS challenge caused by the hidden nodeproblem?

A. When an AP is attempting to make an assessment of its capacity to advertise and use in TSPEC admissioncontrol, it needs to assess the number of clients it has associated. This Certkey.com - Make You SucceedTo Pass IT ExamsCertkey 350-050calculation is incorrect if the AP does not see the hidden nodes and can result in capacity managementissues.

B. Frames are lost due to collisions of traffic between clients that cannot detect each others' channel usage,and therefore cannot defer the sending of traffic until the channel is free.Higher priority frames cannot avoid these collisions.

C. Frames are lost due to collisions of traffic between clients that cannot detect each other's channel usage,and therefore cannot defer the sending of traffic until the channel is free.These collisions only impact lower priority frames, as they are sent later than high priority frames.

D. A hidden node is not a QoS issue, but a security issue in which a rogue client impersonates an access pointto a client and the client to the access point.



QUESTION 98

Which option is true while comparing PEAP-GTC (Cisco PEAP) to PEAP-MS-CHAPv2 (Microsoft PEAP)?

A. PEAP-GTC allows password changes during authentication, whereas PEAP-MS-CHAPv2 does not supportthis.

B. PEAP-GTC introduced identity protection, which allows client supplicants to use "faked" usernames duringPEAP Phase 1, in order to prevent intruders from collecting usernames.

C. Microsoft PEAP requires the use of IAS for the RADIUS server, whereas Cisco PEAP can be useduniversally on all available AAA servers that support PEAP.

D. Cisco PEAP is much faster then Microsoft PEAP during re-authentication, because it supports TLS sessionresumption.



QUESTION 99The transmit power level on an 802.11a radio is configured for 25 mW. What is the corresponding value indecibels?

A. 17 dBmB. 25 dBmC. 14 dBmD. 50 dBm



QUESTION 100Which three devices'historical locations can be tracked by the Cisco Location Appliance? (Choose three.)


A. 802.11-based RFID Asset tagsB. remote sources of ISM interferenceC. rogue access pointsD. trusted and rogue clients



QUESTION 101Can you tell me what the LWAPP data and control port numbers are?

A. TCP 16666 and 16667

B. UDP 16666 and 16667C. TCP 12124 and 12134D. UDP 12222 and 12223



QUESTION 102Which two features of Cisco WCS could assist with predictive design and planning without access points beingfully deployed and installed? (Choose two.)

A. planning modeB. Location Accuracy toolC. Inspect VoWLAN Readiness toolD. Inspect Location Readiness tool



QUESTION 103In order to decrease roaming times with Cisco 7921G wireless IP phones implemented in a large enterprisenetwork, which feature will you recommend?

A. WPA-PSKB. Cisco CKMC. EAP-TLS + TKIPD. 802.11h Roaming Assistance



QUESTION 104When configuring a Cisco 792X wireless IP phone with DHCP, what information will be in the DHCPOFFERmessage, and why?

A. option 150, to provide the phone with the Cisco Unified Communications Manager IP Certkey.com - MakeYou Succeed To Pass IT ExamsCertkey 350-050address to download its XML configuration file

B. option 60, to provide the phone with the IP address of the RADIUS server, if EAP is in useC. option 66, to provide the phone with the Cisco Unified Communications Manager IP address to download its

XML configuration fileD. option 150, to provide the phone with the TFTP-Server IP address to download its XML configuration file



QUESTION 105Which description is correct with regard to the roaming behavior of a NIC in a desktop PC as it communicateswith an access point?

A. The NIC will use a vendor-dependent combination of factors in determining which AP to connect to,including signal strength, signal quality, and data rate.

B. The NIC will comply with the roaming standards set forth in IEEE 802.3.C. The NIC will associate to the closest access point and only disconnect when the PC or AP is turned off.D. The NIC will associate to the closest access point, but the AP may determine that the RF environment is too

congested and disconnect the PC.



QUESTION 106Which service will be offered without conducting a new site survey if there is an existing 802.11g WLAN at asite?

A. increase the throughput for the wireless clientsB. increase the Layer 2 and Layer 3 security of the WLANC. add new services (such as voice) over the WLAND. add a new 802.11a WLAN



QUESTION 107Take guest network best practices into consideration, which two features need to be configured on thecontroller while configuring a WLAN controller to support guest access? (Choose two.)

A. ARP unicastB. DHCP OptionalC. peer-to-peer blockingD. DHCP Required




QUESTION 108What is the objective of VLAN 40 in this case according to the configuration excerpt presented in this exhibit?

A. the 802.11 data frame switching VLANB. WLCCP traffic between the Cisco WiSM and Catalyst 6500 Series Supervisor Engine 720C. the Management VLAN for the Cisco WiSMD. the Cisco WiSM Service VLAN



QUESTION 109Which command will be used to check the status of infrastructure APs from the CLI of an AP configured as aWDS master?

A. show wccp wds

B. show wlccp apC. show lwapp ap


D. show wlccp wds ap



QUESTION 110Which item is correct about the definition of co-channel interference?

A. interference from the same channel as the receiver channel in useB. interference from any 2.4-GHz sourceC. interference from any channel except the same channel as the receiverD. interference from a channel adjacent to the channel in use



QUESTION 111Which one of the following commands will you use to load Cisco IOS on an autonomous AP?

A. archive download-sw /overwrite tftp://server_ip/image_nameB. copy flash:image_name tftp://server_ip/image_nameC. copy flash tftp and respond to the interactive promptsD. config net and respond to the interactive prompts



QUESTION 112Which two statements correctly describe RTS/CTS? (Choose two.)

A. When the transmitted packet is equal to or larger than the RTS threshold, an RTS packet is sent. Thedestination node must respond with a CTS packet before the originator can send the real data packet.

B. Since the introduction of EDCA (WMM and 802.11e), the RTS/CTS sequence has been renderedunnecessary.

C. 802.11d replaced the RTS/CTS sequence with CTS to Self.D. The RTS and CTS are small and, if lost in a collision, they can be retried more quickly and with less

overhead than if the whole packet must be retried.

Correct Answer: AD



QUESTION 113The central office is currently using a combination of 4400 and 2100 series WLAN controllers running v4.2 anda variety of LWAPP-enabled access points servicing both 2.4 GHz and 5 GHz.The WLAN deployment has been extended to each remote office by implementing a 526 WLAN controllerrunning v4.1 and several 521 access points. Wireless client deployment uses


EAP-TLS authentication by use of a centralized RADIUS server plus 802.11n for performance. After the firstremote office deployment, remote office users complain that they are not connecting via 802.11n. Which willmost likely cause this problem?

A. The 521 AP does not support 5 GHz, which prohibits 802.11n.B. The 521 AP and 526 WLAN controllers do not support AES, which prohibits 802.11n.C. The 526 WLAN controller does not support external authentication via RADIUS, prohibiting authentication.D. The 526 WLAN controller does not support 802.11n with either v4.1 or v4.2.



QUESTION 114After going through the DCF process, what further process does the client go through to reserve a medium?

A. send a REQ, receive an ACK, send framesB. send an RTS and SIFS, receive a CTS and SIFS, then send framesC. no process; it can begin transmitting immediatelyD. send a CTS and SIFS, receive an RTS and SIFS, then send frames



QUESTION 115Which three guidelines are recommended by Cisco for proper VoIP operation? (Choose three.)

A. delay should not exceed 150 ms (one-way)B. packet loss should not exceed 0.1%C. delay variation (jitter) should not exceed 30 msD. packet loss should not exceed 1%

Correct Answer: DSection: (none)

Explanation


QUESTION 116Given:The Sniffer trace shows us the packets captured on two different channels, 1) the Red-Colored is Channel-11(Frame 1..4), and 2) the Blue-Colored is Channel-1 (Frame 5..15).Station STA with MAC address00:40:96:a1:4e:42 roams from Channel-11 to Channel-1. Note: There in NO filterapplied filtering 802.1X/EAP authentication frames.Question:Which statement best describes this Sniffer trace?


A. It shows a WPAv2 pre-shared key roaming.B. The 802.11 authentication algorithm is shared-key, data is send with WEP encryption.C. The 802.11 authentication algorithm is open, data is send with WEP encryption.D. It shows a Cisco Central Key Management (CCKM) fast secure roaming with AES encryption.



QUESTION 117What is included in the reassociation request message if a Cisco CKM client roams to a new access point?

A. The reassociation request contains a network session key which will be used for TLS and a sequentiallyincrementing rekey number.

B. The reassociation request contains the EAP identity. This shortens the full EAP reauthentication.C. The element in the reassociation request includes a timestamp, the rekey request number, and an

authenticated element.D. The reassociation request contains the PMKID list from the station, in order to allow the new AP to contact

the old AP to inherit the key material.




QUESTION 118What are two objectives of the 802.11a, 802.11b, and 802.11g Wi-Fi Alliance certification tests? (Choose two.)

A. performance above a high throughput threshold to demonstrate complianceB. interoperability with other products certified by Wi-Fi AllianceC. compliance with the IEEE 802.11 standardD. performance above a low throughput threshold to demonstrate interoperability



QUESTION 119Your company has a main office and many branches. It should have its users at the branches authenticate viathe main office using 802.1X without having controllers at the branches. This design can be supported by whichthree states? (Choose three.)

A. H-REAP in Connected modeB. WLAN in an authentication-local/switch-local stateC. WLAN in an authentication-central/switch-local stateD. WLAN in an authentication-central/switch-central state



QUESTION 120Which three items can identify criteria that are important conditions for supporting Voice over WLAN? (Choosethree.)

A. the separation of APs on the same channels should be 19 dBmB. APs with non-interfering channels should overlap by 5-10%C. APs with non-interfering channels should overlap by 15-20%D. the minimum power at the voice cell edge should be -67 dBm



QUESTION 121Study the following exhibit carefully. The People's Hospital is a large, multi-story, Level 1 trauma center locatedin the United States. This hospital is using a new multi-service WLAN infrastructure capable of supportingmultiple enterprise data applications, wireless medical telemetry, voice over WLAN using Vocera badges,location-based services, integrated RF spectrum analysis, rogue AP detection, automatic RF power andchannel optimization, and wireless guest access. The design states the use of Cisco Aironet 1242 AccessPoints. The People??s Hospital contracted with a Cisco Channel Partner to complete a site survey on the basisof these needs. The site survey report did not identify the exact model of antennas that should be used.Instead, the report specified that 2.0-dBi omnidirectional antennas should be used for the 2.4-GHz AP radiosand 4.0-dBi omnidirectional antennas for the 5-GHz AP radios. It also specified that spatial diversity must besupported. Which two antenna models would best satisfy the 5-GHz deployment requirement specified by thesite survey report? (Choose two.)


A. Cisco 6-dBi Omnidirectional antennaB. Cisco 4.5-dBi Diversity Omnidirectional antennaC. TerraWave 5-GHz 4.0-dBi Diversity Omnidirectional antennaD. Cisco 3.5-dBi White Dipole antenna, two per AP



QUESTION 122Before sending a frame over a medium and verifying that the medium is free, which process does a wirelessclient go through?

A. send a CTS frame, receive an RTS frame, then transmit the frameB. verify that NAV = 0, then transmit the frameC. send an RTS frame, receive a CTS frame, then transmit the frameD. check that NAV = 0, generate a random backoff, verify that the channel is free, verify that slot times = 0,

then transmit the frame



QUESTION 123What is peer-to-peer blocking used for?

A. prevents the use of peer-to-peer applications such as Gnutella and KazaaB. prevents traffic from wireless client to wireless client on the same VLAN, and forces all traffic to be

transferred to the upstream VLANC. prevents wireless-to-wired traffic, but permits wireless-to-wireless trafficD. prevents internal traffic between all devices on different WLANs



QUESTION 124A VoWLAN user reports bad voice quality. Which three items most likely cause this problem? (Choose three.)

A. round trip delay is greater than 150 msB. packet loss is greater than 1%C. jitter is greater than 30 msD. one-way delay is greater than 150 ms



QUESTION 125Study the given conditions carefully, then answer the following question. Wireless client (CB21) configured forSSID "CCIE-2".Configure standalone authonomous AP with three data VLANs plus the native VLAN. AAA server configured forLEAP and EAP-FAST authentication and dynamic VLAN assignment. Question:Why is this wireless client not able to associate to the network?

A. Attributes in use are not correct for VLAN assignment.B. Encryption should be configured under the SSID but it is configured under the VLAN.C. An RF issue, the client disconnects right after the successful authentication.D. The encryption and the key-management from the SSID/VLAN the client uses to associate must match the

encryption and key management the AAA server assigned during the authentication/authorization process.



QUESTION 126Which statement best describes MAC authentication?

A. The MAC address can be spoofed, so it is insecure.B. Users will not be able to connect unless some form of encryption is also used.C. The MAC address is used in place of the username in the EAP certificate exchange.


D. If WEP is used as a key cipher, the MAC address may be used in the key hash.



QUESTION 127Can you tell me when a client will provide an AP with its version of Cisco Compatible Extensions for WLANdevices?

A. when the AP sends an unsolicited update embedded in a beacon packetB. in an 802.11 association or re-association request frameC. upon successful EAP or dot1X authentication to the APD. in a broadcast probe request packet



QUESTION 128When an 802.11i wireless client with PKC enabled attempts an intra-controller roam between two APs on thesame WLC, what will happen?

A. The client will send its re-association request using the GTK so that both APs can decrypt it.The WLC then updates its client table to represent the client MAC address and PTK as being associated tothe new AP.

B. The client re-computes a PMKID from the previously used PMK and sends it during the associationprocess. If the WLC finds a match in its PMKID cache then the client can proceed with key exchangewithout involving the AAA server.

C. The client begins a new 802.1X authentication request and recomputes its Pairwise Master Key.D. The client will continue to use the same PTK and GTK, since authentication happens on the WLC and not

the AP.



QUESTION 129Certways University will soon complete a second building on its main campus. It wants to use Gigabit Ethernetfiber to connect two buildings. In order to satisfy the university's requirements of a new WLAN network for itsbuildings. Which three questions will you ask to arrive at an appropriate design? (Choose three.)

A. How many access points do you expect to need in your new building that is under construction?B. How many end users are there and what is the throughput per user needed?C. What is the security policy of your organization for wireless networks?D. Which mobility services do you need to run over your WLAN network? Certkey.com - Make You Succeed

To Pass IT ExamsCertkey 350-050



QUESTION 130Which debug command could determine whether an AP is registering with a WLC or not?

A. debug lwapp ap {AP-MAC} enableB. debug wlccp dumpC. debug lwapp events enableD. debug wlccp dump enable



QUESTION 131Which two statements best describe hidden node problems? (Choose two.)

A. Hidden node problems can be diagnosed and verified by enabling CTS to Self.B. The 802.11 MAC frame exchange protocol addresses these problems by adding two additional frames to

each frame exchange (a RTS and CTS frame).C. 802.11 WLAN media access is based on CSMA/CA. Therefore, every data frame needs to be

acknowledged by the receiver.D. Hidden node problems occur because each WLAN STA cannot be expected to communicate directly with

every other WLAN STA.



QUESTION 132Do you know how many WMM access categories there are, and how they relate to the IEEE 802.1D priorityclassification?

A. There are two access categories: Best Effort and Voice. IEEE 802.1D, SVP, or CDP determine whichaccess category is used. The access category used determines which EDCA timing parameters are usedfor transmitting the frame.

B. There are eight WMM access categories that directly correlate to the IEEE 802.1D priority classification.The access category used determines which EDCA timing parameters are used for transmitting the frame.

C. There are four WMM access categories: Best Effort, Background, Video, and Voice. A fixed mapping ofpriority information carried in the 802.1D Priority field to those four queues is defined by the Wi-Fi Alliance,together with suggested uses for each priority that are consistent with the suggested uses in 802.1D.

D. WMM access categories are part of the 802.11i AAA security standards, and define the different levels ofclient access in WPA, and WPA2. They have no relationship to IEEE 802.1D.



QUESTION 133Which two technologies can the IEEE 802.11h amendment introduce? (Choose two.)

A. HCCAB. DFSC. EDCAD. TPC



QUESTION 134Study the following exhibit carefully. Configure this client supplicant and AAA server for PEAP- MS-CHAPv2.According to this debug and show output, which device is causing this client to be unable to connect and why?


A. the client supplicant: it is not configured for dot1x

B. the RADIUS server: it provides the wrong server certificate (missing enhancement key usage field)C. the AP: it is misconfigured, because the RADIUS server port configuration is incorrectD. the client supplicant: due to an invalid Protected Authentication Credential



QUESTION 135Which is the objective of a radome?

A. to reduce the mechanical load from windB. to indicate which way the antenna is pointingC. to increase the gain of an antennaD. to mitigate interference



QUESTION 136Which action should be taken to collect and view a remote WLAN packet capture by use of a supported packetanalyzer from an AP?

A. change the AP mode to Sniffer, create a remote adapter with the Cisco WLC management IP on a packetanalyzer

B. change the AP to Sniffer mode, specify a time interval, and read packet captures from Cisco WLCmanagement

C. change the AP mode to Sniffer, configure the server IP address on the AP radio, and create a remoteadapter with the Cisco WLC management IP on a packet analyzer

D. change the AP to Sniffer mode, download a capture from the Cisco WLC, and open the capture with apacket analyzer



QUESTION 137After examining the output from the show wlccp ap command on your infrastructure AP, you discover that theAP is registered with the WDS AP. Then you observe the output of the show wlccp wds ap command on theWDS and find that the AP is registered. After reaching this infrastructure AP, how will authentication requesttraffic from wireless clients flow?

A. 1.Traffic will be forwarded to the WDS via WLCCP.2.The WDS will send the authentication requests to the RADIUS server.3.The WDS will receive the server response.

4.The WDS will communicate the status back to the infrastructure AP.5.The infrastructure AP will add the client to the association table if an access-accept has been receivedfrom the RADIUS server.

B. 1.Traffic will be forwarded to the RADIUS server.2.If an access-accept is received from the RADIUS server, the infrastructure AP will notify the WDS AP, sothat the WDS AP can track the client for the purposes of inter-AP roaming.

C. 1.Traffic will be forwarded to the WDS via WLCCP. If the client is already in the WDS mobility table, theWDS will notify the infrastructure AP and no further action will be taken. If the WD does not find the client inits mobility table, the following steps will be taken.2.The WDS will notify the infrastructure AP.Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-0503.The infrastructure AP will forward the traffic to the RADIUS server.4.If the infrastructure AP receives an access-accept from the RADIUS server, it will notify the WDS.

D. 1.Traffic will either be forwarded to the locally defined RADIUS server, or sent to the WDS via WLCCP.Thiscan be set up on a per-SSID basis.



QUESTION 138Which statement best describes shown Sniffer trace?

A. Frame-3 is an invalid packet. BSSID is missing and duration is the same as in frame-1 (=17) although thosetwo packets have different data-lengths, 48 versus 66 bytes.

B. Frame-3 is a retransmission of frame-1 because the corresponding ACK (frame-2) is not protected(protected-flag in frame-2 is set to zero.)

C. STA with MAC address 00:1b:77:05:4a:b9 is associated to two AP's ("Solid 802.11 redundancy"); therefore,we see the all data packets duplicated.

D. STA with MAC address 00:1b:77:05:4a:b9 is associated to a Repeater-AP with MAC address00:1d:45:7e:cf:50. The Repeater-AP is associated to Root-AP with MAC address00:1d:a1:90:c3:20.



QUESTION 139As part of the CSMA/CA algorithm for controlling wireless contention, which factor can be used in deriving theNetwork Allocation Vector in a packet?

A. duration fieldB. DIFSC. EIFSD. SIFS



QUESTION 140You work as a network designer. You are tasked with designing a wireless network for a high-rise dormitory inNew York City. Each floor is about 10,000 square feet with identical Apartment layouts. You use the Cisco WCSplanning tool to run the floor plan, and it is recommending three APs per floor. Which step is the next?

A. review physical locations for mounting APsB. perform a physical site surveyC. decide which authentication method will be appropriateD. prepare a Bill of Materials




QUESTION 141Which one of the following issues is the RTS/CTS mechanism used to address in an 802.11b network?

A. hidden node problemB. Network Allocation Vector synchronizationC. bandwidth overloadD. 802.11a compatibility



QUESTION 142Tom is a network engineer. He has just been tasked with recommending an AP for use in the outdoor courtyardof a hospital that is already using controllers. The courtyard is 50 feet wide by 50 feet long, and is surroundedby brick walls. An outdoor network connection and AC power receptacle will be available near the only door tothe courtyard. Which should be included in Tom's recommendation?

A. Cisco Aironet 1522 Access Point with an omnidirectional antennaB. Cisco Aironet 1310 Access Point with no external antennaC. Cisco 3200 Series MARC with no external antennaD. Cisco Aironet 1242 Access Point with no external antenna



QUESTION 143Which three parameters can be used in calculating the range of an outdoor link between two bridges? (Choosethree.)

A. Fresnel Zone diameterB. antenna gainC. cable length between bridge and antennaD. bridge transmission power



QUESTION 144Which information is most important for you to obtain from the customer in order to correctly design a wirelessnetwork?

A. previous experience with the old wireless networkCertkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

B. most active users on the networkC. critical applications that will run over the WLAND. issues concerning security breaches in the old security standards



QUESTION 145According to the following exhibit, WLC1 is using WLC2 as a mobility anchor for the "Guest" WLAN. Which twotraffic paths should be allowed through the firewall that sits between the two WLCs? (Choose two.)

A. IP protocol 97 between 192.168.101.100 and 192.168.201.100.B. IP protocol 47 between 192.168.101.100 and 192.168.201.100.C. UDP ports 16666 and 16667 between 192.168.1.100 and 192.168.2.100.D. IP protocol 97 between 192.168.1.100 and 192.168.2.100.



QUESTION 146Do you know at what distance the curve of the earth factors into the antenna elevation calculation?

A. greater than 6 miles (~10 km)B. 60% of the Fresnel zone


C. greater than 26 miles (~42 km)D. the width of the Fresnel zone, which varies depending on the distance by which the bridges are separated



QUESTION 147Which characteristic of wireless LAN controller allows traffic from clients communicating with each other on thesame SSID to be bridged, dropped, or forwarded at the wireless LAN controller?

A. multicast optimizationB. HREAPC. client bridge modeD. peer-to-peer blocking



QUESTION 148Which three functions will the access point in a Split-MAC architecture handle? (Choose three.)

A. 802.11i encryptionB. 802.11i key managementC. 802.11e queuingD. beacon generation



QUESTION 149The Certways University has 20 buildings and 10,000 students. It wants to implement a single SSID across thewhole campus. On the basis of university policy, students in the auditorium should not have Internet access,because standardized testing will be carried out there. Which feature will be helpful for deploying theuniversity's SSID?

A. AP groupsB. WLAN overrideC. MAC filteringD. AAA override



QUESTION 150While configuring Wireless Domain Services, which port is used for traffic between


infrastructure APs and the WDS AP?

A. Generic Routing Encapsulation GRE which is IP Protocol 47B. UDP destination and source protocol port 1645 (0x066D)C. UDP destination and source protocol port 1812 (0x0714)D. UDP destination and source protocol port 2887 (0x0B47) or Ethernet Type 34605 (0x872D)



QUESTION 151Which device controls Radio Resource Management in a centralized WLAN environment with multiple WLCsconfigured for mobility?

A. the AP that wins the RF electionB. the RF group leaderC. all the controllers in the same mobility groupD. the controller to which APs are currently registered



QUESTION 152On the basis of a site survey report, 172 APs are required to meet the coverage needs. The IT Director insistson an N+1 controller redundancy design for the access points. In addition, the design should allow for growth ofas much as 10% in the number of access points. What is the minimum WLAN controller configuration requiredto support these requirements?

A. four 4402 Wireless LAN ControllersB. four 4404 Wireless LAN ControllersC. three 4404 Wireless LAN ControllersD. one Cisco Wireless Service Module



QUESTION 153For the following Cisco IOS features, which one allows an access point to broadcast more than one SSID?

A. guest modeB. MBSSIDC. broadcast key rotationD. BBSSID



QUESTION 154Which standard should be met in order to ensure clients of H-REAP can maintain connectivity to the VLAN at acontroller?

A. The one-way-trip WAN delay should not exceed 100 milliseconds.B. WAN jitter should not exceed 10 microseconds.C. The round-trip WAN delay should not exceed 100 milliseconds.D. WAN jitter should not exceed 10 milliseconds.



QUESTION 155Which properties are of an AP in H-REAP mode?

A. Can switch client data traffic locally.B. Perform client authentication locally when its connection to the controller is lost.C. Support Cisco Centralized Key Management fast roaming.D. Allows some SSID/VLAN traffic to be switched locally while other SSID/VLAN traffic has full LWAPP

functionality.



QUESTION 156While using EAP type equal to PEAP with server-side TLS authentication, which option is correct?

A. The EKU field is required in the server certificate on the RADIUS server.B. The RADIUS server must be compliant with Cisco Compatible Extensions.C. The issuer of the certificate is Microsoft.D. Private and public keys must be shared by the client, controller, and RADIUS server.



QUESTION 157

How do the characteristics that are available on the Cisco WCS for Linux version differ from those of the CiscoWCS for Windows version?

A. Cisco WCS for Linux is required for deployments.B. Assuming that there are no differences in hardware, a Cisco WCS for Linux can support up to 750 wireless

LAN controllers. A Cisco WCS for Windows can support up to 250 wireless LAN controllers.C. Cisco WCS for Windows includes support for Cisco Spectrum Expert clients. Cisco WCS for Linux does not

support Cisco Spectrum Expert clients.D. There are no differences in features between the Linux and Windows versions of Cisco Certkey.com - Make

You Succeed To Pass IT ExamsCertkey 350-050WCS.



QUESTION 158The 2.4-GHz wavelength is about 4.92 inches (12.5 cm), if you want to support diversity on a 2.4- GHz radio, atwhat distance is it recommended you put two separate antennas?

A. 7.6 inches (19.30 cm)B. 12.2 inches (30.99 cm)C. 4.92 inches (12.5 cm)D. 24.6 inches (62.5 cm)



QUESTION 159You are a network technician. According to the following exhibit, a client configured for LEAP authentication, aRADIUS server configured for LEAP, and an autonomous AP configured as Displayed. If authentication fails forthe client, which is the most likely cause of this problem ?


A. The client supplicant: This client is providing the wrong EAP-ID in its EAP Identity response.B. The RADIUS server timeout: This timeout is too short; the access point will wait for the RADIUS server,

then the timer will expire and authentication will fail.C. The RADIUS server at 192.168.1.22: There is either a RADIUS key mismatch or user credentials are not

matching on the RADIUS Server.D. The AP: The AP is misconfigured, because the authentication is set to use the local database on the AP.




QUESTION 160Which two actions will happen when a wireless client deploys a Layer 2 roam between two WLCs withmanagement IP addresses on different IP subnets but dynamic interfaces in the same VLAN? (Choose two.)

A. The new WLC exchanges mobility messages with the original WLC and the client database entry is movedto the new WLC.

B. The client database entry is maintained on both the original and new WLCs.C. The original WLC marks the client with an "Anchor" entry in its own client database.D. The client database entry is removed from the original WLC once it has been entered into the new WLC.



QUESTION 161What is the reason that using a tool like Cisco Spectrum Expert is important?

A. It maps the RF area to a floor plan.B. It allows you to detect multipath.C. It allows you to see the radiating environment at Layer 1.D. It decodes WLAN IPS attacks



QUESTION 162In the AP Layer 3 controller discovery process, after the LWAPP Discovery Request is broadcast on a localsubnet, which action will AP take next?

A. Send an LWAPP response to the master controller if known.B. Send an LWAPP discovery request to controllers learned via OTAP if operational.C. Wait 5 seconds and resend a Discovery Request to the local subnet.D. Determine whether the controller responses are the primary controller.



QUESTION 163

Which three options are true when an H-REAP AP is in the "authentication down/local switching" state for agiven WLAN? (Choose three.)

A. New WebAuth sessions are permitted.B. The AP continues to send beacon probes and responses to keep current clients connected.C. 802.11 roaming events incur a full 802.1X re-authentication.


D. Any new clients trying to authenticate are rejected.



QUESTION 164The following message can be seen on a Cisco WCS:AP 'floor-1-lobby', interface '802.11b/g' on Controller '10.1.1.1'. Noise threshold violated. There is also acorrelation between the occurrence of the message and user complaints.Which action should you take?

A. Check the logs for rogues in the area, then turn on rogue mitigation.B. Seek out the source of the noise with a spectrum analyzer.C. Manually increase the power of the AP to overcome the interference.D. Increase the interference threshold from the default 10%.



QUESTION 165Tom works as a network administrator for a company. He is asked to manually configure the Tx power on an802.11b access point to a power level of 1 (100 mW) after implementing a Cisco 7921G wireless IP phonewithin a Cisco Unified Wireless Network. Which problem is the user likely to experience when the phoneassociates to the AP?

A. one-way audioB. loss of connectivity to Cisco Unified Communications ManagerC. audio delay or jitter or bothD. the phone displays a "network busy" status message



QUESTION 166Which statement accurately describes communication between the WDS and other APs in a WLAN setupusing WDS?

A. Communication is protected using multicast traffic, which is restricted to the local Layer 2 network.B. Communication is protected using X.509 certificates, which can be either self-signed or manufacturer-

installed.C. Communication is protected using a Context Transfer Key, which is manually configured on the AP.D. Communication is protected using a Context Transfer Key, which is negotiated during WDS authentication.



QUESTION 167You are a network engineer at certways.com, When creating a wireless profile in the Cisco ADU and you haveselected the WPA/WPA2/CCKM radio button option, what other decision will you make and then configure onthis same screen?

A. the SSID of the wireless clientB. the length and value of the pre-shared keyC. the EAP type to be used for authenticationD. the encryption type



QUESTION 168Alex is a network engineer for a company, he is now upgrading a large autonomous WLAN deployment toLWAPP operation. He has successfully imported a X.509 self-signed certificate into the WLC. But, when hetries to add additional self-signed certificates, the WLC GUI reports a "Failed to Add entry" error. Whichcommand can diagnose the root cause of this problem?

A. show exclusionlistB. show database summaryC. show sysinfoD. show wps summary



QUESTION 169Which description is true about NIC cards certified by Cisco Compatible Extensions?

A. They support Cisco WLAN technology enhancements.B. They support Cisco standards such as LEAP and EAP-FAST but not PEAP-MSCHAP.

C. They support 802.11 standards plus power management only.D. They are compliant with Cisco Compatible Extensions, but not with Wi-Fi.



QUESTION 170How to use Cisco WCS as part of the preliminary site survey for an unfinished building?

A. find the exact location of the APs on the floor mapB. detect sources of RF interferenceC. detect possible security policy violationsD. create obstacles on floor plans that can be taken into consideration when computing RF Certkey.com -

Make You Succeed To Pass IT ExamsCertkey 350-050prediction heat maps for APs



QUESTION 171Which roaming situation using controllers in a Cisco Unified Wireless Network requires a client by use of WPA2with PKC to reauthenticate to the network?

A. A wireless client roams to another AP on the same controller.B. A wireless client roams to another AP after being out of range of the network for 2 minutes.C. A wireless client roams to another AP on a different controller in the same mobility domain.D. A wireless client roams to another AP on a controller in a different mobility domain.



QUESTION 172Study the following situation carefully, then answer my question. A corporate wireless PC is stolen. Theoperating system, username, and password are known, and the WPA-PSK is stored on the PC. The PC is thenused to try to obtain access to the corporate network. Which method can prevent access from being granted tothis PC?

A. An extended access list should be used on the default gateway of the WLAN/SSID to which the stolen PCwould be connecting.

B. There should be a Layer 3 filter on the AP or WLC.C. Peer-to-peer blocking should be used to prevent the PC from communicating once on the network.D. The WPA-PSK should be changed in the AP or WLC, and on all corporate PCs.



QUESTION 173When peer-to-peer blocking is disabled, what happens to the traffic between two users with the same SSID?

A. traffic is inspected by the controller for malicious attacksB. traffic is dropped from wireless user to wireless userC. traffic is bridged on the same controllerD. traffic is forwarded to the upstream VLAN; the device above the controller decides what action to take

regarding the packets



QUESTION 174Quality of Service (QoS) refers to the capability of a network to provide better service to


selected network traffic over various technologies. You are configuring a Cisco Wireless LAN Controller toutilize QoS, and have configured the platinum queue on the controller. However, the Cisco Catalyst 3750 SeriesSwitch connected to the Cisco Wireless LAN Controller does not contain any QoS configuration. Whichcommand should be performed on the Catalyst 3750 Series Switch to provide the necessary QoS for voiceclients on the wireless network?

A. enable 802dot1pB. mls qos trust dscpC. config wlan qos wlan-id platinumD. switchport priority extend cos 5



QUESTION 175Study the following situations carefully, then answer my question. Wireless client (CB21) configured for SSID"CCIE-2"; IP address "dhcp". Configure standalone authonomous AP with three SSIDs and three data VLANsplus the nativeVLAN. AAA server IP ranges:VLAN-2:10.20.1.1.100-10.20.1.128VLAN-3:10.30.1.1.100-10.30.1.128VLAN-4:10.40.1.1.100-10.40.1.128Question:The user wants to get an IP address from VLAN-2 which is mapped to the SSID CCIE-2 the client is

associating. Why does this wireless client get a wrong IP address?

A. LEAP authentication fails due to wrong password or unknown username, therefore the wireless-client ismapped to the default VLAN.

B. The RADIUS server is not reachable from the AP, therefore the wireless client is mapped to the defaultVLAN.

C. LEAP needs "network-eap" <eap_methods> on the SSID. You must not configure "open eap"<eap_methods.>

D. The RADIUS server assigned VLAN-4 during authentication/authorization process.



QUESTION 176You are a network technician at certways.com ,study the options carefully.A client is attached to the CiscoUnified Wireless network by use of controllers. When the client is using WPA2 and EAP authentication, whereare the wireless encryption keys located during the active user session? (Choose two.)


A. on the clientB. on the Cisco WCSC. on the RADIUS serverD. on the access point



QUESTION 177On or after July 20, 2007, all WLAN products shipped in Canada and the US need to meet the FCC rule 15.407(h)(2). What exactly does this rule indicate?

A. The rule finally releases "UNII-2" and "UNII-2 extended" (5.25-5.35 GHz and 5.47-5.725 GHz, respectively)for industrial wireless fidelity usage.

B. Products operating in the "UNII-2" and "UNII-2 extended" bands must not enable transmit power control,

because the additional transmission gain of TPC may disturbs radar systems.C. This rule mandates that products operating in the "UNII-2" and "UNII-2 extended" bands must support

Dynamic Frequency Selection, to detect and automatically adjusts channels to protect WLANcommunications from interfering with radar systems.

D. Products operating in the "UNII-1" band must not enable Transmit Power Control, because the additionaltransmission gain may disturb radar systems.



QUESTION 178By which DHCP option may a list of wireless LAN controllers be offered to the AP during the Layer 3 LWAPPJoin process?

A. 6B. 43C. 44D. 46



QUESTION 179Which antenna type would have the narrowest horizontal beam?

A. parabolic dishB. omnidirectional antennaC. patch antennaD. Yagi antenna



QUESTION 180Which statement best describes an infrastructure basic service set according to IEEE 802.11 specifications?

A. No relaying of signals from one client to another client.B. Also called an Ad Hoc Network.C. Enables the use of ESS.D. The BSSID is generated from the first wireless client that starts up in the IBSS.

Correct Answer: C



QUESTION 181In the Cisco Unified Wireless architecture, which three devices are in charge of generating the 802.11i PairwiseMaster Key? (Choose three.)

A. WLAN controller in local EAP modeB. LWAPP access pointC. Cisco Secure ACSD. Cisco Secure Services Client



QUESTION 182Which is a must for the delivery of unicast frames buffered at the AP in power-save mode to sleeping stations?

A. The AP must send beacons, including a "buffered unicast frame" message, to notify each sleeping stationthat it needs to send a poll message.

B. The AP must send a CTS to wake up each sleeping station.C. The AP must send probe responses to the latest SSID each sleeping station has been using.D. The AP must forward the buffered frames at the DTIM interval.



QUESTION 183While designating a known rogue AP, what information is entered in an LWAPP system?

A. the MAC address of the rogue's radio interfaceB. the base BSSID of the rogue AP with the last address digit ending in zeroC. the MAC address of the rogue's Ethernet interfaceD. the IP address of the autonomous AP in a migration situation



QUESTION 184Which of the following items increases bandwidth and resists multipath problems by carrying data in

subcarriers?

A. Narrow Band FrequencyB. Direct Sequence Spread SpectrumC. Frequency Hopping Spread SpectrumD. Orthogonal Frequency Division Multiplexing



QUESTION 185When a mesh AP is selecting a potential parent, which primary mechanism will be used?

A. controller nameB. AP MAC addressC. bridge group nameD. Adaptive Wireless Path Protocol



QUESTION 186It is suggested that you prime or stage your lightweight access points in a convenient location, rather that afterthey have been installed in locations that may be difficult to reach. Which three items can be configured byusing the controller CLI, controller GUI, or Cisco WCS while priming a lightweight AP prior to deployment?(Choose three.)

A. to configure the lightweight access point with primary, secondary, and tertiary controller namesB. to configure the Controller Mobility Group name, if the lightweight access point is in a Controller Mobility

GroupC. to configure the access-point-specific LED blink sequenceD. to configure the access-point-specific 802.11a, 802.11b, and 802.11g network settings Certkey.com - Make

You Succeed To Pass IT ExamsCertkey 350-050



QUESTION 187An access point (AP) is a specially configured node on a wireless local area network (WLAN). How does anaccess point dynamically learn the address of an active AP acting as a WDS?

A. Layer 3 multicastB. Layer 3 unicast

C. Layer 2 multicastD. Layer 2 broadcast



QUESTION 188Which two statements accurately describe an 802.11i wireless client with PKC enabled within a WLC-basednetwork? (Choose two.)

A. Both the client and WLC maintain a copy of the PMK during the roaming process.B. While the client is in the roaming process, the AP being roamed to and the AP being roamed from will

encrypt the client data using the GTK instead of the PTK, so that the client can continue to receive packetswhile performing the 4 way handshake.

C. PKC is able to achieve enhanced roam times by cutting out the four-way handshake for roaming clients.This eliminates the time needed to produce a new PTK and GTK.

D. The client will send a message to an AP to which it is roaming; the message will contain a PMKID indicatingthat the client prefers to use the same PMK it has been using to generate a new PTK.



QUESTION 189A controller is connected to a Cisco IOS Catalyst switch. The following is the switch port configuration:interface GigabitEthernet 1/0/10switchportswitchport trunk encapsulation dot1q switchport trunk allowed vlan 1,20,30,50 switchport trunk native vlan 20switchport mode trunk

Which one of the controller CLI commands assigns its management interface to the Cisco IOS Catalyst switchnative vlan interface?

A. config interface vlan management 0B. config interface vlan management 20


C. config interface vlan management 30D. config interface vlan management 1



QUESTION 190For the following interfaces, which needs to be identical in all controllers of a mobility group for proper inter-controller roaming?

A. service-port interfaceB. management interfaceC. virtual interfaceD. AP Manager interface



QUESTION 191According to the Cisco Spectrum Expert "FFT Duty Cycle" screen capture shown in the exhibit below, whichtype of device will most likely generate the signal in Wi-Fi channel 1?

A. a spread-spectrum, narrowband, frequency-hopping deviceB. a high-power, broad-spectrum, frequency-hopping deviceC. a high-power, narrow-spectrum, direct-sequence device using CCK modulationD. a broad-spectrum, low-power device



QUESTION 192Examine the following situations carefully, then answer my question. Utilize PEAP-MS-Chapv2 forauthentication to a WLAN with Cisco Secure ACS as the RADIUS server used in conjunction with MicrosoftActive Directory (AD). User authentication is failing, and in the ACS log (Failed Attempts) you see under theAuthentication Failure-Code, something similar to "EAP-TLS or PEAP authentication failed during SSLhandshake." Which is the most likely cause of this problem?


A. The EAP type from the supplicant and ACS do not match: one party is configured for EAP- TLS, the other

for PEAP. Further details can be seen in the corresponding RDS.log file.B. PEAP-MS-CHAPv2 has failed during Phase 1. The client supplicant is probably not accepting the server

certificate. Further details can be seen in the corresponding AUTH.log file.C. A client supplicate timeout has occurred (probably due to roaming to another access point).

This has caused the SSL handshake to also time out, and therefore it has failed. Increasing the dot1x-client-timeout value on the access point will probably solve this issue.

D. PEAP-MS-CHAPv2 PAC provisioning has failed (Phase 0). The client supplicant is probably not configuredfor autonomous PAC provisioning.



QUESTION 193What is the reason that Cisco recommends using Tftpd32 version 3.0 or later when upgrading wireless LANcontroller software to release 4.1 or later?

A. Tftpd32 is Cisco Compatible Extensions version 4 compliantB. Tftpd32 supports TFTP file transfers larger than 32 MBC. Tftpd32 is a component of CiscoWorks LMSD. Tftpd32 supports EoIP tunneling which is required for remote Cisco WLC upgrades



QUESTION 194How to deliver the 802.11i Pairwise Master Key to the client supplicant during 802.1X authentication?

A. encrypted with the EAPOL Key Encryption KeyB. via a secure LWAPP control channelC. unencrypted


D. it is not transmitted



QUESTION 195A retail chain is planning to create a wireless network to support checkout registers. Which three actions mustbe taken to make sure that the wireless network is PCI-compliant? (Choose three.)

A. enable WPAB. install PKI certificates on client devices

C. disable broadcasting of the SSIDD. change default passwords and community strings



QUESTION 196Which two statements correctly describe RTS/CTS sequences? (Choose two.)

A. They are used when 802.11n in "legacy mode" is being used in a mixed environment with 802.11b/g STAs.B. They are used to resolve hidden node problems. Sources send RTS frames to destinations, and

destinations return CTS frames to sources.C. They are used to resolve hidden node problems. Sources send CTS frames to destinations, and

destinations return RTS frames to sources.D. They are used by STAs as soon as frame length is greater then the configured RTS threshold.



QUESTION 197How to describe the radiation pattern of patch and Yagi antennas when viewed from the side (H- plane)?

A. the patch patterns are egg-shaped, the Yagi patterns are conicalB. the patch patterns are doughnut-shaped, the Yagi patterns are conicalC. the patch patterns are conical, the Yagi patterns are doughnut-shapedD. the patch patterns are conical, the Yagi patterns are egg-shaped



QUESTION 198If you have the Cisco ADU installed but wish to use the Windows Zero Config utility to configure a wirelessnetwork profile, which action should you take first?


A. Uninstall the Cisco ADU.B. Define a common profile in both the Cisco ADU and WZC.C. In the WZC utility, make sure that the box labeled "Use Windows to configure my Wireless Network

Settings" is checked.D. Define the wireless profile in the Wireless Networks tab in WZC.

Correct Answer: C



QUESTION 199Which three options are true about the Sniffer trace? (Choose three.)

A. STA with MAC address 00:1c:f6:63:98:30 reserves in its RTS the medium unitl frame-3 has beentransmitted.

B. Before frame-2 can be sent, sender needs to wait for a duration of the "Short Interframe Space" (SIFS) timeafter receiving frame-1.

C. This Sniffer trace shows a RTS/CTS NAV distribution mechanism which is quite robust against hiddennodes and collisions.

D. STA with MAC address 00:1c:f6:63:98:30 reserves in its RTS the medium unitl frame-4 has beentransmitted.



QUESTION 200Which two descriptions are correct about Dynamic Frequency Selection? (Choose two.)

A. DFS is fully supported on all Cisco Aironet 1130, 1240, and 1250 Series Access Points.B. After radar has been detected on a DFS-enabled channel, it cannot be used for 30 minutes.C. The Rogue Location Discovery Protocol and rogue containment are not supported for channels on which

DFS is enabled.D. The minimum legal transmit power is greater for some 5-GHz channels than for others.

When a DFS event causes the controller to randomly select a 5-GHz channel on which power is restricted,the controller automatically increases transmit power to comply with power limits for that channel.



QUESTION 201The short preamble subfield is transmitted by an access point or station. Which statement best describes theshort preamble?

A. It is only used for 802.11b signaling; 802.11g uses long frames for increased performance.B. It indicates the start of a frame delimiter and is used to support the increased size of the 802.1p and 802.1q

frames.Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

C. It allows for more efficient data transfers, resulting in better overall throughput.D. It is typically used at the lower data rates of 1 Mb/s or 2Mb/s, and may be found when using equipment from

other vendors.



QUESTION 202How to differ application-specific devices from laptop computers in the way they support Cisco CompatibleExtensions?

A. There is no differentiation. ASDs and laptops must both support the same CCX features.B. ASDs are required to support only CCXv1 and v2 features. Laptops must support all CCX features.C. Several features that are required for laptops are not required for ASDs.D. ASDs are required to support only CCXv5 management features, while laptops are optional features.



QUESTION 203IEEE 802.11g-2003 or 802.11g, is an amendment to the IEEE 802.11 specification that extended throughput toup to 54 Mbit/s using the same 2.4 GHz band as 802.11b. An 802.11g client "hearing" a beacon with the UseProtection bit set in the ERP information element is required to take which action?

A. transmit a CTS frame with a receiver address of its own MAC address before transmitting its data frameB. set the protection bit in all data framesC. cease further transmissions and wait for receipt of a CTS frame before proceedingD. transmit a CTS frame with a receiver address of the target receiver MAC address



QUESTION 204If multipath interference is occurring, which parameter indicates, and which radio characteristic is most directlyrelated to a device's ability to mitigate the impacts of multipath interference?

A. The "Available Transmit Power" parameter indicates that multipath interference is occurring, and "diversity"provides relief to a wireless network in a multipath scenario.

B. The "Delay spread" parameter indicates that multipath interference is occurring, and "diversity" providesrelief to a wireless network in a multipath scenario.

C. The "Receiver Sensitivity" parameter indicates that multipath interference is occurring, and "FCC BulletinOET-65C Compliance" provides relief to a wireless network in a multipath scenario.Certkey.com - Make You Succeed To Pass IT ExamsCertkey 350-050

D. The "Delay spread" parameter indicates that multipath interference is occurring, and "Data RatesSupported" provides relief to a wireless network in a multipath scenario.

Correct Answer: B



QUESTION 205You work as a network administrator for a company. You are asked to configure three WLANs on the WirelessLAN Controller (WLC).A wireless client should be connected tothe WLAN with the SSID "internet". Using the"view available wireless networks" command only allows connecting to the WLAN with the SSID "fabi-net".What most likely causes this problem?

A. The needed WLANs are not enabled on the WLC.B. This wireless client only doing passive scanning. Therefore it only lists SSIDs which are broadcasted within

beacons.C. The beacon interval is set too high (more than 1 second); therefore, the client is missing certain beacon

information.D. The traffic indication map (TIM) is empty; therefore, the client is ignoring the WLAN advertisements.



QUESTION 206When choosing an EAP type for your Cisco ADU security profile, in order to authenticate successfully, whatmust you ensure?

A. that the time set on the clocks for the wireless client and the authenticator are close to the same timeB. that the client and authentication server support the same encryption protocolC. that the EAP type that you selected is supported by the authentication serverD. that the EAP type selected is known not to exchange any of its credentials in the clear



QUESTION 207In order to guarantee acceptable voice quality, the Cisco Unified Wireless IP Phone 7921G must always havesignal strength of -67 dBm or better. Which is the minimum recommended signal-to-noise ratio in this scenario?

A. 5 dBB. 20 dBC. 25 dBD. 67 dB




QUESTION 208Which description concerning wireless voice traffic is correct?

A. Voice traffic is more latency-sensitive.B. Wireless voice traffic must be on a dedicated channel apart from wireless data.C. Wireless voice devices cannot share APs with wireless data NIC cards.D. 1Mb/s and 2Mb/s data rates are required for the phones, but not for the wireless data traffic.



QUESTION 209The PassGuide company is opening a small remote branch office. The employees in the branch office willrequire WLAN access. As part of the company??s privacy policy, all WLAN traffic is required to utilize Identity-Based Network Services. A site survey has been performed and it has been determined that two APs arerequired to provide WLAN access. The branch office will use a high- speed WAN link to connect to theheadquarter, where several Cisco Wireless Services Modules are located. The IT director thinks that thebranch office is too small to justify a dedicated Cisco WLC. Which item is correct about supporting LWAPPover WAN?

A. Only autonomous APs can be used in this scenario.B. The round-trip latency between the AP and Cisco WLC should not exceed 100 ms.C. The minimum bandwidth required to support LWAPP is 1.5 Mb/s.D. APs should never be placed across WAN links. A Cisco WLCM or WLC 2106 should be installed at the

clinic.



QUESTION 210AP-based Wireless Domain Services support which three features or functions? (Choose three.)

A. Layer 2 fast secure roamingB. Layer 3 fast secure roamingC. radio managementD. integration with the CiscoWorks Wireless LAN Solution Engine



QUESTION 211Examine the following items carefully, which three Cisco Unified Wireless Network capabilities use informationthat Radio Resource Management neighbor messages provide? (Choose


three.)

A. Aggressive Load BalancingB. Over-the-Air ProvisioningC. Hybrid Remote Edge Access PointD. Inter-controller Mobility (that is, Mobility Groups)E. Rogue AP ClassificationF. Dynamic Channel Assignment

Correct Answer: BEFSection: (none)Explanation


QUESTION 212What is the reason that the wireless client can??t access the network?

A. EAP-FAST PAC provisioning is failing.B. Wireless client does not have a valid PAC.C. EAP-Type configured on client (PEAP) is not supported by AAA server.D. Wireless client did not accept the server certificate.



QUESTION 213For the following options, which one is correct about an 802.11g client's response to receiving a beacon withthe Barker Preamble Mode bit set to zero?

A. It must change its preambles on all data frames to short.B. It must send an RTS frame out with the Pit Bull bit set to Zero.

C. It can set its preambles to long.D. It can change its preambles based on network conditions.



QUESTION 214You are a network designer for a company. You are tasked with designing a wireless mesh network to supportphysical security at a construction site in Shanghai City. Now the site has a


large excavation with a perimeter fence and several gates. What should be your first request from the customerto ensure a successful deployment?

A. a physical site surveyB. a list of the client devices that will be deployedC. installation poles with AC powerD. fiber installation around the perimeter



QUESTION 215-What is the effect of configuring a single SSID to simultaneously support both TKIP and AES encryption?

A. This is a common configuration for migrating from WPA to WPA2. There is no problem associated withusing this configuration.

B. Some wireless client drivers might not handle complex SSID settings and may be unable to associate to theWLAN.

C. The overhead associated with supporting both encryption methods will significantly degrade clientthroughput.

D. This is an unsupported configuration and the Cisco Wireless Control System will continuously generatealarms until the configuration is corrected.



QUESTION 216Given:Tom works as a network engineer for a company. He is asked to prepare a wireless Bill of Materials and isusing the WCS planning tool to assist him in his efforts. Tom has deployed the tool once using "LightWalls" (2dB loss), and it is suggesting nine APs. In order to better reflect reality he plans to run the tool againafter changing the attenuation of the walls to "Thick Walls" (13dB). When Tom runs the tool again, it still

recommends nine APs. Which step should Tom take next?

A. Click Advanced Options and select Aggressive as the Data/Coverage safety Margin. Then run the tool againand create the Bill of Materials.

B. Open a TAC service request.C. Select the "Override Coverage per AP" check box and run the tool again.D. Manually adjust the AP positions to best accommodate the higher loss walls and optimize predicted

coverage. Manually add APs as required and create the Bill of Materials.




Can you tell me how Extended Distributed Channel Access prioritizes WLAN traffic?

A. EDCA does not prioritize WLAN traffic. EDCA is an extension of the WLAN MAC that allows more clientsper AP.

B. The AP polls WLAN clients based on the client traffic priority negotiated when the client associates with theAP.

C. Client and AP traffic use different delay timers and random backoff characteristics for different trafficpriorities.

D. The AP polls WLAN clients based on the client traffic priority negotiated when the client needs to prioritizeWLAN traffic.



QUESTION 218Which item is the main difference between an RF planning tool and a site survey tool?

A. an RF planning tool is generally much more expensiveB. an RF planning tool will measure the RF coverage by AP locations, indicating antennas and output powerC. an RF planning tool does a better job of showing actual -65 dBm edgesD. an RF planning tool is a predictive tool, where a site survey tool measures the actual RF environment



QUESTION 219Observe the following statements, which limitation applies to the use of the Cisco WLAN Solution Managementover Wireless feature?

A. Read-write access is not available; only read-only access is supported.B. Controllers must be managed using only secure protocols (that is, SSH and HTTPS), not nonsecure

protocols (that is, HTTP and Telnet).C. Uploads and downloads from the controller are not allowed.D. Wireless clients can manage other controllers however not the same controller and AP to which the client is

associated.



QUESTION 220Which statement is true about the authorization aspect of AAA?

A. Authorization takes place after a successful authentication and provides the Cisco WLC the informationneeded to allow client access to network resources.

B. Successful authorization will provide encryption keys that will be used to secure the wireless Certkey.com -Make You Succeed To Pass IT ExamsCertkey 350-050communications between client and AP.

C. Authorization is the validation of successful DHCP address delivery to the wireless client.D. Authorization must be successfully completed in order to proceed with the authentication phase.



QUESTION 221Which communication method will you use between the Cisco Catalyst 6500 Series Supervisor Engine 720 andWireless Services Module?

A. WLCCPB. SNMPC. WCPD. CDP



QUESTION 222Hybrid Remote Edge Access Point (H-REAP) is a solution for branch office and remote office deployments.While deploying H-REAP over a WAN connection, which three guidelines must be followed? (Choose three.)

A. the minimum WAN connection is 128 kb/sB. round trip delay must not exceed 200 ms

C. at a minimum, a 500-byte MTU is required between the AP and the controllerD. round trip delay must not exceed 100 ms



QUESTION 223For the following amendments to the IEEE 802.11 WLAN standard, which three define the physical layer?(Choose three.)

A. IEEE 802.11aB. IEEE 802.11bC. IEEE 802.11wD. IEEE 802.11g



QUESTION 224As a network technician, can you tell me which two services are offered on Cisco Unified Wireless Networksrunning controller v5.0 but not offered on Cisco Mobility Express Solution


by use of 526 controllers with v4.2 code? (Choose two.)

A. GUI managementB. Authentication using 802.1XC. Guest accessD. Location servicesE. IDS/IPS

Correct Answer: ESection: (none)Explanation


QUESTION 225While configuring the WLAN controller to utilize 802.11n deployment, the onsite engineer has disabled WMM.Which problem will result because of this change?

A. The 802.11b/g band will work, but not the 802.11a band.B. Cisco 7921 wireless IP phones will not work.C. The wireless network will no longer support 802.11n rates.

D. Wireless multicast media traffic, such as IPTV, will no longer flow to the wireless devices.



QUESTION 226While examining a WLAN traffic capture, which one of the following characteristics can indicate that the APsupports WMM and the AP and WLAN clients have been exchanging WMM traffic?

A. CWmin and CWmax values exchanged during the association process and 802.1D QoS fields in the 802.11data frame

B. there is no way to make this determination by examining the WLAN traffic capture; you can only determineWMM behavior by examining the queues on the APs and WLAN clients

C. different delays used when sending and receiving traffic between the clients and the APD. RSVP negotiations have stream IDs



QUESTION 227Which characteristics are of Radio Resource Management Neighbor messages?

A. transmitted at maximum powerB. transmitted at the lowest supported data rateC. transmitted every 60 secondsD. transmitted on all serviced channels



QUESTION 228Which condition must exist in order to seamlessly roam between two wireless cells in a Cisco Unified WirelessNetwork using controllers?

A. The client's password must be the same on both APs.B. The next cell should be on the same channel as the client's current cell.C. The wireless client must use an EAP authentication method with the infrastructure authenticator.D. The next cell should provide the same SSID as the client's current cell.



QUESTION 229Given: You have two RADIUS servers, one at 1.2.3.4, which only does LEAP, and the other at 5.6.7.8, whichdoes PEAP and EAP-TLS, but not LEAP. Question:Observe the following sets of IOS commands, which could send SSID "a" authentication requests to the LEAPserver and SSID "b" authentication requests to the PEAP and EAP-TLS server?


A. AB. BC. C



QUESTION 230Observe the following options carefully, which functionality, as defined by IEEE 802.11e, does


WWM certify as part of the tests for QoS done by the WiFi Alliance?

A. EDCAB. HCCAC. Direct Link SetupD. S-APSD



QUESTION 231Which two capabilities are of Cisco Spectrum Expert? (Choose two.)

A. spectrum analysis of only IEEE 802.11a/b/g devicesB. detection of Wi-Fi APs and clients, and, when the analysis device has a Wi-Fi network card, classification of

those devicesC. spectrum analysis of IEEE 802.11n Draft 2.0 devicesD. detection and classification of Wi-Fi APs and clients when the analysis device has no Wi-Fi network card



QUESTION 232256 bits is the length of the 802.11i Pairwise Master Key used to generate the Pairwise Transient Key?

A. TrueB. False



QUESTION 233RRM plays a critical role in optimizing, fairly allocating and adaptively reusing the scarce resources in wirelesscommunication. Which two tasks does RRM routinely perform? (Choose two.)

A. antenna selection

B. AP address assignmentC. transmit power controlD. channel assignment



QUESTION 234Which two statements accurately describe AP-specified maximum transmit power, also known


as transmit power control? (Choose two.)

A. The ability to dynamically set client output power during the association process increases the overallperformance of the wireless network and improves WLAN device battery life.

B. To support AP-specified maximum transmit power, a client station must limit its transmit power to the valuespecified in the Cell Power Limit information element contained in every data frame.

C. With the ability to identify the number of associated clients, cell sizes, and adjacent access point radiosignals, the access points can determine the optimum transmit power required for the clients.

D. The ability to provide AP-assisted power roaming enables a client to roam from one AP to another morequickly by reducing the time that the client spends scanning for available APs.



QUESTION 235If an autonomous access point allows associations from client devices that do not specify SSIDs in theirconfigurations, which description is true concerning Public WLAN or guest network client access?

A. You can set up a broadcast SSID. The access point includes the broadcast SSID in its beacon.B. You can set up a guest SSID. The access point includes the guest SSID in its beacon.C. You can set up a guest SSID. The access point includes the guest SSID in its probe response.D. You can set up a hotspot SSID. The access point includes the hotspot SSID in its probe response.



QUESTION 236How to prevent deauthentication flood attacks on the WLAN?

A. Enable EAP-FAST, which will protect the 802.11 management frames using a PAC, thus making itimpossible for the attacker to spoof them.

B. Enable 802.11i, which will protect the 802.11 management frames using AES.C. Enable Management Frame Protection on the clients and APs or WLCs, which will create a hash of the

802.11 management frames that the attacker will not be able to duplicate.D. Enable shared authentication, which will require the attacker to break the shared key before being able to

perform the attack.




More often than not, what is the difference in transmit power between an AP operating at Tx Power Level 1 andthe same AP operating at Tx Power Level 3?

A. 11 dBB. 2 dBC. 6 dBD. 3 dB



QUESTION 238Wi-Fi Multimedia is a technology maintaining the priority of audio, video and voice applications in a Wi-Finetwork so that other applications and traffic are less likely to slow them.

A. Unscheduled Service Period: The service period that is started when a WMM STA transmits a trigger frameto the WMM AP.

B. definition of the differentiated services fieldC. Enhanced Distributed Coordination Function mechanismD. four access categories: A label for the common set of Enhanced Distributed Channel Access parameters

that are used by a WMM STA to contend for the channel in order to transmit MSDUs with certain priorities.



QUESTION 239John works as a network engineer. While solving a VoWLAN problem at a customer's site, he discovers manyreflective surfaces within the environment. Now, the WLAN controller has all of the default settings configured.Cisco Aironet 1240 Series Access Points have been deployed; with a single antenna physically attached toeach AP. VoWLAN handsets are operating in the 2.4- GHz band only. Which is the best solution to thisproblem?

A. Disable low data rates (such as 1 Mb/s and 2 Mb/s) on the AP radios.B. Increase the AP radio transmit power.C. Add a second antenna to each access point.D. Enable diversity on the WLAN controller.



QUESTION 240In order to track mobile devices properly by the location-based services, which of the following is arequirement?

A. a minimum of three access points, each with a signal strength of -67 dBm or betterB. a minimum of four access points, each with a signal strength of -67 dBm or better Certkey.com - Make You

Succeed To Pass IT ExamsCertkey 350-050

C. a minimum of two access points, each with a signal strength of -75 dBm or betterD. a minimum of three access points, each with a signal strength of -75 dBm or better


Explanation/Reference:Certkey.com - Make You Succeed To Pass IT Exams

QUESTION 241According to the troubleshooting actions, choose proper troubleshooting process order.

1. Create a testing action plan based on the information gathered.2. Clearly define the trouble reported.3. If the problem has not been solved, change vanables and repeat process.4. Collect data to isolate possible causes.5. Analyze the results.6. Execute tests to identify the actual source of the problem.

A. Step1II.Step2III.Step3IV.Step4

B. Step5VI.Step6

C. I-2,II-4,III-1,IV-5,V-6,VI-3D. I-2,II-4,III-1,IV-5,V-3,VI-6E. I-2,II-4,III-1,IV-3,V-6,VI-5F. I-2,II-4,III-1,IV-3,V-5,VI-6


Correct Answer: ASection: (none)

Explanation


QUESTION 242On a Cisco Unified Wireless Controller, which three Access Point modes allow for client connectivity? (Choosethree.)


A. Local ModeB. Bridge ModeC. H-REAP ModeD. Monitor Mode

Correct Answer: ABCSection: (none)Explanation









QUESTION 244When peer-to-peer blocking is disabled, what happens to the traffic between two users with the same SSID?

A. traffic is inspected by the controller for malicious attacksB. traffic is dropped from wireless user to wireless userC. traffic is bridged on the same controllerD. traffic is forwarded to the upstream VLAN; the device above the controller decides what action to take

regarding the packets








QUESTION 246Which communication method will you use between the Cisco Catalyst 6500 Series Supervisor Engine 720 andWireless Services Module?

A. WLCCPB. SNMPC. WCPD. CDP



QUESTION 247While configuring the WLAN controller to utilize 802.11n deployment, the onsite engineer has disabled WMM.Which problem will result because of this change?

A. The 802.11b/g band will work, but not the 802.11a band.B. Cisco 7921 wireless IP phones will not work.C. The wireless network will no longer support 802.11n rates.D. Wireless multicast media traffic, such as IPTV, will no longer flow to the wireless devices.



QUESTION 248Observe the following options carefully, which functionality, as defined by IEEE 802.11e, does


WWM certify as part of the tests for QoS done by the WiFi Alliance?

A. EDCAB. HCCAC. Direct Link SetupD. S-APSD



QUESTION 249How to prevent deauthentication flood attacks on the WLAN?

A. Enable EAP-FAST, which will protect the 802.11 management frames using a PAC, thus making itimpossible for the attacker to spoof them.

B. Enable 802.11i, which will protect the 802.11 management frames using AES.C. Enable Management Frame Protection on the clients and APs or WLCs, which will create a hash of the

802.11 management frames that the attacker will not be able to duplicate.D. Enable shared authentication, which will require the attacker to break the shared key before being able to

perform the attack.









QUESTION 251When using the enterprise-based authentication method for WPA2, a bidirectional handshake exchange occursbetween the client and the authenticator. Which five options will be the results of that exchange by use ofcontroller based network? (Choose five.)

A. proof that each side is alive

B. creation of the Pairwise Transient KeyC. distribution of the Group Transient KeyD. binding of a Pairwise Master Key at the client and the controllerE. distribution of the Pairwise Master key for caching at the access pointF. a bidirectional exchange of a nonce used for key generation

Correct Answer: ABCDFSection: (none)Explanation

Explanation/Reference:Answer: A, B, C, D, F

QUESTION 252How to apply WMM access categories in an autonomous AP?

A. The autonomous AP automatically converts the DSCP values of the incoming packets based on aconversion table in the AP.

B. Policy maps are used on the autonomous AP to apply CoS values to frames coming into the AP, based onthe ACLs associated with the policy MAP. If no policy maps are applied, the AP will use the incomingframe's CoS to map the frame to the appropriate WMM access category.

C. AP policy maps allow the DSCP to be set for packets to and from the autonomous AP.These DSCP values are translated to CoS values by the upstream switch.

D. Autonomous APs do not support WMM access categories.



QUESTION 253Study the following situations carefully, then answer my question. Wireless client (CB21) configured for SSID"CCIE-2"; IP address "dhcp". Configure standalone authonomous AP with three SSIDs and three data VLANsplus the nativeVLAN. AAA server IP ranges:VLAN-2:10.20.1.1.100-10.20.1.128VLAN-3:10.30.1.1.100-10.30.1.128VLAN-4:10.40.1.1.100-10.40.1.128Question:The user wants to get an IP address from VLAN-2 which is mapped to the SSID CCIE-2 the client isassociating. Why does this wireless client get a wrong IP address?

A. LEAP authentication fails due to wrong password or unknown username, therefore the wireless-client ismapped to the default VLAN.

B. The RADIUS server is not reachable from the AP, therefore the wireless client is mapped to the defaultVLAN.

C. LEAP needs "network-eap" <eap_methods> on the SSID. You must not configure "open eap"<eap_methods.>

D. The RADIUS server assigned VLAN-4 during authentication/authorization process.



QUESTION 254In the Cisco Unified Wireless architecture, which three devices are in charge of generating the 802.11i PairwiseMaster Key? (Choose three.)

A. WLAN controller in local EAP modeB. LWAPP access pointC. Cisco Secure ACSD. Cisco Secure Services Client









More often than not, what is the difference in transmit power between an AP operating at Tx Power Level 1 andthe same AP operating at Tx Power Level 3?

A. 11 dBB. 2 dBC. 6 dBD. 3 dB




PrepKing - GRATIS EXAM · 2019-10-25 · Certkey 350-050 C. The wireless client "hangs" in probes...

Documents

Transcript of PrepKing - GRATIS EXAM · 2019-10-25 · Certkey 350-050 C. The wireless client "hangs" in probes...