Latest Cisco CCIE 350-050 Real Exam Download 121-130

Ensurepass

QUESTION 121

What is the minimum number of rules that is necessary in a CPU ACL to allow all access from a single VLAN to the management interface, yet prevent management access from all other VLANs while permitting all other traffic?

 

A.

five

B.

six

C.

seven

D.

eight

 

Answer: B

 

 

QUESTION 122

Refer to the exhibit. Your manager has asked you to configure a remote office Cisco WLC to support local EAP authentication. The manager wants the clients to use EAP-FAST. The LDAP server is Microsoft Active Directory. All users, including the account that is used to bind to the LDAP server, are in the default Users container in Active Directory. No RADIUS servers are configured on the Cisco WLC. The client is using the latest Intel card and supplicant.

Why does the test client fail to authenticate?

 

clip_image002

 

A.

Local EAP does not support EAP-FAST when using an Active Directory LDAP server.

B.

The LDAP bind account cannot be in the same container as the wireless user accounts.

C.

The User object type is incorrect.

D.

The default Users container in Active Directory is a container rather than an organizational unit.

E.

The User attribute is incorrect.

 

Answer: D

 

 

QUESTION 123

A wireless network administrator needs to limit guest user TCP traffic to no more than 50,000 kb/s, to conserve bandwidth on the guest WLAN. To do this, the administrator configures the average real-time rate to 50,000 kb/s and the burst real-time rate to 60,000 kb/s. Why does a test of the guest account show no restriction for the client TCP traffic?

 

A.

The administrator should have configured the average data rate and burst data rate.

B.

The average real-time rate and burst real-time rate should always be equal.

C.

The average real-time rate should always be higher than the burst real-time rate.

D.

The administrator should have configured the average data rate and the average real-time rate.

 

Answer: A

 

 

QUESTION 124

Refer to the exhibit. You are a senior wireless network administrator and have just completed the configuration of TACACS+ on your production Cisco WLC server. You can successfully log into the Cisco WLC by using your domain credentials. However, junior administrators, who have only local management accounts on the Cisco WLC, are complaining that they can no longer log into the Cisco WLC GUI or CLI. What is the cause of this problem?

 

clip_image004

 

A.

When TACACS+ is configured on the Cisco WLC, local authentication is permanently disabled.

B.

TACACS+ is the first authentication priority. The ACS is responding, so the Cisco WLC never queries

the local database.

C.

TACACS+ was configured and the ACS is responding, so all local accounts on the Cisco WLC are disabled.

D.

The junior administrators must also have domain accounts with the same username but different passwords

than the local Cisco WLC accounts, so the ACS is returning an access-reject.

This prevents the Cisco WLC from querying the local database.

 

Answer: B

 

 

QUESTION 125

After performing a wireless site survey, you determine that to achieve proper HR-DSSS coverage within the rooms along a hallway area, the AP radios that service the hallway must be at 12 mW or higher. After the APs are all installed, you note that RRM is decreasing the power on the AP radios in the hallway to 6 mW. Which two methods can you use to prevent the HRDSSS AP radio power levels from dropping below 12 mW? (Choose two.)

 

A.

Configure the minimum power-level assignment for the 2.4 GHz radio to 11 dBm under the individual

TPC settings on the hallway APs.

B.

Configure the minimum power-level assignment for the 5 GHz radio to 11 dBm under the individual TPC

settings on the hallway APs.

C.

Configure the minimum power-level assignment to 11 dBm under the global 802.11b/g/n TPC settings.

D.

Configure the minimum power-level assignment to 11 dBm under the global 802.11a/n TPC settings.

E.

Statically configure the 5 GHz radios on the hallway APs to power level 4.

F.

Statically configure the 2.4 GHz radios on the hallway APs to power level 4.

 

Answer: CF

 

 

QUESTION 126

Refer to the exhibit. You are testing coverage-hole detection in your lab. You are using the default Cisco WLC coverage-hole detection configuration that is shown. You have 14 test clients, all associated to the same AP. You move three of the clients far away from the AP so that they have an RSSI of -85 dBm or lower for 1 minute. To your surprise, you see precoverage-hole alarms, but no coverage- hole alarm is triggered.

Which two scenarios explain this issue? (Choose two.)

 

clip_image005

 

A.

The failed clients must be at an RSSI of -81 dBm or lower for at least 90 seconds.

B.

The failed clients must be at an RSSI of -80 dBm or lower for at least 90 seconds.

C.

The number of failed clients is less than 25 percent of the total number of clients that are associated

to the AP.

D.

This Cisco WLC is not an RF group leader and so cannot make a coverage-hole decision.

E.

Coverage-hole alarms are generated based on the number and percentage of failed packets from the

client, rather than on thresholds.

 

Answer: AC

 

 

QUESTION 127

A wireless ISP has hired you to help set up a new Cisco WLC to provide wireless access to subscription-based customers. Each customer that uses the wireless network needs to pay their bill every 30 days. How do you configure the WLAN security to help meet this requirement?

 

A.

no Layer 2 security, conditional web redirect Layer 3 security

B.

WPA2 802.1X Layer 2 security, splash page web redirect Layer 3 security

C.

802.1X Layer 2 security, splash page web redirect Layer 3 security

D.

WPA2 PSK Layer 2 security, conditional web redirect Layer 3 security

E.

no Layer 2 security, splash page web redirect Layer 3 security

F.

WPA 802.1X Layer 2 security, conditional web redirect Layer 3 security

 

Answer: F

 

 

QUESTION 128

When is the Poor Link SNR Alarm generated in a mesh network?

 

A.

when the SNR between the mesh nodes falls below 15 dB.

B.

when the SNR between the client and the AP falls below 20 dB.

C.

when the SNR between the mesh nodes falls below 12 dB.

D.

when the Cisco WCS receives the first 10 SNR links from the network.

 

Answer: C

 

 

QUESTION 129

A 7-Mb multicast traffic stream is being sent to wireless clients and it is using up most of the available wireless spectrum in the 2.4-GHz unlicensed band. As a result, many of the data applications have become sluggish and the video is choppy. What is the best option to send the multicast over the wireless network more efficiently and leave some bandwidth for the data applications (assuming the network is capable of supporting this option)?

 

A.

Raise the DTIM to 10

B.

Enable WMM QoS

C.

Turn on multicast-multicast mode

D.

Turn off the lower data rates

 

Answer: D

 

 

QUESTION 130

The helpdesk is reporting that many users are reporting slow wireless connections in one of the office buildings. You look at the CleanAir statistics and do not see any interferers, but you see very high 2.4-GHz channel utilization from the Wi-Fi devices. WCS is reporting the following mix of 802.11 chipsets in the building: 10 percent 802.11b, 75 percent 802.11g and 15 percent 802.11a. You do a survey and see that you have a very dense deployment of APs and a lot of co-channel interference.

Which two steps would help lower your channel utilization in this area? (Choose two.)

 

A.

Raise the power on the 2.4-GHz radios.

B.

Lower the power on the 2.4-GHz radios.

C.

Lower the DTIM.

D.

Raise the DTIM.

E.

Disable 1-, 2-, 5.5-, 6-, and 9-Mb data rates.

F.

Enable 1-, 2-, 5.5-, 6-, and 9-Mb data rates.

 

Answer: BE

 

 

Download Latest CISCO CCIE 350-050 Real Free Tests ,help you to pass exam 100%.

Download FREE CCIE 350-050 Demo
FREE Ensurepass CCIE Certification Exam Questions and Answers
FREE Ensurepass Cisco Certification Exam Questions and Answers

HOT EXAM!

You must be logged in to post a comment.

Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com