Cisco CCIE Wireless Written - 400-351 Exam Questions [2025]

QUESTION NO: 1
Refer to the exhibit. Which statement about this CPU ACL is correct?

A. A user on the 10.64.0.0/24 network cannot use Telnet to access the WLC IP address on
172.21.153.37. B. A user on the 10.64.0.0/24 network cannot use HTTPS to access the WLC IP address on C. This CPU ACL is used as a redirection aCL to redirect all traffic except Telnet to 172.21.153.37. D. A user on the 10.64.0.0/24 network cannot use SSH to access the WLC IP address on
172.21.153.37. E. A user on the 10.64.0.0/24 network can use Telnet to access the WLC IP address on
172.21.153.37.

Correct Answer: A

QUESTION NO: 2
Which two statements are true regarding the location tracking history on the Cisco 3300 Series Mobility Services Engine? (Choose two.)

A. By default, the historical data is archived for 30 days. B. The history of an element is recorded if it moves across floors. C. History logging is enabled by default. D. An element is removed from the tracking table after one hour of inactivity. E. The history of an element is recorded if it moves more than 5 meters (or 15 feet).

Correct Answer: A,B

QUESTION NO: 3
Which three statements about QoS handling on Cisco IOS access points are true? (Choose three.)

A. Access points carry out EDCF like queuing on the radio egress port only. B. Access points carry out EDCF like queuing on the radio ingress port only. C. Access points support only 802.1Q/P tagged packets and ISL encapsulation. D. Access points support only 802.1Q/P tagged packets. E. Access points classify packets; they do not prioritize packets based on DSCP value. F. Access points do not classify packets; they prioritize packets based on DSCP value.

Correct Answer: A,D,F

QUESTION NO: 4
_________ is classified as an 802.11i RSN with _________ as the mandatory encryption protocol.

A. WPA2, AES B. WEP, TKIP C. WPA, AES D. WPA2,TKIP

Correct Answer: A

QUESTION NO: 5
Refer the exhibit Wireless voice users on VLAN 2150 report poor voice quality during heavy network usage.The WLC is configured correctly. Given the configuration in the exhibit,which possible cause of the problem is true?

A. VLAN 2150 is not allowed on the trunkport of the switch B. The wireless voice VLAN does not have the proper QoS settings. C. The WLC switch port dose not trust CoS values for Voice traffic that traverses the WLC D. MLS QoS is not enabled on the switch.

Correct Answer: C

QUESTION NO: 6
Refer to the exhibit. Wireless voice users on VLAN 2150 report poor voice quality during heavy network usage. The WLC is configured correctly.
Given the configuration in the exhibit, which possible cause of the problem is true?

A. VLAN 2150 is not allowed on the trunkport of the switch. B. The wireless voice VLAN does not have the proper QoS settings. C. The WLC switch port does not trust QoS values for voice traffic that traverses the WLC. D. MLS QoS is not enabled on the switch.

Correct Answer: C

QUESTION NO: 7
Which two cisco ISE option simplify the use of EAP-TLS authentication in a BYOD environment using PKI?(choose two)

A. Lightweight Directory Access Protocol B. Online Certificate Stats Protocol C. Certificate Signing Request. D. Native Supplicant Provisioning E. Simple Certificate Enrollment Protocol

Correct Answer: B,E

QUESTION NO: 8
Which wireless client steering feature in Cisco Wireless LAN controllers, when enabled, addresses these points:
1. Addresses the sticky client challenge by proactively disconnecting clients.
2. Actively monitors data RSSI packets.
3. Disassociates clients when the RSSI is lower than threshold.

A. RX-SOP B. band select C. client load balancing D. optimized roaming

Correct Answer: D

QUESTION NO: 9
Which two statements about configuring guest access with mobility anchoring are true? (Choose two.)

A. The foreign WLC and anchor WLC can be configured in different mobility groups. B. The dynamic interface linked to the WLAN must exist in the foreign WLC and in the anchor WLC. C. The foreign WLC and the anchor WLC must run the same AireOS version. D. The internal guest portal of the foreign WLC must match the configuration of the internal guest portal of the anchor WLC. E. The WLAN ID of the foreign WLC and the anchor WLC can be different. F. The WLAN ID on the anchor WLC must match the WLAN ID on the foreign WLC.

Correct Answer: B,E

QUESTION NO: 10
When your wireless client device roams from one AP to another on the same network, which IEEE protocol can be used to authenticate the clients faster?

A. 802.11k also called Predictive Based Roaming B. 802.11r also called Assisted Roaming C. 802.11k also called Fast BSS Transition D. 802.11r also called Fast BSS Transition E. 802.11r also called Predictive Based Roaming F. 802.11k also called Assisted Roaming

Correct Answer: F

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 11
Which two statements about deploying rogue access point detection techniques are correct?
(Choose two.)

A. If no rogue policies are configured, by default the WLC classifies rogue APs as friendly. B. Access points using the Rogue Location Discovery Protocol associate to a rogue AP while continuing to serve wireless clients. C. An access point in rogue detector mode associates to a rogue AP while continuing to serve wireless clients. D. Access points using the Rogue Location Discovery Protocol try to contact the wireless LAN controller via UDP. E. An access point in rogue detector mode listens for ARP requests from rogue wireless clients.

Correct Answer: B,E

QUESTION NO: 12
You are installing Converged Access controllers that run Cisco IOS-XE and you are ready to implement QoS. From the below, choose all the possible QoS target levels that would apply downstream traffic (toward the client)?

A. Client, SSID B. Client, Radio C. Client, SSID, Radio, Port D. Client, SSID, Radio

Correct Answer: D

QUESTION NO: 13
Refer to the exhibit. In cloud deployments, the hyper-threading feature is often enabled for higher virtual machine scale per compute node. Is the hyper-threading feature enabled and what is the maximum number of core CPUs?

A. Hyper-threading is enabled and the maximum number of core CPUs is 80. B. Hyper-threading is disabled and the maximum number of core CPUs is 39. C. Hyper-threading is enabled and the maximum number of core CPUs is 40. D. Hyper-threading is disabled and the maximum number of core CPU is 20.

Correct Answer: A

QUESTION NO: 14
How to monitor CPU utilization on a wireless LAN Controller?

A. Define the network management system as a trap receiver and enable the default RFC 1213 traps, which include SysCPUUtilization B. Define the network management system in the WLC with a matching read-write SNMP community to enable the WLC CPU OID to be polled with an SNMP set by the network management system C. Define the network management system and community in the WLC and a matching v1 or v2 community-string in the network management system to enable the WLC CPU OID to be polled D. Define an external syslog receiver in the WLC that will receive a syslog message when the percentage of CPU processing ability reaches a preconfigured percentage

Correct Answer: C

QUESTION NO: 15
which two types of interface events are common for cleanAir?(choose two)

A. Persistent mterference B. Microwave interference C. Spontaneous interference D. Co-channel interference

Correct Answer: A,C

QUESTION NO: 16
Which object table contains information about the clients know to the server in Cisco NHRP MIB implementation?

A. NHRP Server NHC Table B. NHRP Purge Request Table C. NHRP Client Statistics Table D. NHRP Cache Table

Correct Answer: C