Online Access Free 400-351 Practice Test

When creating a guest account on Cisco identity Services Engine.
Which option in the sponsor portal allows for the guest credentials to be used for RADIUS authentication without requiring the guest user to log into the guest portal ?

• A.Check the box to send email not send email notification id the guest user name is based on the email address.
• B.Set the Guest role to Activated guest
• C.Set the Guest role to Guest
• D.Set the Time Profile to Radius 1Day

When configuring authentication for a WLAN through a RADIUS server, which statement is correct when per-WLAN RADIUS source support is enabled?

• A.You must specify a RADIUS server in the WLAN settings; otherwise, authentications will fail.
• B.Wireless clients need to trust the WLC certificate in case of EAP-TLS authentications.
• C.If the RADIUS server is on one of the WLC dynamic interface networks, RADIUS traffic from the controller will be sourced from that dynamic interface.
• D.If AAA override is enabled, the WLAN settings will override any RADIUS attribute received by the RADIUS server.

Drag and Drop Question

Correct Answer:

Before conducting a passive RF site survey with a standalone AP, which two of these should be statically configured on the AP? (Choose two.)

• A.Tx power level
• B.DTPC
• C.channel scan defer priority
• D.channel assignment
• E.passive client

Which configuration step can be used to prevent or block a wired or wireless client from accessing the management interface on a controller (from the wireless client dynamic interface or VLAN) to ensure that only authorized clients gain access to the management interface?

• A.Configure a CPU ACL.
• B.Configure the AAA policy with a network management username and password.
• C.Configure a preauthentication ACL on the WLC.
• D.Configure a Layer 2 ACL with a firewall at the core switch.