What happens when a FlexConnect AP changes to standalone mode?
Answer(s): D
Read the question several time please, each word. they asked about "standalone" mode, it's a sub mode only within FlexConnect mode, it's not about local and flexconnect. So, an AP won't be rebooted 100%. The key word in the C option is "all" wlans, but in the book we have an exact phrase which means that all clients with centrally switched wlans only will be disconected, it's not all wlans. By exception method D is correct. When a FlexConnect access point enters standalone mode, it disassociates all clients that are on centrally switched WLANs. [ not all clients, locally switched WLAN clients stay connected] Controller-dependent activities, such as network access control (NAC) and web authentication (guest access), are disabled, and the access point does not send any intrusion detection system (IDS) reports to the controller. Most radio resource management (RRM) features (such as neighbor discovery; noise, interference, load, and coverage measurements; use of the neighbor list; and rogue containment and detection) are disabled. However, a FlexConnect access point supports dynamic frequency selection in standalone mode.
https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-2/configuration/guide/cg/cg_flexconnect.html
If the maximum power level assignment for global TPC 802.11a/n/ac is configured to 10 dBm. which power level effectively doubles the transmit power?
Answer(s): A
An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?
There are 4 options, but only 2 has "FULL to DOWN" which is what we are tying to catch. Out of these two only A begin the script with "enable" which is required in EEM because the applet assumes that the user is in EXEC mode, not privileged EXEC or config mode.
A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal is also used by employees. A solution is implemented, but contractors receive a certificate error when they attempt to access the portal. Employees can access the portal without any errors.Which change must be implemented to allow the contractors and employees to access the portal?
"It is recommended to use the Company Internal CA for Admin and EAP certificates, and a publicly-signed certificate for Guest/Sponsor/Hotspot/etc portals. The reason is that if a user or guest comes onto the network and ISE portal uses a privately-signed certificate for the Guest Portal, they get certificate errors or potentially have their browser block them from the portal page. To avoid all that, use a publicly-signed certificate for Portal use to ensure better user experience".
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215621-tls-ssl-certificates-in-ise.html
An engineer must configure a new loopback interface on a router and advertise the interface as a /24 in OSPF. Which command set accomplishes this task?
Answer(s): B
When OSPF is running on a given loopback interface, it sees the network type of "LOOPBACK" and it knows that it can not establish an adjacency through that loopback interface with another router so it advertises that loopback as a host route or the only IP address on that logical interface. As Martin explained so nicely you can tell OSPF that it is not a loopback and it is a point-to-point network type, and OSPF says "OK I am going to advertise the interface with its correct mask". In MPLS environment where OSPF is the IGP in the core, and you have configured the loopback interface of the PE router with a /24 mask, you can have some problems, because there is a discrepancy, the loopback’s mask is 24 but OSPF is advertising a mask of /32. There are few solutions to fix this problem, one solution is to reconfigure the mask to be /32, another solution is to configure the loopback interface with “ip ospf network point-to-point”.
Post your Comments and Discuss Cisco 350-401 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-401 content, but please register or login to continue.