Cisco 400-351 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 400-351
Exam Name/Title: CCIE Wireless Written
Certification Provider: Cisco
Corresponding Certification: CCIE Wireless

Exam Questions: 520
Updated On: May 26, 2026

Question #29

which two option describe implication of deploying autonomous APs in repeater mode? (choose two)

A. The infrastructure SSID should be assigned to the native VLAN

B. You should disable Cisco Aironet extensions on the parent(root) AP and on the repeater APs

C. You can configure multiple VLANs on repeater access point

D. The Ethernet port is disabled in repeater mode

Discussion 0

Correct Answer: A,D Vote an answer

Question #30

Which statement about heat maps on Cisco WCS is true?

A. They are based on real-time actual values because of fingerprinting.

B. They are predictive but can be converted to real values by using the Refresh from network button.

C. They are predictive and rely only on the accuracy of the information that is provided with the map.

D. They are based on real-time actual values if Cisco Compatible Extensions is enabled on the APs.

Discussion 0

Correct Answer: C Vote an answer

Question #31

Which 802.11i key is used to provide data origin authenticity during the four-way handshake and the group key handshake messages?

A. Groupwise Master Key

B. Key Caching Key

C. Key Confirmation Key

D. Key Encryption Key

Discussion 0

Correct Answer: C Vote an answer

Question #32

While troubleshooting a failed central web authentication configuration on cisco WLC, you discover that the Cisco WLC policy manager state is showing RUN For new client and not CENTRAL_WEB_AUTH, what is most likely the issue.?

A. The WLAN NAC state should be set to RADIUS NAC

B. The WLAN layer 3 security should be set to web page policy with condition web redirect.

C. The web login page under the cisco WLC security should be set to external (redirect to external server)

D. The WLAN Layer 2 security should be sent to WPA+WPA2

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #33

Drag and Drop Question
Match the dBm value on the left to the correct mV value on the right.

Discussion 0

Correct Answer:

Question #34

Compare to an active survey, which three types of information are lost when performing a passive survey? (Choose three.)

A. PHY rate

B. uplink information

C. rogues

D. TxBF

E. SNR

F. retransmissions

G. RSSI

Discussion 0

Correct Answer: A,B,F Vote an answer

Question #35

Which environmental phenomena can cause considerable degradation to your wireless signals?

A. multipath, convergence, refraction, gamma rays

B. multipath, alpha particles, diversity, attenuation

C. multipath, reflection, scattering, refraction

D. multipath, cosmic radiation, free path loss, scattering

Discussion 0

Correct Answer: C Vote an answer

Question #36

Which two sets of ports are used to configure high availability database connection between the primary and secondry Prime infrastructure 2.2? (Choose two)

A. TCP 1099/UDP 1099

B. TCP 1522/UDP 1522

C. TCP 162 I UDP 162

D. TCP 8082/UDP 8082

E. TCP 2705/UDP2705

Discussion 0

Correct Answer: B,D Vote an answer

Question #37

Which two options are benefits of moving the application development workload to the cloud?
(Select Two)

A. It provides a more secure environment

B. The workload can be moved or replicated easily.

C. it provides you full control over the software packages and vendor used

D. High availability and redundancy is handled by the hypervisor.

E. The application availability is not affected by the loss of a single virtual machine

Discussion 0

Correct Answer: B,E Vote an answer

Question #38

Which option is the common primary use case for tools such as Puppet. Chef. Ansible, and Salt?

A. Configuration management.

B. policy assurance

C. network orchestration.

D. network function visualization

Discussion 0

Correct Answer: A Vote an answer

Question #39

A corporation wants to deploy a Cisco wireless solution with one Cisco 5520 WLC and 200 Cisco
3800 Series APs. 802.1X-based port security is planned for the switch ports where the APs will be connecting.
Which statement about EAP supplicant support on the Cisco APs is true?

A. It is recommended to use the build-in MIC certificate as the 802.1X credential for the APs.

B. The APs use the CLI logon credentials (if configured), if the dot1X supplicant credentials fail five times.

C. EAP-FAST with anonymous Protected Access Credentials provisioning is supported.

D. EAP-PEAP is the preferred EAP protocol for AP dot1X authentication, and it is the default method in Cisco APs.

E. A Local-EAP profile can be used in FlexConnect groups for AP dot1X authentication.

Discussion 0

Correct Answer: E Vote an answer

Question #40

Refer to the exhibit, what happen if a new MAC address is learned on fastethernet 5/1?

A. The port forward traffic from the newly learned MAC

B. The port switch state to administratively down

C. The port goes into error-disabled state

D. The port remain up only traffic from the newly learned MAC is blocked

Discussion 0

Correct Answer: A Vote an answer

Question #41

Which of the following statements are not correct about Client Management Frame Protection (MFP)? (Choose 2.)

A. Client MFP encrypts class 3Unicastmanagement frames using the security mechanisms defined by 802.11i.

B. The only supported method to obtain the pre-user MFP encryption keys is EAP authentication.

C. CCXv5 client and access points must discard broadcast class 3 management frames.

D. In order to use Client MFP the client must support CCXv5 and negotiate WPA2 with AES- CCMP or TKIP.

E. Client MFP can replace Infrastructure MFP in case only CCXv5 clients are used.

Discussion 0

Correct Answer: B,E Vote an answer

Question #42

When deploying Local Web Authentication on a Cisco WLC, you can authenticate users externally via RADIUS. Which three authentication methods are supported by the Cisco WLC to authenticate guest users to a RADIUS server? (Choose three.)

A. LEAP

B. EAP-GTC

C. PAP

D. EAP-MD5

E. EAP-FAST

F. EAP

G. CHAP

H. PEAP MS-CHAPv2

I. EAP-TLS

Discussion 0

Correct Answer: C,D,G Vote an answer

Download Free Cisco 400-351 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 400-351 exam.