350-050 試験問題を無料オンラインアクセス

When configuring NAC in-band to work with a Cisco WLC, which statement is true, from a WLC perspective?

• A.NAC always needs to be enabled in the WLAN configuration.
• B.The Clean Access Manager always needs to be configured in the SNMP trap receiver.
• C.The Clean Access Server always needs to be configured as a RADIUS accounting server on the Cisco WLC.
• D.Only the quarantine VLAN ID needs to be configured as the WLAN interface.

Which statement about the Cisco WCS security index is true?

• A.The security index of the Cisco WCS managed network is the average of all controller and Cisco MSE scores.
• B.The security index is a weighted scale of WLAN security ranging from 0 least risk (secure) to 100 high risk (unsecure).
• C.The security index will display red (high threat level) when the managed WLAN detects multiple rogues and attack signatures.
• D.The security index uses device configuration parameters to assign a weighted value of network security.

You are tasked to convert autonomous AP static WEP users to Cisco Unified WLC 802.1X EAP users using their current Microsoft Active Directory accounts using a single WLAN. You need to preserve the wired VLAN that these users were connecting on. Which of the below procedures provides the best solution for this conversion?

• A.Configure the WLAN for Layer 2 security and use the WLC local RADIUS for
  authentication.
  Configure the WLC local RADIUS server to authenticate each user against the Microsoft
  Active Directory.
  Configure the WLC local RADIUS server to pass down IETF RADIUS attributes 64, 65, and
  81 containing the appropriate Layer 2 VLAN to the users.
• B.Configure two WLANs, one WEP, and one with EAP, but only broadcast the EAP WLAN so
  that only one SSID is visible.
  Configure each WLAN interface mapping to the correct and corresponding dynamic
  interface. Then, use the WLC local RADIUS to authenticate users against the current
  Microsoft Active Directory.
  Configure the WLC connecting trunk port to allow the appropriate user wired Layer 2
  VLAN.
  Configure the interface group feature to contain all of the dynamic interfaces needed.
  Configure the single WLAN to use the interface group and authenticate to an external
  RADIUS server configured to check the users against the Microsoft Active Directory.
  The authenticated users will be placed on the correct VLANs dynamically.
• C.Configure the access point groups feature for two groups and map the WLAN to the correct
  interfaces for each group.
  Set the access points to the correct access point group for where these converted WEP
  users will be located.
  Connecting users will be placed on the correct Layer 2 VLAN.
• D.Configure the WLAN for the appropriate Layer 2 security settings and ensure that AAA
  override is configured.
  Configure an external RADIUS server to authenticate each user against the Microsoft
  Active Directory.
  Configure the external RADIUS server to pass down IETF RADIUS attributes 64, 65, and
  81 containing the appropriate Layer 2 VLAN to the users.

Your site has already been surveyed at 5 GHz for 802.11n VoWLAN services. Which two services can you add safely, without conducting an additional site survey? (Choose two.)

• A.802.11n data services on the 2.4 GHz Frequency
• B.enhanced Layer 2 or Layer 3 security of the WLAN
• C.optional MFP client protection for Cisco Client Extensions Version 5 clients
• D.802.11n voice services on the 2.4 GHz Frequency
• E.new services (such as location) on both frequencies

What is the function of the distance command on an autonomous 802.11 bridge?

• A.to adjust the data rate of the packet transmission
• B.to increase the time that is needed for authentication
• C.to give the person reading the configuration an idea of how far apart the bridge links are
• D.to adjust the bridge timeout values to account for the time that is required for radio
  signals to travel from bridge to bridge