Online Access Free 350-050 Exam Questions

What is the MAPs behavior if you enable mesh ethernet-bridging vlan-transparent on them?

• A.The MAPs untag all traffic that arrives on the Ethernet port and bridge all the traffic toward the backhaul.
• B.The MAPs bridge toward the backhaul only traffic that arrives as untagged on the Ethernet port.
• C.The MAPs bridge toward the backhaul all traffic that arrives on the Ethernet port, without touching the vlan tag.
• D.The MAPs bridge traffic that came from the Ethernet port, but only if the vlan tag matches the Cisco WLC configured VLANs and interfaces.
• E.The MAPs bridge traffic according to the VLAN configuration.

When configuring authentication for a WLAN through a RADIUS server, which statement is correct when per-WLAN RADIUS source support is enabled?

• A.If the RADIUS server is on one of the WLC dynamic interface networks, RADIUS traffic from the controller will be sourced from that dynamic interface.
• B.Wireless clients need to trust the WLC certificate in case of EAP-TLS authentications.
• C.You must specify a RADIUS server in the WLAN settings; otherwise, authentications will fail.
• D.If AAA override is enabled, the WLAN settings will override any RADIUS attribute received by the RADIUS server.

You are designing a wireless network utilizing EAP-TLS. One design requirement is to provide per-user differentiated QoS using only one SSID. What is the best way to achieve this goal?

• A.using WMM override
• B.using AP groups
• C.using Cisco Airespace VSAs
• D.using QoS Enhanced BSS

Refer to the exhibit.

You are a senior wireless network administrator and have just completed the configuration of TACACS+ on your production Cisco WLC server. You can successfully log into the
Cisco WLC by using your domain credentials. However, junior administrators, who have only local management accounts on the Cisco WLC, are complaining that they can no longer log into the Cisco WLC GUI or CLI. What is the cause of this problem?

• A.When TACACS+ is configured on the Cisco WLC, local authentication is permanently disabled.
• B.TACACS+ is the first authentication priority. The ACS is responding, so the Cisco WLC never queries the local database.
• C.The junior administrators must also have domain accounts with the same username but different passwords than the local Cisco WLC accounts, so the ACS is returning an access-reject. This prevents the Cisco WLC from querying the local database.
• D.TACACS+ was configured and the ACS is responding, so all local accounts on the Cisco WLC are disabled.

What is the benefit of using a CA-signed certificate over a self-signed certificate?

• A.You can use bigger keys.
• B.Fewer steps need to be generated.
• C.You can avoid impersonation attacks.
• D.You can generate a certificate with a longer validity period.
• E.More authentication types are supported.