Exam 350-401 topic 1 question 824 discussion

Actual exam question from Cisco's 350-401

Question #: 824
Topic #: 1

Refer to the exhibit. An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending the correct values, but name resolution is not functioning as expected. Which WLC configuration change resolves the issue?

A. Enable AAA Override.
B. Enable Aironet IE.
C. Set MFP client protection to Required.
D. Change NAC state to ISE NAC.

Show Suggested Answer

Suggested Answer: A 🗳️

by Jakubu1 at Dec. 13, 2023, 1:50 a.m.

Comments

Submit Cancel

[Removed]

7 months, 1 week ago

Selected Answer: A

A is correct

upvoted 1 times

...

cloud29

10 months, 1 week ago

Selected Answer: A

The correct answer is A. Enable AAA Override. AAA Override is a feature that allows the Cisco Wireless LAN Controller (WLC) to use the attributes returned from the RADIUS server via Access-Accept message to override the configuration on the WLC. When AAA Override is enabled and the WLC is integrated with Cisco ISE, it allows for dynamic VLAN assignments, QoS, ACLs, and mDNS (Bonjour) profiles on a per-user basis. In this case, enabling AAA Override would allow the WLC to apply the mDNS roles assigned by ISE to the users, which should resolve the issue with mDNS name resolution. The other options (B, C, D) are not directly related to mDNS role assignment or name resolution. Therefore, they would not resolve the issue.

upvoted 4 times

...

cwauch

1 year ago

Selected Answer: A

The answer is enable AAA Overide. On the controller, enable the Allow AAA Override configuration parameter using the GUI or CLI. Enabling this parameter allows the controller to accept the attributes returned by the RADIUS server. The controller then applies these attributes to its clients.

upvoted 4 times

...

Jakubu1

1 year ago

Hello Moderators, it would be kind if you could offer the Cisco documentation where the answer you chose exists. Sincerely, A learner.

upvoted 4 times

Toob93

1 year ago

There is no cisco documentation. They use ChatGPT lol

upvoted 1 times

Horsefeathers

1 year ago

Speaking of ChatGPT: Given the scenario where Cisco ISE is used to dynamically assign mDNS roles to users, and the issue is with name resolution not functioning as expected despite ISE sending correct values, the most relevant configuration option to consider on the Cisco Wireless LAN Controller (WLC) is likely to be: Changing NAC State to ISE NAC. By changing the NAC state to ISE NAC, you are ensuring a more comprehensive integration with Cisco ISE, which could potentially resolve issues related to dynamic role assignments and permissions influencing name resolution. I'm going with D.

upvoted 1 times

Horsefeathers

1 year ago

Disregard this I think it's most likely Enable AAA Override now, one of the earlier questions about ISE functioning correctly with WLC required enabling it too.

upvoted 1 times

...