CCNP Wireless Infrastructure Practice Test 2 — 15 Questions

Question 1

A network engineer runs the following command on a Cisco WLC:

WLC# show ap config general AP-2

AP Name: AP-2
MAC Address: aabb.cc00.0200
Country Code: US - United States
Regulatory Domain: 802.11bg: -A 802.11a: -A
AP Submode: FlexConnect
AP Mode: FlexConnect
AP Join Priority: 2
Primary Controller: WLC-1
Secondary Controller: WLC-2
Tertiary Controller: WLC-3

Based on this output, what can be concluded?

Accepted Answer

The AP can locally switch client traffic and maintain connectivity even if the WLC is unreachable.. The output shows the AP is in FlexConnect mode, which means it can locally switch traffic and maintain connectivity to the WLC over a WAN. The AP has a primary, secondary, and tertiary controller configured.

Answer

The AP is operating in Local mode and will tunnel all traffic to the WLC.

Answer

The AP will only work if the WLC is directly connected at Layer 2.

Answer

The AP is in Monitor mode and will not serve clients.

Question 2

A network engineer runs the following command on a Cisco WLC:

WLC# show ap rf-profile summary

RF-Profile Name: default-rf-profile
Description: Default RF Profile
Band: 2.4 GHz
Channel Width: 20 MHz
Data Rates: 1,2,5.5,11,6,9,12,18,24,36,48,54 Mbps
Power Level: 1 (max)

RF-Profile Name: low-power
Description: Low Power Profile
Band: 2.4 GHz
Channel Width: 20 MHz
Data Rates: 1,2,5.5,11,6,9,12,18,24,36,48,54 Mbps
Power Level: 5

Based on this output, what can be concluded?

Accepted Answer

The low-power profile reduces the transmit power of the AP.. Both profiles use 2.4 GHz and 20 MHz channels. The low-power profile uses a higher power level number (5) which typically means lower power (since power level is inversely related to power output on Cisco APs). The default profile uses power level 1 (max power).

Answer

The default profile uses 40 MHz channels.

Answer

The low-power profile disables all data rates below 12 Mbps.

Answer

The low-power profile is for 5 GHz band.

Question 3

A network engineer runs the following command on a Cisco WLC:

WLC# show ap stats ap-name AP-3

AP Statistics for AP-3
----------------------
Channel Utilization: 75%
Interference: 30%
Noise Floor: -80 dBm
Total Packets Received: 5000
Total Packets Sent: 4500
Total Errors: 1500

Based on this output, what can be concluded?

Accepted Answer

The high error rate suggests possible co-channel interference or signal issues.. The output shows high channel utilization (75%), high interference (30%), and a relatively high noise floor (-80 dBm is noisy). The error rate is 1500 out of 5000 received, which is 30%, indicating a poor wireless environment.

Answer

The AP is operating in a clean environment with low interference.

Answer

The channel utilization is low, indicating spare capacity.

Answer

The noise floor is excellent at -80 dBm.

Question 4

Given the following configuration snippet on a Cisco 9800 WLC:

wireless profile policy test-policy
 no security ft
 aaa-override
 no mac-filtering
 no wlan-switch
 central-switching

What is the effect of this configuration?

Accepted Answer

Client traffic is centrally switched through the WLC.. The 'central-switching' command in a wireless profile policy forces all client traffic to be tunneled back to the WLC, overriding any per-WLAN switching decisions.

Answer

Client traffic is locally switched at the AP.

Answer

Fast roaming (802.11r) is enabled for this policy.

Answer

MAC filtering is enabled for client authentication.

Question 5

Examine the following configuration on a Cisco 9800 WLC:

ap profile default-ap-profile
 description "Default AP Profile"
 country US
 management-user admin

Which statement is true about this configuration?

Accepted Answer

The country code is set to the United States, affecting allowed channels and transmit power.. The 'country US' command sets the regulatory domain for the APs using this profile, which is required for proper channel and power settings.

Answer

This profile configures the SSID for the AP.

Answer

This profile enables 802.11r fast roaming.

Answer

The management user 'admin' is used for client authentication.

Question 6

Given the following WLAN configuration on a Cisco 9800 WLC:

wlan test-wlan 1 test-ssid
 client vlan VLAN10
 no security wpa
 no security wpa2
 security wpa3
 no security ft

What is a potential issue with this configuration?

Accepted Answer

The WLAN is missing a security key management (AKM) configuration.. WPA3 requires support for 802.11r (Fast Transition) for optimal roaming; disabling it may cause compatibility issues with some clients.

Answer

The client VLAN is incorrectly configured.

Answer

WPA3 is not supported on this platform.

Answer

The SSID name is too long.

Question 7

Consider the following configuration on a Cisco 9800 WLC:

ap join-profile default-join-profile
 description "Default Join Profile"
 controller 1 primary 10.1.1.1
 controller 2 secondary 10.1.1.2

What is the purpose of this configuration?

Accepted Answer

It specifies the WLCs that the AP should attempt to join in order of priority.. Join profiles define how APs discover and connect to WLCs, including primary and secondary controller IP addresses.

Answer

It configures the AP's management IP address.

Answer

It enables CAPWAP DTLS encryption.

Answer

It defines the AP's radio parameters.

Question 8

Given the following snippet from a Cisco 9800 WLC:

ap ethernet-port default-ethernet-port
 description "Default Ethernet Port"
 mode trunk
 allowed vlan 10,20,30
 native vlan 10

What is the effect of this configuration on the AP?

Accepted Answer

The AP will use VLAN 10 for management traffic and VLANs 20 and 30 for client traffic.. The Ethernet port configuration on an AP defines how the AP's wired interface handles VLANs, typically for management and client traffic.

Answer

The AP's Ethernet port will tag all traffic with VLAN 10.

Answer

The AP will only allow VLAN 10 traffic.

Answer

The AP's Ethernet port is configured as an access port.

Question 9

Examine the following configuration on a Cisco 9800 WLC:

wireless profile policy test-policy
 no security wpa
 no security wpa2
 security wpa3
 security wpa3 akm sae
 security ft over-the-ds

What is the effect of the 'security ft over-the-ds' command?

Accepted Answer

It enables 802.11r fast roaming using the distribution system for key exchange.. The 'ft over-the-ds' command enables Fast Transition (802.11r) using the over-the-DS (Distribution System) method, which is used for seamless roaming.

Answer

It enables 802.11r fast roaming using over-the-air messaging.

Answer

It disables fast roaming for this policy.

Answer

It configures the AP to use a different radio band.

Question 10

What is the default CAPWAP control path DTLS encryption mode on Cisco 9800 WLCs?

Accepted Answer

Enabled. By default, DTLS encryption is enabled for the CAPWAP control path to secure management traffic between AP and WLC.

Answer

Disabled

Answer

Optional (configurable per AP)

Answer

Only for data path

Question 11

Which of the following is a valid AP mode on Cisco 9800 WLCs that allows the AP to function as a standalone access point without controller management?

Accepted Answer

FlexConnect mode. Cisco APs can operate in various modes; 'FlexConnect' allows local switching and can operate independently if the WLC is unreachable.

Answer

Local mode

Answer

Monitor mode

Answer

Sniffer mode

Question 12

What is the maximum number of WLANs that can be configured on a single AP in a Cisco 9800 WLC deployment?

Accepted Answer

16. Cisco APs support up to 16 WLANs (SSIDs) per radio, though the exact number may vary by platform.

Answer

8

Answer

32

Answer

64

Question 13

Drag and drop the steps of the 802.11 client association process into the correct order, from first to last.

Accepted Answer

Client sends Probe Request. The 802.11 client association process begins with the client sending a Probe Request to discover networks, followed by a Probe Response from the AP. Then the client sends an Authentication Request, the AP replies with an Authentication Response, and finally the client sends an Association Request, which the AP confirms with an Association Response.

Question 14

Drag and drop the steps of the CAPWAP discovery and join process between a lightweight AP and a WLC into the correct order, from first to last.

Accepted Answer

AP obtains IP address via DHCP. The CAPWAP process starts with the AP obtaining an IP address (via DHCP), then discovering the WLC (via DHCP option 43 or DNS). The AP sends a Discovery Request, the WLC replies with a Discovery Response, and finally the AP sends a Join Request to establish the control tunnel.

Question 15

Drag and drop the steps of the 802.1X/EAP authentication process for a wireless client into the correct order, from first to last.

Accepted Answer

Client sends EAPoL-Start to AP. The 802.1X/EAP process begins with the client sending an EAPoL-Start to the AP, which triggers the AP to send an EAP-Request Identity. The client responds with an EAP-Response Identity, which the AP forwards to the RADIUS server. The RADIUS server then sends EAP-Request credentials (e.g., password) to the client via the AP, and the client replies with EAP-Response credentials.