350-401 Practice Test 17 — 15 Questions

Question 1

A network engineer runs the following command on a Cisco WLC:

WLC# show ap stats ap-name AP-1

AP Statistics for AP-1
----------------------
Channel Utilization: 45%
Interference: 10%
Noise Floor: -95 dBm
Total Packets Received: 15000
Total Packets Sent: 12000
Total Errors: 200

Based on this output, what can be concluded?

Accepted Answer

The channel utilization is moderate and the noise floor is low.. The output shows channel utilization at 45%, which is moderate but not extremely high. The noise floor is -95 dBm, which is good (low noise). The error rate is 200 out of 15000 received, which is about 1.3%, acceptable.

Answer

The channel is heavily congested with utilization above 80%.

Answer

The noise floor is high, indicating potential interference.

Answer

The AP is experiencing a significant number of errors relative to packets received.

Question 2

A network engineer runs the following command on a Cisco WLC:

WLC# show ap rf-profile summary

RF-Profile Name: default-rf-profile
Description: Default RF Profile
Band: 2.4 GHz
Channel Width: 20 MHz
Data Rates: 1,2,5.5,11,6,9,12,18,24,36,48,54 Mbps
Power Level: 1 (max)

RF-Profile Name: low-power
Description: Low Power Profile
Band: 2.4 GHz
Channel Width: 20 MHz
Data Rates: 1,2,5.5,11,6,9,12,18,24,36,48,54 Mbps
Power Level: 5

Based on this output, what can be concluded?

Accepted Answer

The low-power profile reduces the transmit power of the AP.. Both profiles use 2.4 GHz and 20 MHz channels. The low-power profile uses a higher power level number (5) which typically means lower power (since power level is inversely related to power output on Cisco APs). The default profile uses power level 1 (max power).

Answer

The default profile uses 40 MHz channels.

Answer

The low-power profile disables all data rates below 12 Mbps.

Answer

The low-power profile is for 5 GHz band.

Question 3

Examine the following configuration on a Cisco 9800 WLC:

ap profile default-ap-profile
 description "Default AP Profile"
 country US
 management-user admin

Which statement is true about this configuration?

Accepted Answer

The country code is set to the United States, affecting allowed channels and transmit power.. The 'country US' command sets the regulatory domain for the APs using this profile, which is required for proper channel and power settings.

Answer

This profile configures the SSID for the AP.

Answer

This profile enables 802.11r fast roaming.

Answer

The management user 'admin' is used for client authentication.

Question 4

Which TWO are benefits of using a spine-leaf architecture in a data center? (Choose two.)

Accepted Answer

Predictable latency between any two devices. A is correct because spine-leaf architecture ensures that every leaf switch is connected to every spine switch, creating a full-mesh topology. This design guarantees that traffic between any two leaf switches traverses at most one spine hop, resulting in predictable, consistent latency regardless of which devices are communicating.

Answer

Increased number of single points of failure

Answer

Increased broadcast domain size

Answer

Reduced need for VLANs

Question 5

Given the following WLAN configuration on a Cisco 9800 WLC:

wlan test-wlan 1 test-ssid
 client vlan VLAN10
 no security wpa
 no security wpa2
 security wpa3
 no security ft

What is a potential issue with this configuration?

Accepted Answer

The WLAN is missing a security key management (AKM) configuration.. WPA3 requires support for 802.11r (Fast Transition) for optimal roaming; disabling it may cause compatibility issues with some clients.

Answer

The client VLAN is incorrectly configured.

Answer

WPA3 is not supported on this platform.

Answer

The SSID name is too long.

Question 6

A network engineer runs the following command on a Cisco WLC:

WLC# show ap stats ap-name AP-3

AP Statistics for AP-3
----------------------
Channel Utilization: 75%
Interference: 30%
Noise Floor: -80 dBm
Total Packets Received: 5000
Total Packets Sent: 4500
Total Errors: 1500

Based on this output, what can be concluded?

Accepted Answer

The high error rate suggests possible co-channel interference or signal issues.. The output shows high channel utilization (75%), high interference (30%), and a relatively high noise floor (-80 dBm is noisy). The error rate is 1500 out of 5000 received, which is 30%, indicating a poor wireless environment.

Answer

The AP is operating in a clean environment with low interference.

Answer

The channel utilization is low, indicating spare capacity.

Answer

The noise floor is excellent at -80 dBm.

Question 7

Examine the following configuration on a Cisco 9800 WLC:

wireless profile policy test-policy
 no security wpa
 no security wpa2
 security wpa3
 security wpa3 akm sae
 security ft over-the-ds

What is the effect of the 'security ft over-the-ds' command?

Accepted Answer

It enables 802.11r fast roaming using the distribution system for key exchange.. The 'ft over-the-ds' command enables Fast Transition (802.11r) using the over-the-DS (Distribution System) method, which is used for seamless roaming.

Answer

It enables 802.11r fast roaming using over-the-air messaging.

Answer

It disables fast roaming for this policy.

Answer

It configures the AP to use a different radio band.

Question 8

What is the maximum number of WLANs that can be configured on a single AP in a Cisco 9800 WLC deployment?

Accepted Answer

16. Cisco APs support up to 16 WLANs (SSIDs) per radio, though the exact number may vary by platform.

Answer

8

Answer

32

Answer

64

Question 9

A company is deploying a wireless network in an office with high client density. Which Cisco architecture is best suited to handle client roaming without requiring a central controller for every roaming event?

Accepted Answer

FlexConnect. FlexConnect (option D) is the correct architecture because it allows client data traffic to be switched locally at the remote site, while the control plane remains centralized. This design eliminates the need for a central controller to process every roaming event, as clients can roam between FlexConnect APs using local switching and 802.11r (Fast Roaming) without requiring a WLC in the data path.

Answer

Mesh networking

Answer

Autonomous APs

Answer

Centralized switching with a WLC

Question 10

Given the following configuration snippet on a Cisco 9800 WLC:

wireless profile policy test-policy
 no security ft
 aaa-override
 no mac-filtering
 no wlan-switch
 central-switching

What is the effect of this configuration?

Accepted Answer

Client traffic is centrally switched through the WLC.. The 'central-switching' command in a wireless profile policy forces all client traffic to be tunneled back to the WLC, overriding any per-WLAN switching decisions.

Answer

Client traffic is locally switched at the AP.

Answer

Fast roaming (802.11r) is enabled for this policy.

Answer

MAC filtering is enabled for client authentication.

Question 11

Consider the following configuration on a Cisco 9800 WLC:

ap join-profile default-join-profile
 description "Default Join Profile"
 controller 1 primary 10.1.1.1
 controller 2 secondary 10.1.1.2

What is the purpose of this configuration?

Accepted Answer

It specifies the WLCs that the AP should attempt to join in order of priority.. Join profiles define how APs discover and connect to WLCs, including primary and secondary controller IP addresses.

Answer

It configures the AP's management IP address.

Answer

It enables CAPWAP DTLS encryption.

Answer

It defines the AP's radio parameters.

Question 12

What is the default CAPWAP control path DTLS encryption mode on Cisco 9800 WLCs?

Accepted Answer

Enabled. By default, DTLS encryption is enabled for the CAPWAP control path to secure management traffic between AP and WLC.

Answer

Disabled

Answer

Optional (configurable per AP)

Answer

Only for data path

Question 13

Drag and drop the steps of the 802.11 client association process into the correct order, from first to last.

Accepted Answer

Client sends Probe Request. The 802.11 client association process begins with the client sending a Probe Request to discover networks, followed by a Probe Response from the AP. Then the client sends an Authentication Request, the AP replies with an Authentication Response, and finally the client sends an Association Request, which the AP confirms with an Association Response.

Question 14

Given the following snippet from a Cisco 9800 WLC:

ap ethernet-port default-ethernet-port
 description "Default Ethernet Port"
 mode trunk
 allowed vlan 10,20,30
 native vlan 10

What is the effect of this configuration on the AP?

Accepted Answer

The AP will use VLAN 10 for management traffic and VLANs 20 and 30 for client traffic.. The Ethernet port configuration on an AP defines how the AP's wired interface handles VLANs, typically for management and client traffic.

Answer

The AP's Ethernet port will tag all traffic with VLAN 10.

Answer

The AP will only allow VLAN 10 traffic.

Answer

The AP's Ethernet port is configured as an access port.

Question 15

Which of the following is a valid AP mode on Cisco 9800 WLCs that allows the AP to function as a standalone access point without controller management?

Accepted Answer

FlexConnect mode. Cisco APs can operate in various modes; 'FlexConnect' allows local switching and can operate independently if the WLC is unreachable.

Answer

Local mode

Answer

Monitor mode

Answer

Sniffer mode