CCNA Network Infrastructure and Connectivity Practice Question
Network Topology
You are connected to the Cisco WLC (WLC-1) via its management IP 192.168.1.10. The wireless network 'CorpNet' is configured but clients cannot associate. Troubleshoot and resolve the issue: clients report 'Association failed' and the SSID is not visible in site surveys. Ensure that after your fix, the SSID is broadcast, WPA3 is used, and the WLAN is mapped to VLAN 20. Also, verify the WLC management interface is accessible over HTTPS.
⚠ Common exam trap
This question tests your ability to identify multiple misconfigurations simultaneously. Common traps: confusing management interface with user VLANs, thinking hidden SSID is acceptable when broadcast is required, and overlooking the HTTPS requirement. Also, ensure you use AireOS-specific commands, not IOS commands like `ip http secure-server`. Always verify all requirements in the question.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable the WLAN, set Broadcast SSID to Enabled, create a dynamic interface for VLAN 20 and map the WLAN to it, and enable the HTTPS server.
The WLAN was disabled, the SSID was hidden (Broadcast SSID Disabled), and it was incorrectly mapped to the management interface instead of a user VLAN. Additionally, HTTPS access was disabled. The solution: enable the WLAN, enable SSID broadcast, change the interface to a VLAN 20 interface (e.g., create a dynamic interface 'vlan20' with VLAN 20), and enable the HTTPS server for management access. Note: On an AireOS WLC, the correct commands use `config wlan enable <wlan_id>`, `config wlan broadcast-ssid enable <wlan_id>`, and `config network secureweb enable` for HTTPS.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable the WLAN, set Broadcast SSID to Enabled, create a dynamic interface for VLAN 20 and map the WLAN to it, and enable the HTTPS server.
Why this is correct
Ly addresses all issues: the WLAN was disabled, SSID was hidden, mapped to the management interface instead of a user VLAN, and HTTPS was disabled. Enabling the WLAN, broadcasting the SSID, mapping to a VLAN 20 dynamic interface, and enabling HTTPS restores client association and management access.
- ✗
Enable the WLAN, set Broadcast SSID to Enabled, change the interface to the management interface, and enable the HTTPS server.
Why it's wrong here
This is incorrect because the WLAN should be mapped to a user VLAN (VLAN 20), not the management interface. Mapping to the management interface would place clients in the management VLAN, which is a security risk and not the requirement.
- ✗
Enable the WLAN, keep Broadcast SSID Disabled for security, create a dynamic interface for VLAN 20 and map the WLAN to it, and enable the HTTPS server.
Why it's wrong here
Hiding the SSID does not provide real security; it merely removes the SSID from beacon frames, but the network is still discoverable via probe requests and tools like Kismet or Wireshark. More importantly, in a site survey or client onboarding, the network won't appear in available networks, preventing association unless the user manually configures the exact SSID. Since the question requires clients to be able to find and associate with the WLAN during a site survey, keeping Broadcast SSID Disabled directly causes the WLAN to be invisible and leads to association failures.
- ✗
Enable the WLAN, set Broadcast SSID to Enabled, create a dynamic interface for VLAN 20 and map the WLAN to it, but leave HTTPS disabled for security.
Why it's wrong here
The requirement explicitly states that the WLC management interface must be accessible over HTTPS for secure web-based management. Leaving the HTTPS server disabled would mean that even though the WLAN and SSID settings are correct, administrative access over HTTPS would be unavailable, forcing insecure HTTP or CLI management. Since the question specifically mandates enabling the HTTPS server as a necessary configuration, this omission violates a core requirement. In a real deployment, disabling HTTPS on the WLC's management interface would also break integration with management platforms that rely on secure APIs.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Enable the WLAN, set Broadcast SSID to Enabled, create a dynamic interface for VLAN 20 and map the WLAN to it, and enable the HTTPS server.Correct answer▾
Why this is correct
Ly addresses all issues: the WLAN was disabled, SSID was hidden, mapped to the management interface instead of a user VLAN, and HTTPS was disabled. Enabling the WLAN, broadcasting the SSID, mapping to a VLAN 20 dynamic interface, and enabling HTTPS restores client association and management access.
✗Enable the WLAN, set Broadcast SSID to Enabled, change the interface to the management interface, and enable the HTTPS server.Wrong answer — click to see why▾
Why this is wrong here
The specific factual error: The management interface is for WLC management traffic, not client data. Client traffic should be on a separate user VLAN.
Why candidates choose this
Candidates might think the management interface is the only interface available or confuse it with a VLAN interface.
✗Enable the WLAN, keep Broadcast SSID Disabled for security, create a dynamic interface for VLAN 20 and map the WLAN to it, and enable the HTTPS server.Wrong answer — click to see why▾
Why this is wrong here
The specific factual error: Broadcast SSID must be enabled for the SSID to be visible. Disabling it hides the SSID, which contradicts the requirement to make it visible.
Why candidates choose this
Candidates may believe hiding the SSID improves security and is acceptable, but the question explicitly requires the SSID to be broadcast.
✗Enable the WLAN, set Broadcast SSID to Enabled, create a dynamic interface for VLAN 20 and map the WLAN to it, but leave HTTPS disabled for security.Wrong answer — click to see why▾
Why this is wrong here
The specific factual error: HTTPS must be enabled for management access. Disabling it would block HTTPS connections to the WLC.
Why candidates choose this
Candidates might disable HTTPS thinking it reduces attack surface, but the question explicitly requires HTTPS access.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
HTTP vs HTTPS
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
Key term
Service Set Identifier
A Service Set Identifier (SSID) is the public name of a Wi-Fi network that devices use to identify and connect to it.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.