Switching and Network Access practice questions

To encrypt user traffic on the switch

Why wrong: VLANs do not inherently encrypt traffic.

To increase the physical speed of switch ports

Why wrong: VLANs do not change interface speed.

To replace the need for a default gateway

Why wrong: Devices still need a gateway to reach other subnets.

It performs all management and control functions independently

Why wrong: That better describes an autonomous AP.

It can support only a single SSID

Why wrong: They can support multiple SSIDs.

It cannot use PoE

Why wrong: Many lightweight APs are commonly powered via PoE.

To encrypt Ethernet frames

Why wrong: PoE has nothing to do with frame encryption.

To compress voice traffic on a LAN

Why wrong: PoE does not compress traffic.

To increase the maximum IPv4 MTU

Why wrong: PoE does not change the MTU.

Carries multiple VLANs using 802.1Q tags

Why wrong: That describes a trunk port.

Disables spanning tree on the interface

Why wrong: Access mode does not disable STP.

Forwards only multicast traffic

Why wrong: Access ports forward normal endpoint traffic, not just multicast.

To elect the root bridge faster

Why wrong: BPDU Guard does not speed root election.

To convert all trunks to routed ports

Why wrong: BPDU Guard has nothing to do with routed ports.

To allow BPDUs only from trusted access points

Why wrong: That is not the function of BPDU Guard.

They force every host port to become a routed port

Why wrong: This is wrong because trunks are about carrying multiple VLANs, not converting all host ports into routed interfaces.

They eliminate the need for VLAN tagging

Why wrong: This is wrong because trunking commonly depends on tagging precisely so multiple VLANs can be distinguished.

They replace the need for IP addressing on switches

Why wrong: This is wrong because trunks are a Layer 2 transport concept and do not remove the need for IP addressing where required.

5 GHz is used only for wired Ethernet uplinks.

Why wrong: This is wrong because 5 GHz is a wireless radio band, not a wired uplink medium.

2.4 GHz eliminates the need for SSIDs.

Why wrong: This is wrong because SSIDs are still used regardless of band.

Both bands are actually ACL types.

Why wrong: This is wrong because these are radio bands, not security filters.

To replace all access points physically on the network

Why wrong: This is wrong because APs are still required to provide the actual radio service.

To act as the default gateway for all wired VLANs automatically

Why wrong: This is wrong because that is not the primary role of a WLC.

To convert every wireless frame into an OSPF packet

Why wrong: This is wrong because WLCs do not convert wireless traffic into routing-protocol messages.

It is the encryption algorithm used by the WLAN.

Why wrong: This is wrong because encryption is handled by security standards and ciphers, not by the SSID itself.

It is the physical antenna inside an access point.

Why wrong: This is wrong because the SSID is not hardware.

It is the CAPWAP tunnel between the AP and controller.

Why wrong: This is wrong because the SSID is not the management tunnel.

Because PortFast can be used only on routers.

Why wrong: This is wrong because PortFast is a switching feature, not a router-only feature.

Because switch-to-switch links cannot forward traffic.

Why wrong: This is wrong because uplinks obviously do forward traffic and are critical to switching topology.

Because PortFast automatically enables NAT on access ports.

Why wrong: This is wrong because PortFast has nothing to do with NAT.

It is the same thing as WPA3 encryption.

Why wrong: This is wrong because CAPWAP is not a wireless security standard.

It is the client-visible name of the WLAN.

Why wrong: This is wrong because that describes the SSID.

It is the default route used by wireless clients.

Why wrong: This is wrong because CAPWAP is not a client default-gateway concept.

To assign the SSID name visible to wireless clients.

Why wrong: This is wrong because the SSID is a separate configuration item, not part of the security standard.

To replace the wireless LAN controller in small deployments.

Why wrong: This is wrong because WPA2/WPA3 are security standards, not controller replacements.

To select which radio band the AP uses.

Why wrong: This is wrong because radio band selection is a separate AP configuration item.

A lightweight AP cannot transmit wireless traffic at all.

Why wrong: This is wrong because lightweight APs absolutely do provide radio service.

An autonomous AP must always use CAPWAP to function.

Why wrong: This is wrong because CAPWAP is associated with controller-based AP operation, not a requirement for standalone AP behavior.

Only autonomous APs can broadcast SSIDs.

Why wrong: This is wrong because both types can support WLANs and SSIDs.

To eliminate the need for access points entirely.

Why wrong: This is wrong because APs still provide the actual radio service.

To make DHCP unnecessary on wireless networks.

Why wrong: This is wrong because wireless clients may still use DHCP like any other clients.

To replace all VLANs with SSIDs.

Why wrong: This is wrong because WLAN architecture does not replace VLAN design in that way.

Because 5 GHz is only for wired uplinks and not for wireless clients.

Why wrong: This is wrong because 5 GHz is a wireless band used by clients and APs.

Because 2.4 GHz eliminates the need for WPA security.

Why wrong: This is wrong because wireless security requirements still apply regardless of band.

Because 5 GHz networks cannot use controllers.

Why wrong: This is wrong because controller-based designs can support either band.

It is the client-visible network name for the WLAN.

Why wrong: This is wrong because that describes the SSID.

It is the physical radio device providing wireless coverage.

Why wrong: This is wrong because that describes the AP, not the security standard.

It is the centralized wireless management controller.

Why wrong: This is wrong because WPA3 is not the controller platform.

To make roaming faster between APs.

Why wrong: This is wrong because isolation is not primarily about roaming performance.

To replace the need for SSIDs.

Why wrong: This is wrong because SSIDs still identify the WLANs.

To disable encryption for visitors.

Why wrong: This is wrong because guest isolation does not require removing security.

Because the SSID forces all floors to use the same subnet mask.

Why wrong: This is wrong because the SSID does not determine subnet mask uniformity in that way.

Because a shared SSID disables all roaming behavior.

Why wrong: This is wrong because shared SSIDs do not disable roaming.

Because the same SSID automatically creates one giant VLAN across all sites.

Why wrong: This is wrong because SSID identity does not automatically determine that topology.

It is the protocol used by hosts to resolve DNS names.

Why wrong: This is wrong because CAPWAP is unrelated to DNS.

It is the preferred serial WAN encapsulation for routers.

Why wrong: This is wrong because CAPWAP is not a WAN encapsulation protocol.

It is the same thing as WPA3 client encryption.

Why wrong: This is wrong because CAPWAP and WPA3 are different concepts.

It is the MAC address of the access point radio.

Why wrong: This is wrong because the SSID is not a hardware address.

It is the encryption method used by the WLAN.

Why wrong: This is wrong because the SSID and the security mechanism are different concepts.

It is the default gateway for wireless hosts.

Why wrong: This is wrong because the SSID is not a Layer 3 gateway value.