CCNP Infrastructure Practice Question
A network engineer is configuring a Cisco Wireless LAN Controller (WLC) for a new wireless network. The engineer wants to ensure that client traffic is tunneled back to the WLC and that the WLC is the single point of management for the access points. Which mode should the access points be configured in?
⚠ Common exam trap
It's easy for candidates to confuse FlexConnect mode, which can also be managed by the WLC but does not tunnel client traffic by default, with Local mode.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Local mode
Local mode is the standard mode for access points in a centralized wireless deployment. It creates a CAPWAP tunnel to the WLC, carrying both management and client data traffic. This ensures that the WLC is the single point of management and that all client traffic is tunneled back to the WLC, meeting the engineer's requirements. Other modes either do not serve clients or switch traffic locally.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Sniffer mode
Why it's wrong here
Sniffer mode configures an access point to capture and forward all wireless traffic to a packet analyzer, such as Wireshark. It does not serve clients or tunnel client data to the WLC for normal network access. This mode is strictly for troubleshooting and analysis, not for providing wireless connectivity.
- ✗
FlexConnect mode
Why it's wrong here
FlexConnect mode allows access points to switch client traffic locally at the branch while still being managed by the WLC. This mode is used for branch offices with limited WAN bandwidth, where tunneling all traffic back to the WLC is not desirable. In this scenario, the requirement is to tunnel client traffic back to the WLC, so FlexConnect is not appropriate.
- ✗
Monitor mode
Why it's wrong here
Monitor mode is used for dedicated monitoring access points that only scan the air for security and interference, without serving clients. These access points do not provide client connectivity, so they cannot tunnel client traffic to the WLC. This mode is used for IDS/IPS and location services, not for general client access.
- ✓
Local mode
Why this is correct
In local mode, access points establish a Control and Provisioning of Wireless Access Points (CAPWAP) tunnel to the WLC for both management and client data traffic. This allows the WLC to be the single point of management and ensures client traffic is tunneled back to the WLC. Local mode is the default and most common deployment mode for centralized wireless networks.
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.