easyMultiple ChoiceObjective-mapped
CCNP Practice Question: The default CAPWAP control path DTLS encryption…
What is the default CAPWAP control path DTLS encryption mode on Cisco 9800 WLCs?
⚠ Common exam trap
Cisco often tests the distinction between control path and data path DTLS defaults, where candidates mistakenly think DTLS is optional or disabled by default, or confuse the default for data path (disabled) with control path (enabled).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enabled
Cisco 9800 WLCs have CAPWAP control path DTLS encryption enabled by default to secure control plane communications between the WLC and APs. This is mandated by RFC 5415 and ensures integrity and confidentiality of management traffic such as configuration and keepalives. The default setting cannot be disabled globally; it is always active for control traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enabled
Why this is correct
DTLS is enabled by default for control path.
- ✗
Disabled
Why it's wrong here
DTLS is not disabled by default.
- ✗
Optional (configurable per AP)
Why it's wrong here
It is a global default, not per AP.
- ✗
Only for data path
Why it's wrong here
Data path DTLS is separate and not enabled by default.
About these practice questions
One of 1,175 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.