mediumMultiple Choice
CCNP Practice Question: Runs the following command on a Cisco WLC: WLC#…
A network engineer runs the following command on a Cisco WLC:
WLC# show client summary
Client MAC Address AP Name WLAN State Protocol RSSI SNR 00:11:22:33:44:55 AP-1 1 Run 802.11ac -65 25 00:11:22:33:44:66 AP-2 2 Run 802.11n -70 20 00:11:22:33:44:77 AP-1 1 Run 802.11ac -60 30 00:11:22:33:44:88 AP-3 3 Probe 802.11ax -75 15
Based on this output, what can be concluded?
⚠ Common exam trap
Cisco often tests the misinterpretation of RSSI values, where candidates mistakenly think a more negative RSSI (e.g., -65 dBm) is stronger than a less negative one (e.g., -60 dBm), or they overlook the client state column and assume all listed clients are actively passing traffic.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The client with MAC 00:11:22:33:44:88 is attempting to associate but is not yet connected.
The client with MAC 00:11:22:33:44:88 is in the 'Probe' state, which indicates it has sent a probe request and is attempting to associate with the WLC, but it has not yet completed the association process or transitioned to the 'Run' state. Only clients in the 'Run' state are fully associated and passing traffic, making option B correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
All clients are fully associated and passing traffic.
Why it's wrong here
A client in Probe state has only issued 802.11 probe requests to discover nearby access points; it has not completed the mandatory authentication and association handshakes needed to reach the Operational/Run state. Therefore, not all clients are fully associated and passing traffic, because this specific client is still in the pre-association discovery phase and cannot forward data.
- ✓
The client with MAC 00:11:22:33:44:88 is attempting to associate but is not yet connected.
Why this is correct
The client with MAC 00:11:22:33:44:88 is in Probe state, which means it has transmitted probe requests and is listening for probe responses from potential APs. It has not yet performed 802.11 authentication or association, so it is effectively attempting to connect but is not an associated client and cannot exchange data traffic. This precisely matches the correct statement: it is trying to associate but is not yet connected.
- ✗
The client with MAC 00:11:22:33:44:55 has the best signal strength.
Why it's wrong here
The client identified as 00:11:22:33:44:55 has an RSSI of -65 dBm, but client 00:11:22:33:44:77 has an RSSI of -60 dBm. In Wi-Fi signal measurements, a less negative RSSI value indicates a stronger received signal, so -60 dBm is better than -65 dBm. Therefore, 00:11:22:33:44:55 does not have the best signal strength.
- ✗
All clients are using 802.11ac or higher.
Why it's wrong here
This claim is invalid because at least one client is operating on 802.11n, which is not 802.11ac or any later standard. The 802.11n amendment supports HT (High Throughput) rates and MIMO, while 802.11ac introduced wider 80/160 MHz channels, MU-MIMO, and higher-order 256-QAM modulation. Since an 802.11n client appears in the exhibit, the statement that all clients use 802.11ac or higher is false.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.