mediumMultiple SelectObjective-mapped
CCNP Practice Question: Which two statements about Cisco FlexConnect are…
Which two statements about Cisco FlexConnect are true? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
FlexConnect APs can locally switch client data traffic at the remote site without tunneling it to the WLC.
FlexConnect allows APs to locally switch client traffic and to function independently when the WLC is unreachable, but it does not support all encryption methods (e.g., CCKM is not supported in FlexConnect local switching mode) and it does not support rogue detection in standalone mode.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
FlexConnect APs can locally switch client data traffic at the remote site without tunneling it to the WLC.
Why this is correct
Correct because FlexConnect local switching mode allows client traffic to be bridged locally at the AP, reducing WAN bandwidth usage.
- ✗
FlexConnect APs always maintain a control and data tunnel to the WLC, even in standalone mode.
Why it's wrong here
Incorrect because in standalone mode (when the WLC is unreachable), the AP operates independently and does not maintain any tunnel.
- ✗
FlexConnect supports all encryption methods including CCKM and 802.11r in local switching mode.
Why it's wrong here
Incorrect because CCKM is not supported in FlexConnect local switching mode; 802.11r is supported only in specific scenarios.
- ✗
FlexConnect APs can perform rogue detection and containment even when disconnected from the WLC.
Why it's wrong here
Incorrect because rogue detection and containment require the AP to be connected to the WLC; in standalone mode, these features are not available.
- ✓
FlexConnect APs can authenticate clients locally using a local RADIUS server or a local user database when the WLC is unreachable.
Why this is correct
Correct because FlexConnect supports local authentication (via local RADIUS or local EAP) when the AP is in standalone mode and the WLC is not reachable.
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,175 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.