350-401 Architecture Practice Question
A network architect is designing a new branch office that requires a controller-based wireless solution with centralized management, but the branch has limited bandwidth and must continue forwarding client traffic locally even if the WAN link to the headquarters controller fails. The branch has a single Cisco Catalyst 9800-L controller and several Cisco Catalyst 9100 access points. Which deployment mode should the architect choose for the access points?
⚠ Common exam trap
The trap here is assuming that any controller-based deployment tunnels all client traffic to the controller, overlooking FlexConnect local switching for branch survivability.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
FlexConnect mode with local switching enabled on the access points
FlexConnect with local switching allows the access point to forward client traffic locally at the branch, reducing WAN bandwidth consumption and providing survivability if the controller becomes unreachable. The controller still manages the AP for configuration and control plane functions, but data traffic does not need to traverse the WAN. This matches the branch requirements for centralized management and local forwarding.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Local mode with CAPWAP control and data tunnels to the controller
Why it's wrong here
In local mode, both control and data traffic are tunneled to the controller via CAPWAP, so if the WAN link fails, client traffic cannot be forwarded locally. This does not meet the requirement for local forwarding during WAN failure. Local mode is suitable for centralized forwarding, but not for branch survivability with limited bandwidth.
- ✗
Sniffer mode with packet capture to a remote server
Why it's wrong here
Sniffer mode is used for capturing wireless packets and sending them to a remote analyzer; it does not provide client access. Access points in sniffer mode cannot serve clients or forward their traffic. This mode is a troubleshooting tool, not a deployment mode for production client access.
- ✓
FlexConnect mode with local switching enabled on the access points
Why this is correct
FlexConnect mode allows the access point to switch client traffic locally at the branch while still being managed by the controller. If the WAN link fails, the AP enters standalone mode and continues to serve clients with local switching, meeting the requirement for local forwarding and reduced WAN bandwidth usage. This is the correct choice for branch survivability.
- ✗
Monitor mode with dedicated air monitoring on all access points
Why it's wrong here
Monitor mode is used for wireless intrusion prevention and spectrum analysis, not for serving client traffic. Access points in monitor mode do not provide client connectivity, so they cannot forward client traffic locally or centrally. This mode is inappropriate for a branch office that needs to serve wireless clients.
Go deeper
Related to this question
Learn chapter
Network Access Control and AAA
Key term
FlexConnect
Cisco FlexConnect is a wireless architecture that allows branch office access points to operate independently, forwarding traffic locally when the controller connection is lost.
Key term
Cisco AP Modes
Cisco AP Modes are different operational states a wireless access point can use, determining how it handles traffic, management, and security in a network.
About these practice questions
One of 1,923 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.