Wireless LAN and WLC Scenarios

Drag and drop the steps of WPA3 client authentication process into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 2mediumdrag order

Open the full VLAN trunking answer →

Drag and drop the steps of 802.11r Fast BSS Transition (FT) roaming steps into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 3easymultiple choice

A network engineer runs the following command on a Cisco WLC:

WLC# show wlan summary

WLAN ID SSID Status Security Interface 1 Guest Enabled Open guest-vlan 2 Corporate Enabled WPA2 corp-vlan 3 IoT Disabled WPA2 iot-vlan 4 Management Enabled WPA2 mgmt-vlan

Based on this output, what can be concluded?

A
All WLANs are currently active and serving clients.
Why wrong: WLAN 3 is disabled.
B
WLAN 3 is not operational because it is disabled.
The Status column shows Disabled for WLAN 3.
C
The Guest WLAN uses WPA2 security.
Why wrong: The Guest WLAN uses Open security.
D
The Management WLAN is on the guest-vlan interface.
Why wrong: Management WLAN is on mgmt-vlan, not guest-vlan.

Question 4mediumdrag order

Drag and drop the steps of the CAPWAP discovery and join process between a lightweight AP and a WLC into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 5mediummulti select

Which two statements about Cisco Wireless LAN Controller (WLC) high availability (SSO) are true? (Choose two.)

A
In an SSO pair, the standby WLC maintains synchronized client and AP state information via a dedicated link.
Correct because SSO uses a dedicated redundancy link to keep the standby WLC fully synchronized with the active WLC.
B
SSO requires both WLCs to be connected to the same Layer 2 network for the redundant management interface.
Correct because the redundant management interface must be on the same subnet to allow seamless failover.
C
During a failover event, all client sessions are dropped and must re-associate with the new active WLC.
Why wrong: Incorrect because SSO provides stateful failover; client sessions are preserved without requiring re-association.
D
SSO can be configured between any two WLC models regardless of hardware platform.
Why wrong: Incorrect because both WLCs must be from the same platform family (e.g., both 9800-40 or both 9800-80) to support SSO.
E
SSO supports only a single AP per WLC pair.
Why wrong: Incorrect because SSO supports the full AP capacity of the active WLC; the standby mirrors the same capacity.

Question 6easymultiple choice

A network engineer is using the Cisco Meraki REST API to update the SSID settings for a wireless network. The engineer sends a PUT request to 'https://api.meraki.com/api/v1/networks/{networkId}/wireless/ssids/{ssidNumber}' with a JSON payload containing the new settings. The API returns a 429 Too Many Requests error. What should the engineer do to resolve this issue?

A
Implement exponential backoff and retry the request after a delay.
Correct because rate limiting requires the client to slow down and retry after a delay.
B
Change the HTTP method to POST because PUT is not supported for this endpoint.
Why wrong: Incorrect because PUT is the correct method for updating a resource; the error is rate limiting.
C
Add an 'X-Cisco-Meraki-API-Key' header with a higher rate limit key.
Why wrong: Incorrect because rate limits are per API key; there is no 'higher rate limit key'.
D
Use a different API endpoint, such as 'https://api.meraki.com/api/v1/organizations/{orgId}/ssids'.
Why wrong: Incorrect because the endpoint is correct; the issue is request frequency.

Question 7mediummultiple choice

A network engineer is troubleshooting a wireless connectivity issue in a campus network managed by Cisco DNA Center. The Assurance module shows that several access points have high client association failures. The engineer checks the wireless controller configuration and finds that the APs are registered and functional. What is the most likely cause of the association failures?

A
RF interference or poor signal-to-noise ratio on the affected APs.
Correct because high association failures are often due to RF issues, which DNA Center Assurance can detect and report.
B
The APs are not running the recommended firmware version.
Why wrong: Incorrect while firmware can cause issues, the APs are registered and functional; association failures are more likely RF-related.
C
The wireless controller has reached its maximum number of APs.
Why wrong: Incorrect because if the controller were full, APs would not register; the scenario states APs are registered and functional.
D
The DNA Center Assurance module is not properly configured to monitor wireless events.
Why wrong: Incorrect because the engineer is already seeing association failure data in Assurance, so monitoring is working.

Question 8mediummulti select

Which two statements about the Cisco FlexConnect architecture are true? (Choose two.)

A
FlexConnect APs can locally switch client data traffic when the CAPWAP tunnel to the WLC is down.
Correct because FlexConnect supports local switching even if the WLC is unreachable, using the local VLAN configuration.
B
FlexConnect APs must always tunnel all client traffic back to the WLC for central switching.
Why wrong: Incorrect because FlexConnect can operate in local switching mode, not always central switching.
C
FlexConnect APs can be assigned to a FlexConnect group to share the same VLAN and ACL configuration.
Correct because FlexConnect groups allow multiple APs to inherit the same local policies, such as VLANs and ACLs.
D
FlexConnect APs require a direct Layer 2 connection to the WLC at all times.
Why wrong: Incorrect because FlexConnect APs can operate independently via the local network when the WLC is not reachable.
E
FlexConnect APs cannot support native VLAN tagging on the uplink interface.
Why wrong: Incorrect because FlexConnect APs do support 802.1Q trunking and native VLAN configuration on the uplink.

Question 9mediumdrag order

Drag and drop the steps of 802.11r Fast BSS Transition (FT) roaming steps into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 10mediumdrag order

Drag and drop the steps of WLC high availability SSO failover steps into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 11mediummulti select

Which two statements about Cisco FlexConnect are true? (Choose two.)

A
FlexConnect APs can locally switch client data traffic at the remote site without tunneling it to the WLC.
Correct because FlexConnect local switching mode allows client traffic to be bridged locally at the AP, reducing WAN bandwidth usage.
B
FlexConnect APs always maintain a control and data tunnel to the WLC, even in standalone mode.
Why wrong: Incorrect because in standalone mode (when the WLC is unreachable), the AP operates independently and does not maintain any tunnel.
C
FlexConnect supports all encryption methods including CCKM and 802.11r in local switching mode.
Why wrong: Incorrect because CCKM is not supported in FlexConnect local switching mode; 802.11r is supported only in specific scenarios.
D
FlexConnect APs can perform rogue detection and containment even when disconnected from the WLC.
Why wrong: Incorrect because rogue detection and containment require the AP to be connected to the WLC; in standalone mode, these features are not available.
E
FlexConnect APs can authenticate clients locally using a local RADIUS server or a local user database when the WLC is unreachable.
Correct because FlexConnect supports local authentication (via local RADIUS or local EAP) when the AP is in standalone mode and the WLC is not reachable.