Courseiva
Question 911 of 1,420
easyMultiple ChoiceObjective-mapped

350-401 Practice Question: The default CAPWAP control path DTLS encryption…

What is the default CAPWAP control path DTLS encryption mode on Cisco 9800 WLCs?

⚠ Common exam trap

Cisco often tests the distinction between control path and data path DTLS defaults, where candidates mistakenly think DTLS is optional or disabled by default, or confuse the default for data path (disabled) with control path (enabled).

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Enabled

Cisco 9800 WLCs have CAPWAP control path DTLS encryption enabled by default to secure control plane communications between the WLC and APs. This is mandated by RFC 5415 and ensures integrity and confidentiality of management traffic such as configuration and keepalives. The default setting cannot be disabled globally; it is always active for control traffic.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Enabled

    Why this is correct

    DTLS is enabled by default for control path.

  • Disabled

    Why it's wrong here

    DTLS is not disabled by default.

  • Optional (configurable per AP)

    Why it's wrong here

    It is a global default, not per AP.

  • Only for data path

    Why it's wrong here

    Data path DTLS is separate and not enabled by default.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jul 4, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.