WorksheetsWireless 1 a 50
Total questions: 50
Worksheet time: 27mins
An enterprise started using WebEx as a virtual meeting solution. There is a concern that the existing wireless network will not be able to support the increased amount of traffic as a result of using WebEx. An engineer needs to remark the QoS value for this application to ensure high quality inmeetings.
QoS preferred call index
UP to DSCP map
AVC profiles
WLAN quality of service profile
An engineer is troubleshooting a Cisco CMX high-availability deployment and notices that the primary and backup Cisco CMX servers are both considered primary. Which command must the engineer run on the backup server?
cmxha convert backup
cmxha backup convert
cmxha secondary convert
cmxha convert secondary
A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that
Cisco DNA Center is ignoring the interference? (Choose two.)
A. The interference is less than or equal to 30% on the 2.4 GHz radio.
B. The interference is less than or equal to 50% on the 2.4 GHz radio.
C. Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.
D. The interference is less than or equal to 30% on the 5 GHz radio.
E. Cisco DNA Center does not include interference in the AP health score.
The Cisco Hyperlocation detection threshold is currently set to -50 dBm. After reviewing the wireless user location, discrepancies have been noticed.To improve the Cisco Hyperlocation accuracy, an engineer attempts to change the detection threshold to -100 dBm. However, the Cisco Catalyst 9800 Series Wireless Controller does not allow this change to be applied.
What actions should be taken to resolve this issue?
Disable Cisco Hyperlocation, change the Cisco Hyperlocation detection threshold, and then enable it.
Create a new profile on Cisco CMX with the new Cisco Hyperlocation detection range, and apply it on the WLA
Place the APs to monitor mode, shutdown the radios, and then change the Cisco Hyperlocation detection threshold.
Shutdown all radios on the controller, change the Cisco Hyperlocation detection range, and enable the radios again.
An engineer has successfully implemented 10 active RFID tags in an office environment. The tags are not visible when the location accuracy is tested on the Cisco CMX Detect and Locate window.
Which setting on Cisco CMX allows the engineer to view the tags?
Enable RFID tags in tracking options.
Enable probing clients for active tags.
Define an RFID group globally and add the tags.
Enable hyperlocation services for RFI
Refer to the exhibit. An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogues?
A. config location notification interval rssi rogues 5
B. config nmsp notification interval rssi rogues 5
C. config subscription notification interval rssi rogues 5
D. config cmx notification interval rssi rogues 5
A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location.
Which Cisco FlexConnect configuration must be used?
A. central authentication and local switching
B. central authentication and central switching
C. local authentication and local switching
D. local authentication and central switching
An IT administrator is managing a wireless network in which most devices are Apple iOS. A QoS issue must be addressed on the WLANs. Which configuration must be performed?
A. Enable Fastlane globally under Wireless > Access Points > Global Configuration.
B. Create a new AVC Profile named AUTOQOS-AVC-PROFILE and apply to all WLANs.
C. Enable Fastlane under each WLAN setting.
D. Enable WMM TSPEC/TCLAS negotiation under Wireless > Advanced.
A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the network readiness is pending. Which two configurations must be performed on the firewall to allow the AP to join the controller? (Choose two.)
A. Block UDP ports 1812 and 1813 on the firewall.
B. Enable NAT Address on the 5520 with an Internet-routable IP address.
C. Configure a static IP on the OEAP 1810.
D. Allow UDP ports 5246 and UDP port 5247 on the firewall.
E. Allow UDP ports 12222 and 12223 on the firewall.
An engineer is configuring multicast for two WLCs. The controllers are in different physical locations and each handles around 500 wireless clients. How should the CAPWAP multicast group address be assigned during configuration?
A. Each WLC must be assigned a unique multicast group address.
B. Each WLC management address must be in the same multicast group.
C. Both WLCs must be assigned the same multicast group address.
D. Each WLC management address must be in a different multicast group.
Which COS to DSCP map must be modified to ensure that voice traffic is tagged correctly as it traverses the network?
COS of 6 to DSCP 46
COS of 3 to DSCP 26
COS of 7 to DSCP 48
COS of 5 to DSCP 46
A multitenant building contains known wireless networks in most of the suites. Rogues must be classified in the WLC. How are the competing wireless APs classified?
A. adhoc
B. friendly
C. malicious
D. unclassified
An engineer needs to configure an autonomous AP for 802.1x authentication. To achieve the highest security an authentication server is used for user authentication. During testing, the AP fails to pass the user authentication request to the authentication server. Which two details need to be configured on the AP to allow communication between the server and the AP? (Choose two.)
A. username and password
B. PAC encryption key
C. RADIUS IP address
D. shared secret
E. group name
After installing and configuring Cisco CMX, an administrator must change the NTP server on the Cisco CMX server. Which action accomplishes this task?
Manually edit /etc/ntp.conf as the admin user before restarting ntpd by using service ntpd restart.
Log in to the Cisco CMX CLI and issue set ntp server NTP_IP where NTPJP is the IP of the NTP server.
Log in to the Cisco CMX GUI as the administrator and type the IP address of the NTP server in System tab > Settings> TimeZone/NTP.
Manually edit /etc/ntp.conf using an XML editor before restarting the server by using service restart all services.
On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational. Which command set prevents this connection?
A. config terminal wireless flexconnect profile [profile name] ethernet-fallback-enable end
B. config terminal wireless flexconnect profile [profile name] fallback-radio-shut end
C. config terminal wireless profile flex [profile name] fallback-radio-shut end
D. config terminal wireless profile flex [profile name] ethernet-fallback-enable end
An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the management interface, it is noticed that the WLC is not responding for APs that are trying to associate to the internal IP management address.
config flexconnect office-extend nat-ip-only disable
config network ap-discovery nap-ip-only enable
config flexconnect office-extend nat-ip-only enable
config network ap-discovery nat-ip-only disable
A network administrator managing a Cisco Catalyst 9800-80 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC. Which two configurations are required? (Choose two.)
A. Assign a policy map under global security policy settings.
B. Add local profiling policy under global security policy settings.
C. Create a service template.
D. Allow HTTP and DHCP profiling under policy map.
E. Enable device classification on global wireless settings.
A wireless network engineer must present a list of all rogue APs with a high severity score to senior management. Which report must be created in Cisco Prime Infrastructure to provide this information?
A. New Rogue APs
Rogue AP Count Summary
C. Rogue AP Events
D. Rogue APs
A customer managing a large network has implemented location services. Due to heavy load, it is needed to load balance the data coming throughNMSP from the WLCs. Load must be spread between multiple CMX servers to help optimize the data flow for APs.
cmxctl config feature flags nmsplb.cmx-ap-grouping true
cmxctl config feature flags nmsplb.cmxgrouping true
cmxctl config feature flags nmsplb.cmx-loadbalance true
cmxctl config feature flags nmsplb.cmx-rssi-distribute true
After looking in the logs, an engineer notices that RRM keeps changing the channels for non-IEEE 802.11 interferers. After surveying the area, it has been decided that RRM should not change the channel.
Avoid Cisco AP Load
Avoid Non-802.11 Noise
Avoid Persistent Non-WiFi Interference
Avoid Foreign AP Interference
An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the main campus. The APs on the main campus are configured to use Local mode and the APs in the branches use FlexConnect mode. Which configuration must be applied to the APs for corporate devices on the main campus to be mapped to the local LAN switch on different VLANs according to the
VLAN tag ID and WLAN?
A. Enable Central DHCP Processing.
B. Disable FlexConnect Local Auth
C. Enable FlexConnect Local Switching.
D. Disable VLAN-based Central Switching.
An engineer set up identity-based networking with ISE and configured AAA override on the WLAN. Which two attributes must be used to change the client behavior from the default settings? (Choose two.)
DHCP timeout
IPv6 ACL
multicast address
DNS server
DSCP value
An engineer needs to provision certificates on a Cisco Catalyst 9800 Series Wireless Controller. The customer uses a third-party CA server.
Which protocol must be used between the controller and CA server to request and install certificates?
SCEP
TLS
LDAP
SSL
After receiving an alert regarding a rogue AP, a network engineer logs into Cisco Prime and looks at the floor map where the AP that detected the rogue is located.
The map is synchronized with a mobility services engine that determines the rogue device is actually inside the campus. The engineer determines the rogue to be a security threat and decides to stop it from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?
A. Go to the location the rogue device is indicated to be and disable the power.
B. Create an SSID on the WLAN controller resembling the SSID of the rogue to spoof it and disable clients from connecting to it.
C. Classify the rogue as malicious in Cisco Prime.
D. Update the status of the rogue in Cisco Prime to contained.
Refer to the exhibit. An engineer must provide a position of rogue APs on a floor map using Cisco PI 3.0, but no rogue AP options are showing on the left-hand navigation menu under Maps. What is the reason for this omission?
A. An assurance license is not installed.
B. The controller operational status background task is disabled.
C. The Show Detected Interferers feature under the AP option is disabled.
D. Cisco MSE has not been added to Cisco PI.
Refer to the exhibit. An engineer is troubleshooting a client connectivity issue. The client is in the RUN state, and no traffic is passed after authenticating by using Cisco ISE. Which action resolves the problem?
A. Configure a different client VLAN after authentication.
B. Disable the ACL that prevents traffic from being allowed.
C. Apply a lower WMM QoS.
D. Enable rate-limiting to the client.
Refer to the exhibit. An engineer has deployed the Cisco CMX solution to track and detect the number of users who visit the office each day. The CMX dashboard is not showing any data. Which action resolves this issue?
A. Configure Single Sign-On authentication.
B. Add the WLCs to CMX.
C. Copy the exported Maps from CMX server to PI using SCP.
D. Install an evaluation license to CMX server.
Company XYZ recently migrated from AireOS to IOS XE 9800 WLCs. The Internet bandwidth must be limited to 5 Mbps for each guest client as per the global standard. In which configuration on the Cisco Catalyst 9800 WLC must the QoS requirement be added?
A. table map
B. policy map
C. service policy
D. class map
A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.
• IP address of the primary server
• IP address of the secondary server
• failover mode to be configured as automatic
• root password of the secondary server
• email ID for NOC notifications
Enabling high availability fails when these parameters are used. Which action resolves the issue?
A. Insert the cmxadmin password of the secondary server.
B. Use IP protocol 4242 for the controller to reach the CMX server.
C. Place primary and secondary servers in different subnets.
D. Enable the virtual IP address of the primary server.
An engineer is in the process of implementing Fastlane on a wireless network with a Mobility Express AP installed. The network must support voice and video applications for Apple devices. Due to a security concern, all iPhones are updated to version 14.5.432302546. Which QoS profile must the engineer configure on the user WLAN?
A. Bronze
B. Best Effort
C. Silver
D. Platinum
A wireless engineer deployed all remote sites as FlexConnect. The client VLAN assignment on these sites is configured manually mapped by WLAN and using local switching. Dynamic VLAN assignment is provided by the newly deployed Cisco ISE. Which IETF attribute must be configured on the AAA server to send that VLAN ID?
A. Tunnel-Medium-Type
B. Tunnel-Client-Endpoint
C. Tunnel-Assignment-ID
D. Tunnel-Private-Group-ID
AN ENGINEER MUST PRESERVE A QOS MARKING SENT BY THE CISCO JABBER SOFWARE RUNNING ON PC1, WHICH MARKING VALUE MUST BE TRUSTED ON PORT FA0/6?
802.1P
IP PRECEDENCE
CoS
DCSP
An engineer manages a wireless network for an enterprise. The offices of the enterprise are in a multistory building with other companies. To avoid service loss of the wireless network, jamming devices must be monitored and an alert must be raised when one enters the airspace. Which two parameters must be configured for this alarm to happen? (Choose two.)
A. Jammer is in the “Rogue Devices to Detect” multiple select box.
B. Jammer is selected in the Rogue Policies.
C. Clean Air is enabled.
D. Air Quality Index Trap is enabled.
E. Set the Cisco WLC to trap this type of device.
More people are working from home, so an engineer must configure OEAPs to support the users. The security team already configured NAT with a public IP address that points to the internal WLC IP address. The APs also have been configured with the public WLC IP address, but APs cannot join the controller yet. Which action resolves this issue?
A. Configure the internal WLC IP address on the OEAPs.
B. Create an ACL in WLC to accept the OEAPs.
C. Enable NAT on the WLC to configure the public IP address.
D. Configure the public WLC IP address on the home router.
An engineer is configuring the maps on the Cisco Prime Infrastructure, but clients fail to show up on the maps. Which two actions are needed to complete this configuration? (Choose two.)
A. Install event group services in Cisco Prime Infrastructure.
B. Synchronize the Cisco WLC with Cisco Prime Infrastructure.
C. Synchronize the network designs with the Cisco MSE.
D. Activate the context-aware service on the Cisco MSE.
E. Install wIPS licenses on the Cisco MSE.
Which role does an engineer configure for administrative access to the wireless infrastructure, using Cisco ISE, to allow configuration of the WLC syslog configuration?
A. MANAGEMENT
B. SECURITY
C. CONTROLLER
D. WIRELESS
An administrator is querying the Cisco CMX server through REST API for active client data to build an application. Cisco CMX supports the use of version 3 of REST API to query for active clients in the network. While testing to retrieve information using the API, no results are received. Which configuration is required for authentication against the API?
A. cmxos v3 apiserver user add
B. cmxos apiserver user add
C. cmxctl apiserver user add
D. cmxctl v3 apiserver user add
An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the main campus. The APs on the main campus are configured to use Local mode and the APs in the branches use FlexConnect mode. Which configuration must be applied to the APs for corporate devices on the main campus to be mapped to the local LAN switch on different VLANs according to the
VLAN tag ID and WLAN?
A. Enable Central DHCP Processing.
B. Disable FlexConnect Local Auth
C. Disable FlexConnect Local Switching.
D. Disable VLAN-based Central Switching.
A network engineer must configure APs on a controller for 802.1x access to a wired infrastructure as quickly as possible. The same credentials are used for all APs. Where are the credentials entered?
A. Management > Local Management Users
B. Security > Advanced EAP
C. AP > Credentials tab
D. Wireless > Global Configuration
As part of a PCI audit, an engineer is gathering information on a Cisco Unified Wireless Network environment. The report must include any security weaknesses in the system. Where does the engineer find the related information?
A. security team network scan results from last year
B. Security tab on Cisco wireless LAN controllers
C. security interference results on Cisco Prime Infrastructure
D. security index results on Cisco Prime Infrastructure
An engineer must implement a wireless network to support location services. The network will include an MSE and Cisco WLC. After the deployment, the IT team must be able to locate and track clients. What is the minimum number of APs that a client must hear to accomplish this configuration so that the engineer can position them accordingly?
1
3
4
6
A network engineer is configuring a Cisco FlexConnect AP to allow Cisco ISE to dynamically assign the subnet of a user based on their credentials. Which controller mapping must be modified for this feature?
A. WLAN VLAN
B. VLAN ACL
C. RF group
D. AP group
An engineer manages the wireless network for a government agency. The wireless network is used for access to the corporate network. The wireless network must include the latest wIPS/wIDS detection definitions. Which action does the engineer take to ensure that this requirement is met?
A. Update the Cisco MSE software.
B. Configure Cisco Prime Infrastructure to push new definitions to the APs.
C. Update the Cisco WLC software.
D. Configure the Cisco WLC to repoll the Cisco MSE for update definitions.
A NETWORK ENGINEER PERFORMED A NEW DEPLOYMENT OF CISCO DNA CENTER, THE ENGINEER DISCOVERED AND PROVISIONED ALL APs and converted then to fabric, the ssid were created nd the aps were allocated to the respective floors, but the SSIDs are not being seen on the floor. what must be configured to stablish this connectivity?
enable all radios on the APs
add the users in cisco ISE
Configure RADIUS for the SSIDs
Map the pools to the SSID
An engineer deploys APs to a branch office. All AP control and management-related traffic must be tunneled to a centralized WLC via CAPWAP. All user traffic must utilize the local Internet line. What should be configured?
A. wireless mesh network
B. centrally switched FlexConnect
C. locally switched FlexConnect
D. a WLC in local mode
A network engineer is configuring a Cisco AireOS 8.2 WLC, Cisco MSE, and Cisco PI with Cisco 3700 Series APs and Cisco Hyperlocation modules. The engineer configures and enables a WLAN with Hyperlocation. During testing, the engineer notices that the hyperlocation module cannot be seen in the WLC . Which action resolves the issue?
A. Enable DCA in the Global Configuration settings of the WLC.
B. Install WLC software that supports the Hyperlocation module.
Enable hyperlocation in the global configuration settings of the WLC
D. Open SNMP port 161 and NMSP port 16113 on the controller.
A municipality customer uses a Cisco 5520 Series Wireless Controller for the wireless network. The customer intends to move the depot of its stores from using legacy bespoke voice-over-Wi-Fi handsets to a VoIP software package running on 5 GHz-capable laptops, tablets, and smartphones. Bluetooth headsets will be used for any voice communication on any data device. Assuming that a suitable RF site survey for 5 GHz has already been carried out, which two configuration settings ensure the best possible voice experience? (Choose two.)
A. Configure AVC on the controller to prioritize voice over other applications' traffic on the same device.
B. Remark all traffic coming from the new voice-capable devices with DSCP 46 (EF) at the AP.
C. Assign the Platinum QoS profile to the SSID carrying the new-style voice traffic.
D. Create mobility groups and include all the APs in the high-density areas.
E. Turn off the 2.4 GHz radios on all APs where the voice application is used.
What is an indication of having multiple wireless controllers within the same CAPWAP multicast group?
A. Multicast packets are rate-limited to 128 kbps.
B. Multicast traffic is increased throughout the network.
C. ACL filtering are used on the first hop router on all VLANs.
D. CAPWAP packets are fragmented.
An engineer must enable AVC on a Cisco Catalyst 9800 WLC and send the NetFlow data to a NetFlow collector. What must be configured on the controller with the IP address and port number of the NetFlow collector?
A. flow exporter
B. flow policy
C. flow monitor
D. flow record
A network engineer is implementing BYOD on a wireless network. Based on the customer requirements, a dual SSID approach must be taken. Which two advanced WLAN configurations must be performed? (Choose two.)
A. Set NAC State to Radius NAC.
B. Set Allow AAA Override to Enabled.
C. Set DHCP Addr. Assignment to Required.
D. Select DHCP Profiling.
E. Select Enable Session Timeout.
