Font size
Worksheetswireless 50 a 100
Total questions: 50
Worksheet time: 28mins
Refer to the exhibit. An engineer implemented the CPU ACL on your Cisco 5520 Series Wireless LAN Controller, and the controller is no longer manageable via the network. What must be changes on this CPU ACL to enable it to manage the controller again?
A. Permit statements must be added to the top of the ACL in both directions, which specify the network to be managed from and the virtual interface of the controller.
B. Line 1 must be set to a destination port of HTTP.
C. Permit statements must be added to the top of the ACL, which specify the network to be managed from.
D. Line 1 must be set to the inbound direction.
A Cisco 8540 WLC manages Cisco Aironet 4800 Series Aps and send AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperlocation. No AoA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics. How must the network administrator resolve this issue?
A. Enable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.
B. Enable the HALO module on the CMX appliance for the data collection.
C. Allow port 2003 for AoA packets to flow through between the CMX appliances.
D. Use one Hyperlocation-enabled WLC and CMX for AoA data.
A customer wants the APs in the CEO's office to have different usernames and passwords for administrative support than the other APs deployed throughout the facility. Which feature must be enabled on the WLC and APs to achieve this goal?
A. local management users
B. HTTPS access
C. 802.1X supplicant credentials
D. override global credentials
A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates instead of 802.11n data rates. To what must the WMM policy of the WLAN be set to accomplish this task?
A. required
B. allowed
C. disabled
D. mandatory
A network is set up to support wired and wireless clients. Both types must authenticate using 802.1X before connecting to the network. Different types of client authentication must be separated on a Cisco ISE deployment. Which two configuration items achieve this task? (Choose two.)
A. device profiles
B. policy sets
C. separate networks
D. policy groups
E. policy results
When configuring a large, high-availability wireless network, which change to a mobility group creates less load on the controllers and maintains the same mobility messages?
A. Configure mobility group multicast messaging.
B. Remove unnecessary controllers from the mobility group.
C. Configure the controllers into separate RF groups from the mobility groups.
D. Separate the controllers into different mobility groups per controller.
A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure. Which two technologies must they deploy? (Choose two.)
A. FlexConnect mode
B. monitor mode
C. sniffer mode with no submode
D. local mode with WIPS submode
E. rogue detector mode
a network engineer needs to configure multicast inthe network. the implementation will use multiple multicast groups and pim routers, which address provides automatic discovery of the best rp for each multicast group?
224.0.1.39
224.0.0.13
224.0.0.14
224.0.1.40
An IT administrator deployed an OEAP to the home of a remote user, but the OEAP cannot reach the WLC. Which two configuration settings must be completed before an OEAP is deployed successfully? (Choose two.)
A. Configure Secondary Controller Name and Management IP address in the High Availability tab.
B. Configure LSC to authorize the OEAP.
C. Configure the AP mode to FlexConnect and check the box for Office Extend AP.
D. Configure the WLC with an external IP address on the virtual interface.
E. Configure Primary Controller Name and Management IP address in the High Availability tab.
Refer to the exhibit. An engineer is configuring a Cisco wireless LAN controller and needs wireless multicast to use the 54Mbps rates. Which action meets this requirement?
A. Change the 24 Mpbs to Supported.
B. Set all data rates below 54 Mbps to Supported.
C. Change the 54 Mpbs to Mandatory.
D. Set all data rates below 54 Mbps to Disable.
An engineer is ensuring that, on the IEEE 802.1X wireless network, clients authenticate using a central repository and local credentials on the Cisco WLC. Which two configuration elements must be completed on the WLAN? (Choose two.)
A. TACACS+
B. MAC authentication
C. local EAP enabled
D. web authentication
E. LDAP server
An engineer is assembling a PCI report for compliance purposes and must include missed best practices that are related to WLAN controllers. The engineer has access to all WLCs, Cisco MSE, and Cisco Prime Infrastructure. Which method most efficiently displays a summary of inconsistencies?
A. WLC running-config
B. Cisco Prime Infrastructure monitoring
C. Cisco Prime Infrastructure reporting
D. WLC logs
The security policy mandates that only controller web management traffic is
allowed from the IT subnet. In testing, an engineer is trying to connect to a
WLAN with Web Authentication for guest users, but the page is timing out on
the wireless client browser. What is the cause of this issue?
Web Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.
The DNS server that is configured on the controller is incorrecT
Web Authentication Redirect is not supported with CPUACLS. QUE
The implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.
An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a reliable way for a Media Stream to work between Cisco FlexConnect APs. Which feature must be enabled to guarantee delivery?
A. Unicast Direct
B. IGMP Direct
C. Multicast Direct
D. Multicast-to-Unicast Direct
A wireless administrator must assess the different client types connected to Cisco Catalyst 9800 Series Wireless Controller without using any external servers.
Which configuration must be added to the controller to achieve this assessment?
A. native profile
B. MAC classification
C. local profile
D. device classification
An engineer is responsible for a wireless network for an enterprise. The enterprise has distributed offices around the globe, and all APs are configured in
FlexConnect mode. The network must be configured to support 802.11r and CCKM. What needs to be implemented to accomplish this goal?
A. Enable VLAN-based central switching.
B. Enable FlexConnect local authentication.
C. Enable FlexConnect local switching.
D. Create FlexConnect groups.
An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificate type helps resolve this issue?
A. Public-Signed Root
B. Public-Signed SAN
C. Self-Signed Wildcard
D. Self-Signed Standard
An engineer is configuring a new wireless network for guest access. The Facebook page of the company must be viewed by the guest users before they get access to the network. A Cisco MSE is used as a wireless component. Which URL must be used in the configuration as the external redirection URL?
Refer to the exhibit An ACL is configured to restrict access for BYOD clients.
The ACL must redirect devices to the guest portal. To which two devices on the local network must the ACL allow access other than the DHCP server?
(Choose two.)
A. SNMP server
B. Cisco ISE
DNS server
WLCD
RADIUS server
Refer to the exhibit. A network architect configured the Cisco Catalyst 9800 Series Controller to find out information on client types in the wireless network. RADIUS profiling is enabled so that the controller forwards the information about clients to a Cisco ISE server through vendor-specific RADIUS attributes. The ISE server is not profiling any data from the controller. Which configuration must be added in the blank in the code to accomplish the profiling on the Cisco 9800 Series controller?
A. aaa accounting identity acct_method start-stop group rad-group
B. aaa accounting network acct_method start-stop group rad-group
C. aaa accounting exec acct_method start-stop group rad-group
D. aaa accounting commands acct_method start-stop group rad-group
Refer to the exhibit. An engineer configured a BYOD policy that allows for printing on the WLAN using Bonjour services. However, the engineer cannot get printing to work. The WLC firmware is 8.x. What must be implemented on the controller?
A. Enable mDNS and IGMP snooping.
B. Activate location-specific services.
C. Configure Secure Web Mode Cipher-Option SSLv2.
D. Increase the IGMP Query Interval value
WHAT IS THE REASON THAT THE WIRELESS CLIENT CANNOT GET THE RUN STATE
IT IS NOT GETTING IP ADDRESS
AN AUTHENTICATION ERROR HAS OCCURED
IT HAS NO COMMUNICATION WITH CISCO OSE
BECAUSE OF CENTRAL SWITCHING, THE AP MUST REACH THE CISCO ISE DIRECTLY
A network administrator just completed the basic implementation of Cisco CMX and tries to implement location tracking. The administrator is having trouble establishing connectivity between one of the WLCs through NMSP. What must be configured to establish this connectivity? (Choose two.)
A. Add permanent licenses on the Cisco CMX server.
B. Allow on the firewall port 16113 between Cisco CMX and the WLC.
C. Enable NMSP on the WLC.
D. Reboot Cisco CMX after adding the WLC for the first time.
E. Add to the WLC the MAC address and SSC key for the Cisco CMX server.
An engineer needs read/write access to rename access points and add them to the correct AP groups on a wireless controller. Using Cisco ISE TACACS, which custom attributes is the minimum required?
A. ole1=WIRELESS
B. ole1=WLAN role2=SECURITY
C. ole1=WLAN role2=WIRELESS
D. ole1=WLAN
WPA2 Enterprise with 802.1X is being used for clients to authenticate to a wireless network through a Cisco ISE server. For security reasons, the network engineer wants to ensure that only PEAP authentication is used. The engineer sent instructions to clients on how to configure the supplicants, but the ISE logs still show users authenticating using EAP-FAST. Which action &users unless the correct authentication mechanism is configured?
A. Enable AAA override on the SSID and configure an access policy in Cisco ISE that allows access only when the EAP authentication method is PEAP
B. Enable AAA override on the SSID and configure an access policy in Cisco ISE that denies access to the list of MACs that have used EAP-FAST
C. Enable AAA override on the SSID, gather the usernames of these users, and disable the RADIUS accounts until the devices are correctly configured
D. Enable AAA override on the SSID and configure an ACL on the WLC that allows access to users with IP addresses from a specific subnet
An engineer is planning an image upgrade of the WLC, and hundreds of APs are spread across remote sites with limited WAN bandwidth. The engineer must minimize the WAN utilization for this upgrade. Which approach must be used for the AP image upgrade?
A. Predownload the new code to the APs.
B. Use the Smart AP image upgrade feature.
C. Allow the APs to download their code after WLC reboot.
D. Execute parallel TFTP code upgrade on the APs via SSH.
An engineer set up a VoWLAN with QoS on the WLC and a class map on the switch, but the markings are not being preserved correctly in the end-to-end traffic flow. Which two configurations on the wired network ensure end-to-end QoS? (Choose two.)
A. trust boundaries
B. access lists
C. policy maps
D. QoS licenses
E. NetFlow
An engineer is configuring a wireless LAN controller and is setting these 802.11a/n data rates: 5.5 Mbps - Supported 11 Mbps - Mandatory 24 Mbps - Disabled 56 Mpbs - Supported. Which configuration change must be made for the multicast broadcast to be sent over 24 Mbps?
A. Set the 56 Mpbs rates to Disable
B. Set the 24 Mpbs rates to Supported
C. Set all rates to Disable except 11 Mpbs rates
D. Set the 24 Mpbs rates to Mandatory
A request has come in to use dynamic VLAN assignment on an autonomous AP. After the AP is configured, which RADIUS attribute must an engineer use to pass the VLAN ID to the AP?
A. Tunnel-Medium-Type
B. Tunnel-Private-Group-ID
C. Tunnel-Assignment-ID
D. Tunnel-Type
An engineer must implement Video Stream on a Cisco Wireless Network for a single SSID deployment model. Which feature must be enabled on Cisco Catalyst 9800 Series WLC?
A. Video CAC
B. mDNS Policy
C. IGMP Snooping
D. Multicast Direct
An engineer enabled Cisco Centralized Key Management (CKM) on a WLAN with local and FlexConnect mode APs. The engineer notices that Cisco CKM is not working for the FlexConnect APs when looking at roaming, but it works for local mode APs. Which change must be made on the controller for the configuration to work properly?
A. Configure VLAN-based central switching.
B. Enable Cisco FlexConnect Central Assoc.
C. Use local authentication.
D. Place APs in a Cisco FlexConnect group.
A WLAN on the WLC is configured for web authentication as the Layer 3 Security policy with the web-auth type External. Which two elements are required as part of the configuration? (Choose two.)
A. WLAN being not present in the default AP group
B. HTTPS redirection enabled
C. nonroutable IP address assigned to the virtual interface
D. web-auth secure web option enabled
E. preauth ACL to allow access to the external web server
A NETWORK ENGINEER NEEDS TO INSTALL MSE TO USE WIPS. IN ADDITION THE APPLIANCE MUST COMMUNICATE WITH THE AIREOS CONTROLLER VERSION 8.9. WHICH TCP PORT MUST BE ALLOWED ON THE NETWORK TO ENABLE THE CONNECTION?
443
80
8080
16113
CLIENTS ON ACCESS POINTS WITHIN AN AP GROUP ARE NOT REVEIVING MULTICAST TRAFFIC AFTER ROAMING TO ANOTHER AP WITHIN THE AP GROUP WHICH ACTION MAINSTAINS MULTICAST CONNECTIVITY?
ENABLE IGMP SNOOPING
ENABLE NAC OUT OF BAND SUPPORT
ENABLE A UNIQUE NASID FOR THE AP GROUP
ENABLE AN ACL ON THE ROUTER THAT SERVES THE VLAN OR SUBNET
An engineer configures an AireOS WLC v8.2 that has Cisco Aironet 3700 Series APs and Cisco Hyperlocation modules. The engineer deploys and enables a WLAN that has Hyperlocation. During testing, the engineer notices poor location accuracy when the packets arrive. Which action resolves the issue?
A. Open SNMP port 161 and NMSP port 16113 on the WLC.
B. Enable Hyperlocation in the Global Configuration settings of the WLC.
C. Wait 60 to 90 minutes for RRM to settle before recording location measurements.
D. Install the software code for the WLC that supports the Hyperlocation module.
A. Open SNMP port 161 and NMSP port 16113 on the WLC.
B. Enable Hyperlocation in the Global Configuration settings of the WLC.
C. Wait 60 to 90 minutes for RRM to settle before recording location measurements.
D. Install the software code for the WLC that supports the Hyperlocation module.
An engineer is setting up web authentication for the public Wi-Fi. The installation will take place in a retail store. The existing Facebook page to log in to the captive portal must be used. The engineer already paired the Cisco MSE to the Facebook page. Which two actions complete the configuration? (Choose two.)
A. Configure access control lists.
B. Pair Cisco MSE to Cisco Prime Infrastructure.
C. Configure the client for authentication.
D. Configure Cisco MSE to allow mobile authentication.
E. Configure WLAN for authentication.
An engineer must send Cisco OEAPs to the homes of employees. The APs must be able to discover and join the WLC when they connect to each employee home network. Which action accomplishes this task?
A. Use the WLC name and management IP address to configure the OEAPs.
B. Use the OEAP management IP address to listen for discovery broadcasts from the WLC.
C. Use the WLC name and management IP address to configure the DNS server.
D. Use DHCP Option 43 to configure the WLAN name and management IP address.
Refer to the exhibit. An engineer implemented a CPU ACL on the controller, and now the Web Authentication Redirect page is not working. What must be changed for the redirect page to work?
A. The permit statement must be directed to the controller management address.
B. The permit statement for 192.0.2.100 must be in both directions.
C. The Web Authentication Redirect must be configured on the CPU ACLs.
D. The Web Authentication Redirect must be HTTP.
The IT department creates a video containing instructions for employees who have just joined the company. Newcomers need to join the wireless network named NEW0123456789. The WLAN name will be changed daily by IT support. Only new employees must receive the video over wireless multicast. What allows this feature?
A. WMF
B. WMM
C. TPC
D. DCA
A wireless engineer must configure IEEE 802.1X authentication on a WLAN that supports new and legacy wireless devices. Which condition must be met for the legacy clients to be able to associate and authenticate without issues?
A. The authenticator and the authentication server must support the same authentication protocol.
B. The client and the authenticator must support the same authentication protocol.
C. The client and the controller must support the same authentication protocol.
D. The client and the authentication server must support the same authentication protocol.
A customer must provide a secure wireless network from a Cisco Catalyst 9800 Series Wireless Controller to a Cisco AP to remote users. The corporate WLAN must be provided over the Internet to specific locations and support a locally-installed IP phone. Which two actions accomplish this configuration? (Choose two.)
A. Enable Local Switching under the WLAN.
B. Configure Remote LAN under the Remote LAN.
C. Create a Flex Group and add the AR
D. Enable Office Extend AP on the Flex Profile.
E. Configure NAT on the physical interface.
An engineer is trying to log in to their lightweight access point joined to a WLC that does not have AP credentials defined. Which credentials does the engineer use?
A. admin/Cisco123
B. Cisco/Cisco
C. TACACS credentials
D. AP Global Configuration configured credentials
Refer to the exhibit. An enterprise uses 802.11 b/g APs and must track the RFID tags within the network. How many channels must be used to maximize the optimization of the monitoring and tracking of the tags?
1
3
4
11
AN EVENT COMPANY MUST GATHER LOCATION TRACKING DETAILS OF WIRELESS CLIENTS AT AN EVENT WHERE CLIENTS WILL BE GIVEN FEE QUEST ACESS TO THE WIFI. A NETWORK ENGINEER MUST INTEGRATE A CISCO WLC WITH A CISCO CMX SERVER, WHICH COMMAND MUST BE RUN?
CMXCTL CONFIG CONTROLLERS ADD
CMXCTL CONFIG CONTROLLERS IMPORT
CMXCTL CONFIG CONTROLLERS ACTIVEAP
CMXCTL CONFIG CONTROLLERS FLOORS WLC-IP-ADDRESSG
A COMPANY IS IMPLEMENTING CISCO ISE AND IBN FOR THEIR WLAN, THE PICTURED IBN PROFILE IS APPLIED TO BYOD DEVICES THAT ARE NOT REGISTERED TO THE MOBILE DEVICE MANAGER. WHICH ADVANCED SETTING MUST BE ENABLED ON THE WLAN TO ALLOW THE POLICY TO WORK CORRECTLY?
ALLOW AAA OVERRIDE
RADIUS PROFILING
STATIC IP TUNNELING
AIRONET IE
AN ADMINISTRATOR CONFIGURES CPU ACL ON THE AIREOS WLC TO IMPLEMENT SECURITY. AFTER CONFIGURATION, ADMINISTRATIVE USER CANNOT ACCESS THE USER INTERFACE. WHERE MUST HTTP AND HTTPS traffic be allowed on the acls based on the configuration?
on the management interface
on the dynamic interface
on the service port of management traffic
on the virtual interface
An engineer is configuring location services with a Cisco CMX 10.6.2 solution. The engineer must strengthen interferer filtering so that Cisco CMX is protected from bursts of short-lived interferes. Which two interferer-filtering parameters must be configured to meet the requirement? (Choose two.)
A. Intensity Cutoff
B. Severity Cutoff
C. Duty Cycle Cutoff
D. RSSI Maximum
E. Utilization Maximum
An administrator receives reports of many interferes in the wireless network and wants to get these interferes' location from the maps in Cisco Prime Infrastructure. When looking at the floor plans/maps, the administrator does not see any interferes but can see all wireless clients located successfully. What must be configured to get the location?
A. Add MSE to Cisco Prime Infrastructure and synchronized.
B. Enable interferer tracking on the MSE.
C. Activate NMSP communication with the WLC.
D. Configure SNMP between Cisco Prime Infrastructure and the WLC.
An engineer deploys APs in autonomous mode to provide corporate and guest access in several retail locations. Remote authentication with IEEE 802.1X is configured to ensure a secure wireless connection for corporate users. Which component must be configured as the authenticator?
A. RADIUS server
B. authentication server
C. APs
D. supplicant
An engineer attempts to troubleshoot client connectivity issues in Cisco Prime Infrastructure. The Cisco Prime Infrastructure GUI is performing as expected, but the client detail information that is displayed is not current. The displayed client state and connected AP are up to 5 minutes old. Which action resolves this issue?
A. Change the data retention settings to 5 seconds.
B. Use a different browser to access the web interface.
C. Enable client Assoc/Disassoc and Auth/Deauth SNMP traps on the controller.
D. Optimize the Cisco Prime Infrastructure database.
