Which configuration is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one controller to another?

A. Enable IGMPv3 on the central Layer 3 switch.

B. Enable IGMP snooping on the WLC.

C. Enable multicast mode on the WLC.

D. Create multicast groups on the central Layer 3 switch.

A corporation has a wireless network where all access points are configured in FlexConnect. The WLC has a Data WLAN and a VoWiFi WLAN implemented where centrally-switched SSID is configured for the APs. Which QoS configuration must be implemented for the wireless packets to maintain the marking across the wired and wireless network?

A. Set QoS to Platinum.

B. Enable CAC.

C. Allow WMM.

D. Trust DSCP.

Refer to the exhibit. An engineer is troubleshooting a client connectivity issue. The client is in the RUN state, and no traffic is passed after authenticating by using Cisco ISE. Which action resolves the problem?

A. Configure a different client VLAN after authentication.

B. Disable the ACL that prevents traffic from being allowed.

C. Apply a lower WMM QoS.

D. Enable rate-limiting to the client.

Which devices can be tracked with the Cisco Context Aware Services?

A. wired and wireless devices

B. wireless devices

C. wired devices

D. Cisco certified wireless devices

After the rogue reports from Cisco Prime Infrastructure are reviewed, it is determined that the automatic rogue mitigation is not working as planned. Which security measure must be taken to help prevent rogue APs from being plugged into the network?

A. Apply port security to the switch.

B. Add a MAC filter to the switch.

C. Apply a different version of spanning tree.

D. Apply an IP access list to ports.

A customer must use deep-packet inspection on the Cisco Catalyst 9800 Series Wireless Controller. The details must include all wireless client use details. Where must AVC be configured to meet this requirement?

A. AP join tag

B. policy profile

C. RF tag

D. WLAN

An engineer is configuring the maps on the Cisco Prime Infrastructure, but clients fail to show up on the maps. Which two actions are needed to complete this configuration? (Choose two.)

A. Install event group services in Cisco Prime Infrastructure.

B. Synchronize the Cisco WLC with Cisco Prime Infrastructure.

C. Synchronize the network designs with the Cisco MSE.

D. Activate the context-aware service on the Cisco MSE.

E. Install wIPS licenses on the Cisco MSE.

During discovery, one out of five fabric-enabled WLAN controllers is not being properly discovered. The firewall rules are the same for all the controllers. Which element is missing?

A. YANG

B. SNMP management

C. SNMP trap

D. NETCONF

A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.
• IP address of the primary server
• IP address of the secondary server
• failover mode to be configured as automatic
• root password of the secondary server
• email ID for NOC notifications
Enabling high availability fails when these parameters are used. Which action resolves the issue?

A. Insert the cmxadmin password of the secondary server.

B. Use IP protocol 4242 for the controller to reach the CMX server.

C. Place primary and secondary servers in different subnets.

D. Enable the virtual IP address of the primary server.

Refer to the exhibit. An engineer is configuring a Cisco wireless LAN controller and needs wireless multicast to use the 54Mbps rates. Which action meets this requirement?

A. Change the 24 Mpbs to Supported.

B. Set all data rates below 54 Mbps to Supported.

C. Change the 54 Mpbs to Mandatory.

D. Set all data rates below 54 Mbps to Disable.

A wireless network has been implemented to enable multicast video to be streamed reliably over the wireless link to the wireless users. After a client reports that the video is unable to stream, the administrator determines that the client is connecting at a data rate of 12 Mbps and is trying to stream to a valid multicast address on the network. Which two actions must be applied? (Choose two.)

A. Turn off IGMP snooping for all the configured WLANs on the controller.

B. Implement video-stream for the multicast video on the controller.

C. Allow multicast-direct to work correctly and multicast-direct to be enabled globally.

D. Change the WLAN QoS value to Bronze for the WLAN that multicast will be enabled.

E. Allow RTSP to stream the video due to wireless multicast not using acknowledgements.

A hospital wants to offer indoor directions to patient rooms utilizing its existing wireless infrastructure. The wireless network has been using location services specifications. Which two components must be installed to support this requirement? (Choose two.)

A. WIPS

B. Cisco MSE

C. Cisco CMX Visitor Connect

D. Cisco CMX AppEngage

E. Cisco CMX Analytics

An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features does the engineer configure to accomplish this task? (Choose two.)

A. Device Admin Policy Set

B. User Access Mode: ReadWrite

C. ACL

D. RADIUS server

E. TACACS server

As part of a PCI audit, an engineer is gathering information on a Cisco Unified Wireless Network environment. The report must include any security weaknesses in the system. Where does the engineer find the related information?

A. security team network scan results from last year

B. Security tab on Cisco wireless LAN controllers

C. security interference results on Cisco Prime Infrastructure

D. security index results on Cisco Prime Infrastructure

A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart
AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

A. 1

B. 2

C. 5

D. 7

An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

A. network policy server

B. RADIUS

C. TACACS+

D. LDAP

A customer must provide a secure wireless network from a Cisco Catalyst 9800 Series Wireless Controller to a Cisco AP to remote users. The corporate WLAN must be provided over the Internet to specific locations and support a locally-installed IP phone. Which two actions accomplish this configuration? (Choose two.)

A. Enable Local Switching under the WLAN.

B. Configure Remote LAN under the Remote LAN.

C. Create a Flex Group and add the AR

D. Enable Office Extend AP on the Flex Profile.

E. Configure NAT on the physical interface.

An engineer must implement a wireless network to support location services. The network will include an MSE and Cisco WLC. After the deployment, the IT team must be able to locate and track clients. What is the minimum number of APs that a client must hear to accomplish this configuration so that the engineer can position them accordingly?

A. 1

B. 3

C. 4

D. 6

An engineer must implement intrusion protection on the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which AP mode and submode must be implemented?

A. AP mode: local, AP submode: none

B. AP mode: monitor, AP submode: WIPS

C. AP mode: monitor, AP submode: none

D. AP mode: local, AP submode: WIPS

An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

A. permit-ACL

B. WMM required

C. mark

D. rate-limit

Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

A. FlexConnect ACL

B. VLAN name override

C. CCKM/OKC

D. AAA override

A network engineer is implementing BYOD on a wireless network. Based on the customer requirements, a dual SSID approach must be taken. Which two advanced WLAN configurations must be performed? (Choose two.)

A. Set NAC State to Radius NAC.

B. Set Allow AAA Override to Enabled.

C. Set DHCP Addr. Assignment to Required.

D. Select DHCP Profiling.

E. Select Enable Session Timeout.

An engineer needs read/write access to rename access points and add them to the correct AP groups on a wireless controller. Using Cisco ISE TACACS, which custom attributes is the minimum required?

A. role1=WLAN

B. role1=WLAN role2=SECURITY

C. role1=WLANrole2=WIRELESS

D. role1=WIRELESS

The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

A. CSV

B. PDF

C. XLS

D. DOC

E. plain text

A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?

A. received signal strength

B. triangulation

C. time distance of arrival

D. angle of incidence

Which three properties are used for client profiling of wireless clients? (Choose three.)

A. HTTP user agent

B. DHCP

C. MAC OUI

D. hostname

E. OS version

F. IP address

Refer to the exhibit. An event company must gather location-tracking details of wireless clients at an event where clients will be given free guest access to the Wi-Fi. A network engineer must integrate a Cisco WLC with a Cisco CMX server. Which command must be run?

A. [cmxadmin@cmx]# cmxctl config controllers add

B. [cmxadmin@cmx]# cmxctl config controllers import

C. [cmxadmin@cmx]# cmxctl config controllers activeap

D. [cmxadmin@cmx]# cmxctl config controllers floors wlc-ip-address

Which customizable security report on Cisco Prime Infrastructure will show rogue APs detected since a point in time?

A. Network Summary

B. Rogue APs Events

C. New Rogue APs

D. Rogue APs Count Summary

The marketing department in a retail company has created a promotional video for the opening of a new branch store shp-GA4B6C860927AB. The video must be received by interested hosts only, over wireless multicast. What allows this feature?

A. WMM

B. TPC

C. WMF

D. DCA

A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC. Which configuration should be used to accomplish this goal?

A. FlexConnect mode with central switching enabled

B. FlexConnect mode with central authentication

C. FlexConnect mode with OfficeExtend enabled

D. FlexConnect mode with local authentication

Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server.
Which three steps are required for this configuration? (Choose three.)
 

A. Configure the certificate, WLAN, and radio interface on WGB.

B. Configure the certificate on the WLC.

C. Configure WLAN to authenticate using ISE.

D. Configure the access point with the root certificate from ISE.

E. Configure WGB as a network device in ISE.

F. Configure a policy on ISE to allow devices to connect that validate the certificate.

Clients on access points within an AP group are not receiving multicast traffic after roaming to another AP within the AP group. Which action maintains multicast connectivity?

A. Enable a unique NAS-ID for the AP group.

B. Enable NAC out-of-band support.

C. Enable IGMP snooping.

D. Enable an ACL on the router that serves the VLAN or subnet.

An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication
Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?

A. DNS server IP

B. controller management IP

C. virtual interface IP

D. client interface IP

A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

A. There is an IEEE invalid 802.1X authentication policy on the authentication server.

B. The user Active Directory account is locked out after several failed attempts.

C. There is an invalid 802.1X authentication policy on the authenticator.

D. The laptop has not received a valid IP address from the wireless controller.

An engineer needs to configure the infrastructure for wireless clients to use IEEE 802.1X to the onboarding VLAN. After authentication and profiling, it must be determined if the client is a company device that is up-to-date. After this step, the device must connect to the corporate VLAN and access all resources. What must be implemented to meet these requirements?

A. Change of Authentication

B. Completion of Authentication

C. Change of Authorization

D. Completion of Authorization

After installing and configuring Cisco CMX, an administrator must change the NTP server on the Cisco CMX server. Which action accomplishes this task?

A. Manually edit /etc/ntp.conf using an XML editor before restarting the server by using service restart all services.

B. Log in to the Cisco CMX CLI and issue set ntp server NTP IP where NTP IP is the IP of the NTP server.

C. Manually edit /etc/ntp.conf as the admin user before restarting ntpd by using service ntpd restart.

D. Log in to the Cisco CMX GUI as the administrator and type the IP address of the NTP server in System tab > Settings> TimeZone/NTP.

An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

A. The Cisco CMX instances are installed in the same subnet.

B. The types of the primary and secondary Cisco CMX installations differ.

C. The delay between the primary and secondary instance is 200 ms.

D. The sizes of the primary and secondary Cisco CMX installations differ.

E. Both Cisco CMX installations are virtual.

A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

A. SOAP/XML

B. NMSP

C. CAPWAP

D. SNMP

An engineer is configuring a wireless LAN controller and is setting these 802.11a/n data rates:
• 5.5 Mbps - Supported
• 11 Mbps - Mandatory
• 24 Mbps - Disabled
• 56 Mpbs - Supported
Which configuration change must be made for the multicast broadcast to be sent over 24 Mbps?

A. Set the 24 Mpbs rates to Supported.

B. Set the 56 Mpbs rates to Disable.

C. Set the 24 Mpbs rates to Mandatory.

D. Set all rates to Disable except 11 Mpbs rates.

An engineer must provide a graphical report with summary grouped data of the total number of wireless clients on the network. Which Cisco Prime Infrastructure report provides the required data?

A. Client Traffic Stream Metrics

B. Client Summary

C. Posture Status Count

D. Mobility Client Summary

What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

A. EAP-PEAP with 802.1x port authentication

B. EAP-TLS with 802.1x port authentication

C. EAP-FAST with CAPWAP DTLS + port authentication

D. EAP-FAST with CAPWAP DTLS

An engineer has successfully implemented 10 active RFID tags in an office environment. The tags are not visible when the location accuracy is tested on the
Cisco CMX Detect and Locate window. Which setting on Cisco CMX allows the engineer to view the tags?

A. Enable RFID tags in tracking options.

B. Enable probing clients for active tags.

C. Define an RFID group globally and add the tags.

D. Enable hyperlocation services for RFID.

An enterprise started using WebEx as a virtual meeting solution. There is a concern that the existing wireless network will not be able to support the increased amount of traffic as a result of using WebEx. An engineer needs to remark the QoS value for this application to ensure high quality in meetings. What must be implemented to accomplish this task?

A. QoS preferred call index

B. UP to DSCP map

C. AVC profiles

D. WLAN quality of service profile

An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant?
(Choose two.)

A. X, Y real location

B. client description

C. AP name

D. client MAC address

E. WLC IP address

A wireless engineer deployed all remote sites as FlexConnect. The client VLAN assignment on these sites is configured manually mapped by WLAN and using local switching. Dynamic VLAN assignment is provided by the newly deployed Cisco ISE. Which IETF attribute must be configured on the AAA server to send that VLAN ID?

A. Tunnel-Medium-Type

B. Tunnel-Client-Endpoint

C. Tunnel-Assignment-ID

D. Tunnel-Private-Group-ID

Refer to the exhibit. A network administrator deploys the DHCP profiler service in two ISE servers: 10.3.10.101 and 10.3.10.102. All BYOD devices connecting to
WLAN on VLAN63 have been incorrectly profiled and are assigned as unknown profiled endpoints. Which action efficiently rectifies the issue according to Cisco recommendations?
 

A. Nothing needed to be added on the Cisco WLC or VLAN interface. The ISE configuration must be fixed.

B. Disable DHCP proxy on the Cisco WLC.

C. Disable DHCP proxy on the Cisco WLC and run the ip helper-address command under the VLAN interface to point to DHCP and the two ISE servers.

D. Keep DHCP proxy enabled on the Cisco WLC and define helper-address under the VLAN interface to point to the two ISE servers.

An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

A. Static WEP + 802.1X

B. WPA+WPA2

C. Static WEP

D. CKIP

E. 802.1X

A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location.
Which Cisco FlexConnect configuration must be used?

A. central authentication and local switching

B. central authentication and central switching

C. local authentication and local switching

D. local authentication and central switching

The IT department creates a video containing instructions for employees who have just joined the company. Newcomers need to join the wireless network named NEW0123456789. The WLAN name will be changed daily by IT support. Only new employees must receive the video over wireless multicast. What allows this feature?

A. WMF

B. WMM

C. TPC

D. DCA

An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?

A. Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command.

B. Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.

C. Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.

D. Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.