Refer to the exhibit. An engineer needs to manage non-802.11 interference. What is observed in the output on PI?

A. At least one strong interferer is impacting connectivity at this site.

B. Several light interferers are collectively impacting connectivity at this site.

C. The three individual clusters shown indicate poor AP placement.

D. RF at this site is unable to provide adequate wireless performance.

A customer has a distributed wireless deployment model where the WLCs are located in the data centers. Because the file servers are located in the data center, the traffic from the corporate WLAN `Corp-401266017` must go through the controllers, where the guest WLAN `Guest-19283746` traffic must use the local
Internet line installed in each office. Which configuration will accomplish this task?

A. Disable Local Switching for the corporate and guest WLAN.

B. Disable Local Switching for the corporate WLAN and enable it for the guest WLAN.

C. Enable Local Switching for the corporate and guest WLAN.

D. Enable Local Switching for the corporate WLAN and disable it for the guest WLAN.

Which statement about the VideoStream/Multicast Direct feature is true?

A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.

B. Each VideoStream client acknowledges receiving a video IP multicast stream.

C. It converts the unicast frame to a multicast frame over the air.

D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication
Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?

A. DNS server IP

B. controller management IP

C. virtual interface IP

D. client interface IP

When implementing self-registration for guest/BYOD devices, what happens when an employee tries to connect four devices to the network at the same time?

A. The last device is removed and the newly added device is updated as active device.

B. The registration is allowed, but only one device is connected at any given time.

C. All devices are allowed on the network simultaneously.

D. Purge time dictates how long a device is registered to the portal.

An engineer has configured Media Stream on the WLC and must guarantee at least 2 Mbps stream per user. Which RRC template should the engineer use?

A. coarse

B. medium

C. low

D. ordinary

A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.
• IP address of the primary server
• IP address of the secondary server
• failover mode to be configured as automatic
• root password of the secondary server
• email ID for NOC notifications
Enabling high availability fails when these parameters are used. Which action resolves the issue?

A. Insert the cmxadmin password of the secondary server.

B. Use IP protocol 4242 for the controller to reach the CMX server.

C. Place primary and secondary servers in different subnets.

D. Enable the virtual IP address of the primary server.

A wireless engineer deployed all remote sites as FlexConnect. The client VLAN assignment on these sites is configured manually mapped by WLAN and using local switching. Dynamic VLAN assignment is provided by the newly deployed Cisco ISE. Which IETF attribute must be configured on the AAA server to send that VLAN ID?

A. Tunnel-Medium-Type

B. Tunnel-Client-Endpoint

C. Tunnel-Assignment-ID

D. Tunnel-Private-Group-ID

An engineer added more APs to newly renovated areas in building. The engineer is now receiving Out-of-Sync alarms on Cisco Prime Infrastructure. Which two actions resolve this issue? (Choose two.)

A. Manually synchronize from Cisco Prime Infrastructure.

B. Manually synchronize from MSE.

C. Enable automatic synchronization on Cisco Prime Infrastructure.

D. Enable automatic synchronization on MSE.

E. Add new APs to maps on Cisco Prime Infrastructure.

Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

A. HTTPS

B. Telnet

C. SOAP

D. SSH

E. NMSP

During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

A. WPA key

B. session key

C. encryption key

D. shared-secret key

More people are working from home, so an engineer must configure OEAPs to support the users. The security team already configured NAT with a public IP address that points to the internal WLC IP address. The APs also have been configured with the public WLC IP address, but APs cannot join the controller yet. Which action resolves this issue?

A. Configure the internal WLC IP address on the OEAPs.

B. Create an ACL in WLC to accept the OEAPs.

C. Enable NAT on the WLC to configure the public IP address.

D. Configure the public WLC IP address on the home router.

An engineer configures a deployment to support:
✑ Cisco CMX
✑ licenses for at least 3000 APs
✑ 6000 wIPS licenses
The Cisco vMSE appliance must be sized for this deployment. Which Cisco vMSE Release 8 option must the engineer deploy?

A. Large vMSE

B. Low-End vMSE

C. Standard vMSE

D. High-End vMSE

A customer wants to allow employees to easily onboard their personal devices to the wireless network. The visitors also must be able to connect to the same network without the need to engage with anyone from the reception desk. Which process must be configured on Cisco ISE to support this requirement?

A. MAC authentication bypass

B. native supplicant provisioning

C. local web auth

D. self-registration guest portal

A healthcare organization notices many rogue APs and is concerned about a honeypot attack. Which configuration must a wireless network engineer perform in
Cisco Prime Infrastructure to prevent these attacks most efficiently upon detection?

A. Set the auto containment level to 0 and select the Using Our SSID containment option.

B. Set the manual containment level to 4 and select the Ad Hoc Rogue AP containment option.

C. Set the auto containment level to 0 and select the Ad Hoc Rogue AP containment option.

D. Set the auto containment level to 4 and select the Using Our SSID containment option.

Which configuration is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one controller to another?

A. Enable IGMPv3 on the central Layer 3 switch.

B. Enable IGMP snooping on the WLC.

C. Enable multicast mode on the WLC.

D. Create multicast groups on the central Layer 3 switch.

An engineer is troubleshooting a Cisco CMX high-availability deployment and notices that the primary and backup Cisco CMX servers are both considered primary. Which command must the engineer run on the backup server?

A. cmxha convert backup

B. cmxha backup convert

C. cmxha secondary convert

D. cmxha convert secondary

A wireless engineer must configure IEEE 802.1X authentication on a WLAN that supports new and legacy wireless devices. Which condition must be met for the legacy clients to be able to associate and authenticate without issues?

A. The authenticator and the authentication server must support the same authentication protocol.

B. The client and the authenticator must support the same authentication protocol.

C. The client and the controller must support the same authentication protocol.

D. The client and the authentication server must support the same authentication protocol.

Refer to the exhibit. The security team has implemented ISE as an AAA solution for the wireless network. The wireless engineer notices that though clients are able to authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?

A. Disable KeyWrap.

B. Use ASCII for the key input format.

C. Change the CoA Port.

D. Correct the shared secret.

An engineer must implement intrusion protection on the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which AP mode and submode must be implemented?

A. AP mode: local, AP submode: none

B. AP mode: monitor, AP submode: WIPS

C. AP mode: monitor, AP submode: none

D. AP mode: local, AP submode: WIPS

Refer to the exhibit. An engineer must provide a position of rogue APs on a floor map using Cisco PI 3.0, but no rogue AP options are showing on the left-hand navigation menu under Maps. What is the reason for this omission?

A. An assurance license is not installed.

B. The controller operational status background task is disabled.

C. The Show Detected Interferers feature under the AP option is disabled.

D. Cisco MSE has not been added to Cisco PI.

An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features does the engineer configure to accomplish this task? (Choose two.)

A. Device Admin Policy Set

B. User Access Mode: ReadWrite

C. ACL

D. RADIUS server

E. TACACS server

An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

A. learn client IP address

B. FlexConnect local authentication

C. VLAN-based central switching

D. central DHCP processing

During discovery, one out of five fabric-enabled WLAN controllers is not being properly discovered. The firewall rules are the same for all the controllers. Which element is missing?

A. YANG

B. SNMP management

C. SNMP trap

D. NETCONF

WPA2 Enterprise with 802.1X is being used for clients to authenticate to a wireless network through a Cisco ISE server. For security reasons, the network engineer wants to ensure that only PEAP authentication is used. The engineer sent instructions to clients on how to configure the supplicants, but the ISE logs still show users authenticating using EAP-FAST. Which action ensures that access to the network is restricted for these users unless the correct authentication mechanism is configured?

A. Enable AAA override on the SSID, gather the usernames of these users, and disable the RADIUS accounts until the devices are correctly configured.

B. Enable AAA override on the SSID and configure an ACL on the WLC that allows access to users with IP addresses from a specific subnet.

C. Enable AAA override on the SSID and configure an access policy in Cisco ISE that denies access to the list of MACs that have used EAP-FAST.

D. Enable AAA override on the SSID and configure an access policy in Cisco ISE that allows access only when the EAP authentication method is PEAP.

The marketing department in a retail company has created a promotional video for the opening of a new branch store shp-GA4B6C860927AB. The video must be received by interested hosts only, over wireless multicast. What allows this feature?

A. WMM

B. TPC

C. WMF

D. DCA

Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

A. Cisco Hyperlocation Module

B. Wireless Intrusion Prevention System

C. Cisco Connected Mobile Experiences

D. Cisco Mobility Services Engine

An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

A. pre-authentication

B. local EAP

C. authentication caching

D. Cisco Centralized Key Management

A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart
AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

A. 1

B. 2

C. 5

D. 7

A company is collecting the requirements for an on-premises event. During the event, a wireless client connected to a dedicated WLAN will run a video application that will need on average 391595179 bits per second to function properly. What is the QoS marking that needs to be applied to that WLAN?

A. Platinum

B. Gold

C. Silver

D. Bronze

A multitenant building contains known wireless networks in most of the suites. Rogues must be classified in the WLC. How are the competing wireless APs classified?

A. adhoc

B. friendly

C. malicious

D. unclassified

An engineer is in the process of implementing Fastlane on a wireless network with a Mobility Express AP installed. The network must support voice and video applications for Apple devices. Due to a security concern, all iPhones are updated to version 14.5.434879777. Which QoS profile must the engineer configure on the user WLAN?

A. Bronze

B. Platinum

C. Best Effort

D. Silver

Refer to the exhibit. An engineer implemented the CPU ACL on your Cisco 5520 Series Wireless LAN Controller, and the controller is no longer manageable via the network. What must be changes on this CPU ACL to enable it to manage the controller again?

A. Permit statements must be added to the top of the ACL in both directions, which specify the network to be managed from and the virtual interface of the controller.

B. Line 1 must be set to a destination port of HTTP.

C. Permit statements must be added to the top of the ACL, which specify the network to be managed from.

D. Line 1 must be set to the inbound direction.

An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?

A. Change the WLAN reserved bandwidth for WebEx

B. Create an AVC profile for WebEx

C. Create an ACL for WebEx

D. Change the AVC application WebEx-app-sharing to mark

An engineer has eight WLCs in a mobility group and must reduce the bandwidth consumed. Which two configuration items achieve this result? (Choose two.)

A. global multicast mode

B. mobility group unicast messaging

C. global unicast messaging

D. mobility group multicast messaging

E. global symmetric mobility messaging

Refer to the exhibit. A network administrator deploys the DHCP profiler service in two ISE servers: 10.3.10.101 and 10.3.10.102. All BYOD devices connecting to
WLAN on VLAN63 have been incorrectly profiled and are assigned as unknown profiled endpoints. Which action efficiently rectifies the issue according to Cisco recommendations?
 

A. Nothing needed to be added on the Cisco WLC or VLAN interface. The ISE configuration must be fixed.

B. Disable DHCP proxy on the Cisco WLC.

C. Disable DHCP proxy on the Cisco WLC and run the ip helper-address command under the VLAN interface to point to DHCP and the two ISE servers.

D. Keep DHCP proxy enabled on the Cisco WLC and define helper-address under the VLAN interface to point to the two ISE servers.

A network engineer is configuring a Cisco AireOS 8.2 WLC, Cisco MSE, and Cisco PI with Cisco 3700 Series APs and Cisco Hyperlocation modules. The engineer configures and enables a WLAN with Hyperlocation. During testing, the engineer notices that the Hyperlocation module cannot be seen on the WLC. Which action resolves the issue?

A. Configure the APs to be in monitor mode.

B. Enable Hyperlocation in the Global Configuration settings of the WLC.

C. Add the key hash that is used to add the Hyperlocation module to the WLC.

D. Enable the NTP server that is connected to the Hyperlocation module.

An engineer manages the wireless network for a government agency. The wireless network is used for access to the corporate network. The wireless network must include the latest wIPS/wIDS detection definitions. Which action does the engineer take to ensure that this requirement is met?

A. Update the Cisco MSE software.

B. Configure Cisco Prime Infrastructure to push new definitions to the APs.

C. Update the Cisco WLC software.

D. Configure the Cisco WLC to repoll the Cisco MSE for update definitions.

An engineer is managing a wireless network for a shopping center. The network includes a Cisco WLC, a Cisco MSE, and a Cisco Prime Infrastructure. What is required to use Cisco CMX Location Analytics?

A. Enable tracking parameters in Cisco MSE.

B. Enable Context Aware and CMX Browser Engage.

C. Install Cisco Prime Infrastructure with floor maps.

D. Set history parameters in Cisco MSE.

A customer managing a large network has implemented location services. Due to heavy load, it is needed to load balance the data coming through NMSP from the WLCs. Load must be spread between multiple CMX servers to help optimize the data flow for Aps. Which configuration in CMX meets this requirement?

A. cmxctl config feature flags nmsplb.cmx-ap-grouping true

B. cmxctl config feature flags nmsplb.cmxgrouping true

C. cmxctl config feature flags nmsplb.cmx-loadbalance true

D. cmxctl config feature flags nmsplb.cmx-rssi-distribute true

The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

A. CSV

B. PDF

C. XLS

D. DOC

E. plain text

An engineer deploys APs in autonomous mode to provide corporate and guest access in several retail locations. Remote authentication with IEEE 802.1X is configured to ensure a secure wireless connection for corporate users. Which component must be configured as the authenticator?

A. RADIUS server

B. authentication server

C. APs

D. supplicant

A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32
VLANs for 300 employees in different departments. Which solution must the engineer choose?

A. Configure a second WLC to support half of the APs in the deployment.

B. Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.

C. Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.

D. Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.

An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

A. network policy server

B. RADIUS

C. TACACS+

D. LDAP

An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted. Which cause of this issue is true?

A. Fallback is enabled

B. Fallback is disabled

C. DNS query is disabled

D. DNS query is enabled

An engineer deploys APs to a branch office. All AP control and management-related traffic must be tunneled to a centralized WLC via CAPWAP. All user traffic must utilize the local Internet line. What should be configured?

A. wireless mesh network

B. centrally switched FlexConnect

C. locally switched FlexConnect

D. a WLC in local mode

An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

A. permit-ACL

B. WMM required

C. mark

D. rate-limit

What is configured to use more than one port on the OEAP to extend the wired network?

A. remote LAN ACL

B. AAA override

C. client load balancing

D. remote LAN

A customer must provide a secure wireless network from a Cisco Catalyst 9800 Series Wireless Controller to a Cisco AP to remote users. The corporate WLAN must be provided over the Internet to specific locations and support a locally-installed IP phone. Which two actions accomplish this configuration? (Choose two.)

A. Enable Local Switching under the WLAN.

B. Configure Remote LAN under the Remote LAN.

C. Create a Flex Group and add the AR

D. Enable Office Extend AP on the Flex Profile.

E. Configure NAT on the physical interface.

Which two events are outcomes of a successful RF jamming attack? (Choose two.)

A. disruption of WLAN services

B. unauthentication association

C. deauthentication broadcast

D. deauthentication multicast

E. physical damage to AP hardware