300-425 practice questions 1–10

1. Question 1 · 245 in bank

   Select 3

   A network engineer is preparing for an office site survey with a height of 2.5 meters. Which three components are recommended to complete the survey? (Choose three.)

   • AUse a battery pack to power APs.
   • BUse a drawing of the office space to draw AP and client placements.
   • CUse DoS attack on APs while measuring the throughput.
   • DUse APs with directional antennas.
   • EUse APs with external antennas.
   • FUse APs with built-in antennas.

   Show answer

   Answer: ABF

   Next question

2. Question 2 · 245 in bank

   Which non-Wi-Fi interferer can be identified by Metageek Chanalyzer?

   • APDAs
   • Bjammers
   • Csmartphones
   • Dprinters

   Show answer

   Answer: B

   Explanation

   correct Jammers: Although they should not be expected in normal networks, jammers are cheap devices and easily bought online. Their characteristic is a continuous signal with a high duty cycle across the entire affected band. They may operate in 2.4GHz or 5GHz. The presence of a jammer signal is reflective of an attack against your network. Many jammers operate in the 2.4GHz band because this band is categorized as Industrial, Scientific, and Medical (ISM) and can be used by any transmitter (under some relaxed regulatory conditions). Most of the 5GHz band is not ISM, which makes it less susceptible to interferences from non-802.11 devices. However, different countries have different rules, and you may see in non-ISM 5GHz channels devices that were designed for a country where such operation is allowed.

   Source: Adapted from community discussion — skh

   Next question

3. Question 3 · 245 in bank

   Which CLI command does an engineer use to validate that the redundancy peer of a Stateful Switchover pair of controllers is up and connected?

   • Arping
   • Bping
   • Ceping
   • Dmping

   Show answer

   Answer: A

   Explanation

   Explanation: rping - Check IPsec status on both controllers to check which link is broken RP or RMI. Perform rping on both controllers to check if the peer is reachable. mping - Mobility ping over UDP—Thistest runs over mobility UDPport 16666. It tests whether the mobility control packet can be reached over the management interface. eping - Mobility ping over EoIP—This test runs over EoIP (IP protocol 97). It tests the mobility data traffic over the management interface Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_010010010.pdf https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-8/config-guide/b_cg88/high_availability.html

   Source: Adapted from community discussion — peer1024

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 4 · 245 in bank

   Select 2

   A wireless engineer must optimize RF performance for multiple buildings with multiple types of construction and user density. Which two actions must be taken? (Choose two.)

   • AConfigure FlexConnect groups for each building.
   • BConfigure WMM profiles for each building.
   • CConfigure AP groups for each area type.
   • DConfigure RF profiles for each area type.
   • EEnable DTPC on the network.

   Show answer

   Answer: CD

   Next question

5. Question 5 · 245 in bank

   How does AP failover priority for access points function when configured with priority 1 or 4?

   • AWhen configured with priority 1, the access point is assigned with the highest priority level, and it is marked as critical. This access point fails over before other access points with the lower priority when there is primary controller failure.
   • BWhen configured with priority 4, the access point is assigned with the highest priority level, and it is marked as critical. This access point fails over before other access points with the lower priority when there is primary controller failure.
   • CWhen configured with priority 4, the access point is assigned with the lowest priority level, and it is marked as low. This access point fails over after other access points with the higher priority when there is primary controller failure.
   • DWhen configured with priority 1, the access point is assigned with the medium priority level, and it is marked as medium. This access point fails over after other access points with the higher priority when there is primary controller failure.

   Show answer

   Answer: B

   Explanation

   B - Low—Assigns the access point to the level 1 priority, which is the lowest priority level. This is the default value. Medium—Assigns the access point to the level 2 priority. High—Assigns the access point to the level 3 priority. Critical—Assigns the access point to the level 4 priority, which is the highest priority level.

   Source: Adapted from community discussion — EGD

   References

   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 6 · 245 in bank

   A company has 10 access point licenses available on their backup Cisco WLC, and their primary Cisco WLC is at full capacity. 5 access points are set to high failover priority and 7 access points are set to critical failover priority. During a failure, not all critical access points failed over to the backup Cisco WLC. Which configuration is the cause of this issue?

   • AThe high priority access point is oversubscribed.
   • Bnetwork ap-priority is set to enable.
   • CThe critical priority access point count is oversubscribed.
   • Dnetwork ap-priority is set to disable.

   Show answer

   Answer: D

   Explanation

   First I thought you were correct. But after looking a bit closer I think its D as well. Reason being is that the backup controller has 10 licenses. There are only 7 Critical priority APs. In theory when fail-over occurs the WLC should disassociate the AP's that are a lower priority if it detects that higher priority APs are trying to associate. With 10 licenses that would give enough room for the 7 Critical and 3 High AP count. In order for the WLC to adhere to the AP priority functionality, you need to enter the "network ap-priority enable" command. Otherwise, it does not care what priorities are assigned. So this could only mean that the command is currently in its disabled state as its not "making room" for the critical priority APs.

   Source: Adapted from community discussion — Comstock2K

   References

   • Cisco documentation

   Next question

7. Question 7 · 245 in bank

   A network engineer is configuring high availability on an access point. What is the maximum number of controllers available to be configured?

   • A1
   • B2
   • C3
   • D4

   Show answer

   Answer: C

   Next question

8. Question 8 · 245 in bank

   An engineer is trying to determine the most cost-effective way to deploy high availability for a campus enterprise wireless network that currently leverages three wireless LAN controllers. Which architecture should the engineer deploy?

   • AN+N with SSO
   • BN+1 solution without SSO
   • CN+N solution without SSO
   • DN+1 with SSO

   Show answer

   Answer: B

   Explanation

   I think it must be answer B Access Point Stateful Switch Over (AP SSO) functionality is not supported for N+1 HA. Source: https://www.cisco.com/c/en/us/td/docs/wireless/technology/hi_avail/N1_High_Availability_Deployment_Guide/N1_HA_Overview.html

   Source: Adapted from community discussion — Liselot

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   Next question

9. Question 9 · 245 in bank

   Select 2

   An engineer is designing a wireless network to support high availability. The network will need to support the total number of APs and client SSO. Live services should continue to work without interruption during the failover. Which two requirements need to be incorporated into the design to meet these needs? (Choose two.)

   • Acontroller high availability pair with one of the WLCs having a valid AP count license
   • BWLC 7.5 code or more recent
   • Credundant vWLC
   • D10 sec RTT
   • Eback-to-back direct connection between WLCs

   Show answer

   Answer: AB

   Explanation

   not sure if AE is correct, back-to-back is not needed anymore. Also starting 7.5 release client-sso is supported, so this is also a valid option. https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html#pgfId-53637 I would vote for AB

   Source: Adapted from community discussion — mae2k

   References

   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 10 · 245 in bank

    

    Refer to the exhibit. An enterprise is using wireless as the main network connectivity for clients. To ensure service continuity, a pair of controllers will be installed in a datacenter. An engineer is designing SSO on the pair of controllers. What needs to be included in the design to avoid having the secondary controller go into maintenance mode?

    • AThe redundancy port must be the same subnet as the redundancy mgmt.
    • BThe keep alive timer is too low, which causes synchronization problems.
    • CThe connection between the redundancy ports is missing.
    • DThe Global Configuration of SSO is set to Disabled on the controller.

    Show answer

    Answer: C

    Explanation

    C, look at the comment from mohanak here: https://community.cisco.com/t5/wireless/wlc-ha-maintenance-mode/td-p/2927232 There are few scenarios where the Standby WLC may go into Maintenance Mode and not be able to communicate with the network and peer: - Non reachability to Gateway via Redundant Management Interface - WLC with HA SKU which had never discovered peer - Redundant Port is down - Software version mismatch (WLC which boots up first goes into active mode and the other WLC in Maintenance Mode) A / not correct, RP is l2 port where RMI is l3 B/ not correct keepalives doesnt matter and wont cause hotstandby to go to maintenance mode C/ correct, if RP is down that indeed causes standby to go to maintenance mode D/ incorrect, according to the phrasing of the question, engineer is just preparing the confgiuration. enabling SSO is the final step after all the rest of config is finished. Once enabled WLCs will reboot and discover the HA SSO neighbors and join the HA SSO stack. C/

    Source: Adapted from community discussion — mqoltn

    References

    • Cisco documentation
    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-425 practice, question 1. 245 questions available.