300-425 practice questions 111–120

1. Question 111 · 245 in bank

   Select 2

   A company installs a new anchor controller in the DMZ. The company has not upgraded the foreign controller for several years. The foreign controller runs code 7.5. The IT administrator suggests that the company upgrade the foreign controller and the new anchor controller to 8.10 or later. Which two benefits must be incorporated into the design regarding the code upgrade? (Choose two.)

   • AThe foreign controller load balances guest clients across the list of anchor controllers
   • BGuest clients are load balanced in round-robin fashion among the anchor controllers.
   • CUser devices must upgrade their WLAN card drivers.
   • DGuest clients are tunneled to anchors with the highest priority.
   • EThe foreign controller designates one anchor as primary and one or more anchors as secondary.

   Show answer

   Answer: AE

   Explanation

   Correct Answer A and E A. The foreign controller load balances guest clients across the list of anchor controllers: Upgrading to version 8.10 or later provides the ability for the foreign controller to distribute guest clients across multiple anchor controllers. This helps to optimize network resources and ensures better performance and reliability by preventing any single anchor controller from becoming a bottleneck. Primary and Secondary Anchor Designation: E. The foreign controller designates one anchor as primary and one or more anchors as secondary: With the newer code, the foreign controller can designate a primary anchor controller and one or more secondary anchor controllers. This provides redundancy and ensures that if the primary anchor controller fails, the secondary controllers can take over, thus maintaining service availability for guest clients.

   Source: Adapted from community discussion — TonyVi

   Next question

2. Question 112 · 245 in bank

   A community bank has three campus locations and one HQ with the data center operations. Each campus location has four Cisco Catalyst 9120 APs. The data center has a Catalyst 9800 WLC with eight Catalyst 9120 APs. Poor WAN uplinks cause impacted branch AP and wireless client connectivity back to HQ, and each campus location is now planned to have its own EWC controller based on C9120 AP to keep traffic local. This new design must accommodate these requirements: • Guest WLAN will be routed locally. • Employee WLAN must be authenticated 802.1x PEAP via HQ data center ISE but can pass traffic locally once authenticated. • HQ WLC will be the primary backup WLC for each WLC. Which design approach should the consulting engineer take?

   • ATwo C9120 campus APs must be converted to EWC mode, one for the active controller and the other for standby with HQ WLC set as N+1 backup. The campus guest WLAN will use the guest anchor to HQ WLC for guest VLAN access, and employee WLAN will need the HQ AAA server to be added to EWC and then use that to perform the 802.1x authentication.
   • BOne C9120 campus AP must be converted to EWC mode, and the preferred controller is set to that AP with HQ WLC should be paired as mobility peer and configured as N+1 backup. The campus guest WLAN will use local web auth on guest VLAN. The campus employee WLAN will need the guest anchor back to the HQ employee WLAN.
   • CTwo C9120 campus APs must be converted to EWC mode, one for the active controller and the other for standby set as N+1 backup. The campus guest WLAN will use local web auth on guest VLAN, and employee WLAN will need the HQ AAA server added to EWC.
   • DOne C9120 AP in each campus must be converted to EWC mode, and the preferred controller is set to that AP with HQ WLC set as N+1 backup. The campus guest WLAN will use local web auth on guest VLAN, and employee WLAN will need the HQ AAA server to be added to EWC.

   Show answer

   Answer: D

   Next question

3. Question 113 · 245 in bank

   An engineer created a design where the HQ has a Cisco 5520 Wireless LAN Controller with 2000 APs associated to it. If a controller at one of the remote sites fails, the APs at that site fall back to a central controller. Global AP Failover Priority must be enabled. Which design approach must be taken to prevent the critical APs at HQ from going down and still allow APs to failover to the HQ controller?

   • ASet all the APs at HQ to a failover priority of "high" and set the remote site APs to "normal".
   • BSet all the APs at HQ to a failover priority of "medium" and set the remote site APs to "high".
   • CEnsure that the critical APs at HQ have a failover priority of "critical", leave the rest of the HQ APs at "medium", and set the remote site APs to "high".
   • DCreate an access list on the HQ router that blocks CAPWAP discovery on UDP port 5246 so that the remote APs cannot kick off the APs at HQ.

   Show answer

   Answer: C

   Next question

4. Question 114 · 245 in bank

   Select 2

   An engineer must design a WLAN that can handle voice traffic and location-based services. Which two design features enable both services to function properly? (Choose two.)

   • AUse every channel possible in 5 GHz.
   • BPut APs in corners of each floor for triangulation.
   • CHave a 15% overlap of cell coverage.
   • DUse every channel possible in 2.4 GHz.
   • EHave a 25% overlap of cell coverage.

   Show answer

   Answer: BC

   Next question

5. Question 115 · 245 in bank

   A customer has this wireless design: • two Cisco Catalyst 9800 Series wireless controllers configured in a high-availability SSO cluster to manage APs in the local office network • 100 APs in local mode and registered to the high-availability cluster • one Catalyst 9800 Series wireless controller that is deployed as an anchor in a DMZ • Cisco ISE for user authentication and authorization The customer wants to deploy a new SSID to support staff BYOD devices and authenticate users via Cisco ISE. The SSID terminates on the anchor WLC. How must the requirement be incorporated into the design to address the AAA servers for the WLAN?

   • ASend the AAA server accounting and authentication traffic from the high-availability cluster.
   • BSend the AAA server accounting and authentication traffic from the anchor WLC.
   • CSend the accounting traffic from the anchor WLC and the authentication traffic from the high-availability cluster.
   • DSend the accounting traffic from the high-availability cluster and the authentication traffic from the anchor WLC.

   Show answer

   Answer: B

   Next question

6. Question 116 · 245 in bank

   

   Refer to the exhibit A wireless consultant is performing an onsite survey using AirMagnet Survey PRO. What must be configured on the floor map so that the results appear properly?

   • AShow details of the user density.
   • BCalibrate the dimensions.
   • CDisplay details of the desk numbers
   • DAdd inter-floor bleed

   Show answer

   Answer: B

   Next question

7. Question 117 · 245 in bank

   An engineer is planning a wireless deployment with two members in a mobility group. The engineer notices that there are issues establishing the mobility tunnel. The engineer must test the mobility EoIP data packet communication between two controllers. Which command runs this test?

   • Adebug route
   • Beping
   • Cdebug icmp
   • Dmping

   Show answer

   Answer: B

   Next question

8. Question 118 · 245 in bank

   Select 2

   An engineer is working on a wireless refresh for a customer and identified that the existing WLCs have RTU licenses installed. Which two WLC models can reuse the licenses? (Choose two.)

   • A5520
   • BvWLC
   • C3504
   • D5508
   • E2504

   Show answer

   Answer: AC

   Explanation

   Q. What type of license exists on 3504 Wireless LAN Controller? A. 3504, 5520 and 8540 Wireless LAN Controllers supports two (2) types of licenses: RTU (Right-To-Use) License Smart-License https://www.cisco.com/c/en/us/support/docs/wireless/3504-wireless-controller/214106-licensing-on-3504-5520-and-8540-wireles.html#toc-hId-1787190494

   Source: Adapted from community discussion — Jonycici

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 119 · 245 in bank

   An engineer is using a Cisco AIR-2702i AP to conduct a Layer 1 site survey. Which mode is selected for the AP to discover non-Wi-Fi interference with Metageek Chanalyzer?

   • ASniffer
   • BMonitor
   • CFlexConnect
   • DSE-Connect

   Show answer

   Answer: D

   Explanation

   SE-Connect Mode SE-Connect Mode enables a user to connect Chanalyzer directly to a Cisco CleanAir access point when the access point is not connected to a controller. The access point provides air quality and interference detection reports for all monitored channels.

   Source: Adapted from community discussion — Liselot

   Next question

10. Question 120 · 245 in bank

    Which solution benefits from signal attenuation and provides channel reuse for high-density Wi-Fi deployment in an amphitheater?

    • Aceiling mounting
    • Bside mounting
    • Cfront and rear mounting
    • Dunder-seat mounting

    Show answer

    Answer: D

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-425 practice, question 111. 245 questions available.