300-425 practice questions 191–200

1. Question 191 · 245 in bank

   An enterprise has moved most services to the cloud, including email applications and real-time communication. Which feature must be enabled on the wireless network to improve the user experience?

   • Aradio management
   • Bfast secure roaming
   • CQoS
   • Dinterference mitigation

   Show answer

   Answer: C

   Explanation

   QoS is configured at the WLAN (SSID). Of course it helps when you have a WLAN for voice QoS and a separate VLAN for data (best effort), but QoS is not something that you 'enable' at the wireless network. Roaming can be tricky for real-time communication when no fast secure roaming amendments have been configured. For that reason I opt for answer B

   Source: Adapted from community discussion — Liselot

   References

   • Cisco documentation

   Next question

2. Question 192 · 245 in bank

   An enterprise is using two wireless controllers to support the wireless network. The data center is located in the head office. Each controller has a corporate WLAN configured with the name Copr-NET392267230WLC-1 and Corp-NET68371638WLC-2. The APs are installed using a round-robin approach to load balance the traffic. What should be changed on the cofiguration to optimize roaming?

   • AUse the same WLAN name for the corporate network on both controllers.
   • BMove all access points to one controller and use the other as N+1 HA.
   • CMove the controllers to an external data center with higher internet speeds.
   • DPlace the access points per floor on the same controller.

   Show answer

   Answer: A

   Explanation

   "For a wireless client to seamlessly roam between mobility group members (WLCs), a given WLAN SSID and security configuration must be consistent across all WLCs comprising the mobility group" Enterprise Mobility 8.5 Design Guide, Ch2, p2-57 So the WLANs' names should be the same, the answer is A

   Source: Adapted from community discussion — maksim_churyukin

   Next question

3. Question 193 · 245 in bank

   Select 2

   The wireless team must configure a new voice SSID for optimized roaming across multiple WLCs with Cisco 8821 phones. Which two WLC settings accomplish this goal? (Choose two.)

   • AConfigure AVC profiles on the SSID.
   • BConfigure mobility groups between WLCs.
   • CUse AVC to tag traffic voice traffic as best effort.
   • DConfigure AP groups between WLCs.
   • EUse Cisco Centralized Key Management for authentication.

   Show answer

   Answer: BE

   Explanation

   Answer: BE Cisco 8821 phones are clients that support CCKM. CCKM caches clients' PMK for 1 hour (good for voice calls) and works inter-controller, but this require that the WLCs know each other: Mobility Group

   Source: Adapted from community discussion — Liselot

   Next question

4. Question 194 · 245 in bank

   Select 2

   Which two criteria must be considered when conducting an outdoor bridge site survey? (Choose two.)

   • Anear-far effect
   • Bweather
   • Ctraffic lights
   • Dpower lines
   • EFresnel zone

   Show answer

   Answer: BE

   Explanation

   Cisco, in their official documentation, talk about weather and fresnel zone. Power lines do not affect line of sight and wireless signals and the Near-far problem has no connexion to wireless bridges. Source : https://www.cisco.com/c/en/us/td/docs/wireless/technology/mesh/8-0/design/guide/mesh80/m_site-preparation-and-planning.html#ID3455

   Source: Adapted from community discussion — antmich

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 195 · 245 in bank

   An engineer must repurpose a lab WLC appliance for use in the production environment of the enterprise. After the new WLC is configured with the information of the other WLC, the mobility tunnels are still not coming up. What is the reason?

   • AA firewall is blocking UDP port 16667 between the WLCs.
   • BThe WLC management interfaces are in the same VLAN.
   • CThe hardware platform is incompatible.
   • DThe mobility groups are different.

   Show answer

   Answer: C

   Explanation

   If a network consists of a mix of controller platforms, you should validate that mobility messaging actually works between them. Mobility messages cannot be exchanged at all between Catalyst 9800 and AireOS platforms unless the AireOS controllers are running release 8.8.111 or later, which introduced the Inter-Release Controller Mobility (IRCM) feature. Henry, Jerome. CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide: Designing & Implementing Cisco Enterprise Wireless Networks (Certification Guide)

   Source: Adapted from community discussion — Lakshan__97

   References

   • Cisco documentation

   Next question

6. Question 196 · 245 in bank

   

   Refer to the exhibit. An enterprise has offices spread around the globe. The APs are connected to different controllers installed in separate datacenters. The IT team wants to allow clients to roam from controllers in group ABC to controllers in group XYZ. Which feature must be incorporated in the design to accomplish this task?

   • Aswitch peer group
   • Bworkgroup bridge
   • CmDNS gateway
   • Dmobility lists

   Show answer

   Answer: D

   Explanation

   D https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107188-mobility-groups-faq.html#anc3 A mobility list is a group of controllers configured on a single controller that specifies members in different mobility groups. Controllers can communicate across mobility groups and clients can roam between access points in different mobility groups if the controllers are included in each other's mobility lists.

   Source: Adapted from community discussion — Gab99

   References

   • Cisco documentation

   Next question

7. Question 197 · 245 in bank

   

   Refer to the exhibit. An engineer determined that during a recent controller failure, some APs did not failover to their secondary controller based on the network design, which has sufficient licenses for all APs. The controllers are not in a mobility group but have A records for their hostnames in DNS. Which setting needs to be addressed?

   • AThe controllers must be in the same mobility group.
   • BThe secondary controller IP address is incorrect.
   • CDNS hostnames are required to be FQDN.
   • DThe AP failover priority was not set high enough.

   Show answer

   Answer: D

   Explanation

   If the secondary WLC IP is wrong, why should only "some" APs not failover? If the secondary IP is wrong, the failover shouldnt work for all APs .. or am i misunderstanding something here?

   Source: Adapted from community discussion — 2d93f33

   Next question

8. Question 198 · 245 in bank

   Select 2

   A wireless engineer must design mobility between two buildings at a campus site. The engineer has one controller at each site. The engineer is investigating inter- controller CAPWAP data and control traffic. Which two ports must be open? (Choose two.)

   • A5246
   • B5247
   • C8443
   • D16666
   • E16667

   Show answer

   Answer: DE

   Explanation

   D & E As per this official Cisco Document https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/mobility_groups.html If you have a firewall b/w your mobility group members, open UDP port 16666 and IP protocol 97. If you are using encrypted mobility, open UDP port 5246 and 5247. If you are using New Mobility, UDP port 16666, 16667, and 16668 are used. For information about protocols and port numbers that must be used for management and operational purposes, see the Matrix Site Further more looking at the Matrix Page https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113344-cuwn-ppm.html Source Dest. Protocol Dest. Port Src. Port Description WLC WLC UDP 16666 16666 Mobility - non-secured WLC WLC UDP 16667 n/a Mobility - secured - removed in 5.2 WLC AP UDP 5246-5247 n/a CAPWAP Ctl/Data Since the question is related to controllers between each site (WLC WLC) then D & E is the most logical answer here.

   Source: Adapted from community discussion — CyborgXCZ

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 199 · 245 in bank

   An engineer has designed an anchor redundancy for guest clients connecting to SSID with auto-anchor configured. After adding a second Anchor WLC under the SSID mobility anchor list, clients are load-balanced between existing and new anchors instead of having one anchor as active and the other one as standby. Which feature should be included in the design that will be configured on the WLC running 8.1 or above to ensure anchor redundancy?

   • AAuto-Anchor Foreign Mapping
   • BAP groups
   • CGuest Anchor Priority
   • D802.11r

   Show answer

   Answer: C

   Explanation

   The answer is C The guest anchor priority feature provides a mechanism that gives "active/standby" load distribution amongst the anchor WLCs. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-3/config-guide/b_cg83/b_cg83_chapter_010010.html

   Source: Adapted from community discussion — Alonzo_Harris

   References

   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 200 · 245 in bank

    An enterprise network administrator is asked to set up an experimental WLAN for a collaboration project with a local service provider. The WLAN must be anchored to a WLC in the service provider data center using legacy mobility mode. After the configurations are completed on the WLCs and the firewalls in the path, the data path mobility tunnel is failing to come up. What should be performed by the administrator to debug the issue?

    • AEstablish a Telnet connection from a local PC to the firewall on port 97.
    • BUse the eping command on the WLC.
    • CEstablish a Telnet connection from a local PC to the firewall on port 16666.
    • DUse the mping command on the WLC.

    Show answer

    Answer: B

    Explanation

    I think it's B and again tricky question. First lets look at the matrix https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113344-cuwn-ppm.html Mobility data traffic is carried via Ethernet over IP (EoIP) which is IP protocol 97 hence firewall rules should allow IP protocol 97 traffic between your WLCs. Now since you cannot telnet just to a port alone with out a valid IP address A: is not correct which leave us with eping which used for testing the data-connection. Yes it's simple but more correct than A:

    Source: Adapted from community discussion — CyborgXCZ

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-425 practice, question 191. 245 questions available.