View Full Cisco CCNP Wireless 350-101 Exam Dumps and Practice Test Dumps

 

Question 141: Which Cisco wireless component acts as the authenticator between a wireless client and an external RADIUS authentication server?

1. RF sensor
2. DHCP server
3. Wireless LAN controller or AP
4. DNS server

Correct Answer: 3. Wireless LAN controller or AP

Explanation:

In an 802.1X-based wireless deployment, the wireless infrastructure acts as the authenticator between the client and the authentication server. Depending on the Cisco architecture, the AP or wireless controller participates in the authentication process and communicates with the RADIUS server. The wireless client acts as the supplicant, while the RADIUS server typically performs the authentication-server function. DNS provides name resolution, DHCP provides IP configuration, and an RF sensor is used for wireless monitoring. Therefore, the wireless LAN controller or AP performs the authenticator role in the enterprise wireless authentication process.

Question 142: Which 802.11 frame type is primarily used by a client to request information about available WLANs from nearby APs?

1. Probe Request
2. Data frame
3. ACK
4. Association Response

Correct Answer: 1. Probe Request

Explanation:

A Probe Request is a management frame that a wireless client can transmit to discover nearby wireless networks. A client may send a broadcast probe request to ask nearby APs to identify themselves, or it may send a directed probe for a specific SSID. APs respond with Probe Response frames containing information about the WLAN and radio parameters. Association Response is sent by an AP after an association request, ACK confirms successful reception of certain frames, and data frames carry higher-layer traffic. Therefore, Probe Request is the frame most directly associated with active WLAN discovery by a wireless client.

Question 143: Which Cisco wireless feature allows an administrator to apply different WLAN and RF settings to APs based on their physical or logical deployment group?

1. Client Exclusion
2. RADIUS accounting
3. AP Group
4. DHCP Proxy

Correct Answer: 3. AP Group

Explanation:

AP Groups allow administrators to organize selected access points and control the WLANs associated with those APs. They can be useful when different areas of an organization require different WLAN availability or policy configurations. RF-related settings can also be applied through appropriate RF profiles associated with deployment requirements. RADIUS accounting tracks sessions, DHCP Proxy assists with DHCP communication, and Client Exclusion restricts selected clients. Therefore, AP Groups are the Cisco wireless mechanism most directly associated with applying WLAN configuration to selected groups of access points based on deployment requirements.

Question 144: What is the primary purpose of a wireless site survey before deploying a high-density WLAN?

1. To configure DNS records
2. To replace the WLAN controller
3. To create RADIUS user accounts
4. To determine RF coverage, interference, capacity, and AP placement requirements

Correct Answer: 4. To determine RF coverage, interference, capacity, and AP placement requirements

Explanation:

A wireless site survey provides information needed to design an RF environment before APs are deployed. It can help determine coverage requirements, identify sources of interference, evaluate channel conditions, estimate capacity requirements, and determine appropriate AP placement. In a high-density environment, capacity and airtime considerations are especially important because simply providing strong signal strength does not guarantee adequate performance. A site survey does not create RADIUS accounts, configure DNS records, or replace the wireless controller. Therefore, determining RF coverage, interference, capacity, and AP placement is a primary purpose of a WLAN site survey.

Question 145: Which Cisco wireless feature provides a way to centrally define and apply RF parameters such as minimum transmit power or data rates to selected AP radios?

1. RADIUS
2. Mobility Anchor
3. RF Profile
4. Bonjour Gateway

Correct Answer: 3. RF Profile

Explanation:

An RF Profile provides a reusable set of radio-related configuration parameters that can be applied to selected access points according to the requirements of a particular deployment environment. Depending on the Cisco platform and software version, RF profiles can contain settings related to radio behavior, including transmit power ranges and supported data rates. Mobility Anchors are associated with traffic termination and mobility designs, RADIUS provides AAA services, and Bonjour Gateway handles service discovery across network boundaries. Therefore, RF Profile is the appropriate feature for centrally defining RF parameters for selected AP radios.

Question 146: Which wireless security protocol uses a four-way handshake to derive session keys after the initial authentication process?

1. CAPWAP
2. DHCP
3. WMM
4. WPA/WPA2

Correct Answer: 4. WPA/WPA2

Explanation:

WPA and WPA2 use a four-way handshake as part of establishing the cryptographic keys used to protect wireless data traffic. In WPA2-Personal, the process is based on the pre-shared key and derives the necessary keying material for the client and AP. In enterprise deployments, the master keying material is established through the 802.1X/EAP authentication process before the four-way handshake completes the session-key establishment. WMM provides QoS, CAPWAP handles AP-to-controller communication, and DHCP provides IP configuration. Therefore, WPA/WPA2 is the technology associated with the four-way handshake for wireless session-key establishment.

Question 147: What is the main purpose of the CAPWAP control channel between a Cisco AP and controller?

1. To provide AP management, configuration, and control communication
2. To provide DNS resolution
3. To replace RADIUS authentication
4. To carry only user application traffic

Correct Answer: 1. To provide AP management, configuration, and control communication

Explanation:

The CAPWAP control channel is used for communication between a lightweight access point and its wireless LAN controller for management and control functions. It allows the controller to provision and manage the AP and exchange operational information. CAPWAP can also provide a separate data channel for client traffic when traffic is centrally switched. RADIUS is used for AAA, DNS provides name resolution, and application traffic is not the exclusive purpose of the CAPWAP control channel. Therefore, AP management, configuration, and control communication are the primary functions of the CAPWAP control channel.

Question 148: Which factor can most directly cause poor wireless throughput even when a client has a strong RSSI value?

1. The AP hostname
2. High channel utilization or interference
3. A short SSID name
4. A low DHCP lease time by itself

Correct Answer: 2. High channel utilization or interference

Explanation:

Strong RSSI indicates that the client can receive the desired signal at a relatively high level, but it does not guarantee good throughput. High channel utilization, co-channel contention, adjacent-channel interference, non-Wi-Fi interference, retransmissions, and other RF conditions can significantly reduce usable airtime and throughput. A short SSID, AP hostname, or DHCP lease duration by itself does not normally explain an RF throughput problem. Wireless performance must therefore be evaluated using multiple measurements rather than signal strength alone. High channel utilization or interference is a common cause of poor throughput despite strong received signal strength.

Question 149: Which IEEE 802.11 feature allows a client to receive a list of recommended neighboring APs to assist roaming decisions?

1. 802.11w Protected Management Frames
2. 802.11ax OFDMA
3. 802.11k Neighbor Report
4. 802.11r Fast BSS Transition

Correct Answer: 3. 802.11k Neighbor Report

Explanation:

The IEEE 802.11k Neighbor Report allows a wireless client to receive information about nearby access points that may be suitable roaming targets. This can reduce the amount of scanning a client needs to perform and can help it make faster, more informed roaming decisions. 802.11r focuses on reducing authentication and transition time, 802.11w protects supported management frames, and 802.11ax OFDMA improves channel efficiency by allocating resource units. Therefore, 802.11k Neighbor Report is the feature specifically associated with providing nearby AP information for roaming assistance.

Question 150: Which Cisco wireless function is most directly associated with dynamically adjusting AP transmit power based on RF conditions?

1. Dynamic Transmit Power Control
2. Bonjour Gateway
3. RADIUS
4. DHCP Proxy

Correct Answer: 1. Dynamic Transmit Power Control

Explanation:

Dynamic Transmit Power Control is an RRM function that can adjust the transmit power of supported access point radios based on measured RF conditions and configured parameters. The objective is to maintain appropriate coverage while controlling cell size and reducing unnecessary interference. DHCP Proxy assists with DHCP operations, RADIUS provides authentication and accounting services, and Bonjour Gateway supports service discovery across network boundaries. Transmit-power management is particularly important in enterprise deployments because excessive power can enlarge cells and increase co-channel contention. Therefore, Dynamic Transmit Power Control is the function most directly associated with automatically adjusting AP radio power.

Question 151: In a Cisco wireless deployment, what is the main purpose of DHCP Proxy?

1. To classify rogue APs
2. To authenticate users against a RADIUS server
3. To provide RF spectrum analysis
4. To relay or assist DHCP communication between wireless clients and the DHCP server

Correct Answer: 4. To relay or assist DHCP communication between wireless clients and the DHCP server

Explanation:

DHCP Proxy is a controller-related function that assists with DHCP communication between wireless clients and DHCP servers. In a centralized wireless architecture, the controller can process DHCP messages and forward the appropriate requests toward the DHCP infrastructure. This helps wireless clients obtain IP configuration without requiring the client and DHCP server to be directly connected to the same Layer 2 segment in the traditional sense. Spectrum analysis is used for RF investigation, RADIUS handles AAA, and rogue AP classification concerns wireless security monitoring. Therefore, assisting DHCP communication is the primary purpose of DHCP Proxy.

Question 152: Which wireless design choice generally improves capacity in a high-density environment?

1. Using the same channel on every nearby AP
2. Designing smaller cells with appropriate channel reuse
3. Maximizing transmit power on every AP
4. Increasing the number of SSIDs significantly

Correct Answer: 2. Designing smaller cells with appropriate channel reuse

Explanation:

High-density WLAN design focuses heavily on capacity and airtime rather than simply maximizing coverage. Smaller, appropriately designed cells can allow channels to be reused more efficiently, increasing the number of independent opportunities for clients to access the wireless medium. Excessive transmit power can create larger cells and increase co-channel contention. A large number of SSIDs adds management and beacon overhead, while using the same channel on every nearby AP increases contention. Therefore, designing appropriately sized cells and applying effective channel reuse is an important strategy for improving capacity in dense wireless environments.

Question 153: Which 802.11 frame is transmitted by an AP in response to a client’s Probe Request?

1. ACK
2. Authentication Request
3. Probe Response
4. Association Request

Correct Answer: 3. Probe Response

Explanation:

A Probe Response is a management frame transmitted by an access point in response to an appropriate Probe Request from a wireless client. It provides information about the WLAN and AP, including parameters that help the client evaluate whether the network is suitable for connection. An Association Request is sent by the client when attempting to associate, Authentication frames participate in the authentication process, and an ACK is used to acknowledge certain received frames. Therefore, Probe Response is the correct frame used by an AP to respond to a client’s Probe Request.

Question 154: What is a major benefit of 5-GHz operation compared with traditional 2.4-GHz WLAN deployments?

1. It has more available channels and generally offers more spectrum for capacity
2. It eliminates all interference
3. It always provides greater range
4. It requires no channel planning

Correct Answer: 1. It has more available channels and generally offers more spectrum for capacity

Explanation:

The 5-GHz band generally provides more available channels and more usable spectrum than the traditional 2.4-GHz band, making it valuable for enterprise WLAN capacity. Depending on the regulatory domain and deployment, 5-GHz operation can also provide additional channel choices that support better frequency reuse. However, 5-GHz signals generally have greater propagation loss than 2.4-GHz signals, and DFS requirements can apply to some channels. The band does not eliminate interference or remove the need for RF planning. Therefore, greater channel availability and spectrum capacity are important benefits of 5-GHz operation.

Question 155: Which Cisco wireless capability can help identify whether a client is experiencing excessive roaming or authentication failures?

1. DHCP Option 43
2. Client and wireless assurance analytics
3. Antenna polarization
4. EIRP calculation

Correct Answer: 2. Client and wireless assurance analytics

Explanation:

Client and wireless assurance analytics can provide visibility into client connectivity, authentication, roaming, and performance events. By examining historical and real-time operational data, administrators can identify patterns such as repeated authentication failures, unsuccessful roaming attempts, connectivity interruptions, or degraded client experience. Antenna polarization and EIRP are RF design concepts, while DHCP Option 43 is used for AP controller discovery. Assurance analytics can therefore be useful when troubleshooting client-specific issues because it provides information beyond a simple signal-strength measurement.

Question 156: Which wireless QoS mechanism maps traffic into different contention categories to provide differentiated access to the medium?

1. CAPWAP
2. WPA3
3. WMM
4. DHCP

Correct Answer: 3. WMM

Explanation:

Wi-Fi Multimedia (WMM) provides wireless Quality of Service by dividing traffic into access categories with different contention parameters. The categories include voice, video, best effort, and background. This allows latency-sensitive traffic such as voice to receive more favorable access to the shared wireless medium than lower-priority traffic. WPA3 provides wireless security, CAPWAP handles AP-to-controller communication, and DHCP provides IP configuration. WMM does not guarantee end-to-end QoS by itself, but it is an important wireless component of a broader QoS strategy. Therefore, WMM is the mechanism that provides differentiated wireless contention categories.

Question 157: Which Cisco wireless security feature can help detect attacks involving repeated forged deauthentication frames?

1. RRM
2. Protected Management Frames
3. DHCP Proxy
4. AP fallback

Correct Answer: 2. Protected Management Frames

Explanation:

Protected Management Frames (PMF), associated with IEEE 802.11w, help protect supported management traffic from spoofing and manipulation. Deauthentication and disassociation frames are particularly important because attackers can forge them to disrupt client connectivity. PMF adds cryptographic protection for supported management frames, reducing the ability of unauthorized devices to successfully inject forged protected management traffic. DHCP Proxy handles DHCP communication, AP fallback supports controller redundancy behavior, and RRM manages RF resources. Therefore, PMF is the wireless security feature most directly associated with mitigating forged management-frame attacks.

Question 158: Which RF condition occurs when a wireless receiver cannot clearly distinguish the desired signal from background RF energy?

1. Low SNR
2. High EIRP
3. High SNR
4. Low channel utilization

Correct Answer: 1. Low SNR

Explanation:

Signal-to-Noise Ratio (SNR) compares the strength of the desired wireless signal with the surrounding noise level. When SNR is low, the desired signal is not sufficiently separated from background RF energy, which can result in lower data rates, retransmissions, reduced reliability, and poor client performance. High SNR generally indicates a better distinction between the desired signal and noise. Channel utilization measures how busy a channel is, while EIRP describes effective transmitted power. Therefore, low SNR is the RF condition most directly associated with a receiver having difficulty distinguishing the desired signal from background noise.

Question 159: Which Cisco wireless feature can tunnel guest WLAN traffic from a foreign controller to a designated anchor controller?

1. WMM
2. CleanAir
3. Mobility Anchor
4. RF Profile

Correct Answer: 3. Mobility Anchor

Explanation:

A mobility anchor can serve as a centralized termination point for traffic from a guest WLAN. A foreign controller can establish a mobility tunnel toward the anchor controller, allowing guest traffic to be forwarded to the designated location where the guest network can be connected to the appropriate infrastructure. This architecture can help maintain guest traffic isolation and provide a consistent guest-access design across multiple locations. CleanAir is used for RF interference analysis, RF profiles define radio parameters, and WMM provides QoS. Therefore, Mobility Anchor is the feature associated with tunneling guest WLAN traffic to a designated controller.

Question 160: Which statement best describes the role of BSS Coloring in Wi-Fi 6?

1. It replaces the need for RF channel planning
2. It helps devices distinguish overlapping BSS transmissions and supports spatial reuse
3. It provides WPA3 authentication
4. It assigns IP addresses to clients

Correct Answer: 2. It helps devices distinguish overlapping BSS transmissions and supports spatial reuse

Explanation:

BSS Coloring is an IEEE 802.11ax feature intended to improve spatial reuse in environments where multiple Basic Service Sets overlap. A BSS color can help a device distinguish transmissions associated with its own BSS from transmissions associated with neighboring BSSs. Under appropriate conditions, this information can allow more efficient use of the wireless medium. BSS Coloring does not provide authentication, assign IP addresses, or eliminate the need for RF planning. Wi-Fi 6 still requires careful channel, power, and capacity design. Therefore, distinguishing overlapping BSS transmissions and supporting spatial reuse is the primary role of BSS Coloring.