Question 1

What is a key benefit of using a GRE tunnel to provide connectivity between branch offices and headquarters?

Accepted Answer

A)  Authentication, integrity checking, and confidentiality 
B)  Less overhead 
C)  Dynamic routing over the tunnel 
D)  Granular QoS support 
E)  Open standard
F) Scalability 
A)  Authentication, integrity checking, and confidentiality 
B)  Less overhead 
C)  Dynamic routing over the tunnel 
D)  Granular QoS support 
E)  Open standard
F) Scalability C

Question 2

Refer to the exhibit. On the basis of the output of the show spanning- tree inconsistentports command, which statement about interfaces FastEthernet 0/1 and FastEthernet 0/2 is true?

Accepted Answer

A)  They have been configured with the spanning-tree bpdufilter disable command. 
B)  They have been configured with the spanning-tree bpdufilter enable command. 
C)  They have been configured with the spanning-tree bpduguard disable command. 
D)  They have been configured with the spanning-tree bpduguard enable command. 
E)  They have been configured with the spanning-tree guard loop command.
F) They have been configured with the spanning-tree guard root command. 
A)  They have been configured with the spanning-tree bpdufilter disable command. 
B)  They have been configured with the spanning-tree bpdufilter enable command. 
C)  They have been configured with the spanning-tree bpduguard disable command. 
D)  They have been configured with the spanning-tree bpduguard enable command. 
E)  They have been configured with the spanning-tree guard loop command.
F) They have been configured with the spanning-tree guard root command. F

Question 3

An engineer is using two wireless controllers to support the wireless network. The data center is located in the head office. Each controller has a corporate WLAN configured with the name Copr-NET392267230WLC-1 and Corp-NET68371638WLC-2. The APs are installed using a round-robin approach to load balance the traffic. What should be changed on the cofiguration to optimize roaming?

Accepted Answer

A)  Use the same WLAN name for the corporate network on both controllers. 
B)  Move all access points to one controller and use the other as N+1 HA. 
C)  Move the controllers to an external data center with higher internet speeds. 
D)  Place the access points per floor on the same controller. 
A)  Use the same WLAN name for the corporate network on both controllers. 
B)  Move all access points to one controller and use the other as N+1 HA. 
C)  Move the controllers to an external data center with higher internet speeds. 
D)  Place the access points per floor on the same controller. D

Question 4

Refer to the exhibit. Which two statements about Cisco Prime Infrastructure are true? (Choose two.)

Accepted Answer

A)  It presents the recommended number of APs for the selected coverage area based on the selections made. 
B)  Planning mode requires a special license in Cisco Prime Infrastructure. 
C)  It shows the map editor feature in Cisco Prime Infrastructure. 
D)  Controllers must be synchronized with Cisco Prime Infrastructure for planning mode to work. 
E)  It shows the planning mode feature in Cisco Prime Infrastructure. 
A)  It presents the recommended number of APs for the selected coverage area based on the selections made. 
B)  Planning mode requires a special license in Cisco Prime Infrastructure. 
C)  It shows the map editor feature in Cisco Prime Infrastructure. 
D)  Controllers must be synchronized with Cisco Prime Infrastructure for planning mode to work. 
E)  It shows the planning mode feature in Cisco Prime Infrastructure.

Question 5

What is the Ethernet frame size for 802.1Q?

Accepted Answer

A)  64 
B)  128 
C)  1518 
D)  1522 
A)  64 
B)  128 
C)  1518 
D)  1522

Question 6

An engineer must configure the virtual IP address on multiple controllers in a mobility group. Which rule must the engineer follow to ensure proper roaming?

Accepted Answer

A)  Ensure that the DNS entry is tied to the virtual IP address of the WLC. 
B)  Use a unique IP address for each WLC. 
C)  Ensure that the DNS Host Name field is defined. 
D)  Use the same IP address for each WLC. 
A)  Ensure that the DNS entry is tied to the virtual IP address of the WLC. 
B)  Use a unique IP address for each WLC. 
C)  Ensure that the DNS Host Name field is defined. 
D)  Use the same IP address for each WLC.

Question 7

An engineer is performing a predictive wireless design for a medical treatment environment, which requires data and voice services. What is the minimum requirement for the design?

Accepted Answer

A)  overlapping ?72 dBm coverage from two access points 
B)  continuous ?67 dBm coverage from one access point 
C)  continuous ?72 dBm coverage from one access point 
D)  overlapping ?67 dBm coverage from two access points 
A)  overlapping ?72 dBm coverage from two access points 
B)  continuous ?67 dBm coverage from one access point 
C)  continuous ?72 dBm coverage from one access point 
D)  overlapping ?67 dBm coverage from two access points

Question 8

A wireless engineer is designing a wireless network to support real time applications over wireless. Which IEEE protocol must the engineer enable on the WLC so that the number of packets that are exchanged between an access point and client are reduced and fast roaming occurs?

Accepted Answer

A)  802.11w 
B)  802.11r 
C)  802.11i 
D)  802.11k 
A)  802.11w 
B)  802.11r 
C)  802.11i 
D)  802.11k

Question 9

A wireless engineer is hired to design a network for a technology company. The company campus has four buildings and a warehouse with access points that provide full wireless coverage as well as a pair of WLCs located in the core of the network. Which type of wireless architecture is being used?

Accepted Answer

A)  unified deployment 
B)  autonomous deployment 
C)  centralized deployment 
D)  distributed deployment 
A)  unified deployment 
B)  autonomous deployment 
C)  centralized deployment 
D)  distributed deployment

Question 10

Refer to the exhibit. What is the main reason why the Wi-Fi design engineer took a different approach than installing the APs in the offices, even though that installation provides better coverage?

Accepted Answer

A)  aesthetics 
B)  transmit power considerations 
C)  antenna gain 
D)  power supply considerations 
A)  aesthetics 
B)  transmit power considerations 
C)  antenna gain 
D)  power supply considerations

Question 11

A medium-sized hospitality company with 50 hotels needs to upgrade the existing WLAN in each hotel to 802.11n. During the site surveys for each hotel, what needs to be taken into consideration when determining the locations for each AP?

Accepted Answer

A)  Selecting APs that can be hidden in ceiling panels to provide a secure and clean aesthetic look. 
B)  Selecting locations that make visual assessment of the AP operation easy. 
C)  Selecting locations that are easily accessed so maintenance and upgrades can be performed quickly. 
D)  Selecting AP locations where power is already available. 
A)  Selecting APs that can be hidden in ceiling panels to provide a secure and clean aesthetic look. 
B)  Selecting locations that make visual assessment of the AP operation easy. 
C)  Selecting locations that are easily accessed so maintenance and upgrades can be performed quickly. 
D)  Selecting AP locations where power is already available.

Question 12

An engineer must ensure that the wireless network can accomplish fast secure roaming by way of caching keys on the access points. Which key caching mechanism is enabled by default on a Cisco AireOS WLC?

Accepted Answer

A)  SKC 
B)  OKC 
C)  802.11r 
D)  CCKM 
A)  SKC 
B)  OKC 
C)  802.11r 
D)  CCKM

Question 13

A university is in the process of designing a wireless network in an auditorium that seats 500 students and supports student laptops. Which design methodology should the university implement in the auditorium?

Accepted Answer

A)  roaming design model 
B)  voice design model 
C)  location design model 
D)  high-density design model 
A)  roaming design model 
B)  voice design model 
C)  location design model 
D)  high-density design model

Question 14

A customer is looking for a network design with Cisco Hyperlocation using AP4800 for location tracking via a custom mobile app. Issues appeared in the past with refresh rates for location updates. What needs to be implemented to meet these requirements?

Accepted Answer

A)  Cisco CMX SDK in the location app 
B)  device Bluetooth via the app 
C)  Cisco FastLocate technology 
D)  redundant CMX and fetch location in round-robin fashion 
A)  Cisco CMX SDK in the location app 
B)  device Bluetooth via the app 
C)  Cisco FastLocate technology 
D)  redundant CMX and fetch location in round-robin fashion

Question 15

An engineer has deployed a group of APs in an auditorium and notices that the APs are showing high co-channel interference. Which profile can be used to adjust the parameters for these high-density APs?

Accepted Answer

A)  QoS profile 
B)  AVC profile 
C)  RF profile 
D)  ISE profile 
A)  QoS profile 
B)  AVC profile 
C)  RF profile 
D)  ISE profile

Question 16

A customer is concerned about mesh backhaul link security. Which level of encryption does the backhaul link use?

Accepted Answer

A)  hash 
B)  AES 
C)  WEP 
D)  3DES 
A)  hash 
B)  AES 
C)  WEP 
D)  3DES

Question 17

What is the 9800 Series Wireless Controller mobility tunnel on a Cisco Catalyst 9800 controller?

Accepted Answer

A)  It is an IPsec tunnel with control path only. 
B)  It is a CAPWAP tunnel with data path only. 
C)  It is a CAPWAP tunnel with control path and data path. 
D)  It is an IPsec tunnel with control path and data path. 
A)  It is an IPsec tunnel with control path only. 
B)  It is a CAPWAP tunnel with data path only. 
C)  It is a CAPWAP tunnel with control path and data path. 
D)  It is an IPsec tunnel with control path and data path.

Question 18

Guest anchoring is configured for a newly created SSID for your company. It has been noticed that the mobility tunnels are not up, and that MPING fails from your foreign WLC to the anchor WLC. What is the reason that it is failing?

Accepted Answer

A)  A rule is needed at the firewall to allow UDP port 16666 for communication to work. 
B)  A rule is needed at the firewall to allow UDP port 97 for communication to work. 
C)  A rule is needed at the firewall to allow TCP port 97 for communication to work. 
D)  A rule is needed at the firewall to allow TCP port 16666 for communication to work. 
A)  A rule is needed at the firewall to allow UDP port 16666 for communication to work. 
B)  A rule is needed at the firewall to allow UDP port 97 for communication to work. 
C)  A rule is needed at the firewall to allow TCP port 97 for communication to work. 
D)  A rule is needed at the firewall to allow TCP port 16666 for communication to work.

Question 19

Which statement about creating a mobility group is true, excluding mobility anchors?

Accepted Answer

A)  Each WLC must use the same mobility name and be defined as a peer in each other's static mobility members list. 
B)  If WLCs with HA SSO are deployed, each WLC in the WLC HA pair considered separately as a mobility peer. 
C)  The WLCs do not have to be of the same model or type to be a member of a mobility group, however each member should be running different software versions. 
D)  A mobility groups does not require all WLCs in the group to use the same virtual IP address. 
A)  Each WLC must use the same mobility name and be defined as a peer in each other's static mobility members list. 
B)  If WLCs with HA SSO are deployed, each WLC in the WLC HA pair considered separately as a mobility peer. 
C)  The WLCs do not have to be of the same model or type to be a member of a mobility group, however each member should be running different software versions. 
D)  A mobility groups does not require all WLCs in the group to use the same virtual IP address.

Question 20

A network administrator is troubleshooting a DMVPN setup between the hub and the spoke. Which action should the administrator take before troubleshooting the IPsec configuration?

Accepted Answer

A)  Verify the GRE tunnels. 
B)  Verify ISAKMP. 
C)  Verify NHRP. 
D)  Verify crypto maps. 
A)  Verify the GRE tunnels. 
B)  Verify ISAKMP. 
C)  Verify NHRP. 
D)  Verify crypto maps.

Exam 11: Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

What is a key benefit of using a GRE tunnel to provide connectivity between branch offices and headquarters?

Refer to the exhibit. On the basis of the output of the show spanning- tree inconsistentports command, which statement about interfaces FastEthernet 0/1 and FastEthernet 0/2 is true?

Refer to the exhibit. Which two statements about Cisco Prime Infrastructure are true? (Choose two.)

What is the Ethernet frame size for 802.1Q?

An engineer must configure the virtual IP address on multiple controllers in a mobility group. Which rule must the engineer follow to ensure proper roaming?

An engineer is performing a predictive wireless design for a medical treatment environment, which requires data and voice services. What is the minimum requirement for the design?

A wireless engineer is designing a wireless network to support real time applications over wireless. Which IEEE protocol must the engineer enable on the WLC so that the number of packets that are exchanged between an access point and client are reduced and fast roaming occurs?

A wireless engineer is hired to design a network for a technology company. The company campus has four buildings and a warehouse with access points that provide full wireless coverage as well as a pair of WLCs located in the core of the network. Which type of wireless architecture is being used?

Refer to the exhibit. What is the main reason why the Wi-Fi design engineer took a different approach than installing the APs in the offices, even though that installation provides better coverage?

A medium-sized hospitality company with 50 hotels needs to upgrade the existing WLAN in each hotel to 802.11n. During the site surveys for each hotel, what needs to be taken into consideration when determining the locations for each AP?

An engineer must ensure that the wireless network can accomplish fast secure roaming by way of caching keys on the access points. Which key caching mechanism is enabled by default on a Cisco AireOS WLC?

A university is in the process of designing a wireless network in an auditorium that seats 500 students and supports student laptops. Which design methodology should the university implement in the auditorium?

A customer is looking for a network design with Cisco Hyperlocation using AP4800 for location tracking via a custom mobile app. Issues appeared in the past with refresh rates for location updates. What needs to be implemented to meet these requirements?

An engineer has deployed a group of APs in an auditorium and notices that the APs are showing high co-channel interference. Which profile can be used to adjust the parameters for these high-density APs?

A customer is concerned about mesh backhaul link security. Which level of encryption does the backhaul link use?

What is the 9800 Series Wireless Controller mobility tunnel on a Cisco Catalyst 9800 controller?

Guest anchoring is configured for a newly created SSID for your company. It has been noticed that the mobility tunnels are not up, and that MPING fails from your foreign WLC to the anchor WLC. What is the reason that it is failing?

Which statement about creating a mobility group is true, excluding mobility anchors?

A network administrator is troubleshooting a DMVPN setup between the hub and the spoke. Which action should the administrator take before troubleshooting the IPsec configuration?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters