I85PREP
⌘ K
Cisco ENWLSD 300-425 study materials
Cisco ENWLSD 300-425 study resources

Cisco ENWLSD 300-425 practice questions

One question at a time. Build your Cisco ENWLSD 300-425 understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Gather information from the existing network

A wireless design engineer is starting a new 802.11ax deployment in an existing campus building. Which existing-network data source most reliably establishes current AP placement and RF coverage boundaries before any new survey is performed?

  1. A vendor datasheet listing antenna gain for the proposed AP model
  2. A bill of materials from the original 802.11n deployment project
  3. A passive site survey using the existing AP infrastructure and recorded measurements Correct answer.
  4. An active site survey performed with a new predictive planning tool

Explanation

A passive survey listens to existing APs and records real measured signal, noise, and channel data, so it reflects the actual coverage the building has today. That measured baseline is what lets the engineer compare current RF boundaries against the new design requirements.

Question 2Gather information from the existing network

During discovery, an engineer needs to know which channels neighboring APs are actually using and how strong each is at a given location. Which survey technique produces this information?

  1. AP-on-a-stick survey
  2. Predictive survey
  3. Passive survey Correct answer.
  4. Spectrum analysis

Explanation

A passive survey uses a client adapter in monitor mode to capture beacon frames from every nearby AP, revealing SSIDs, BSSIDs, channels, and received signal levels at each measurement point. Predictive tools model coverage mathematically, and spectrum analysis characterizes non-Wi-Fi interference rather than listing neighbor AP channel assignments.

Question 3Gather information from the existing network

An engineer runs a spectrum analysis in a warehouse and observes a continuous high-amplitude signal centered near 2.437 GHz with a wide, flat-topped shape that persists all day. Which source is the most likely cause?

  1. A microwave oven in the break room Correct answer.
  2. A nearby 5 GHz radar system
  3. A frequency-hopping Bluetooth headset
  4. A 2.4 GHz cordless phone base station

Explanation

A microwave oven leaks broadband energy centered around 2.45 GHz and produces a wide, flat-topped signature that correlates with mealtimes and can persist during heavy use. Bluetooth hops across the band and appears as narrow bursts, while cordless phones and radar occupy different signatures and bands.

Question 4Gather information from the existing network

Which document from an existing network is the authoritative source for the physical layer details an engineer needs to reuse cabling and switch ports for new APs?

  1. The RADIUS server accounting log
  2. The wireless LAN controller license report
  3. The network topology and cable plant documentation Correct answer.
  4. The DHCP scope utilization report

Explanation

Topology and cable plant documentation records switch models, port assignments, PoE capability, and cable runs, which together determine whether existing infrastructure can support new APs. The other reports describe logical services or licensing rather than physical connectivity.

Question 5Gather information from the existing network

An engineer reviewing an existing controller configuration finds that all APs are configured to transmit at maximum power. What is the most likely consequence for the new design?

  1. Lower throughput because clients negotiate narrower channel widths
  2. Reduced co-channel interference because coverage cells shrink
  3. Improved roaming because clients see more APs at strong signal
  4. Sticky client behavior and higher co-channel interference from oversized cells Correct answer.

Explanation

Maximum transmit power enlarges each cell, so more APs hear each other and co-channel interference rises, while clients associate at high power and then resist roaming to a better AP. Coverage cells grow rather than shrink, and transmit power does not directly force narrower channel widths.

Question 6Gather information from the existing network

Which existing-network metric best indicates that a client population will have difficulty roaming smoothly between APs?

  1. A large overlap of cells with similar received signal strength Correct answer.
  2. A high retry rate on a single AP
  3. A high number of clients associated at signal levels above -60 dBm
  4. A low number of channels available in the 5 GHz band

Explanation

When adjacent cells present nearly identical signal strength, clients lack a clear roam trigger and tend to stay associated to the original AP. That condition, sometimes called a roaming valley problem, is visible in survey data as overlapping cells with similar RSSI.

Question 7Gather information from the existing network

An engineer is auditing the existing network's ability to support a new voice over Wi-Fi service. Which measurement from the current survey is most directly relevant to call quality?

  1. The number of SSIDs broadcast per AP
  2. The controller's software version
  3. The signal-to-noise ratio at the cell edge Correct answer.
  4. The uplink switch port speed

Explanation

Voice quality depends heavily on sufficient signal-to-noise ratio at the coverage boundary, because low SNR drives retransmissions and jitter that degrade calls. SSID count and switch port speed affect overhead and capacity but do not describe the RF margin a voice client experiences.

Question 8Gather information from the existing network

A discovery report shows that the 5 GHz band in a lecture hall has only four non-overlapping 20 MHz channels available and 60 clients. Which conclusion should the engineer draw for the new design?

  1. Clients should be forced to 80 MHz channels to increase throughput
  2. Channel reuse will require careful cell sizing and possibly narrower coverage cells Correct answer.
  3. The band is unusable and the design should move entirely to 2.4 GHz
  4. DFS channels should be disabled to avoid radar events

Explanation

With only four non-overlapping channels and a dense client load, the design must rely on tight cell sizing and channel reuse to keep co-channel interference manageable. Moving to 2.4 GHz would worsen the situation, and wider channels would reduce the available channel count further.

Question 9Gather information from the existing network

Which existing-network artifact would an engineer consult to determine whether a building's APs are powered by PoE or by local power injectors?

  1. The WLAN controller's AP join report
  2. The site's floor plan drawing
  3. The switch configuration and PoE budget report Correct answer.
  4. The wireless client inventory spreadsheet

Explanation

Switch configuration and PoE budget reports show which ports supply power and how much budget is consumed, directly answering the PoE versus injector question. The AP join report shows association status, not power delivery method.

Question 10Gather information from the existing network

An engineer discovers that the existing network uses a single flat VLAN for all wireless clients, including guest and corporate traffic. What is the most significant design concern this raises?

  1. Inability to support 802.11ax clients
  2. Reduced antenna gain on the APs
  3. Broadcast domain size and lack of traffic segmentation Correct answer.
  4. Insufficient PoE budget on access switches

Explanation

A flat VLAN grows the broadcast domain and places guest and corporate traffic on the same segment, which is a segmentation and security concern. The issue is logical network design, not power, radio standard, or antenna characteristics.

Question 11Gather information from the existing network

Which tool category is used to capture over-the-air frames and analyze them for association, authentication, and roaming behavior on an existing network?

  1. SNMP polling platform
  2. NetFlow collector
  3. Protocol analyzer with a wireless capture adapter Correct answer.
  4. Cable certifier

Explanation

A protocol analyzer paired with a wireless adapter in monitor mode captures 802.11 management and data frames, allowing analysis of association, authentication, and roaming sequences. NetFlow and SNMP report on wired traffic and device counters, not over-the-air frame exchanges.

Question 12Gather information from the existing network

A survey shows that the noise floor in a manufacturing area rises from -95 dBm during the day to -80 dBm during production shifts. How should the engineer account for this in the new design?

  1. Plan cell edges using the worst-case noise floor to preserve SNR Correct answer.
  2. Increase AP transmit power to overcome the noise
  3. Design to the daytime noise floor and ignore shift variations
  4. Reduce the number of APs to lower interference

Explanation

Cell edge SNR must remain adequate under the worst-case noise condition, so the design should be sized against the -80 dBm shift-time floor. Designing to the quiet floor would leave clients with insufficient margin when production equipment is running.

Question 13Gather information from the existing network

An engineer needs to verify whether the existing network can support fast roaming for latency-sensitive applications. Which capability should the engineer confirm is present?

  1. 802.11d regulatory domain advertisement
  2. 802.11h transmit power control
  3. 802.11k neighbor report only
  4. 802.11r fast BSS transition support on the controller and clients Correct answer.

Explanation

Fast BSS transition, defined in 802.11r, reduces reauthentication overhead during roaming and is the key capability for latency-sensitive applications. Neighbor reports assist discovery but do not by themselves reduce the key exchange delay.

Question 14Gather information from the existing network

During a passive survey, the engineer notices that a neighboring AP is broadcasting on channel 6 with a very strong signal inside the target building. What does this most likely indicate for the design?

  1. The neighbor is part of the same controller cluster
  2. The neighbor's signal is irrelevant because it is not on the corporate SSID
  3. The neighbor will cause co-channel interference if the new design also uses channel 6 Correct answer.
  4. The neighbor's signal confirms the building is well shielded

Explanation

A strong external signal on channel 6 means any new AP using that channel inside the building will share airtime and experience co-channel interference. The survey data should drive the channel plan to avoid that channel where the external signal is strongest.

Question 15Gather information from the existing network

An engineer is reviewing existing AP inventory data and finds that APs from three different vendors are deployed across the campus. What is the primary design implication?

  1. Management, roaming, and feature consistency will require per-vendor consideration Correct answer.
  2. All APs can be managed by a single controller regardless of vendor
  3. The APs will automatically negotiate a common channel plan
  4. The APs will share a common regulatory domain configuration

Explanation

Multi-vendor AP fleets generally require separate management platforms and may not support consistent roaming or feature behavior across the campus. A unified design must account for each vendor's capabilities rather than assuming interoperability.

Question 16Gather information from the existing network

A discovery effort must determine the maximum number of wireless clients the existing controllers can support. Which data source answers this directly?

  1. The controller platform's scale specifications and current license counts Correct answer.
  2. The RADIUS shared secret length
  3. The switch trunk configuration
  4. The AP power budget report

Explanation

Controller scale specifications define the supported client and AP limits for the platform, and license counts show what is currently entitled. Together they establish the headroom available before the new design exceeds capacity.

Question 17Gather information from the existing network

An engineer observes that the existing 2.4 GHz network uses channels 1, 6, and 11 across a floor, but several APs are set to 40 MHz width. What is the likely effect on the network?

  1. Automatic fallback to 20 MHz on all APs
  2. Expanded availability of non-overlapping channels
  3. Improved spectral efficiency with no added interference
  4. Overlapping channels that increase co-channel interference Correct answer.

Explanation

A 40 MHz channel in 2.4 GHz consumes two of the three non-overlapping 20 MHz channels, so APs configured this way overlap heavily and generate co-channel interference. The band does not offer enough spectrum to support 40 MHz reuse.

Question 18Gather information from the existing network

A pre-design assessment must identify whether the existing network uses autonomous APs or a controller-based architecture. Which observation most directly distinguishes the two?

  1. Whether APs receive their configuration from a centralized management appliance Correct answer.
  2. Whether APs are mounted on ceilings or walls
  3. Whether clients use WPA2 or WPA3
  4. Whether the APs support 5 GHz

Explanation

Controller-based architectures push configuration and management from a central appliance, while autonomous APs are configured individually. Mounting, security protocol, and band support do not distinguish the management architecture.

Question 19Gather information from the existing network

Which existing-network record is most useful for confirming the regulatory domain under which the deployed APs are operating?

  1. The AP country code setting in the controller configuration Correct answer.
  2. The NTP server address configured on the APs
  3. The DNS domain name of the management subnet
  4. The DHCP option 43 string

Explanation

The country code setting in the controller or AP configuration determines the regulatory domain and therefore which channels and power levels are permitted. DHCP options, DNS names, and NTP addresses are supporting services that do not define regulatory limits.

Question 20Gather information from the existing network

An engineer is assessing whether the existing wired network can carry the traffic of a planned high-density wireless deployment. Which measurement is most relevant?

  1. The antenna pattern of the deployed AP model
  2. The number of SSIDs configured on the controller
  3. The client device operating system versions
  4. Uplink utilization and oversubscription ratios on AP access switches Correct answer.

Explanation

Uplink utilization and oversubscription ratios on access switches determine whether the wired path can absorb the aggregate wireless throughput the new design will generate. SSIDs, antenna patterns, and client OS versions do not describe wired backhaul capacity.

Question 21Design the wireless network infrastructure

An engineer is designing a new office WLAN and needs to choose an antenna for a long narrow warehouse aisle where coverage must extend far down the aisle with minimal spill into adjacent racking. Which antenna pattern best fits this requirement?

  1. A circularly polarized omni ceiling antenna
  2. A high-gain directional patch antenna aimed down the aisle Correct answer.
  3. An omnidirectional dipole mounted at ceiling height
  4. A low-gain monopole mounted low on a wall

Explanation

A directional antenna concentrates RF energy along the aisle, extending usable range while reducing energy radiated sideways into racking. Omnidirectional antennas spread power in all horizontal directions and waste coverage outside the aisle.

Question 22Design the wireless network infrastructure

A site survey shows strong signal in open office areas but dead spots behind a dense metal shelving unit. Which design action most directly addresses this?

  1. Lower the AP data rates to 6 Mbps only
  2. Switch the AP to a wider channel width
  3. Increase AP transmit power on the nearest AP
  4. Add an AP or remote antenna on the far side of the obstruction Correct answer.

Explanation

Metal obstructions create shadowing that higher transmit power cannot reliably overcome because the path loss is localized and severe. Placing an AP or remote antenna on the shadowed side restores coverage where users actually are.

Question 23Design the wireless network infrastructure

Which statement correctly describes the relationship between EIRP, transmit power, and antenna gain in a WLAN design?

  1. EIRP is independent of antenna gain
  2. EIRP equals antenna gain minus transmit power
  3. EIRP equals transmit power plus antenna gain minus cable loss Correct answer.
  4. EIRP equals transmit power divided by antenna gain

Explanation

EIRP is the effective radiated power, calculated as transmitter output plus antenna gain minus feedline loss. Regulatory limits are applied to EIRP, so antenna gain and cable loss must be accounted for when designing.

Question 24Design the wireless network infrastructure

A hospital wants to deploy location services using a Cisco DNA Center / Catalyst environment. Which design consideration is most important for accurate location?

  1. Ensuring adequate AP density and cell overlap so clients are heard by multiple APs Correct answer.
  2. Using only 80 MHz channels to maximize throughput
  3. Placing all APs in a single row along one corridor
  4. Disabling 802.11k and 802.11v on all APs

Explanation

Location accuracy depends on multilateration, which requires a client to be heard by several APs with good cell overlap. Sparse or single-row AP layouts reduce the number of hearing APs and degrade accuracy.

Question 25Design the wireless network infrastructure

Which 802.11 standard first introduced operation in the 6 GHz band for Wi-Fi?

  1. 802.11g
  2. 802.11ac
  3. 802.11ax (Wi-Fi 6E) Correct answer.
  4. 802.11n

Explanation

Wi-Fi 6E extends 802.11ax operation into the 6 GHz band, adding clean spectrum and many more channels. Earlier standards operate only in 2.4 GHz and 5 GHz.

Question 26Design the wireless network infrastructure

A designer is planning channel reuse in a dense 5 GHz deployment. Which practice best reduces co-channel interference?

  1. Disable DFS channels entirely
  2. Use the widest possible channel width on every AP
  3. Set all APs to the same channel for simplicity
  4. Assign non-overlapping channels to neighboring APs and limit cell overlap Correct answer.

Explanation

Non-overlapping channel assignment with controlled cell overlap minimizes co-channel interference in dense deployments. Using the same channel everywhere or overly wide channels increases contention.

Question 27Design the wireless network infrastructure

Which Cisco wireless architecture places the control plane in a centralized controller while allowing data forwarding at the edge?

  1. Cisco Catalyst 9800 with fabric-enabled wireless Correct answer.
  2. Monitor mode AP deployment
  3. Autonomous AP deployment
  4. Standalone workgroup bridge mode

Explanation

Fabric-enabled wireless with Catalyst 9800 separates control and data planes, allowing traffic to be forwarded locally at the edge. This reduces hairpinning through the controller.

Question 28Design the wireless network infrastructure

What is the primary purpose of the Cisco Wireless LAN Controller mobility group?

  1. To synchronize radio resource management neighbor lists
  2. To provide PoE budgeting for access points
  3. To enforce QoS marking at the switch edge
  4. To enable seamless client roaming across controllers by sharing client state Correct answer.

Explanation

A mobility group lets controllers share client database information so clients can roam between APs on different controllers without re-authentication. This supports seamless Layer 2 and Layer 3 roaming.

Question 29Design the wireless network infrastructure

A customer requires that guest traffic be tunneled from branch APs to a central DMZ anchor controller. Which design element is required?

  1. An anchor controller in the DMZ configured as a mobility anchor for the guest WLAN Correct answer.
  2. A local controller configured in monitor mode
  3. A workgroup bridge on each branch AP
  4. A separate SSID using open authentication only

Explanation

Guest tunneling uses a mobility anchor controller in the DMZ to which the foreign controller tunnels guest client traffic. This centralizes guest egress and security policy.

Question 30Design the wireless network infrastructure

During design review, an engineer must ensure that voice clients receive priority over bulk data on the WLAN. Which design component is most appropriate?

  1. Set the voice WLAN to open authentication
  2. Disable 802.11r to simplify roaming
  3. Configure a dedicated voice WLAN with QoS Platinum profile and enable WMM Correct answer.
  4. Place voice clients on the same WLAN as guest traffic

Explanation

A dedicated voice WLAN with the Platinum QoS profile and WMM enabled provides the priority treatment voice requires. WMM maps voice traffic to the appropriate access category.

Question 31Design the wireless network infrastructure

An engineer is planning AP placement for a high-density auditorium. Which approach best supports many concurrent clients?

  1. Use more APs with lower transmit power and enable band steering Correct answer.
  2. Use fewer APs with maximum transmit power
  3. Place all APs on 2.4 GHz for better penetration
  4. Disable 802.11ax OFDMA to reduce overhead

Explanation

High-density design favors many APs with reduced power to create smaller cells and improve spatial reuse, combined with band steering to move clients to 5 GHz or 6 GHz. This increases aggregate capacity and reduces contention.

Question 32Design the wireless network infrastructure

A design requires that clients with weak signal be denied association until they move closer to an AP. Which feature is best suited?

  1. 802.11k neighbor report
  2. Coverage hole detection
  3. Client exclusion based on RSSI threshold Correct answer.
  4. Band Select

Explanation

An RSSI-based client exclusion or association threshold rejects clients below a configured signal level, encouraging them to associate with a closer AP. This keeps weak clients from degrading cell performance.

Question 33Design the wireless network infrastructure

What is the role of the RF group leader in Cisco wireless design?

  1. To provide DHCP services to wireless clients
  2. To authenticate clients against the RADIUS server
  3. To run radio resource management algorithms and coordinate channel and power plans Correct answer.
  4. To act as the mobility anchor for guest traffic

Explanation

The RF group leader is a controller elected within an RF group that runs RRM calculations and distributes channel and power decisions. This coordinates the RF plan across controllers.

Question 34Design the wireless network infrastructure

A designer must ensure that a client can maintain its IP address while roaming between controllers on different subnets. Which design supports this?

  1. Disabling mobility groups
  2. Using only open authentication
  3. Layer 3 mobility with a mobility tunnel between controllers Correct answer.
  4. Layer 2 roaming with a single VLAN across controllers

Explanation

Layer 3 roaming uses mobility tunnels between controllers to preserve the client's original IP subnet while it roams to a different subnet. This maintains session continuity.

Question 35Design the wireless network infrastructure

Which consideration is most important when designing a WLAN for a warehouse with high ceilings and tall racking?

  1. Increasing channel width to 160 MHz
  2. Using only 2.4 GHz for penetration
  3. Mounting APs low on racking with omni antennas
  4. Mounting APs on the ceiling above the racking with downward-tilted directional antennas Correct answer.

Explanation

High ceilings and tall racking cause signal to be blocked and create coverage gaps; mounting APs above the racking with directional antennas aimed into aisles improves coverage. Low mounting causes obstruction and unpredictable patterns.

Question 36Design the wireless network infrastructure

An engineer needs to design for seamless roaming for VoWiFi clients. Which combination of features is most appropriate?

  1. Using only 802.1X without PMK caching
  2. Disabling RRM and using maximum power
  3. 802.11r fast transition, 802.11k neighbor reports, and 802.11v BSS transition Correct answer.
  4. Open authentication and a single 2.4 GHz channel

Explanation

802.11r enables fast BSS transition, 802.11k supplies neighbor reports, and 802.11v provides BSS transition management. Together they reduce roaming latency and improve voice quality.

Question 37Design the wireless network infrastructure

What is the primary design benefit of using Cisco FlexConnect local switching at a branch?

  1. It provides PoE to the AP
  2. Client data traffic is switched locally at the branch instead of tunneled to the controller Correct answer.
  3. All client traffic is tunneled to the controller for inspection
  4. It removes the need for a controller

Explanation

FlexConnect local switching forwards client traffic at the branch switch, reducing WAN utilization and latency. The control plane remains with the controller.

Question 38Design the wireless network infrastructure

A design review notes that a controller is configured with APs in a single RF group but the RF domain spans multiple buildings. What is the most likely design concern?

  1. Mobility groups cannot span buildings
  2. Client authentication will fail
  3. RRM may make channel and power decisions across buildings that do not share RF visibility Correct answer.
  4. Guest anchoring will not work

Explanation

RRM assumes APs in an RF group can hear each other; combining buildings without RF visibility can cause suboptimal channel and power decisions. Separate RF groups per building are often preferable.

Question 39Design the wireless network infrastructure

An engineer must choose between a centralized and a distributed controller design for a large campus. Which factor most strongly favors a centralized Catalyst 9800 design?

  1. Requirement to forward all traffic locally at each site
  2. Need for consistent policy and simplified management across many sites Correct answer.
  3. Need to reduce WAN usage for local traffic
  4. Desire to eliminate all controllers

Explanation

A centralized controller design simplifies management and enforces consistent policy across many sites. Local forwarding can still be used where WAN efficiency is needed.

Question 40Design the wireless network infrastructure

Which 5 GHz channel width choice best balances capacity and channel reuse in a dense office?

  1. 160 MHz
  2. 20 MHz Correct answer.
  3. 40 MHz
  4. 80 MHz

Explanation

20 MHz channels maximize the number of non-overlapping channels and reduce co-channel interference in dense deployments. Wider channels consume more spectrum and reduce reuse options.

Question 41Design the wireless network infrastructure

An engineer is designing a WLAN for a manufacturing floor with fast-moving automated guided vehicles that require low-latency roaming. Which design choice is most important?

  1. Disabling 802.11k and 802.11v
  2. Setting all APs to maximum power
  3. Tuning RRM to reduce power changes and ensuring consistent cell overlap Correct answer.
  4. Using only 2.4 GHz channels

Explanation

Stable RF with consistent cell overlap and reduced RRM power fluctuations supports predictable roaming for mobile equipment. 802.11k/v should remain enabled to aid roaming.

Question 42Design the wireless network infrastructure

A customer wants to use 6 GHz for high-density deployments. Which design implication must be considered?

  1. 6 GHz clients do not support WPA3
  2. 6 GHz requires the same channel plan as 2.4 GHz
  3. 6 GHz has shorter range and requires denser AP placement Correct answer.
  4. 6 GHz uses only 20 MHz channels

Explanation

Higher frequency signals attenuate faster, so 6 GHz coverage is shorter and denser AP placement is needed. WPA3 is mandatory for Wi-Fi 6E and 6 GHz supports wider channels.

Question 43Design the wireless network infrastructure

During a design validation, an engineer observes that clients frequently roam between APs on different controllers in the same mobility group but lose connectivity briefly. Which design element should be verified?

  1. Antenna gain on the AP
  2. Mobility tunnel and client state synchronization between controllers Correct answer.
  3. DHCP lease time on the client VLAN
  4. PoE budget on the access switch

Explanation

Roaming between controllers relies on mobility tunnels and synchronized client state. If these are misconfigured or disrupted, clients may experience brief connectivity loss during roam.

Question 44Design the wireless network infrastructure

An engineer is designing a WLAN to support both IoT sensors using 802.11ah-like long-range low-power requirements and standard enterprise clients. Which design consideration is most accurate?

  1. A single SSID with maximum power satisfies both
  2. Separate SSIDs and possibly separate APs may be required to meet differing range and power profiles Correct answer.
  3. Disabling WMM improves IoT performance
  4. IoT devices should be placed on the voice WLAN

Explanation

IoT devices with long-range, low-power requirements often need separate SSIDs and sometimes separate APs or radio profiles to meet their coverage and power needs. Mixing them with enterprise clients can degrade both.

Question 45Design the wireless network infrastructure

An engineer must ensure that the WLAN design supports seamless guest access with centralized egress while maintaining local branch internet access for employees. Which design combination is most appropriate?

  1. Guest WLAN anchored to a DMZ controller and employee WLAN with FlexConnect local switching Correct answer.
  2. Both WLANs using open authentication
  3. Both WLANs anchored to the DMZ
  4. Guest WLAN with local switching and employee WLAN anchored to the DMZ

Explanation

Anchoring the guest WLAN to a DMZ controller centralizes guest egress and security, while FlexConnect local switching for employees preserves local internet access. Combining these meets both requirements.

Question 46Design the wireless network infrastructure

In a Cisco wireless design, which component is responsible for maintaining the master database of access point and client state in a centralized deployment?

  1. The wireless LAN controller Correct answer.
  2. The Catalyst switch stack
  3. The identity services engine
  4. The access point radio module

Explanation

In a centralized Cisco wireless architecture, the WLC holds the master database of AP and client state and terminates the CAPWAP control and data tunnels. The APs are lightweight and depend on the controller for configuration and state. Switches and ISE provide transport and policy services but not wireless state management.

Question 47Design the wireless network infrastructure

An engineer is sizing a Cisco Catalyst 9800 controller for a new campus and must confirm how AP count and client count are licensed. Which statement describes the licensing model that should be planned for?

  1. Each AP requires a license, and client scale is enforced by the controller platform capacity Correct answer.
  2. Only client counts are licensed, so AP count does not affect the purchase
  3. Licenses are per WLAN SSID, so adding SSIDs increases license cost
  4. Licenses are per switch port, so PoE port count sets the license quantity

Explanation

Cisco wireless licensing on current controller platforms is tied to access point count, typically through DNA or network licenses per AP. Client scale is a platform capacity limit rather than a separately purchased license. SSIDs and switch port counts do not drive wireless license quantity.

Question 48Design the wireless network infrastructure

A designer is documenting the CAPWAP behavior for a centralized deployment across a WAN. Which statement about CAPWAP is accurate for planning firewall rules?

  1. CAPWAP uses UDP with control and data channels, and the data channel may be DTLS-encrypted Correct answer.
  2. CAPWAP uses a single TCP session on port 443 for both control and data
  3. CAPWAP uses IP protocol 50 for all traffic and requires no ports
  4. CAPWAP uses UDP 514 for control and TCP 22 for data

Explanation

CAPWAP operates over UDP with separate control and data channels, and the data channel can be protected with DTLS. Firewall and ACL designs must permit both channels between APs and the controller. The other options describe unrelated protocols or incorrect transports.

Question 49Design the wireless network infrastructure

A branch office will use FlexConnect with local switching. Which design element must be present at the branch for client VLAN assignment to work correctly?

  1. All client VLANs must be trunked to the central controller over the WAN
  2. The branch must run a local mobility anchor for each client VLAN
  3. The client VLANs must be defined on the branch access switch and mapped in the FlexConnect AP configuration Correct answer.
  4. Client VLANs must be translated to the AP management VLAN

Explanation

With local switching, client traffic is bridged at the branch, so the client VLANs must exist on the local switch and be mapped to the WLAN in the AP FlexConnect configuration. The WAN does not carry client VLANs in this mode. Anchors and VLAN translation are not required for basic local switching.

Question 50Design the wireless network infrastructure

Which Cisco design approach allows an AP to remain manageable through a controller during a WAN outage at a remote site while still serving clients locally?

  1. Sniffer mode with PMK caching disabled
  2. FlexConnect with local switching and standalone mode fallback Correct answer.
  3. Local mode with central switching only
  4. Monitor mode with a dedicated sniffer AP

Explanation

FlexConnect APs can enter standalone mode when the controller is unreachable, continuing to serve locally switched WLANs with cached credentials. This resilience is a main reason to choose FlexConnect for branch sites. Local mode depends on the controller for data forwarding and does not provide this local survivability.