ExtremeCloud IQ Certification key terms

A cloud-hosted management platform that centralizes onboarding, configuration, monitoring, and troubleshooting for Extreme switches, access points, and routers through a web portal and APIs.

An operating mode where devices connect outbound to a hosted controller for configuration and telemetry, removing the need for on-premises management servers at each site.

The top-level tenant container holding users, devices, network policies, and sites; administrators with the right role manage all objects beneath it.

A logical grouping of devices and locations inside an account, used to scope maps, floor plans, client visibility, and reporting to a physical or organizational area.

A permission model where users are assigned roles that determine which accounts, sites, and actions they may access, limiting changes to authorized administrators.

The process of adding a device to the cloud platform, typically by serial number, activation code, or automatic discovery, so it becomes manageable and receives configuration.

A unique code supplied with or generated for a device that authorizes it to join a specific account during first connection to the cloud platform.

Deployment where a factory-fresh device obtains its cloud address and identity automatically at boot, requiring no manual console configuration by an on-site technician.

Assigning an onboarded device to a site, device group, and network policy so it receives the intended configuration and appears in the correct monitoring context.

A collection of devices that share configuration and firmware settings, allowing administrators to apply changes consistently across many devices at once.

A reusable set of device-level settings, such as management, firmware, and SNMP options, that can be applied to many devices independently of wireless network policy.

The main container for wireless and switching configuration in ExtremeCloud IQ, holding SSIDs, authentication settings, VLANs, and device-specific options applied to assigned devices.

The act of binding a network policy to devices or device groups; a device typically receives configuration from one network policy at a time.

A wireless network name broadcast or hidden by access points; each SSID carries its own security mode, VLAN, and client access rules.

A shared secret used for WPA/WPA2/WPA3 personal authentication, where every client uses the same passphrase to join the wireless network.

Port-based network access control in which a client authenticates to a RADIUS server through the access point before being granted network access.

An authentication server that validates user or device credentials for 802.1X and returns authorization attributes such as VLAN or role assignments.

A policy object that defines client-level attributes such as VLAN membership, QoS, firewall rules, and schedules applied after a client associates or authenticates.

A feature that isolates wireless clients from one another while still allowing shared access to designated resources such as printers or servers.

A key-delivery method where the platform generates per-device or per-user pre-shared keys and distributes them, improving on a single shared passphrase for personal wireless networks.

A site map image with placed access points used for planning coverage, visualizing client distribution, and locating devices during troubleshooting.

Live and historical visibility into connected clients, including association details, signal strength, IP address, and roaming history for diagnosing user issues.

A platform-generated notification about a condition needing attention, such as a device going offline or a configuration failure, with severity and recommended remediation.

A chronological record of administrative actions and system events in the account, used to trace who changed what and when during investigations.

Built-in tools such as ping, traceroute, packet capture, and spectrum or channel analysis run against a device to isolate connectivity or RF problems.

A diagnostic function that records frames on a device or interface for download and analysis, useful for resolving authentication or DHCP failures.

A management view showing whether each device runs the firmware version required by its device group, enabling staged upgrades and identifying drift.

A reusable configuration model, often built with variables, that generates consistent device settings across many devices while allowing per-site values.

A generated credential that lets scripts and integrations authenticate to the platform's REST API without using an interactive administrator login.

An HTTP-based programmatic interface for reading and changing platform objects, used for automation, reporting, and third-party integration.

A configured outbound HTTP callback that sends event notifications, such as alarms or client events, to an external system in near real time.

The platform design where separate customer accounts share infrastructure while their data, users, and configurations remain logically isolated from one another.

The platform's redundant hosted architecture, which keeps management available if a component fails and lets devices reconnect automatically after outages.

The configured period for which client, device, alarm, and reporting data remain available in the platform before aging out.

Administrative controls covering password rules, session behavior, certificate handling, and data-sharing preferences that harden the account against misuse.

A device-level command set entered through the platform and pushed to the device, used for settings not yet exposed in the graphical configuration.