I85PREP
⌘ K
ExtremeCloud IQ Certification study materials
ExtremeCloud IQ Certification study resources

ExtremeCloud IQ Certification practice questions

One question at a time. Build your ExtremeCloud IQ Certification understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

In ExtremeCloud IQ, what is the primary purpose of a network policy?

  1. To replace the need for any on-premises DHCP service
  2. To define the site-specific WLAN, VLAN, and device settings that are pushed to managed devices Correct answer.
  3. To provide a read-only audit log of administrator logins
  4. To store only the licensing keys assigned to an account

Explanation

A network policy is the reusable configuration container that holds WLANs, device templates, VLAN definitions, and management settings. When a policy is assigned to a site or device, ExtremeCloud IQ deploys that configuration to the hardware. Licensing and audit records are handled elsewhere in the platform.

Question 2ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which deployment model does ExtremeCloud IQ use for managing access points and switches?

  1. A USB-based console application run from an administrator laptop
  2. A locally installed server that each site must host
  3. A peer-to-peer mesh with no central management plane
  4. A cloud-hosted management platform reachable over the internet Correct answer.

Explanation

ExtremeCloud IQ is a cloud-delivered management platform, so devices connect outbound to the cloud service rather than requiring an on-site management server. Administrators reach the same platform through a web browser from anywhere. This is the defining characteristic of the product compared with on-premises controllers.

Question 3ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator wants devices to receive configuration automatically when first powered on at a new branch. Which capability should be configured?

  1. A manual static route entry on each access point
  2. Cloud-based onboarding with a device template and network policy assignment Correct answer.
  3. Per-device CLI scripting executed at every boot
  4. A local RADIUS server on the branch firewall

Explanation

ExtremeCloud IQ supports zero-touch onboarding, where a device contacts the cloud service, is matched to the correct site, and receives its network policy and template automatically. This removes the need to configure each device manually on site. Static routes, local RADIUS, and boot-time CLI scripts do not provide automated provisioning.

Question 4ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What role does a site play in the ExtremeCloud IQ hierarchy?

  1. It is a physical rack designation used only for asset inventory
  2. It is a container that stores only firmware image files
  3. It is a logical grouping that binds devices, location data, and assigned network policies together Correct answer.
  4. It is an alias for the administrator account

Explanation

Sites organize devices by physical location and act as the point where network policies are applied. Devices are assigned to a site, and the site determines which policy configuration they receive. This logical grouping also supports location-based reporting and maps.

Question 5ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which statement best describes a device template in ExtremeCloud IQ?

  1. A reusable set of device-level settings that can be applied to many devices of the same model Correct answer.
  2. A per-user credential store for wireless clients
  3. A backup copy of the cloud database
  4. A report that lists all alarms raised in the last 24 hours

Explanation

Device templates capture device-level parameters such as radio, interface, and management settings so they can be reused across many devices. They complement network policies, which carry the WLAN and VLAN configuration. Templates reduce repetitive per-device configuration effort.

Question 6ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator needs wireless clients to authenticate with individual usernames and passwords stored in the cloud platform. Which feature should be enabled in the WLAN configuration?

  1. Open authentication with captive portal bypass
  2. Private pre-shared key with a single shared value
  3. MAC-based authentication only
  4. Cloud-based user database authentication (PSK with unique per-user credentials) Correct answer.

Explanation

ExtremeCloud IQ can host a user database and authenticate clients against per-user credentials delivered through the cloud, often described as private or per-user PSK. This gives each user a distinct credential without deploying an external RADIUS server. A single shared PSK or MAC-only authentication does not provide per-user identity.

Question 7ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What is the function of the ExtremeCloud IQ Companion application?

  1. It replaces the web-based management interface entirely
  2. It is the firmware image repository for access points
  3. It provides mobile installation and troubleshooting workflows for technicians in the field Correct answer.
  4. It is a desktop packet capture analyzer

Explanation

The Companion app is a mobile tool aimed at installers and technicians, supporting tasks such as device onboarding, verification, and troubleshooting on site. It supplements rather than replaces the main web management interface. It is not a firmware repository or a packet analyzer.

Question 8ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which ExtremeCloud IQ capability lets an administrator review historical client connectivity and roaming behavior over time?

  1. Manual syslog export to a spreadsheet
  2. Static ARP table inspection
  3. Client monitoring with historical trend and connection event data Correct answer.
  4. Real-time spectrum analysis only

Explanation

The platform retains client monitoring data, including association events, roaming history, and connection quality trends, viewable per client. This historical view helps diagnose intermittent issues that a live-only tool would miss. Spectrum analysis and ARP tables do not provide that long-term client history.

Question 9ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator must ensure that a specific SSID is broadcast only at one branch. What is the most appropriate approach in ExtremeCloud IQ?

  1. Create a separate network policy containing that SSID and assign it only to the branch site Correct answer.
  2. Enable the SSID globally and rely on clients to ignore it elsewhere
  3. Create a new administrator account for the branch
  4. Disable all other SSIDs on every access point in the account

Explanation

SSIDs are defined within network policies, and a policy is applied to the sites or devices that need it. Creating a policy that contains only the branch SSID and assigning it to that site limits the broadcast scope. Global enablement or disabling other SSIDs would affect unrelated locations.

Question 10ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which protocol do managed access points typically use to establish their management connection to ExtremeCloud IQ?

  1. Inbound SSH initiated by the administrator
  2. SNMP traps only
  3. Spanning Tree Protocol
  4. Outbound CAPWAP to the cloud management service Correct answer.

Explanation

Access points use CAPWAP to build a management tunnel to the cloud service, initiating the connection outbound so no inbound firewall pinhole is required. Configuration and telemetry flow over this management channel. SSH, SNMP, and STP serve different purposes and do not carry the management tunnel.

Question 11ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What does the ExtremeCloud IQ dashboard's alarm view allow an administrator to do?

  1. Directly edit client operating system settings
  2. Automatically rewrite device firmware
  3. Replace the need for authentication policies
  4. Acknowledge, filter, and drill into device and platform alarms Correct answer.

Explanation

The alarm view aggregates alerts from devices and the platform, and lets administrators filter, acknowledge, and investigate them. Drilling into an alarm often links to the affected device or event detail. It does not perform firmware upgrades, policy authoring, or client-side changes.

Question 12ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator wants to compare RF channel utilization across several access points at one site. Which platform feature is most directly suited to this?

  1. The administrator role editor
  2. The RF quality and channel utilization monitoring views Correct answer.
  3. The license entitlement page
  4. The device-level CLI console

Explanation

ExtremeCloud IQ provides RF monitoring views that report channel utilization, interference, and quality metrics per radio. These views let an administrator compare access points side by side. CLI consoles, license pages, and role editors do not present aggregated RF metrics.

Question 13ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which statement accurately describes role-based access control in ExtremeCloud IQ?

  1. Administrators can assign roles that limit what a user can view or change Correct answer.
  2. All users in an account automatically receive full administrative rights
  3. Access control is configured solely on each access point's local CLI
  4. Roles apply only to wireless clients, not to administrators

Explanation

The platform supports multiple administrator accounts with assigned roles that scope permissions, such as read-only monitoring versus full configuration rights. This lets organizations delegate tasks without granting unrestricted access. Client roles and per-device CLI settings are separate concepts.

Question 14ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

A technician is deploying a new access point and needs to confirm it has connected to the cloud and received its configuration. Where should the technician look first?

  1. The billing invoice history
  2. The WLAN security cipher list
  3. The client OS driver repository
  4. The device list, filtering by the device's serial number and checking its managed state Correct answer.

Explanation

After onboarding, the device appears in the device inventory with a managed or connected state and shows the applied policy. Searching by serial number is the fastest way to confirm registration and configuration status. Billing, client drivers, and cipher lists do not report device management state.

Question 15ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What is the purpose of a captive web portal in an ExtremeCloud IQ WLAN configuration?

  1. To encrypt management traffic between the access point and the cloud
  2. To present a web page that collects credentials or terms before granting network access Correct answer.
  3. To synchronize time across the network
  4. To assign IP addresses to access points

Explanation

A captive web portal intercepts a client's initial web request and presents a page for authentication, registration, or acceptable-use acceptance before access is granted. It is a guest and onboarding mechanism. Encryption of management traffic, DHCP addressing, and time synchronization are handled by other functions.

Question 16ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator wants to apply a configuration change to many access points of the same model without editing each one. Which approach fits best?

  1. Editing each device's local web page individually
  2. Changing the account name
  3. Updating the shared device template used by those devices Correct answer.
  4. Rebooting each access point manually

Explanation

Device templates centralize device-level settings so a single template change can be pushed to every device using it. This is the intended way to manage fleets of identical hardware efficiently. Per-device editing, account renaming, and manual reboots do not scale or propagate configuration.

Question 17ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which data does ExtremeCloud IQ's network health summary typically surface for administrators?

  1. Physical cable lengths at each site
  2. Device up/down status, client counts, and alarm trends Correct answer.
  3. Source code of the cloud platform
  4. Individual packet payloads from client sessions

Explanation

The network health summary presents high-level operational indicators such as device reachability, connected client counts, and alarm activity. These indicators help administrators spot problems quickly before drilling into detail. Packet payloads, platform source code, and cable measurements are not part of this view.

Question 18ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

How does ExtremeCloud IQ handle firmware image management for managed devices?

  1. Images are uploaded to the platform and assigned to device models for upgrade campaigns Correct answer.
  2. Firmware is upgraded exclusively by the manufacturer's remote support staff
  3. Each access point downloads firmware only from a USB drive
  4. Firmware versions are fixed at manufacture and cannot be changed

Explanation

Administrators stage firmware images in the platform and associate them with device models, then run upgrade campaigns to selected devices. This provides controlled, auditable firmware lifecycle management. USB-only upgrades, vendor-only upgrades, and permanently fixed firmware contradict how the platform operates.

Question 19ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator needs to verify which network policy is currently applied to a specific access point. What is the most direct method?

  1. Run a port scan against the access point
  2. Check the public DNS records for the SSID
  3. Open the device's detail view and inspect its assigned policy and site Correct answer.
  4. Review the account's payment method

Explanation

The device detail view in ExtremeCloud IQ shows the device's site assignment and the network policy in effect. This is the authoritative place to confirm what configuration the device should be running. Port scans, DNS records, and billing details cannot reveal policy assignment.

Question 20ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which statement correctly distinguishes a network policy from a device template?

  1. A network policy holds only firmware images, while a device template holds only licenses
  2. A network policy applies only to switches, while a device template applies only to access points
  3. A network policy holds WLAN and VLAN configuration, while a device template holds device-level settings Correct answer.
  4. They are two names for exactly the same object

Explanation

Network policies carry the service configuration such as SSIDs, VLANs, and authentication settings, while device templates carry hardware-level parameters. The two are complementary and are often used together during deployment. They are not interchangeable, and neither is restricted by device type in the way described.

Question 21ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

A site reports intermittent client disconnects. Which combination of ExtremeCloud IQ data would best support root-cause analysis?

  1. Only the list of configured administrator emails
  2. Only the account's license usage totals
  3. Only the device serial number inventory
  4. Client connection event history alongside RF interference and channel utilization trends Correct answer.

Explanation

Correlating client connection events with RF metrics such as interference and channel utilization lets an administrator determine whether disconnects align with RF problems. This combined view supports evidence-based root-cause analysis. License totals, administrator lists, and serial inventories lack the timing and RF context needed.

Question 22ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An organization wants guest users to obtain network access without a shared static key, using a self-registration page. Which configuration elements are required?

  1. A wired port configured as a trunk
  2. An open or portal-based WLAN with a captive portal and a guest user workflow Correct answer.
  3. A hidden SSID with MAC filtering only
  4. A WPA3-Enterprise WLAN with client certificates issued to every guest

Explanation

Self-registration guest access is built from a WLAN that redirects clients to a captive portal, combined with a guest user workflow that creates or validates accounts. This avoids distributing a shared static key to visitors. Certificate-based enterprise authentication and MAC filtering describe different access models.

Question 23ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which outcome indicates that zero-touch onboarding succeeded for a newly installed access point?

  1. The device appears in inventory as managed and shows an applied policy Correct answer.
  2. The device requests a manual firmware file from the technician
  3. The device appears only in the unmanaged neighbor list
  4. The device LED remains amber indefinitely

Explanation

Successful onboarding means the device has registered with the cloud service, been placed at its site, and received its policy, which is reflected by a managed state in inventory. Persistent amber LEDs or an unmanaged appearance indicate the process did not complete. Manual firmware handling is not part of zero-touch onboarding.

Question 24ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What is the primary benefit of the cloud-based architecture for an organization with many small branch sites?

  1. Guaranteed zero latency for all client traffic
  2. Centralized management and visibility without deploying a management server at each branch Correct answer.
  3. Removal of the need for authentication
  4. Elimination of the need for any local network hardware

Explanation

Because management is delivered from the cloud, every branch is administered and monitored from one platform without local management appliances. This reduces cost and operational overhead across many small sites. The architecture does not remove the need for local hardware, guarantee zero latency, or eliminate authentication.

Question 25ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which task is performed in the ExtremeCloud IQ platform rather than on an individual access point?

  1. Applying antenna gain compensation to a single radio
  2. Forwarding a DHCP discover frame on the local segment
  3. Assigning a network policy to a site so all its devices inherit the configuration Correct answer.
  4. Negotiating the RF data rate with a specific client

Explanation

Policy assignment to a site is a centralized management action performed in the cloud platform, and the resulting configuration is delivered to the site's devices. RF rate negotiation, local frame forwarding, and per-radio calibration are runtime functions of the device itself.

Question 26ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which ExtremeCloud IQ license tier provides the core cloud management features needed to onboard and configure access points, without advanced analytics or premium security add-ons?

  1. ExtremeCloud IQ Connect Correct answer.
  2. ExtremeCloud IQ Foundation
  3. ExtremeCloud IQ Pilot
  4. ExtremeCloud IQ Elite

Explanation

ExtremeCloud IQ is offered in subscription tiers; Connect is the entry-level tier that includes essential cloud management for access points, while Pilot and Elite add higher-level analytics, visibility, and security capabilities. Foundation is not a tier name in this licensing structure.

Question 27ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What is the primary purpose of the ExtremeCloud IQ installer account in the onboarding workflow?

  1. To define the set of devices that a technician is allowed to onboard and manage during installation Correct answer.
  2. To automatically generate guest credentials for captive portal users
  3. To provide read-only access to all network policies across the organization
  4. To schedule firmware upgrades for all access points in the network

Explanation

An installer account is a restricted account used during deployment that is scoped to specific devices or a site, allowing a technician to onboard and verify equipment without granting full administrative rights. It does not provide broad read-only access, guest credential generation, or firmware scheduling.

Question 28ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator wants to enforce a consistent configuration baseline for all access points at a new branch site, including WLANs and radio settings, before any device is powered on. Which ExtremeCloud IQ object should be created and assigned to the site?

  1. A device template
  2. A network policy Correct answer.
  3. An alarm rule
  4. A user group

Explanation

A network policy is the container for SSIDs, radio profiles, and other configuration that is applied to devices. Assigning a network policy to a site ensures that any access point onboarded at that site inherits the baseline configuration automatically.

Question 29ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which statement best describes the role of the ExtremeCloud IQ MIB browser or SNMP configuration within the platform?

  1. It is used to define SNMP credentials for administrators logging into the web UI.
  2. It allows the platform to poll external SNMP devices and display collected data.
  3. It provides a way to configure SNMP traps from managed access points to a third-party management system. Correct answer.
  4. It replaces the need for a network policy when managing switch ports.

Explanation

ExtremeCloud IQ can be configured to send SNMP traps from managed devices to external receivers, and the MIB browser helps identify available object identifiers. It does not poll external devices for display, define admin login credentials, or replace network policies for switch management.

Question 30ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What does the ExtremeCloud IQ client 360 view provide to help troubleshoot a connected client?

  1. A report of administrative login activity for the organization
  2. A consolidated timeline of connectivity events, authentication details, and RF metrics for that client Correct answer.
  3. A summary of firmware versions across all access points
  4. A list of all configured SSIDs and their VLAN assignments

Explanation

Client 360 aggregates per-client information such as association history, authentication results, roaming events, and signal quality into a single view. This helps administrators diagnose why a specific client is experiencing connectivity issues.

Question 31ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator needs to ensure that only authorized management stations can reach the ExtremeCloud IQ web interface. Which platform capability should be used?

  1. Management access control lists on the access points
  2. Role-based access control with scoped administrator accounts Correct answer.
  3. Captive portal authentication for administrators
  4. SNMP community string restrictions

Explanation

ExtremeCloud IQ uses role-based access control to define what each administrator account can see and do. By creating accounts with least-privilege roles and scoping them to specific sites or devices, an organization limits who can access the management interface and what actions they can perform.

Question 32ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What is the purpose of the ExtremeCloud IQ API in network operations?

  1. To provide a graphical interface for configuring access points
  2. To replace the need for firmware updates on managed devices
  3. To enable programmatic access for automating configuration, monitoring, and reporting tasks Correct answer.
  4. To serve as the primary authentication method for wireless clients

Explanation

The ExtremeCloud IQ API exposes REST endpoints that allow scripts and third-party tools to automate tasks such as onboarding devices, retrieving statistics, and modifying configuration. It is not a GUI, a firmware replacement, or a client authentication protocol.

Question 33ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which ExtremeCloud IQ feature allows an administrator to define a set of configuration settings once and apply them consistently to multiple sites with similar requirements?

  1. Alarm rule
  2. Network policy Correct answer.
  3. Site
  4. Device template

Explanation

A network policy is a reusable configuration container that can be assigned to multiple sites, ensuring consistent WLAN, radio, and device settings across those locations. This reduces duplication and helps maintain standardization.

Question 34ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator wants to be alerted when an access point loses its connection to ExtremeCloud IQ for more than five minutes. Which configuration is most appropriate?

  1. Use a device template to reset the access point automatically.
  2. Configure a captive portal to detect device downtime.
  3. Enable SNMP polling from the access point to the cloud.
  4. Create an alarm rule that triggers on device connection loss and set a notification delay. Correct answer.

Explanation

Alarm rules in ExtremeCloud IQ can be configured to monitor device connectivity and generate notifications when a device becomes unreachable. Adding a delay avoids false alarms from brief transient disconnects.

Question 35ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What is the function of the ExtremeCloud IQ supplemental CLI feature?

  1. It replaces the need for a network policy by pushing raw configuration to devices.
  2. It allows an administrator to add CLI commands that are applied on top of the configuration generated by the platform. Correct answer.
  3. It provides a command-line interface for administrators to log into the cloud platform.
  4. It enables access points to download firmware images via TFTP.

Explanation

Supplemental CLI lets administrators inject additional CLI commands that are appended to the device configuration produced by ExtremeCloud IQ. This is useful for settings not yet exposed in the UI, but it should be used carefully because it bypasses some validation.

Question 36ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which statement accurately describes the ExtremeCloud IQ site concept?

  1. A site is a user account used for onboarding devices.
  2. A site is a logical grouping of devices used for configuration assignment, monitoring, and access control. Correct answer.
  3. A site is a physical building that can contain only one access point.
  4. A site is a type of network policy that defines SSIDs.

Explanation

Sites are logical containers that group devices by location or function. They are used to assign network policies, scope administrator access, and organize monitoring and reporting.

Question 37ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator needs to provide a guest network where users authenticate through a sponsor-approved request rather than a shared password. Which ExtremeCloud IQ feature supports this workflow?

  1. 802.1X with EAP-TLS
  2. MAC-based authentication
  3. Private PSK
  4. Captive portal with sponsor approval Correct answer.

Explanation

A captive portal can be configured to require sponsor approval, where a designated sponsor reviews and approves each guest request before access is granted. This provides accountability without distributing a static key.

Question 38ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

What is the purpose of the ExtremeCloud IQ Companion app?

  1. To serve as a VPN client for remote access to the corporate network
  2. To allow administrators to perform onsite installation and troubleshooting tasks from a mobile device Correct answer.
  3. To provide a full web-based management interface for all platform features
  4. To replace the need for access point firmware updates

Explanation

The Companion app is a mobile tool designed for onsite technicians and administrators. It helps with tasks such as onboarding access points, checking device status, and performing basic troubleshooting while on location.

Question 39ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

Which ExtremeCloud IQ capability allows an administrator to review historical client connectivity and roaming behavior over time?

  1. Client 360 Correct answer.
  2. Alarm view
  3. Network health summary
  4. Device template

Explanation

Client 360 provides a historical timeline of a client's connectivity, including association, authentication, and roaming events. This is the primary tool for investigating client experience issues over time.

Question 40ExtremeCloud IQ Fundamentals and Cloud-Based Network Management

An administrator is troubleshooting a wireless client that repeatedly fails authentication. Which combination of ExtremeCloud IQ data would best support root-cause analysis?

  1. Client 360 event timeline and authentication logs Correct answer.
  2. Network policy SSID list and VLAN assignments
  3. Site inventory and alarm rule definitions
  4. Device template configuration and firmware version

Explanation

Authentication failures are best diagnosed by examining the client's event timeline in Client 360 alongside detailed authentication logs, which show the specific failure reason such as credential mismatch or RADIUS timeout. Configuration and inventory data provide context but do not show the actual failure events.

Question 41Onboarding, Configuration and Device Management

In ExtremeCloud IQ, what is the primary purpose of a device group when onboarding access points?

  1. To apply a common configuration and software image to member devices Correct answer.
  2. To authenticate administrators against an external RADIUS server
  3. To record the physical inventory location of each AP
  4. To define the RF channel plan that the APs will use

Explanation

A device group is the container that lets you push one configuration and one software image version to many devices at once, which is the core of scalable onboarding. RF planning, admin authentication, and asset location are handled by other features, not by the group itself.

Question 42Onboarding, Configuration and Device Management

Which onboarding method requires the AP to be able to resolve and reach the ExtremeCloud IQ cloud endpoint over the internet without a controller on site?

  1. ExtremeCloud IQ Connect deployment with a local appliance
  2. Physical appliance-based device registration
  3. Manual local CLI configuration of a static controller IP
  4. Cloud-enabled AP onboarding using DHCP option 43 Correct answer.

Explanation

Cloud-enabled APs can be pointed at the ExtremeCloud IQ cloud endpoint, commonly via DHCP option 43 or DNS, and then check in directly over the internet. A local appliance or manual controller IP points the AP at on-premises infrastructure instead of the cloud.

Question 43Onboarding, Configuration and Device Management

An AP appears in ExtremeCloud IQ but shows as unassigned to any device group. What is the most direct way to bring it under management with an existing configuration?

  1. Delete and re-add the AP serial number in the inventory
  2. Reboot the AP so it re-runs DHCP discovery
  3. Assign the AP to the target device group in the inventory view Correct answer.
  4. Change the AP country code in the global settings

Explanation

Devices that check in land in the inventory, and assigning them to a device group applies that group's configuration and image. Deleting, rebooting, or changing country code does not apply the desired configuration.

Question 44Onboarding, Configuration and Device Management

What does a configuration template in ExtremeCloud IQ allow an administrator to do across many devices?

  1. Automatically generate RF channel plans per floor
  2. Reuse a defined set of settings and variables when deploying to multiple device groups Correct answer.
  3. Replace the need for a device group entirely
  4. Encrypt management traffic between the AP and the cloud

Explanation

Templates capture reusable settings, often with variables, so the same policy can be deployed consistently to several device groups. They do not encrypt traffic, generate RF plans, or remove the need for device groups.

Question 45Onboarding, Configuration and Device Management

Which network policy object in ExtremeCloud IQ determines the SSIDs, VLANs, and authentication settings that wireless clients receive?

  1. The admin user's role profile
  2. The AP's serial number record
  3. The device group's software image
  4. The network policy assigned to the device group Correct answer.

Explanation

A network policy bundles the SSIDs, user profiles, VLANs, and authentication methods that client traffic uses, and it is bound to devices through the device group. Software images, serial records, and admin roles do not define client-facing wireless service.

Question 46Onboarding, Configuration and Device Management

An administrator needs to push a new firmware version to production APs while keeping a small pilot group on the current version. What is the best approach?

  1. Disable automatic firmware checks globally so nothing upgrades
  2. Upgrade the entire inventory at once and roll back the pilot group afterward
  3. Change the country code on the pilot APs to block the upgrade
  4. Place the pilot APs in a separate device group with its own software image setting Correct answer.

Explanation

Software image selection is a device-group-level setting, so isolating the pilot APs in their own group lets you upgrade production while holding the pilot on the current image. Global upgrades, disabled checks, or country code changes do not achieve a controlled split.

Question 47Onboarding, Configuration and Device Management

What is the function of a supplicant object when configuring enterprise SSID authentication in ExtremeCloud IQ?

  1. It stores the AP's management IP address
  2. It defines the RADIUS or directory server that validates user credentials Correct answer.
  3. It sets the transmit power for the radio
  4. It schedules automatic configuration backups

Explanation

A supplicant object holds the details of the external authentication source, such as a RADIUS server or directory service, used for 802.1X or similar enterprise methods. It is not an RF, addressing, or backup setting.

Question 48Onboarding, Configuration and Device Management

Which capability does ExtremeCloud IQ provide for monitoring onboarded devices without opening each device individually?

  1. Direct console access over a serial cable
  2. Offline packet capture on the AP backhaul
  3. Dashboards and device health views aggregating status and alerts Correct answer.
  4. Per-device SSH sessions from the browser

Explanation

ExtremeCloud IQ aggregates device status, client counts, and alerts into dashboards and health views so administrators can monitor the fleet at a glance. SSH, packet capture, and serial console are point tools, not fleet-level monitoring in the cloud UI.

Question 49Onboarding, Configuration and Device Management

A new AP is powered on at a branch site and never appears in the ExtremeCloud IQ inventory. Which check is most relevant first?

  1. Whether the AP's management VLAN can reach the cloud endpoint via DNS or DHCP option 43 Correct answer.
  2. Whether the SSID broadcast is enabled on the AP
  3. Whether the AP's radio is set to 5 GHz only
  4. Whether client devices have valid DHCP leases

Explanation

An AP only appears in inventory after it discovers and reaches the cloud management endpoint, so verifying DNS resolution or DHCP option 43 and outbound connectivity is the correct first step. SSID, client DHCP, and band settings matter only after the AP is managed.

Question 50Onboarding, Configuration and Device Management

What is the purpose of a user profile in an ExtremeCloud IQ network policy?

  1. To assign administrative privileges to IT staff
  2. To set the AP's NTP server
  3. To define the VLAN and layer 2 or 3 forwarding behavior applied to a group of clients Correct answer.
  4. To determine which firmware the AP downloads

Explanation

A user profile controls client-side network behavior such as VLAN assignment and forwarding mode, and it is referenced by the SSID. Admin privileges, NTP, and firmware are configured elsewhere.