I85PREP
⌘ K
JNCIP-MistAI study materials
JNCIP-MistAI study resources

JNCIP-MistAI practice questions

One question at a time. Build your JNCIP-MistAI understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Mist Cloud Organization, Site, and Subscription Administration

A network engineer wants one WLAN configuration reused across multiple sites, with site-specific values supplied for each location. Which Mist object should the engineer create?

  1. A site group without any template assignment
  2. An organization-level WLAN template Correct answer.
  3. An organization-level RF template
  4. A site-level WLAN on each site

Explanation

WLAN templates are organization-level objects that can be applied to sites or site groups, and they support variables so each site can supply local values. A site-level WLAN would have to be recreated at every location, while RF templates and site groups alone do not define an SSID.

Question 2Mist Cloud Organization, Site, and Subscription Administration

Which predefined Mist role provides read-only visibility across the entire organization without permission to change configuration?

  1. Installer
  2. Network Admin
  3. Observer Correct answer.
  4. Helpdesk

Explanation

The Observer role is intended for read-only monitoring at the organization scope. Helpdesk, Installer, and Network Admin roles include operational or configuration privileges beyond passive observation.

Question 3Mist Cloud Organization, Site, and Subscription Administration

Which device categories consume Mist subscriptions when they are assigned to a site?

  1. Gateways and servers only
  2. Switches and user devices only
  3. Access points, cameras, and user devices
  4. Access points, switches, and gateways Correct answer.

Explanation

Mist subscriptions are consumed by managed access points, switches, and gateways assigned to sites. Cameras, user devices, and servers are not subscribed as Mist network infrastructure in the same way.

Question 4Mist Cloud Organization, Site, and Subscription Administration

Which syntax inserts the site variable named campus into a Mist WLAN template?

  1. ${campus}
  2. {{campus}} Correct answer.
  3. %campus%
  4. [campus]

Explanation

Mist templates use double curly braces around the variable name, so the reference is written as {{campus}}. The other notation styles are not the template variable syntax used by Mist.

Question 5Mist Cloud Organization, Site, and Subscription Administration

An administrator wants a single WLAN template applied to only a subset of sites rather than every site in the organization. Which Mist construct should be used to group those sites?

  1. A device profile
  2. An RF template
  3. A site group Correct answer.
  4. A site template

Explanation

A site group is a named collection of sites and can be used as the assignment target for a WLAN template. Site templates define site-level settings, RF templates control radio parameters, and device profiles apply device-specific configuration rather than grouping sites for WLAN assignment.

Question 6Mist Cloud Organization, Site, and Subscription Administration

Before an access point can be assigned to a specific site in a Mist organization, what must happen?

  1. The AP must be added to a site template.
  2. The AP must be configured with a static IP address.
  3. The AP must be licensed directly to the site by MAC address.
  4. The AP must be claimed to the organization. Correct answer.

Explanation

Devices are claimed into the organization inventory before they can be assigned to a site. After assignment, the appropriate subscription is applied and the AP inherits the site configuration.

Question 7Mist Cloud Organization, Site, and Subscription Administration

A managed service provider needs one team to administer many customer networks while keeping each customer's data separate. Which Mist structure supports this?

  1. A single site shared by all customers
  2. An MSP organization that contains multiple customer organizations Correct answer.
  3. Separate logins for each customer organization only
  4. One organization with all customer sites in a single site group

Explanation

MSP organizations provide a multi-tenant hierarchy in which the provider can switch into customer organizations while keeping their data separate. Sharing one site or one site group does not provide the required tenant separation.

Question 8Mist Cloud Organization, Site, and Subscription Administration

An automation account must call the Mist API with access to all sites in an organization and must not break when an individual administrator leaves. Which credential is appropriate?

  1. A site-level API token for each site
  2. The organization's SSO identity provider metadata
  3. A personal API token tied to an administrator account
  4. An organization-level API token Correct answer.

Explanation

Organization-level API tokens are scoped to the organization and are intended for automation that needs broad access. Personal tokens remain tied to an individual administrator account and create a lifecycle dependency that the requirement explicitly avoids.

Question 9Mist Cloud Organization, Site, and Subscription Administration

A custom role grants read access at the organization scope and write access at the site scope, and it is assigned to a user for Site A only. What is the result?

  1. The user can read only Site A and cannot change any configuration.
  2. The user can read all organization data and change configuration only on Site A. Correct answer.
  3. The user can change configuration on every site but read only Site A.
  4. The user can read and write all sites because write at site scope applies organization-wide.

Explanation

Custom roles combine privileges by scope: organization-scope read access allows viewing organization data, while site-scope write access applies only to the sites assigned to that user. Site-scope write privileges do not extend to unassigned sites.

Question 10Mist Cloud Organization, Site, and Subscription Administration

A subscription is removed from an access point when the AP is unassigned from its site. What happens to that subscription in Mist?

  1. It is automatically transferred to the next newest AP.
  2. It returns to the organization's available subscription pool for reassignment. Correct answer.
  3. It is converted into a site-level license tied to the site.
  4. It is permanently consumed and cannot be reused.

Explanation

Subscriptions are organization-level entitlements that are assigned to managed devices or sites. When a device is unassigned, the subscription is released back to the organization pool so it can be applied to another device.

Question 11Mist Cloud Organization, Site, and Subscription Administration

In a Mist organization, where must an administrator define the per-site values that a WLAN template references with a variable such as {{vlan}}?

  1. In each site's Wireless > WLANs page
  2. In the WLAN template's SSID field
  3. In Organization > Site Variables Correct answer.
  4. In the device profile assigned to the AP

Explanation

Site variables are maintained at the organization level, with a separate value stored for each site. Templates reference the variable name, and Mist substitutes the value for the site where the WLAN is deployed. Defining the value only on a site WLAN page would not feed the template.

Question 12Mist Cloud Organization, Site, and Subscription Administration

A user is assigned the predefined Site Admin role for Site A in a Mist organization. What access does this assignment provide?

  1. Access to claim devices into organization inventory only
  2. Read-only access to every site in the organization
  3. Full administrative access to Site A only Correct answer.
  4. Full administrative access to every site in the organization

Explanation

A role assigned at site scope applies only to that site. Site Admin gives administrative rights for Site A but does not extend to other sites or to organization-wide settings. Organization-scope roles are needed for cross-site administration.

Question 13Mist Cloud Organization, Site, and Subscription Administration

An administrator deletes a Mist site that still has claimed access points assigned to it. What happens to those access points?

  1. They are automatically moved to another site that has available subscription capacity.
  2. They remain assigned to the deleted site in a suspended state until manually moved.
  3. They are permanently deleted from the organization inventory and cannot be reclaimed.
  4. They return to the organization inventory and release their subscriptions. Correct answer.

Explanation

Deleting a site removes the site-level assignment for its devices. The devices return to the organization inventory, where they can be assigned to another site later. Because they are no longer assigned to a site, the subscriptions they consumed are released back to the organization pool.

Question 14Mist Cloud Organization, Site, and Subscription Administration

A user is granted the predefined Organization Admin role in a Mist organization. How does this affect the user's rights on individual sites?

  1. The user has read-only rights on all sites until explicitly added as Site Admin.
  2. The user must be assigned Site Admin separately on each site.
  3. The user has administrative rights on all sites in the organization. Correct answer.
  4. The user can administer only the site that was created first.

Explanation

Organization Admin is an organization-scope role, so its privileges cover the organization and all sites within it. The administrator does not need a separate site-level role assignment for each site. Site-scoped roles are used when access should be limited to particular sites.

Question 15Mist Cloud Organization, Site, and Subscription Administration

How are Mist subscriptions consumed across multiple sites within one Mist organization?

  1. Each site must maintain a separately purchased subscription pool for its devices.
  2. Devices consume from the organization-wide pool. Correct answer.
  3. Subscriptions are consumed by WLAN templates rather than by assigned devices.
  4. Subscriptions are permanently tied to the first site where a device is claimed.

Explanation

Mist subscriptions are held at the organization level and are consumed by devices as they are assigned to sites. The site itself does not own a separate subscription pool. Moving or unassigning devices changes which devices hold subscriptions, but the pool remains organization-wide.

Question 16Mist Cloud Organization, Site, and Subscription Administration

An organization-level WLAN template is applied to All Sites. A new site is created six months later. What is the expected result for that new site?

  1. The new site is blocked from joining until the template is removed.
  2. The new site must request the template from Mist Support.
  3. The new site receives the template only after a manual site-group assignment.
  4. It automatically receives the template under the All Sites scope. Correct answer.

Explanation

The All Sites assignment is intended to cover both current and future sites in the organization. When a new site is added, it falls within that scope and receives the template configuration. An administrator does not need to apply the same template again manually.

Question 17Mist Cloud Organization, Site, and Subscription Administration

A contractor needs to claim access points and assign them to sites using the Mist AI app, but must not change WLAN or switch configuration. Which predefined Mist role is intended for this task?

  1. Organization Viewer
  2. Installer Correct answer.
  3. Helpdesk
  4. Site Admin

Explanation

The Installer role is designed for on-site personnel who need to claim and assign devices without broad configuration rights. It supports deployment tasks rather than full network administration. Organization Viewer and Site Admin grant visibility or administrative rights beyond the installer's limited scope.

Question 18Mist Cloud Organization, Site, and Subscription Administration

A subscribed access point is moved from Site A to Site B within the same Mist organization. What is the subscription effect?

  1. It requires a second subscription because Site B is a different site.
  2. It consumes one subscription for each site it has ever joined.
  3. Its original subscription is released and cannot be reused.
  4. It continues to consume one organization-pool subscription. Correct answer.

Explanation

Subscriptions follow the device within the organization rather than being permanently attached to a site. Moving the AP changes its site assignment but not the total subscription count it consumes. The organization pool continues to account for that AP as one subscribed device.

Question 19Mist Cloud Organization, Site, and Subscription Administration

Which Mist subscription component is required for an organization to use Marvis Actions?

  1. A separate WAN assurance subscription for every site
  2. The Mist AI subscription Correct answer.
  3. The base Mist Cloud subscription alone
  4. No subscription; Marvis is enabled by default

Explanation

Marvis Actions are part of the Mist AI capabilities, which are licensed through the Mist AI subscription. A base cloud subscription provides device management but does not by itself entitle the organization to Marvis Actions. The AI subscription is what unlocks the Marvis-driven analysis and actions.

Question 20Mist Cloud Organization, Site, and Subscription Administration

A WLAN template is applied to a site group. An existing site is later added to that site group. What should happen to the site's WLAN configuration?

  1. The site receives the site group's template configuration. Correct answer.
  2. The site must be deleted and recreated for the group template to apply.
  3. The site keeps its old WLANs and ignores the group template.
  4. The template applies only to sites that were in the group at creation time.

Explanation

Site groups are a scope for template assignment, so membership changes affect which sites fall under the template. Adding a site to the group brings it into that assignment scope. The site then receives the template configuration rather than ignoring it.

Question 21Mist Cloud Organization, Site, and Subscription Administration

Which predefined Mist role should be assigned to a user who needs read-only visibility to dashboards and client details for one site but must not change any configuration?

  1. Installer
  2. Site Viewer Correct answer.
  3. Site Admin
  4. Organization Admin

Explanation

Site Viewer grants read-only access scoped to the sites assigned to that user, so dashboards and client details remain visible without configuration rights. Site Admin includes write access, Organization Admin spans the organization, and Installer is intended for device onboarding tasks.

Question 22Mist Cloud Organization, Site, and Subscription Administration

After an access point is claimed to a Mist organization but before it is assigned to any site, where does the device appear?

  1. In the site device list for the default site
  2. In the site group shared inventory
  3. In the organization inventory Correct answer.
  4. In the subscription pool as a consumed device

Explanation

Claiming adds a device to the organization inventory. Assigning the device to a site moves it into that site device list; until then it is not part of any site and is not consuming a site-assigned subscription.

Question 23Mist Cloud Organization, Site, and Subscription Administration

An organization-level setting and a site-level setting both configure the same wireless option. Which value takes effect for that site?

  1. The organization-level value always overrides any site-level value.
  2. The site-level value overrides the organization value. Correct answer.
  3. The site inherits whichever value was created first in the organization.
  4. The two values are merged field by field for each site.

Explanation

Mist treats organization settings as defaults and allows site settings to override them for that site. This lets administrators maintain a global baseline while customizing individual locations.

Question 24Mist Cloud Organization, Site, and Subscription Administration

A custom role is assigned to a user with the site group scope. What does this assignment grant?

  1. Access to a single site that the administrator selects during login.
  2. Access to all sites that are members of the assigned site group. Correct answer.
  3. Access only to the organization inventory and subscription pages.
  4. Access to every site in the organization, regardless of group membership.

Explanation

Site group scope is a middle granularity between organization and site. It applies the role permissions to every site in the selected group, and membership changes affect that access.

Question 25Mist Cloud Organization, Site, and Subscription Administration

What is the primary purpose of a site group in a Mist organization?

  1. To represent a single physical building that contains one access point
  2. To pool subscriptions across multiple Mist organizations
  3. To group sites so shared templates and roles can be applied to them together Correct answer.
  4. To store backup configurations for disaster recovery

Explanation

Site groups let administrators apply templates and scope role assignments to multiple sites without editing each site individually. They are logical containers, not physical location records or subscription pools.

Question 26Mist Cloud Organization, Site, and Subscription Administration

When an access point is assigned to a site, where is the subscription it consumes drawn from?

  1. From the AP factory license
  2. From the site group shared quota
  3. From the site local subscription file
  4. From the organization subscription pool Correct answer.

Explanation

Mist subscriptions are held at the organization level and consumed when devices are assigned to sites. Unassigning or moving a device releases the subscription back to the pool for reuse.

Question 27Mist Cloud Organization, Site, and Subscription Administration

A helpdesk analyst needs to view client sessions and perform limited troubleshooting on one site without changing WLAN or switch configuration. Which predefined role best fits?

  1. Organization Admin
  2. Helpdesk Correct answer.
  3. Installer
  4. Site Admin

Explanation

The Helpdesk role is designed for service desk staff who need visibility and limited client troubleshooting without full configuration rights. Organization Admin and Site Admin include broader write access, and Installer is for device onboarding.

Question 28Mist Cloud Organization, Site, and Subscription Administration

An automation team needs a Mist API token that can read only one site statistics. Which practice follows least privilege?

  1. Create a site-scoped token with a read-only role and a defined expiration. Correct answer.
  2. Create an organization-level token with the Super Admin role and share it with the team.
  3. Create a token with a long expiry and broad write access, then restrict it in the script.
  4. Use a personal login token with no expiration and store it in the script.

Explanation

Tokens should be scoped to the minimum resources and permissions required and should expire. A read-only site token limits the impact if the credential is exposed. Broad or non-expiring tokens violate least privilege.

Question 29Mist Cloud Organization, Site, and Subscription Administration

A user is assigned a custom role at organization scope that grants read-only access to WLANs, and a custom role at Site B scope that grants write access to WLANs. What can the user do on Site B?

  1. Edit WLANs on Site B because the site-scoped write grant applies. Correct answer.
  2. Only read WLANs on Site B because organization scope always overrides site scope.
  3. Edit WLANs on every site because write access escalates to organization scope.
  4. Neither read nor write because conflicting roles are rejected.

Explanation

Mist combines role assignments and applies the most specific grant, so the site-scoped write permission allows edits on Site B. The organization-level read permission still applies elsewhere and does not cancel the site grant.

Question 30Mist Cloud Organization, Site, and Subscription Administration

An administrator deletes a site group that has a WLAN template applied to it. What is the effect on the sites that were members of that group?

  1. The sites remain, but the template no longer targets them. Correct answer.
  2. Each member site is automatically moved into the default site group.
  3. The template is deleted from the organization along with all site assignments.
  4. The member sites are deleted along with the group and its templates.

Explanation

A site group is an organizational container for shared configuration and role scope; deleting it does not delete its member sites. The sites keep their current configuration, but the group-based template application no longer targets them. The template itself remains in the organization.

Question 31Mist Cloud Organization, Site, and Subscription Administration

In Mist, which object is the top-level administrative container that holds sites, device inventory, subscriptions, and administrator assignments?

  1. A WLAN template
  2. A site group
  3. The organization Correct answer.
  4. A single site

Explanation

The Mist organization is the top-level tenant that owns sites, inventory, subscriptions, templates, and administrator role assignments. Sites and site groups sit inside that organization rather than above it. Templates are configuration objects within the organization, not administrative containers.

Question 32Mist Cloud Organization, Site, and Subscription Administration

Which Mist subscription is required for Juniper Mist to manage and monitor wireless access points?

  1. Mist Access Assurance
  2. Mist WAN Assurance
  3. Mist Wi-Fi Assurance Correct answer.
  4. Mist Wired Assurance

Explanation

Mist Wi-Fi Assurance is the subscription component associated with managing and monitoring wireless access points in the Mist cloud. Wired Assurance covers switches, WAN Assurance covers SD-WAN routing, and Access Assurance covers network access control. The subscription must be available in the organization for the APs to be fully managed.

Question 33Mist Cloud Organization, Site, and Subscription Administration

An access point is claimed to a Mist organization and then assigned to Site A. Which statement describes its administrative state?

  1. It must be re-claimed to Site A before it can pass traffic.
  2. It remains in org inventory and follows Site A settings. Correct answer.
  3. It is removed from organization inventory and owned only by Site A.
  4. It is placed in the default site group and cannot be moved.

Explanation

Claiming adds the device to the organization inventory, and assigning it to a site applies that site's configuration and monitoring context. The device is not re-owned by the site as a separate inventory object. Site assignment can later be changed without reclaiming the device.

Question 34Mist Cloud Organization, Site, and Subscription Administration

A site currently belongs to Site Group Alpha. An administrator changes its site group to Site Group Beta. What is the resulting membership?

  1. The site belongs to both groups and receives templates from both.
  2. The site is rejected because only one group is allowed.
  3. The site remains in Alpha until Beta is set as default.
  4. The site moves to Beta and is removed from Alpha. Correct answer.

Explanation

In Mist, a site can belong to only one site group at a time, so changing the group moves the site rather than adding a second membership. Template and role assignments scoped to the old group no longer apply through that group. The new group's applicable configuration then governs the site.

Question 35Mist Cloud Organization, Site, and Subscription Administration

Which Mist subscription enables management of Juniper EX Series switches through the Mist cloud?

  1. Mist Access Assurance
  2. Mist Wi-Fi Assurance
  3. Mist Wired Assurance Correct answer.
  4. Mist WAN Assurance

Explanation

Mist Wired Assurance is the subscription component used for managing and monitoring supported switches, including Juniper EX Series switches, in Mist. Wi-Fi Assurance covers access points, while WAN Assurance and Access Assurance address other use cases. The organization must have the appropriate switch subscription available.

Question 36Mist Cloud Organization, Site, and Subscription Administration

Which Mist subscription provides cloud-based network access control for wired and wireless clients?

  1. Wi-Fi Assurance, used for wireless access points
  2. WAN Assurance, used for SD-WAN
  3. Access Assurance, used for client NAC Correct answer.
  4. Wired Assurance, used for switches

Explanation

Mist Access Assurance provides cloud-delivered network access control for clients connecting through wired and wireless networks. It is distinct from the assurance subscriptions that manage APs or switches. Access Assurance is the component associated with NAC policy enforcement and client admission.

Question 37Mist Cloud Organization, Site, and Subscription Administration

An access point is claimed to a Mist organization but is not yet assigned to any site. How does it affect subscription consumption?

  1. It consumes a Wi-Fi Assurance subscription immediately.
  2. It consumes a subscription after its first client connects.
  3. It consumes an Access Assurance subscription instead.
  4. It consumes no subscription until assigned to a site. Correct answer.

Explanation

Subscription consumption is tied to devices that are assigned to sites and actively managed in the organization's site context. A device sitting unassigned in organization inventory does not yet draw a site-managed subscription allocation. Assigning it to a site is the step that brings it into the subscribed deployment.

Question 38Mist Cloud Organization, Site, and Subscription Administration

An API token is created with organization scope in a Mist organization. What access does the token provide?

  1. Access only to the site that created the token.
  2. Access to all sites in the organization, limited by role. Correct answer.
  3. Access to organization settings only, with no site visibility.
  4. Access to every organization managed by the same MSP.

Explanation

An organization-scoped Mist API token is not tied to a single site; it can reach resources across sites in that organization. The token's assigned role still limits which operations are permitted. It does not cross into unrelated organizations managed by the same provider.

Question 39Mist Cloud Organization, Site, and Subscription Administration

A custom role is assigned to a user at site group scope. A new site is later added to that site group. What access does the user have to the new site?

  1. The same permissions, since group scope covers member sites. Correct answer.
  2. Read-only access until a site administrator approves the role.
  3. Organization Admin rights, since group roles escalate for new sites.
  4. No access until the role is assigned directly to the new site.

Explanation

A role assignment scoped to a site group applies to the sites that are members of that group, including sites added later. The user does not need a separate direct assignment for the newly added site. The permissions remain those defined by the custom role, not an escalated role.

Question 40Mist Cloud Organization, Site, and Subscription Administration

An organization-level WLAN template is applied to All Sites. An administrator edits a WLAN in that template. What happens to existing sites?

  1. The change propagates to all sites using the template. Correct answer.
  2. The change is applied only to sites created after the edit.
  3. The change is staged until each site administrator accepts it.
  4. The change is applied only to the site where it was edited.

Explanation

An organization-level template applied to All Sites is a shared configuration source, so edits are pushed to the sites using that template. Existing sites do not wait for per-site acceptance or remain on the old template indefinitely. Site-specific overrides, where supported, are handled separately from the template update itself.

Question 41Wireless Assurance and WLAN Configuration

In Mist Wi-Fi Assurance, which object expresses a measurable wireless service goal-such as a target success rate for Coverage or Capacity-and is used to classify client experience?

  1. A reusable RF template object
  2. A reusable WLAN template object
  3. An SLE definition Correct answer.
  4. A site-specific variable definition

Explanation

An SLE is a configurable service-level goal, such as Coverage, Capacity, or Roaming, that Mist calculates from client and AP telemetry and reports as a success rate with classifiers. Templates and variables supply configuration values; they do not define the measured service goal itself.

Question 42Wireless Assurance and WLAN Configuration

Which Mist configuration object lets an administrator define a WLAN once and apply it consistently to multiple sites in a site group?

  1. A site variable
  2. A device profile
  3. An RF template
  4. A WLAN template Correct answer.

Explanation

A WLAN template is the reusable configuration container for SSID, authentication, VLAN, and related WLAN settings, and it can be applied to sites within a site group. Device profiles, RF templates, and site variables do not carry the WLAN definition.

Question 43Wireless Assurance and WLAN Configuration

An administrator wants a prioritized, prescriptive list of network issues-such as a client failing DHCP or an AP with a bad cable-rather than raw alarms. Which Mist feature should they open?

  1. Live View
  2. Marvis Actions Correct answer.
  3. Audit Log
  4. RF Monitor

Explanation

Marvis Actions presents a prioritized, prescriptive list of issues with recommended remediation, including client DHCP failures and AP cabling problems. Live View and RF Monitor are diagnostic views, while the Audit Log records configuration changes.

Question 44Wireless Assurance and WLAN Configuration

An SLE dashboard shows that the Roaming SLE at a site dropped. Which Mist capability best helps an administrator determine whether the drop is concentrated on a particular client OS, AP model, or band?

  1. SLE classifier drill-down Correct answer.
  2. WLAN template assignment
  3. Site variable assignment
  4. Device profile firmware compliance

Explanation

SLE classifier drill-down breaks the SLE failure down by dimensions such as client OS, AP model, band, and failure reason, which is exactly what is needed to localize the drop. Templates, variables, and firmware compliance are configuration controls, not SLE analysis views.

Question 45Wireless Assurance and WLAN Configuration

Which Mist WLAN feature issues a unique pre-shared key to each device that enrolls through a self-service onboarding page, so revoking one key does not disrupt other users?

  1. Open access with click-through
  2. A static WPA2 pre-shared key
  3. Dynamic PSK Correct answer.
  4. WPA2-Enterprise with RADIUS

Explanation

Dynamic PSK creates a unique pre-shared key per device, typically through a self-service onboarding page, so an administrator can revoke an individual key without changing the key for every user. A static PSK is shared by all users, and 802.1X uses per-user credentials rather than PSKs.

Question 46Wireless Assurance and WLAN Configuration

Which configuration object should be edited to change the minimum transmit power and channel width that APs use at a site?

  1. WLAN template
  2. Device profile
  3. RF template Correct answer.
  4. Site group

Explanation

RF templates hold radio settings such as channel width, transmit power, and band steering, and they are applied to APs by site or site group. WLAN templates define SSIDs and authentication, device profiles define device-specific configuration, and site groups organize sites.

Question 47Wireless Assurance and WLAN Configuration

A Mist WLAN uses WPA2-Enterprise with an external RADIUS server. Users report authentication failures, but the RADIUS server logs show no requests. Which Mist view is most appropriate to inspect the client's association and 802.1X exchange?

  1. Organization audit log
  2. Site variable values
  3. Client events timeline Correct answer.
  4. RF template settings

Explanation

The client events timeline shows the client's association, 802.1X authentication, DHCP, DNS, and roaming steps, so it reveals whether the client ever reached the RADIUS exchange. Audit logs, RF templates, and site variables do not show per-client protocol flow.

Question 48Wireless Assurance and WLAN Configuration

Which WLAN configuration lets guests accept terms on a splash page and gain access without entering a username, password, or voucher code?

  1. WPA2-Enterprise with 802.1X
  2. WPA2-PSK with a shared key
  3. MAC-based RADIUS authentication
  4. Open access with click-through Correct answer.

Explanation

An open WLAN with a click-through splash page presents terms and grants access after acceptance without collecting credentials or a voucher. WPA2-PSK and 802.1X require keys or credentials, and MAC-based RADIUS requires a registered MAC address.

Question 49Wireless Assurance and WLAN Configuration

An administrator wants guest traffic from a site tunneled to a Mist Edge in the data center while employee traffic breaks out locally at the site. Which Mist configuration approach supports this?

  1. Tunnel only the guest WLAN to Mist Edge Correct answer.
  2. Use a static PSK and local breakout for guests
  3. Place both WLANs on the same VLAN and tag all traffic
  4. Disable the RF template on the guest WLAN

Explanation

Mist Edge supports tunneled WLANs, so the guest WLAN can be set to tunnel its data plane to Mist Edge while the employee WLAN remains local breakout at the site. The other options either mix traffic on one VLAN, disable RF settings, or use a shared key without solving the tunnel requirement.

Question 50Wireless Assurance and WLAN Configuration

Mist SLEs can show a low success rate even when no AP alarms are active. Which statement best explains this behavior?

  1. SLEs are computed only from AP uptime and ignore client data
  2. SLEs use client journey outcomes, not just AP alarms Correct answer.
  3. SLEs require syslog forwarding before they can be calculated
  4. SLEs are based on configuration audit findings rather than telemetry

Explanation

SLEs are calculated from client journey outcomes-association, authentication, DHCP, DNS, roaming, and throughput-so client-side failures, upstream DHCP/DNS problems, or RF conditions can lower the success rate without triggering an AP alarm. They are not limited to AP uptime, syslog, or configuration audit.