I85PREP
⌘ K
JNCIS-MistAI-Wireless study materials
JNCIS-MistAI-Wireless study resources

JNCIS-MistAI-Wireless practice questions

One question at a time. Build your JNCIS-MistAI-Wireless understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Wi-Fi Fundamentals

A client roams from an AP on channel 36 to an AP on channel 149 within the same 5 GHz WLAN. Which statement describes what the client must do at the RF layer?

  1. Tune its radio to the new channel and associate to the target BSSID Correct answer.
  2. Keep the same channel and rely on the controller to retune the client
  3. Perform a full re-association with a new 4-way handshake
  4. Switch to 2.4 GHz because 5 GHz channels cannot be roamed between

Explanation

Roaming between APs on different channels requires the client radio to retune to the target channel before it can exchange frames with the new BSSID. The security session is normally preserved via fast transition or cached keys, so a full 4-way handshake is not mandatory.

Question 2Wi-Fi Fundamentals

Which 802.11 frame type is used by an AP to announce its SSID, supported rates, and channel to listening clients?

  1. Beacon frame Correct answer.
  2. Null data frame
  3. Block ACK request
  4. Association response

Explanation

Beacon frames are transmitted periodically by the AP and carry the SSID, supported rates, channel, and capability information that lets clients discover the BSS. Association response and null data frames serve different purposes in the connection lifecycle.

Question 3Wi-Fi Fundamentals

In a WPA2-Enterprise deployment, which protocol carries the client credentials inside a protected TLS tunnel to the RADIUS server?

  1. CCMP
  2. WEP
  3. PEAP Correct answer.
  4. TKIP

Explanation

PEAP is an EAP method that establishes a TLS tunnel between the supplicant and the authentication server, inside which the inner authentication (such as MS-CHAPv2) is protected. TKIP and CCMP are encryption ciphers, and WEP is a legacy encryption method, not an EAP tunnel.

Question 4Wi-Fi Fundamentals

A dual-band client is configured for band steering on a Mist-managed WLAN. What is the intended effect of band steering?

  1. Force all clients to 2.4 GHz to reduce channel width
  2. Disable 5 GHz radios during off-peak hours
  3. Convert 5 GHz channels to 2.4 GHz automatically
  4. Prefer 5 GHz for capable clients to reduce 2.4 GHz congestion Correct answer.

Explanation

Band steering encourages dual-band-capable clients to associate on 5 GHz, which typically has more non-overlapping channels and less interference. This relieves congestion on the crowded 2.4 GHz band without disabling either radio.

Question 5Wi-Fi Fundamentals

Which 2.4 GHz channel plan provides three non-overlapping 20 MHz channels in North America?

  1. 1, 5, 9
  2. 3, 8, 13
  3. 1, 6, 11 Correct answer.
  4. 2, 7, 12

Explanation

In the North American regulatory domain, channels 1, 6, and 11 are the standard non-overlapping 20 MHz channels in the 2.4 GHz band. Other combinations either overlap or fall outside the allowed channel set.

Question 6Wi-Fi Fundamentals

What does an RSSI value of -75 dBm generally indicate for a client at the edge of coverage?

  1. A very strong signal suitable for high-throughput voice
  2. An invalid reading because RSSI must be positive
  3. A weak signal that may cause retries and lower data rates Correct answer.
  4. A signal so strong it triggers transmit power reduction

Explanation

RSSI is expressed as a negative dBm value, and -75 dBm is generally considered weak, which can force lower MCS rates and increase retransmissions. Strong signals are closer to -50 dBm or higher.

Question 7Wi-Fi Fundamentals

Which security standard introduced Simultaneous Authentication of Equals (SAE) to replace the PSK handshake?

  1. WPA3-Personal Correct answer.
  2. WPA2-Personal
  3. 802.1X with EAP-TLS
  4. WPA-Enterprise

Explanation

WPA3-Personal uses SAE, a dragonfly-based password-authenticated key exchange that resists offline dictionary attacks against captured handshakes. WPA2-Personal relies on the older 4-way handshake with the PSK.

Question 8Wi-Fi Fundamentals

Which term describes the process by which a client discovers and joins a specific BSS identified by a BSSID?

  1. Association Correct answer.
  2. Fragmentation
  3. Deauthentication
  4. Beamforming

Explanation

Association is the exchange in which a client selects a BSS and requests membership, after which the AP assigns an AID and the client can pass data. Deauthentication ends a session, while fragmentation and beamforming are unrelated frame or RF techniques.

Question 9Wi-Fi Fundamentals

A client reports intermittent connectivity while walking through a warehouse. The APs are configured with 80 MHz channels in 5 GHz. Which design change most directly improves roaming reliability?

  1. Increase channel width to 160 MHz
  2. Raise transmit power to maximum on all APs
  3. Narrow the channels and ensure adequate cell overlap Correct answer.
  4. Disable 5 GHz radios on every other AP

Explanation

Narrower channels provide more non-overlapping cells and better overlap, giving clients more roam candidates with usable signal. Excessively wide channels reduce the number of available channels and can create coverage holes that impair roaming.

Question 10Wi-Fi Fundamentals

An AP and client negotiate an 802.11ac connection. Which modulation and coding scheme characteristic is true of 256-QAM compared with 64-QAM?

  1. It carries more bits per symbol and requires a higher SNR Correct answer.
  2. It carries fewer bits per symbol but is more robust
  3. It eliminates the need for channel bonding
  4. It uses a wider channel but the same bit rate

Explanation

256-QAM encodes 8 bits per symbol versus 6 bits for 64-QAM, yielding higher throughput but requiring a cleaner channel with higher SNR. Higher-order modulation is less robust to noise and interference.

Question 11Wi-Fi Fundamentals

A WLAN uses WPA2-Enterprise with EAP-TLS. Which credential must each client possess to authenticate successfully?

  1. A captive portal username only
  2. A MAC address registered in the controller
  3. A shared pre-shared key
  4. A client certificate trusted by the RADIUS server Correct answer.

Explanation

EAP-TLS is a mutual certificate-based method, so the client must present a certificate that chains to a CA trusted by the authentication server. A PSK, portal login, or MAC registration does not satisfy EAP-TLS.

Question 12Wi-Fi Fundamentals

Why does a 5 GHz deployment typically support more non-overlapping channels than a 2.4 GHz deployment?

  1. 2.4 GHz is restricted to a single channel worldwide
  2. 5 GHz has a wider total spectrum allocation with many 20 MHz channels Correct answer.
  3. 2.4 GHz uses OFDMA while 5 GHz uses DSSS
  4. 5 GHz channels are narrower by regulation

Explanation

The 5 GHz band offers a much larger contiguous spectrum, allowing many 20 MHz channels, whereas 2.4 GHz provides only a few non-overlapping 20 MHz channels. This is why 5 GHz designs scale better for density.

Question 13Wi-Fi Fundamentals

A client is associated but cannot reach the internet. The AP shows the client in the bridge table, and the DHCP server logs show no request from the client. Which troubleshooting step is most appropriate?

  1. Replace the AP antenna
  2. Increase the beacon interval
  3. Verify the client received a valid IP address via DHCP Correct answer.
  4. Disable 802.11k on the WLAN

Explanation

If the client is associated but has no IP configuration, DHCP may have failed, preventing IP connectivity even though the Layer 2 association succeeded. Checking the client IP and DHCP exchange isolates this common failure.

Question 14Wi-Fi Fundamentals

Which statement accurately describes the role of 802.11k in a roaming environment?

  1. It aggregates frames using block acknowledgments
  2. It authenticates clients against a RADIUS server
  3. It encrypts management frames between client and AP
  4. It provides clients with neighbor reports of nearby APs Correct answer.

Explanation

802.11k defines radio resource measurement, including neighbor reports that help clients identify candidate APs without scanning every channel. This speeds up roam decisions. Encryption, authentication, and aggregation are handled by other mechanisms.

Question 15Wi-Fi Fundamentals

A high-density auditorium shows high channel utilization despite low client counts per AP. Which factor most likely contributes to the utilization?

  1. Insufficient PoE budget on the switch
  2. Management and control frame overhead from many nearby APs Correct answer.
  3. Incorrect NTP configuration
  4. Disabled band steering on the wired uplink

Explanation

In dense deployments, beacons, probes, and other management traffic from many co-channel APs consume airtime even when data load is light. Reducing co-channel overlap and tuning beacon rates helps lower this overhead.

Question 16Wi-Fi Fundamentals

What is the primary purpose of the 4-way handshake in a WPA2-Personal network?

  1. To select the operating channel
  2. To derive and install fresh session keys from the PSK Correct answer.
  3. To advertise supported data rates
  4. To assign an IP address to the client

Explanation

The 4-way handshake confirms both parties possess the PSK and derives unique pairwise keys (PTK) and group keys for encrypting traffic. It does not handle IP addressing, rate advertisement, or channel selection.

Question 17Wi-Fi Fundamentals

Which feature allows an 802.11ax AP to serve multiple clients simultaneously on the same channel by dividing it into resource units?

  1. MIMO beamforming
  2. OFDMA Correct answer.
  3. Spatial multiplexing
  4. Frame aggregation

Explanation

OFDMA in 802.11ax partitions a channel into resource units that can be assigned to different clients in the same transmission opportunity, improving efficiency for many small flows. Beamforming, aggregation, and spatial multiplexing improve throughput but do not subdivide the channel this way.

Question 18Wi-Fi Fundamentals

A network engineer observes that clients frequently stay associated with a distant AP at -80 dBm instead of roaming to a closer AP at -55 dBm. Which configuration change best mitigates this sticky-client behavior?

  1. Disable 802.11r on the WLAN
  2. Increase the transmit power of the distant AP
  3. Enable a minimum RSSI or roam-trigger threshold on the APs Correct answer.
  4. Reduce the beacon interval on all APs

Explanation

A minimum RSSI or roam-trigger threshold encourages clients to move to a better AP before the link degrades too far. Raising power on the distant AP would worsen the problem by extending its coverage.

Question 19Wi-Fi Fundamentals

Which statement best explains why 2.4 GHz signals generally propagate farther than 5 GHz signals at the same transmit power?

  1. 2.4 GHz uses higher-order modulation by default
  2. 5 GHz radios are limited to lower transmit power by hardware
  3. 2.4 GHz channels are always wider
  4. Lower frequency experiences less free-space path loss and better penetration Correct answer.

Explanation

Free-space path loss increases with frequency, and lower frequencies penetrate obstacles more effectively, so 2.4 GHz tends to travel farther for the same power. Modulation, hardware limits, and channel width do not explain the propagation difference.

Question 20Wi-Fi Fundamentals

A Mist AP reports that a client is using 802.11r fast transition. What benefit does this provide during roaming?

  1. It forces the client to remain on 2.4 GHz
  2. It eliminates the need for encryption keys
  3. It reduces reauthentication time by allowing key material to be pre-derived Correct answer.
  4. It increases the channel width automatically

Explanation

802.11r enables fast BSS transition by allowing the client and target AP to derive keys before the roam, reducing the delay associated with reauthentication. Encryption is still used, and channel width and band selection are unrelated.

Question 21Wi-Fi Fundamentals

An administrator wants to prevent clients from connecting to an SSID using weak TKIP ciphers. Which configuration enforces this on a Mist WLAN?

  1. Enable WEP fallback
  2. Set the WLAN to WPA2 with CCMP/AES only Correct answer.
  3. Disable 802.11w management frame protection
  4. Set the WLAN to open authentication

Explanation

Restricting the WLAN to WPA2 with CCMP/AES ensures only the stronger AES-based cipher is negotiated, excluding TKIP. WEP fallback and open authentication weaken security rather than strengthen it.

Question 22Wi-Fi Fundamentals

A client on an 802.11ac network achieves a much lower throughput than the negotiated PHY rate. Which factor most directly explains this gap?

  1. The PHY rate already accounts for all overhead
  2. Protocol overhead, retransmissions, and contention reduce goodput below PHY rate Correct answer.
  3. The negotiated rate is invalid without 802.11ax
  4. Beacon frames consume the entire channel

Explanation

The PHY rate is the raw modulation rate; actual goodput is reduced by preamble, headers, interframe spacing, contention, acknowledgments, and retransmissions. This is why throughput is always below the negotiated PHY rate.

Question 23Wi-Fi Fundamentals

An engineer must design a 5 GHz network for a dense office with 60 APs. Which channel width choice best balances capacity and co-channel interference?

  1. 160 MHz to maximize per-client throughput
  2. 40 MHz on all APs with maximum power
  3. 20 MHz to maximize the number of non-overlapping channels Correct answer.
  4. 80 MHz on every AP

Explanation

In dense deployments, 20 MHz channels provide the most non-overlapping channel reuse, reducing co-channel interference and improving aggregate capacity. Wider channels increase per-client peak rates but sharply reduce reuse.

Question 24Wi-Fi Fundamentals

A client authenticates to WPA3-Enterprise using 192-bit mode. Which statement describes a requirement of this mode?

  1. It permits TKIP for backward compatibility
  2. It disables 802.1X authentication
  3. It mandates strong cryptographic suites such as GCMP-256 and SHA-384 Correct answer.
  4. It relies on a shared PSK for key derivation

Explanation

WPA3-Enterprise 192-bit mode requires stronger cryptographic algorithms, including GCMP-256 for encryption and SHA-384 for integrity, along with suite-B TLS for EAP. It does not allow TKIP or PSK-based key derivation.

Question 25Wi-Fi Fundamentals

A wireless engineer observes that a client's RSSI is strong but its SNR is poor. Which condition best explains this observation?

  1. Incorrect SSID configuration
  2. Insufficient transmit power at the AP
  3. High noise floor from interference at the client location Correct answer.
  4. A mismatched security cipher

Explanation

SNR is the difference between signal and noise; a strong signal with poor SNR means the noise floor is elevated, typically from interference or non-Wi-Fi sources. AP transmit power and configuration errors would affect signal strength or connectivity, not noise.

Question 26Wi-Fi Fundamentals

Which 802.11 physical layer technology is used by 802.11ax in the 2.4 GHz and 5 GHz bands?

  1. OFDMA Correct answer.
  2. DSSS
  3. FHSS
  4. OFDM

Explanation

802.11ax introduces OFDMA (Orthogonal Frequency Division Multiple Access) as a key PHY technology, allowing subcarriers to be grouped into resource units assigned to different clients. OFDMA operates in both 2.4 GHz and 5 GHz bands for 802.11ax, improving efficiency in dense environments.

Question 27Wi-Fi Fundamentals

Which 802.11 frame type is used by an AP to announce the SSID and supported capabilities to clients?

  1. Authentication frame
  2. Association request frame
  3. Beacon frame Correct answer.
  4. Probe request frame

Explanation

Beacon frames are periodically transmitted by APs to advertise the BSS, including the SSID, supported data rates, and security capabilities. Clients use this information during passive scanning to discover available networks.

Question 28Wi-Fi Fundamentals

What is the primary purpose of the 802.11 association process?

  1. To establish a mapping between a client and an AP so the client can exchange data frames Correct answer.
  2. To authenticate the client against a RADIUS server
  3. To negotiate encryption keys for the wireless link
  4. To scan for available channels and select the best one

Explanation

Association creates a logical link between the client and the AP, allowing the AP to track the client and forward frames to and from the distribution system. It occurs after authentication and before data exchange.

Question 29Wi-Fi Fundamentals

Which frequency band offers the greatest number of non-overlapping channels for Wi-Fi deployments?

  1. 900 MHz
  2. 5 GHz
  3. 2.4 GHz
  4. 6 GHz Correct answer.

Explanation

The 6 GHz band provides up to 59 non-overlapping 20 MHz channels in many regulatory domains, far more than the 5 GHz band (about 25) and the 2.4 GHz band (3). This abundance supports higher capacity and reduces co-channel interference.

Question 30Wi-Fi Fundamentals

Which statement accurately describes the difference between MU-MIMO and SU-MIMO in 802.11ac?

  1. SU-MIMO uses OFDMA to divide the channel, while MU-MIMO uses spatial multiplexing.
  2. MU-MIMO allows an AP to transmit to multiple clients simultaneously using separate spatial streams, while SU-MIMO communicates with one client at a time. Correct answer.
  3. MU-MIMO requires 802.11ax, while SU-MIMO is exclusive to 802.11ac.
  4. SU-MIMO is only used in the downlink direction, while MU-MIMO is used only in the uplink direction.

Explanation

MU-MIMO enables an AP to use its antennas to send independent spatial streams to multiple clients concurrently, improving overall throughput. SU-MIMO, in contrast, dedicates all spatial streams to a single client at a time.

Question 31Wi-Fi Fundamentals

A client device is configured to use only the 5 GHz band. Which scanning method will it use to discover nearby APs?

  1. Passive scanning by listening for probe responses on the 2.4 GHz channels
  2. Passive scanning by listening for beacon frames on each 5 GHz channel
  3. Active scanning by sending probe requests on each 5 GHz channel Correct answer.
  4. Active scanning by sending probe requests on the 2.4 GHz channels

Explanation

A client restricted to 5 GHz will typically perform active scanning by transmitting probe request frames on each supported 5 GHz channel and waiting for probe responses. This is faster than passive scanning, which requires waiting for periodic beacons.

Question 32Wi-Fi Fundamentals

Which factor most directly determines the number of spatial streams a client can support in an 802.11ac network?

  1. The modulation and coding scheme used
  2. The channel width configured on the AP
  3. The number of antennas on the client device Correct answer.
  4. The guard interval setting

Explanation

The number of spatial streams is limited by the number of transmit and receive chains (antennas) on the device. A client with two antennas can support at most two spatial streams, regardless of channel width or MCS.

Question 33Wi-Fi Fundamentals

What is the effect of enabling 802.11w (Protected Management Frames) on a WLAN?

  1. It prioritizes management frames over data frames.
  2. It encrypts data frames to prevent eavesdropping.
  3. It authenticates management frames to prevent spoofing and denial-of-service attacks. Correct answer.
  4. It compresses management frames to save airtime.

Explanation

802.11w adds integrity protection and replay protection to certain management frames (such as deauthentication and disassociation), preventing forged frames from disrupting client connections. It does not encrypt data frames or alter prioritization.

Question 34Wi-Fi Fundamentals

A network administrator wants to ensure that clients always connect to the 5 GHz band when available. Which feature should be configured on the Mist AP?

  1. Band steering Correct answer.
  2. Proxy ARP
  3. Dynamic VLAN
  4. Fast roaming

Explanation

Band steering encourages dual-band clients to associate with the less congested 5 GHz band by suppressing or delaying probe responses on 2.4 GHz. This improves overall network performance and client experience.

Question 35Wi-Fi Fundamentals

Which condition is required for a client to successfully perform a fast BSS transition using 802.11r?

  1. The client must use a 40 MHz channel width.
  2. The client and AP must support 802.11k neighbor reports.
  3. The client and AP must share a mobility domain and support FT. Correct answer.
  4. The client must be authenticated using WPA2-Enterprise.

Explanation

802.11r fast transition requires that the client and all APs involved be configured with the same mobility domain identifier and support FT. This allows the client to pre-authenticate with the target AP before roaming, reducing handoff time.

Question 36Wi-Fi Fundamentals

Which 802.11ac feature allows an AP to transmit to multiple clients simultaneously using separate spatial streams?

  1. Channel bonding
  2. MU-MIMO Correct answer.
  3. OFDMA
  4. Beamforming

Explanation

MU-MIMO (Multi-User MIMO) enables an 802.11ac AP to use its antenna array to send independent spatial streams to multiple clients at the same time. This increases aggregate throughput in dense environments.

Question 37Wi-Fi Fundamentals

A wireless engineer needs to verify that a client is using the correct security protocol after connecting to a WPA3-Personal SSID. Which security handshake should the engineer expect to see in a packet capture?

  1. EAP-TLS exchange
  2. 4-way handshake
  3. 802.1X authentication
  4. SAE handshake Correct answer.

Explanation

WPA3-Personal replaces the PSK 4-way handshake with Simultaneous Authentication of Equals (SAE), a dragonfly handshake that provides forward secrecy. A capture of a WPA3-Personal connection will show SAE commit and confirm frames.

Question 38Wi-Fi Fundamentals

Which statement best explains why 802.11ax improves efficiency in high-density environments compared to 802.11ac?

  1. It uses wider channels up to 160 MHz.
  2. It introduces OFDMA and uplink MU-MIMO to serve multiple clients concurrently. Correct answer.
  3. It reduces the beacon interval to minimize overhead.
  4. It supports higher order modulation such as 1024-QAM.

Explanation

802.11ax introduces OFDMA, which divides the channel into resource units that can be assigned to different clients, and uplink MU-MIMO, allowing simultaneous transmissions from multiple clients. These features reduce contention and improve efficiency in dense deployments.

Question 39Wi-Fi Fundamentals

A client roams from AP-1 to AP-2. Both APs are on the same subnet and use WPA2-Enterprise. Which statement describes the expected behavior of the client's IP address?

  1. The client's IP address is translated by the AP.
  2. The client must request a new IP address because the subnet changes.
  3. The client retains its IP address because the subnet remains the same. Correct answer.
  4. The client must re-authenticate with the RADIUS server to keep its IP address.

Explanation

When roaming between APs on the same subnet, the client keeps its IP address because the Layer 3 network does not change. The client may perform a fast transition or full authentication, but IP address renewal is not required.

Question 40Wi-Fi Fundamentals

In an 802.11ac network, a client with a 2x2 radio is associated to an AP with a 4x4 radio. What is the maximum number of spatial streams that can be used for downlink MU-MIMO to this client?

  1. 4
  2. 1
  3. 8
  4. 2 Correct answer.

Explanation

The number of spatial streams in a MU-MIMO transmission is limited by the number of receive chains on the client. A 2x2 client can receive at most two spatial streams, even if the AP has more antennas.

Question 41Juniper Mist WLAN Architecture and Deployment

In a Juniper Mist deployment, which component is responsible for the control plane functions of a wireless network, such as configuration management and RF optimization?

  1. The access point firmware
  2. The Mist cloud Correct answer.
  3. The RADIUS server
  4. The Junos CLI on the switch

Explanation

Mist uses a cloud-hosted microservices architecture where the Mist cloud performs control plane duties including configuration, RF tuning, and analytics, while access points handle the data plane locally. The APs remain functional for forwarding even if cloud connectivity is interrupted.

Question 42Juniper Mist WLAN Architecture and Deployment

Which Juniper Mist subscription tier is required to enable Marvis, the AI-driven virtual network assistant?

  1. The free trial tier
  2. Mist Wired only
  3. Mist Wireless with the Marvis add-on or Elite tier Correct answer.
  4. Mist Basic

Explanation

Marvis virtual network assistant capabilities are delivered through the higher-tier or add-on subscription, typically the Marvis for Mist or Elite-level entitlement. Base wireless subscriptions do not include the full Marvis conversational and proactive features.

Question 43Juniper Mist WLAN Architecture and Deployment

What is the primary purpose of a Mist site in the organizational hierarchy?

  1. To group devices, users, and settings for a physical location Correct answer.
  2. To define a single VLAN for all APs
  3. To assign IP addresses via DHCP
  4. To store firmware images for the cloud

Explanation

A Mist site represents a physical location and acts as the container for devices, WLANs, and site-level settings such as RF profiles and network configuration. Organizations sit above sites and can contain multiple sites.

Question 44Juniper Mist WLAN Architecture and Deployment

Which protocol do Mist access points use to establish a persistent connection to the Mist cloud for management and telemetry?

  1. Inbound SSH from the cloud
  2. SMTP
  3. Outbound HTTPS or a secure WebSocket tunnel Correct answer.
  4. SNMP traps only

Explanation

Mist APs initiate outbound connections to the cloud, typically over HTTPS and secure WebSocket, so no inbound firewall ports need to be opened. This design simplifies NAT traversal and firewall configuration.

Question 45Juniper Mist WLAN Architecture and Deployment

An administrator wants APs to obtain their initial configuration automatically when first powered on. Which mechanism accomplishes this in a Mist deployment?

  1. A local controller appliance
  2. Manual Junos configuration on each AP
  3. Static routes pushed by the RADIUS server
  4. Cloud adoption after the AP is claimed to the org Correct answer.

Explanation

When an AP is claimed to an organization and connects to the cloud, it is automatically adopted and receives its configuration from the Mist cloud. There is no on-premises controller required for this process.

Question 46Juniper Mist WLAN Architecture and Deployment

Which statement best describes the data plane behavior of a Mist AP when the WAN link to the cloud fails?

  1. The AP reboots into a factory default state.
  2. The AP continues forwarding client traffic using its cached configuration. Correct answer.
  3. The AP stops forwarding all client traffic immediately.
  4. The AP forwards traffic only to the RADIUS server.

Explanation

Mist APs cache their configuration and continue to serve clients and forward traffic locally during a cloud outage. Management and telemetry features are impacted, but data forwarding persists.

Question 47Juniper Mist WLAN Architecture and Deployment

A company has three buildings and wants each building to have independent WLAN settings and RF profiles while sharing a single inventory of devices. What is the recommended Mist configuration approach?

  1. Create one organization per building
  2. Create one site per building under the same organization Correct answer.
  3. Configure each AP individually through the CLI
  4. Use a single site with no RF profiles

Explanation

Organizations contain multiple sites, and each site can have its own WLANs, RF profiles, and settings while devices remain under one organization inventory. This provides location-specific control without duplicating management.

Question 48Juniper Mist WLAN Architecture and Deployment

Which Mist feature uses AI to detect and diagnose client connectivity issues and suggest root causes?

  1. Marvis Actions Correct answer.
  2. Site templates
  3. WLAN scheduling
  4. Switch port profiles

Explanation

Marvis Actions surfaces AI-driven insights and recommended actions for client and network issues, providing root cause analysis. It is a core differentiator of the Mist AI platform.

Question 49Juniper Mist WLAN Architecture and Deployment

An engineer needs to ensure APs on a remote subnet can reach the Mist cloud without opening inbound firewall ports. Which outbound destination should be allowed?

  1. TCP 3389 to the Mist cloud
  2. TCP 443 to Mist cloud endpoints Correct answer.
  3. TCP 22 to the Mist cloud
  4. UDP 69 to the local gateway

Explanation

Mist APs connect outbound over TCP 443 to cloud endpoints, so allowing outbound 443 is sufficient for management and telemetry. No inbound ports are required for the AP management tunnel.

Question 50Juniper Mist WLAN Architecture and Deployment

Which Mist construct allows an administrator to define reusable WLAN and network settings that can be applied across multiple sites?

  1. RF templates
  2. Site templates Correct answer.
  3. Device profiles only
  4. RADIUS realms

Explanation

Site templates let administrators define common configuration and apply it to multiple sites, reducing duplication and ensuring consistency. RF templates address RF settings specifically rather than full site configuration.