I85PREP
⌘ K
Meraki Solutions Specialist study materials
Meraki Solutions Specialist study resources

Meraki Solutions Specialist practice questions

One question at a time. Build your Meraki Solutions Specialist understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Cloud-Managed Networking Architecture and the Meraki Dashboard

Which component provides the management and control plane for Meraki devices?

  1. A local RADIUS server
  2. An on-premises hardware controller
  3. A dedicated management VLAN on the MX
  4. The Meraki cloud dashboard Correct answer.

Explanation

Meraki is a cloud-managed architecture: devices open outbound connections to the Meraki cloud, which hosts the dashboard and distributes configuration. No customer-owned controller appliance is part of the management path.

Question 2Cloud-Managed Networking Architecture and the Meraki Dashboard

Which is the top level of the Meraki dashboard hierarchy?

  1. Device
  2. Configuration template
  3. Network
  4. Organization Correct answer.

Explanation

An organization is the top-level container and holds all networks, inventory, administrators, and licenses. Networks sit inside the organization, and devices are assigned to networks.

Question 3Cloud-Managed Networking Architecture and the Meraki Dashboard

Which identifier is used on the Add devices page to claim hardware purchased for an organization?

  1. The device's LAN MAC address
  2. The public IP address of the device
  3. The order number from the purchase Correct answer.
  4. The dashboard administrator's email address

Explanation

Hardware is claimed into an organization using the order number or license key from the purchase. Once claimed, the device appears in the organization inventory where it can be assigned to a network.

Question 4Cloud-Managed Networking Architecture and the Meraki Dashboard

An administrator must be able to view dashboard pages but must never change configuration. Which role should be assigned?

  1. API-only
  2. Read-only Correct answer.
  3. Full
  4. Billing

Explanation

A read-only administrator can view dashboard pages and data but cannot save configuration changes. A full administrator has edit rights, which would violate the requirement.

Question 5Cloud-Managed Networking Architecture and the Meraki Dashboard

Which Meraki product line provides branch security and routing?

  1. MR
  2. MX Correct answer.
  3. MV
  4. MS

Explanation

The MX family consists of security appliances that provide routing, firewall, and VPN functions at a branch. The other prefixes identify different product families.

Question 6Cloud-Managed Networking Architecture and the Meraki Dashboard

What is the primary purpose of a Meraki device's local status page?

  1. To configure the complete Layer 3 firewall rule set
  2. To provide limited device status and some settings when the dashboard is unreachable Correct answer.
  3. To host the organization's configuration templates
  4. To replace the Meraki cloud for firmware upgrades

Explanation

The local status page is served directly by the device and offers basic status plus a small set of local settings. It is intended as a limited fallback, not a replacement for dashboard management.

Question 7Cloud-Managed Networking Architecture and the Meraki Dashboard

An MX loses its connection to the Meraki cloud. What happens to the traffic it is forwarding?

  1. The MX reverts to a factory-default configuration
  2. Forwarding stops until the cloud connection returns
  3. Forwarding continues using the last configuration received Correct answer.
  4. All clients are moved to a guest VLAN automatically

Explanation

Meraki devices keep running the last configuration they received, so local forwarding, VPN tunnels, and security rules continue during a cloud outage. Only dashboard management and new configuration changes are unavailable.

Question 8Cloud-Managed Networking Architecture and the Meraki Dashboard

Where in the dashboard are organization-wide firmware upgrade windows configured?

  1. Network > General
  2. Device > Local status page
  3. Organization > Firmware upgrade windows Correct answer.
  4. Network > Alerts

Explanation

Firmware upgrade scheduling is an organization-level setting, allowing a maintenance window to be applied across the organization's devices. Network and device pages do not define organization-wide upgrade windows.

Question 9Cloud-Managed Networking Architecture and the Meraki Dashboard

A company has 40 branch networks that must use identical MX firewall rules. Which dashboard feature should be used?

  1. Organization inventory
  2. Event log
  3. SNMP traps
  4. Configuration templates Correct answer.

Explanation

Configuration templates let an administrator define settings once and bind many networks to them, so a change made in the template propagates to every bound network. This avoids editing each network individually.

Question 10Cloud-Managed Networking Architecture and the Meraki Dashboard

An administrator should be able to manage only networks that carry the tag "retail". How is this achieved?

  1. Enable SAML SSO for the admin
  2. Assign the admin a network access scope limited to the "retail" tag Correct answer.
  3. Give the admin full organization access
  4. Create a separate organization for each store

Explanation

Dashboard administrator access can be scoped to all networks, selected networks, or networks matching a tag. Tag-based scoping gives the admin visibility and rights only on matching networks.

Question 11Cloud-Managed Networking Architecture and the Meraki Dashboard

Which HTTP header carries the API key when calling the Meraki dashboard API?

  1. X-Org-ID
  2. Content-Type: application/json
  3. Authorization: Basic
  4. X-Cisco-Meraki-API-Key Correct answer.

Explanation

Dashboard API calls authenticate by placing the generated key in the X-Cisco-Meraki-API-Key request header. The key is tied to the administrator who generated it and inherits that administrator's permissions.

Question 12Cloud-Managed Networking Architecture and the Meraki Dashboard

In a Meraki Auto VPN deployment, which function does the Meraki cloud perform?

  1. It terminates each IPsec tunnel at a cloud gateway
  2. It forwards all branch-to-branch user traffic
  3. It assigns public IP addresses to each MX
  4. It exchanges tunnel keys and coordinates peering between MX devices Correct answer.

Explanation

Auto VPN uses the cloud as a control plane: MX devices register with the dashboard, which helps them learn about peers and exchange tunnel information. The IPsec data tunnels themselves are built directly between the MX devices.

Question 13Cloud-Managed Networking Architecture and the Meraki Dashboard

Which outbound configuration lets a new MX reach the Meraki cloud through a restrictive firewall?

  1. Allow outbound TCP 25 and 53 only
  2. Allow inbound TCP 443 to the MX WAN IP
  3. Allow inbound UDP 500 and 4500 to the MX WAN IP
  4. Allow outbound TCP 443 to Meraki cloud endpoints Correct answer.

Explanation

Meraki devices initiate outbound connections to the cloud, so permitting outbound TCP 443 is sufficient. No inbound port forwarding or static public IP is required for cloud management.

Question 14Cloud-Managed Networking Architecture and the Meraki Dashboard

Which dashboard log records configuration changes made by administrators?

  1. Security center
  2. Client timeline
  3. Event log
  4. Change log Correct answer.

Explanation

The change log is an audit trail of configuration changes, showing which administrator made which change and when. The event log instead records network and device events such as clients connecting.

Question 15Cloud-Managed Networking Architecture and the Meraki Dashboard

How are email alert recipients configured for a network?

  1. Network > Alerts with recipients added per network or organization Correct answer.
  2. Device local status page
  3. Network > Group policy
  4. Organization > Inventory

Explanation

Alert settings are found on the network's Alerts page, where recipients and the alerts they receive are defined; organization-wide alerts can also be configured. Inventory and group policy pages do not control notification recipients.

Question 16Cloud-Managed Networking Architecture and the Meraki Dashboard

An engineer supports three customers, each with its own Meraki organization. How is access normally handled?

  1. A single admin email can be granted access to multiple organizations and switched from the dashboard Correct answer.
  2. All three customers must be merged into one organization
  3. Three separate browsers and three separate email accounts are required
  4. The engineer must use each local status page instead

Explanation

A dashboard administrator account can be a member of more than one organization, and the dashboard provides an organization selector to move between them. Separate accounts or merged organizations are unnecessary.

Question 17Cloud-Managed Networking Architecture and the Meraki Dashboard

A device has been claimed into the organization but not assigned to any network. Where does it appear?

  1. Network > Summary
  2. Organization > Inventory Correct answer.
  3. Organization > Administrators
  4. Network > Clients

Explanation

Claimed hardware that is not yet assigned to a network remains in the organization inventory as unassigned. From there it can be added to a network when it is ready to be deployed.

Question 18Cloud-Managed Networking Architecture and the Meraki Dashboard

A site needs MR access points, MS switches, and an MX appliance managed together under one network. Which network type should be created?

  1. A switch-only network
  2. A wireless-only network
  3. A combined network Correct answer.
  4. A template-only network

Explanation

A combined network can hold wireless, switching, and security appliance devices in a single network, giving one shared configuration and monitoring view. Single-product network types restrict which device families can be added.

Question 19Cloud-Managed Networking Architecture and the Meraki Dashboard

Which dashboard feature lets an administrator locate a device by serial number across all networks?

  1. The local status page
  2. The global search bar Correct answer.
  3. The change log
  4. The event log

Explanation

The dashboard's global search accepts identifiers such as device serial numbers, network names, or client information and returns matching results across the organization. Logs and local pages are scoped to specific records or devices.

Question 20Cloud-Managed Networking Architecture and the Meraki Dashboard

A customer wants dashboard logins to authenticate against their identity provider. Which capability is used?

  1. Two-factor authentication only
  2. 802.1X
  3. RADIUS accounting
  4. SAML single sign-on Correct answer.

Explanation

SAML single sign-on federates dashboard authentication with an external identity provider, so administrators sign in with their corporate credentials. Two-factor authentication strengthens a local login but does not integrate an identity provider.

Question 21Cloud-Managed Networking Architecture and the Meraki Dashboard

What is the default request rate limit for the Meraki dashboard API?

  1. 5 calls per second per organization Correct answer.
  2. 100 calls per minute per network
  3. 10 calls per second per administrator
  4. Unlimited calls per organization

Explanation

The dashboard API enforces a limit of five requests per second per organization. Callers that exceed it receive HTTP 429 responses and must back off and retry.

Question 22Cloud-Managed Networking Architecture and the Meraki Dashboard

Which statement describes Meraki co-termination licensing?

  1. Licenses are tied to the physical device permanently
  2. Licenses are required only for MX appliances
  3. Each device license expires on its own purchase anniversary
  4. All device licenses in an organization share a single expiration date Correct answer.

Explanation

Co-termination aligns every device license in an organization to one shared expiration date. When licenses are added or removed, the dashboard recalculates that shared date from the total license value rather than tracking each license separately.

Question 23Cloud-Managed Networking Architecture and the Meraki Dashboard

Which statement about the Meraki cloud infrastructure is correct?

  1. It runs in a single data center, so an outage takes all dashboards offline
  2. It only stores configuration and never receives telemetry
  3. It is hosted in multiple data centers, and devices reconnect automatically if one is unavailable Correct answer.
  4. It requires customers to host a local mirror of the dashboard

Explanation

The Meraki cloud is delivered from multiple data centers with redundancy, and devices re-establish their connection if a data center becomes unavailable. Customers are not responsible for hosting or mirroring the dashboard.

Question 24Cloud-Managed Networking Architecture and the Meraki Dashboard

Which traffic actually passes through the Meraki cloud?

  1. Management, configuration, and telemetry data Correct answer.
  2. Only guest VLAN traffic
  3. All client data traffic between branch sites
  4. All encrypted VPN payloads

Explanation

Only management, configuration, and telemetry information is carried through the Meraki cloud. User data is forwarded locally and, where Auto VPN is used, through direct tunnels between Meraki devices.

Question 25Cloud-Managed Networking Architecture and the Meraki Dashboard

Which of the following is managed at the organization level rather than within a single network?

  1. SSID configuration
  2. VLAN configuration
  3. Configuration templates Correct answer.
  4. Layer 3 firewall rules

Explanation

Configuration templates are organization-level objects that can be bound to many networks, so their settings are defined above the network level. SSIDs, VLANs, and firewall rules are configured within each individual network.

Question 26Cloud-Managed Networking Architecture and the Meraki Dashboard

Which statement describes the relationship between organizations and networks in the Meraki dashboard?

  1. A network can belong to multiple organizations at the same time.
  2. An organization contains one or more networks, and each network belongs to one organization. Correct answer.
  3. Organizations and networks are peer containers that can freely share the same devices.
  4. A network contains one or more organizations, and each organization belongs to one network.

Explanation

The Meraki dashboard uses a two-tier hierarchy: an organization is the top-level container for inventory, administrators, and licensing, and it holds one or more networks. A network cannot span organizations, so each network has exactly one parent organization.

Question 27Cloud-Managed Networking Architecture and the Meraki Dashboard

Where does the Meraki dashboard run?

  1. On a local management appliance installed at each site.
  2. In Meraki's cloud and is accessed through a web browser. Correct answer.
  3. On each Meraki device's local status page.
  4. On a customer-managed server that syncs with Meraki devices.

Explanation

The Meraki dashboard is a cloud-hosted management platform, so administrators reach it through a browser rather than through on-premises management software. Meraki devices communicate with the cloud to receive configuration and report status.

Question 28Cloud-Managed Networking Architecture and the Meraki Dashboard

How does an administrator obtain a Meraki dashboard API key?

  1. By requesting one from Meraki support for each organization.
  2. By generating it in the dashboard from the administrator's profile. Correct answer.
  3. By exporting it from the local status page of an MX.
  4. By enabling SNMP on the network and reading the community string.

Explanation

API keys are created from an individual dashboard administrator's profile. Because the key is tied to that administrator, its permissions match the administrator's dashboard access.

Question 29Cloud-Managed Networking Architecture and the Meraki Dashboard

Which login protection can be enforced for all dashboard administrators in an organization?

  1. Per-network CAPTCHA challenges.
  2. Automatic IP allowlisting for each administrator.
  3. Two-factor authentication. Correct answer.
  4. Mandatory password rotation every 30 days.

Explanation

Meraki allows an organization to require two-factor authentication for dashboard administrator logins. This adds a second verification step beyond the password for every administrator in that organization.

Question 30Cloud-Managed Networking Architecture and the Meraki Dashboard

What happens when a network is bound to a configuration template?

  1. Template settings apply, and later template edits are pushed to the network. Correct answer.
  2. The network's settings are copied once and never updated again.
  3. The network becomes read-only and can no longer report client data.
  4. Only monitoring data is shared, and the network's configuration remains fully independent.

Explanation

A configuration template centralizes settings for multiple networks. Binding a network applies the template's configuration and causes subsequent template changes to propagate to that network.

Question 31Cloud-Managed Networking Architecture and the Meraki Dashboard

An engineer moves an MX from Network A to Network B within the same organization. What is the result?

  1. The MX keeps Network A's configuration and ignores Network B.
  2. The MX automatically creates a third network for the transition.
  3. The MX must be deleted from the organization and then re-claimed under a new serial number.
  4. The MX adopts Network B's configuration after being removed from A and added to B. Correct answer.

Explanation

Devices can be reassigned between networks inside the same organization. Configuration is associated with the network, so once the device is added to Network B it receives Network B's settings.

Question 32Cloud-Managed Networking Architecture and the Meraki Dashboard

Which dashboard API request lists the networks in an organization?

  1. GET /organizations/{organizationId}/networks Correct answer.
  2. GET /organizations/networks/all
  3. POST /organizations/{organizationId}/networks/list
  4. GET /networks/organization/{name}

Explanation

Organization-scoped API endpoints use the organization ID in the path. The networks collection for an organization is retrieved with a GET request to the organizations resource followed by the networks subresource.

Question 33Cloud-Managed Networking Architecture and the Meraki Dashboard

An API key is generated by an administrator whose dashboard access is limited to two networks. What can that key do?

  1. Access only organization-wide settings but no network settings.
  2. Access only the two networks assigned to that administrator. Correct answer.
  3. Access every network in the organization because API keys bypass dashboard roles.
  4. Access nothing until a full organization administrator approves the key.

Explanation

An API key inherits the permissions of the administrator who created it. If that administrator is scoped to two networks, the key can act only within those networks.

Question 34Cloud-Managed Networking Architecture and the Meraki Dashboard

Which dashboard log would show a wireless client associating with an access point and completing authentication?

  1. The event log. Correct answer.
  2. The firmware upgrade history.
  3. The license usage report.
  4. The configuration change log.

Explanation

The event log records operational events such as client association, authentication, and connectivity changes. Configuration and firmware records track administrative changes rather than client activity.

Question 35Cloud-Managed Networking Architecture and the Meraki Dashboard

At what level are SNMP and syslog server settings configured in the Meraki dashboard?

  1. At the device level only, through the local status page.
  2. At the organization level, applying to every network.
  3. At the API level only, through a webhook.
  4. At the network level, applying to devices in that network. Correct answer.

Explanation

SNMP and syslog are configured within the network settings and apply to the devices in that network. They are not organization-wide settings applied to all networks automatically.

Question 36Cloud-Managed Networking Architecture and the Meraki Dashboard

A Meraki device reboots while its WAN link cannot reach the Meraki cloud. How does it handle configuration?

  1. It retrieves configuration from another Meraki device on the LAN.
  2. It loads its last known configuration stored locally. Correct answer.
  3. It erases its configuration and waits for the cloud.
  4. It falls back to a default factory configuration.

Explanation

Meraki devices retain their configuration locally so they can continue operating if the cloud is temporarily unreachable. Once cloud connectivity returns, the device can synchronize with the dashboard again.

Question 37Cloud-Managed Networking Architecture and the Meraki Dashboard

A dashboard administrator is assigned access to only Network X. What is that administrator able to do?

  1. Manage organization-wide settings and all networks except the settings that apply to Network X.
  2. Configure and monitor Network X only, not other networks or organization settings. Correct answer.
  3. Manage every network in the organization.
  4. View Network X and its clients but make no configuration changes of any kind.

Explanation

Network-scoped administrator accounts can manage the networks assigned to them without gaining access to other networks or organization-wide settings. The scope is determined by the administrator's network assignments.

Question 38Cloud-Managed Networking Architecture and the Meraki Dashboard

A device is already claimed in Organization A. A technician needs it in Organization B. What must happen first?

  1. The device must be removed from Organization A. Correct answer.
  2. The device must be added to a combined network in Organization A.
  3. The device must be upgraded to the latest firmware.
  4. The device must be assigned to a template in Organization A.

Explanation

A Meraki device can be claimed into only one organization at a time. To move it to a different organization, it must first be removed from the current organization's inventory.

Question 39Cloud-Managed Networking Architecture and the Meraki Dashboard

An administrator creates an API key and later has their dashboard account deleted. What happens to API calls using that key?

  1. They work only for read-only requests.
  2. They are automatically transferred to the organization owner.
  3. They fail because the key is tied to the deleted administrator. Correct answer.
  4. They continue indefinitely because API keys are organization-owned.

Explanation

API keys are associated with the administrator account that generated them. Deleting that administrator invalidates the key because the key has no independent owner.

Question 40Cloud-Managed Networking Architecture and the Meraki Dashboard

An administrator tries to edit a firewall rule directly in a network that is bound to a configuration template. What is the outcome?

  1. The change is blocked locally; the template must be edited instead. Correct answer.
  2. The rule is saved locally but is applied only after the network is unbound from the template.
  3. The rule is saved locally and overrides the template.
  4. The rule is duplicated in every network in the organization.

Explanation

When a network is bound to a configuration template, the template controls the network's configuration. Local edits to template-managed settings are prevented, so the change must be made on the template and then propagated.

Question 41Device Deployment, Provisioning, and Configuration

Which identifier is used to claim a Meraki device into an organization's inventory?

  1. License activation key
  2. Device model name
  3. Client MAC address
  4. Serial number Correct answer.

Explanation

Claiming associates physical hardware with an organization's inventory, and Meraki devices are claimed by their serial number or by an order number. The serial is printed on the device label and entered in Dashboard. MAC addresses identify clients or interfaces, model names are not unique, and license keys activate subscriptions rather than inventory records.

Question 42Device Deployment, Provisioning, and Configuration

An organization has Meraki devices whose licenses currently expire on different dates. Which licensing model aligns all license expirations to one shared date?

  1. Co-termination licensing Correct answer.
  2. Pay-as-you-go billing
  3. Per-device licensing
  4. Subscription-based billing

Explanation

Co-termination licensing pools the license value of devices in an organization and calculates a single shared expiration date. Adding or removing devices recalculates that date based on remaining license value. Per-device licensing, by contrast, keeps separate expiration dates for each device.

Question 43Device Deployment, Provisioning, and Configuration

What is the primary purpose of a configuration template in the Meraki Dashboard?

  1. Back up each network configuration to a local file
  2. Monitor real-time device CPU utilization
  3. Apply consistent settings to multiple networks Correct answer.
  4. Assign static IP addresses to individual clients

Explanation

A configuration template is a reusable collection of network settings that can be bound to multiple networks. Changes made to the template are inherited by bound networks, which helps keep configurations consistent. Templates are not local backup files, CPU monitoring tools, or client IP assignment mechanisms.

Question 44Device Deployment, Provisioning, and Configuration

A device currently assigned to Network A must be used in Network B in the same organization. What is the required first step?

  1. Change the device serial number
  2. Unbind the organization from the template
  3. Delete Network A from the organization
  4. Remove the device from Network A Correct answer.

Explanation

A Meraki device can belong to only one network at a time. To move it, the administrator removes it from its current network so it returns to the organization inventory, then adds it to the target network. Deleting the old network or changing the serial is not required.

Question 45Device Deployment, Provisioning, and Configuration

What is the maximum number of Meraki switches supported in a single physical stack?

  1. 4
  2. 12
  3. 8 Correct answer.
  4. 16

Explanation

A Meraki MS physical stack supports up to eight switches connected with stacking cables. The stack operates as a single logical switch for management and configuration. Larger numbers are not supported for a single physical stack.

Question 46Device Deployment, Provisioning, and Configuration

Which mechanism does an MX warm spare pair use to provide gateway redundancy?

  1. STP
  2. OSPF
  3. VRRP Correct answer.
  4. LACP

Explanation

An MX warm spare uses VRRP between the primary and spare appliance so they can share a virtual gateway IP address. If the primary fails, the spare assumes the virtual IP and continues forwarding traffic. STP, OSPF, and LACP serve different purposes.

Question 47Device Deployment, Provisioning, and Configuration

In a Meraki hub-and-spoke Auto VPN topology, how does one spoke communicate with another spoke by default?

  1. Through the hub Correct answer.
  2. Via a static route on the ISP
  3. Through the internet without a VPN
  4. Directly via a spoke-to-spoke tunnel

Explanation

In the default hub-and-spoke Auto VPN design, traffic from one spoke to another is sent to the hub and then forwarded to the destination spoke. Spoke-to-spoke communication can be enabled, but it is not the default behavior. Traffic is not sent unencrypted or by an ISP static route.

Question 48Device Deployment, Provisioning, and Configuration

On an MX, which configuration creates a routed VLAN interface that can serve DHCP to clients?

  1. A VLAN interface on the MX Correct answer.
  2. A switch port in access mode
  3. A static route with a next hop
  4. An SSID with VLAN tagging

Explanation

An MX VLAN interface defines the Layer 3 gateway for that VLAN and can be configured to provide DHCP services to clients. A switch access port only assigns Layer 2 VLAN membership, an SSID tag maps wireless traffic to a VLAN, and a static route only directs routed traffic.

Question 49Device Deployment, Provisioning, and Configuration

How many SSIDs can a Meraki wireless network configure per access point?

  1. 32
  2. 8
  3. 15 Correct answer.
  4. 4

Explanation

Meraki access points support up to 15 SSIDs per AP, each with its own authentication, VLAN, and policy settings. This is a fixed platform limit rather than a per-network variable. The other values do not match the Meraki SSID limit.

Question 50Device Deployment, Provisioning, and Configuration

What does an RF profile control when assigned to Meraki access points?

  1. Client DHCP lease duration settings
  2. Firewall rules for guest VLAN traffic
  3. Radio channel and transmit power Correct answer.
  4. Switch port PoE budget allocation

Explanation

An RF profile defines wireless radio settings such as channel width, channel selection, and transmit power, and it is assigned to access points. DHCP leases, firewall rules, and PoE budgets are configured elsewhere.