350-101 Practice Questions

The correct command syntax on a Cisco Catalyst 9800 Series Wireless Controller to change the management mode of a specific AP to Meraki cloud management is ap management mode meraki. The question asks to include the force and noprompt options, which bypass certain validation checks and the confirmation prompt, respectively. Although the AP name is omitted in the provided option for brevity, option B presents the correct sequence of keywords and options: ap management mode meraki force noprompt. This command instructs the specified AP to reboot and attempt to join the Meraki cloud.

A. The command syntax is incorrect. The command must begin with ap to specify the target device.

C. The keyword mode is misplaced. It must precede the management type (meraki), not follow the optional parameters.

D. management-mode is not a valid top-level command for this operation on a Catalyst 9800 WLC.

- Cisco Catalyst 9800 Series Wireless Controller Command Reference, Cisco IOS XE Amsterdam 17.3.x, "AP Commands," Section: ap management mode. The official documentation confirms the syntax as ap { | } management mode {capwap | meraki} [force] [noprompt].

- Cisco, "Migrate Cisco Catalyst 9100 Access Points from Cisco Catalyst 9800 WLC to Meraki Cloud Management," Deployment Guide, Section: "Change AP Management Mode from WLC". This guide provides the exact command and explains its usage.

In the 2.4 GHz band the only standardized channel size is 20 MHz, making it the narrowest (and default) channel width available; using 20 MHz minimizes overlap and interference but provides lower throughput than wider channels in other bands.

B. Channel width does not affect how often authentication hand-off occurs.

C. Client reassociation is governed by roaming logic, not channel width.

D. Wider (40/80/160 MHz) channels deliver greater, not lower, throughput.

1. Cisco Enterprise Wireless Design Guide (CVD), 2023, “RF Channel Planning—2.4 GHz,” p.14: “Only 20-MHz channels are supported.”

2. IEEE 802.11-2020, Clause 17.3.8.4, Table 17-6: 20 MHz mandatory in 2.4 GHz.

DNA Center provides intent-based policy orchestration while Cisco ISE supplies identity and posture enforcement; integrating the two lets policies adapt to user and device context. Mobile-device-management (MDM) connectors in ISE supply detailed posture attributes. Cisco Spaces ingests AP telemetry from Catalyst 9800/9100 to deliver real-time and historical location analytics. Combining these three platforms gives dynamic identity/posture-aware network access plus granular visibility into device activity and location.

B. Lacks ISE and Spaces, so no identity, posture, or location visibility.

C. Static VLAN assignments ignore identity‐based policy and device posture; Spaces is absent.

D. Omits MDM and Spaces, so no posture assessment and no location analytics.

1. Cisco DNA Center 2.x Design Guide, “ISE Integration for Policy,” §5.2.

2. Cisco ISE Administrator Guide 3.x, “MDM API Integration,” ch. 45.

3. Cisco Spaces Deployment Guide, “Catalyst 9100/9800 Streaming Telemetry,” §3.

4. Cisco Validated Design CVD-SD-Access-Campus, 2023, pp. 68-74 (ISE + DNA Center + Spaces use case).

In workgroup-bridge (WGB) mode an AP associates to a root AP and bridges traffic from the Ethernet segment that is cabled to its own port, permitting wired devices that have no 802.11 capability to join the WLAN as if they were Wi-Fi clients.

A. Radios remain independent; WGB mode does not create inter-band client communication.

B. VLANs are not automatically extended across all interfaces; bridging occurs only between the WGB’s Ethernet and its wireless link.

C. A WGB has only one Ethernet interface, so there is no intra-Ethernet port switching.

1. Cisco Catalyst 9800 Series Wireless Controller Configuration Guide, Release 17.3, “Workgroup Bridge,” para. 1–2.

2. Cisco Aironet Workgroup Bridge Best Practices Deployment Guide, p. 3 (“WGB integrates a wired segment to the WLAN”).

Optimized Roaming forces clients to roam sooner by monitoring their RSSI. When a client’s RSSI drops below the configured threshold (or packet loss exceeds a set value), the AP immediately sends a disassociation frame, compelling the client to search for a stronger AP and improving overall WLAN performance.

B – Feature is local to WLC/AP, no external integration required.

C – Uses RSSI/packet loss, not peer-to-peer beacons, for location.

D – No static load balancing; clients make dynamic roam decisions.

1. Cisco Optimized Roaming Deployment Guide, v1.2, p. 3 “AP disassociates clients below RSSI threshold.”

2. Cisco Catalyst 9800 Series Configuration Guide, “Configure Optimized Roaming,” Sec. “client-disconnect-threshold,” IOS XE 17.9.

The interval between a signal’s transmission and its reception is called propagation delay; it represents the finite time an electromagnetic wave needs to traverse the medium at approximately the speed of light.

A – Reflection is an RF phenomenon where waves bounce from obstacles; it is not a timing metric.

C – Scattering describes signal diffusion due to small objects; unrelated to travel time.

D – Link speed expresses data-rate capability, not physical propagation time.

1. MIT OpenCourseWare 6.02 “Digital Communication Systems”, Lecture notes L5, Section “Propagation Delay” (p. 3).

2. Cisco Press, CCNA Wireless 200-355 OCG, ch. 4 “RF Fundamentals”, para. “Propagation delay” (p. 108).

Peer-to-Peer (P2P) blocking in the policy profile prevents frames from one wireless client being forwarded to another on the same SSID, achieving guest isolation. Mapping VisitorAccess to VLAN 30 meets the dedicated-guest-VLAN requirement and scales automatically across all APs controlled by the 9800.

B – Local authentication does not isolate guests from each other.

C – FlexConnect/local switching not necessary; central switching already scales and isolation still required.

D – Multicast/RADIUS settings do not stop client-to-client traffic.

1. Cisco Catalyst 9800 Series Configuration Guide, “Configure Peer-to-Peer Blocking,” p. 75 (IOS XE 17.9).

2. Cisco Guest Access Design Guide, 2022, Sec. “Guest User Isolation with P2P Blocking,” para. 2.

To statically point a Catalyst 9100 AP at a specific controller, use the CAPWAP primary-base command specifying the WLC name followed by its IP address. This populates the AP’s primary controller AP Join Profile and is effective even when DHCP/DNS discovery methods are unavailable.

A. Argument order is invalid; command keyword “primary-base” is missing.

B. Places controller name after keyword but inserts extra keyword “capwap” in wrong position.

C. Omits required controller name parameter, making command incomplete.

1. Cisco Catalyst 9100 Series Access Points Deployment Guide, IOS XE 17, “Specifying a Primary Controller”, Example: capwap ap primary-base WLC1 10.10.10.5.

2. Cisco Aironet & Catalyst AP Command Reference, IOS XE 17, command “capwap ap primary-base ”.

3. Cisco WLC Best Practices White Paper, rev 3.1, p. 9.

Wireless Service Assurance requires both device controllability (so DNA Center can program telemetry) and wireless telemetry at the site. During discovery, supply CLI, SNMP, and NETCONF details; enable Device Controllability in System > Settings; after discovery, place the WLC (and its APs) in a site where Wireless Telemetry is marked enabled. This combination activates streaming telemetry for client visibility, roaming, and performance metrics.

B. Enabling Wireless Telemetry globally without Device Controllability prevents DNA Center from configuring telemetry on the WLC.

C. “Wireless Assurance” is a license, not a toggle, and site-level Device Controllability does not exist.

D. Site settings use “Wireless Telemetry,” not “Wireless Assurance”; missing global telemetry enablement.

1. Cisco DNA Center User Guide 2.3.3, “Enable Device Controllability and Wireless Telemetry,” steps 1–4 (System > Settings > Telemetry).

2. Cisco DNA Center 2.3 “Discover and Onboard Devices,” “Provide CLI, SNMP, NETCONF credentials,” p. 14.

3. Cisco DNA Center Assurance Deployment Guide, “Assign WLC to Site and Enable Wireless Telemetry,” section 4.

SNMP lets the WLC send traps or be polled for operational data. By enabling it, administrators can receive unsolicited traps whenever an access point joins, fails, or changes status, which provides immediate awareness of AP health without manual polling.

A. SNMP reports many metrics, not limited to hardware performance.

B. SNMP automates reporting; no manual log reviews are needed.

C. SNMP provides centralized—not fragmented—statistics when queried from an NMS.

1. Cisco “Wireless LAN Controller SNMP Configuration Guide,” sec. “Supported Traps” – lists ‘ciscoLwappAPAssociated’ and other AP status traps.

2. RFC 3411, SNMP Framework, sec. 3 – describes trap/notification mechanism for fault management.