300-120 sample questions

Question 1

A network architect is designing a FlexConnect deployment for 50 remote retail branches using Catalyst 9800 controllers. The security policy requires that specific traffic from wireless clients be dropped before traversing the WAN link to the data center, while still allowing local branch printing. Which configuration approach optimally achieves this requirement?

Accepted Answer

Configure a FlexConnect ACL (Flex ACL) on the Catalyst 9800 and map it to the locally switched VLAN on the FlexConnect AP.

Answer

Apply a standard WLAN ACL centrally on the Catalyst 9800 to drop the traffic before it enters the CAPWAP tunnel.

Answer

Configure a CPU ACL on the Catalyst 9800 and apply it in the egress direction toward the WAN interface.

Answer

Implement a split-tunneling access list on the AP to route the dropped traffic into a blackhole VLAN at the branch.

Question 2

When implementing the Smart AP Image Upgrade feature for a large FlexConnect deployment across multiple branch offices, which TWO operational phases drastically reduce the WAN bandwidth consumption during a Catalyst 9800 controller upgrade? (Select TWO)

Accepted Answer

A designated Master AP in the FlexConnect group downloads the image from the WLC over the WAN.

Accepted Answer

The Master AP distributes the downloaded image to Subordinate APs of the same model over the local branch LAN.

Answer

The Catalyst 9800 compresses the AP images using gzip before transmitting them across the CAPWAP data tunnel.

Answer

The WLC uses multicast CAPWAP to push the image to all APs simultaneously across the WAN.

Answer

APs request the image directly from a local TFTP server dynamically discovered via DHCP Option 43.

Question 3

A multinational retail organization is deploying wireless networks across 500 branch locations. Each branch has 3 to 5 APs and relies on a central Catalyst 9800 WLC located in the primary data center.

The organization requires that branch employees can continue to scan inventory and process local point-of-sale (POS) transactions even if the WAN link to the data center completely fails. The local POS servers are hosted on a server at each branch.

However, guest traffic must be funneled directly back to the data center for deep packet inspection and centralized logging, regardless of WAN state. If the WAN fails, guest access should immediately cease to prevent uninspected traffic from accessing the internet locally.

Which combination of FlexConnect configurations will satisfy these business requirements?

Accepted Answer

Configure the Employee WLAN for Local Switching and Local Authentication. Configure the Guest WLAN for Central Switching and Central Authentication.

Answer

Configure both Employee and Guest WLANs for Local Switching. Enable Split Tunneling on the Guest WLAN to route traffic to the data center, and enable Standalone Mode for the Employee WLAN.

Answer

Configure both WLANs for Central Switching. Enable FlexConnect Fault Tolerance on the APs and configure a local RADIUS server at each branch for the Employee WLAN.

Answer

Configure the Employee WLAN for Central Switching with Split Tunneling enabled for the POS server IP. Configure the Guest WLAN for Local Switching with a Flex ACL blocking internet access.

Question 4

When deploying Cisco OfficeExtend Access Points (OEAP) for remote teleworkers, which protocol is utilized to securely encrypt both the control and data planes between the remote AP and the corporate Catalyst 9800 WLC over the public internet?

Accepted Answer

DTLS

Answer

IPsec

Answer

TLS 1.3

Answer

MACsec

Question 5

True or False: To successfully achieve 802.11r Fast Transition (FT) roaming between two FlexConnect APs that are utilizing local switching and local authentication, both APs must be assigned to the exact same FlexConnect group.

Accepted Answer

True

Answer

False

Question 6

During a WAN failure, a FlexConnect AP loses its CAPWAP tunnel to the Catalyst 9800 WLC and transitions into Standalone mode. What happens to existing wireless clients that are connected to a locally switched, WPA2-PSK WLAN on this AP?

Accepted Answer

They remain connected and can continue passing traffic on the local subnet without interruption.

Answer

They are immediately disconnected and cannot reconnect until the WLC is reachable.

Answer

They remain connected for a maximum of 5 minutes before the AP forces a deauthentication.

Answer

Their traffic is temporarily buffered in the AP's RAM until the CAPWAP tunnel is restored.

Top vendors

Top exams

Free 300-120 sample questions

When implementing the Smart AP Image Upgrade feature for a large FlexConnect deployment across multiple branch offices, which TWO operational phases drastically reduce the WAN bandwidth consumption during a Catalyst 9800 controller upgrade? (Select TWO)

When deploying Cisco OfficeExtend Access Points (OEAP) for remote teleworkers, which protocol is utilized to securely encrypt both the control and data planes between the remote AP and the corporate Catalyst 9800 WLC over the public internet?

True or False: To successfully achieve 802.11r Fast Transition (FT) roaming between two FlexConnect APs that are utilizing local switching and local authentication, both APs must be assigned to the exact same FlexConnect group.

During a WAN failure, a FlexConnect AP loses its CAPWAP tunnel to the Catalyst 9800 WLC and transitions into Standalone mode. What happens to existing wireless clients that are connected to a locally switched, WPA2-PSK WLAN on this AP?

6 more free samples are waiting