NEW QUESTION 1
You have successfully configured HA and SSO using two Cisco 5508 Wireless LAN Controllers. You are able to access the Active Primary WLC but are unable to access the Secondary Standby WLC. Which
two methods will allow you to access the standby unit? (Choose two.)

• A. Via SSH to the Redundancy Management Interface.
• B. Via Service Port Interface.
• C. Via SSH to the Management Interface.
• D. Via console connectio

Answer: CD

NEW QUESTION 2
Which statement about the join process of the access point is true? Refer to the exhibit.

• A. The time on the controller is outside of the certificates validity time interval, so the join phase failed.
• B. The AP successfully joined the controller.
• C. The AP moved from this controller to its primary controller.
• D. The AP failed to join because the MAC address of the AP was not correct on the controller.
• E. The controller rejected all discovery requests from the AP because they were not received on the management interface subnet.

Answer: E

NEW QUESTION 3
In a cisco OfficeExtend environment, which encryption type n und between the access point and the mass LAW controller?

• A. DTLS
• B. TIS
• C. STIS
• D. OpenSSL

Answer: A

Explanation:
DTLS data encryption is enabled automatically for OfficeExtend access points but disabled by default for all other access points. Most access points are deployed in a secure network within a company building, so data encryption is not necessary. In contrast, the traffic between an OfficeExtend access point and the controller travels through an unsecure public network, so data encryption is more important for these access points. When data encryption is enabled, traffic is encrypted at the access point before it is sent to the controller and at the controller before it is sent to the client.

NEW QUESTION 4
Which three components are needed to identify the zone of impact for non-802.11 sources of 2.4 GHz and 5.0 GHz interference? (Choose three.)

• A. WLC
• B. MSE
• C. RF site survey tool
• D. Wi-Fi analyzer
• E. CleanAir AP
• F. spectrum analyzer

Answer: CEF

NEW QUESTION 5
Wireless users encounter choppy VoVLAN on one floor of a building. Which troubleshooting approach will determine the cause of the issue in the least amount of time?

• A. move the problem
• B. top down
• C. shoot from the hip
• D. bottom up

Answer: A

NEW QUESTION 6
Refer to the exhibits. An engineer is troubleshooting connectivity issues on the guest network.



Which cause of the issue is true?

• A. The spanning-tree portfast trunk command must be removed.
• B. The switchport mode must be configured as access.
• C. The interface group has incorrect mappings.
• D. The trunk port does not have the correct VLANs allowe

Answer: D

NEW QUESTION 7
An alarm is reporting that one of four ports of a lag group have gone down on a wireless LAN controller. Which troubleshooting methodology can be used to begin the troubleshooting process?

• A. shoot from the hip
• B. bottom-up
• C. top-down
• D. follow the path
• E. divide and conquer

Answer: B

NEW QUESTION 8
An engineer has configured 802 1x for the network and all but one of the APs are passing authentication. Which configuration is causing the failure?

• A. The AP has override global credentials checked.
• B. The switch AAA credentials do not match what is configured on ISE.
• C. The controller 802 1x supplicant credentials do not match what is configured on ISE
• D. EAP-FAST is configured on ISE for this A

Answer: A

NEW QUESTION 9
Which two EAP types are tunneled? (Choose two.)

• A. EAP-MD5
• B. EAP-MSCHAPv2
• C. PAP
• D. EAP-FAST
• E. EAP-MD6

Answer: BD

NEW QUESTION 10
When designing your wireless network for iOS devices, which two limits of packet loss and jitter ensure stable, quality communication? (Choose two.)

• A. Jitter should be kept to less than 500 ms.
• B. Packet loss should remain under 1 percent.
• C. Packet loss should remain under 5 percent.
• D. Packet loss should remain under 2 percent.
• E. Jitter should be kept to less than 100 m

Answer: BE

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/technology/vowlan/troubleshooting/vowlan_troubleshoot/8_Site_Survey_RF_Design_Valid.pdf

NEW QUESTION 11
An engineer is troubleshooting a DHCP configuration that is being used to discover two WLCs with the IP addresses of 192.168.10.10 and 192.168.10.11. Which string is used for configuration?

• A. option 80 hex f108.c0a8.0a0A.c0a8.0a0b
• B. option 60 ip 192.168.10.10 192.168.10.11
• C. option 43 ip f108.c0a8.0a0A.c0a8.0a0b
• D. option 43 hex f108.c0a8.0a0A.c0a0b

Answer: D

NEW QUESTION 12
Refer to the exhibit.
Why did Client 00:25:84:61:92:7d not get a response from the RADIUS server?

• A. The RADIUS server rejected the username that was provided by the client.
• B. The shared-secret keys on the controller and on the RADIUS server do not match.
• C. The wireless controller does not have IP connectivity to the RADIUS server.
• D. The client and the RADIUS server did not agree on the EAP type so the RADIUS server dropped the packet.

Answer: B

NEW QUESTION 13
Refer to the exhibit.

Which statement about the join process of the access point is true?

• A. The AP failed to join because the self-signed certificate of the AP was not correct on the controller.
• B. The time on the controller is outside of the certificates validity time interval so the join phase failed.
• C. The AP moved from this controller to its primary controller.
• D. The AP successfully joined the controlle

Answer: B

NEW QUESTION 14
You are troubleshooting an AP that fails to join a WLC. Which step of the DTLS handshake is first when
establishing a secure CAPWAP connection?

• A. ServerHello
• B. HelloVerifyRequest
• C. Server-ChangeCipherSpec
• D. ClientHello

Answer: D

NEW QUESTION 15
An engineer has received an alarm on a wireless LAN controller and is unsure of its meaning. The engineer attempted to ping the wireless LAN controller interfaces. Which troubleshooting methodology does this action demonstrate?

• A. bottom-up
• B. follow the path
• C. shoot from the hip
• D. top-down
• E. divide and conquer

Answer: E

NEW QUESTION 16
DRAG DROP
Drag and drop the IP address range on the left onto the specific purpose for multicast groups on the right. Not all options are used.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 17
A recently acquired Cisco Aironet 1550 series AP is unable to join the WLC. This message is observed on the AP console:
AAA Authentication Failure for UserName:CC93.1981.0035 User Type: WLAN USER Which action must be taken for the AP to associate with the controller?

• A. Add MAC address CC93.1981.0035 to the Security AAA AP policy Authorization List.
• B. Authenticate the AP to the WLC from the console using an admin account on the WLC.
• C. Add MAC address CC93.1981.035 to the Security AAA MAC Filtering tab.
• D. Import the self-signed certificate of the AP to the Security:Certificate:LSC tab.
• E. Import the self-signed certificate of the AP to the Security:Certificate:SSC ta

Answer: A

NEW QUESTION 18
Which Cisco WLC debug command allows you to determine if the certificate process is failing in the CAPWAP messages?

• A. debug pm pki enable
• B. debug cert events enable
• C. debug capwap events enable
• D. debug capwap packet enable
• E. debug capwap errors enable

Answer: E

NEW QUESTION 19
Refer to the exhibit.

An engineer is troubleshooting non-802.11 interference and observes this output. Which type of interference signatures can the engineer identify?

• A. microwave
• B. DECT phone
• C. Bluetooth
• D. jammer

Answer: A

NEW QUESTION 20
An AP will be deployed to an area where DHCP Option 43 is unavailable and the WLAN engineer is unable to have DNS modifications made to support this AP. Which two actions can enable the AP to join the WLC? (Choose two)

• A. Issue the clear capwap private-config command in the AP console.
• B. Pre-stage or prime the AP on the same Layer 2 VLAN as the WLC.
• C. Issue the capwap ap ip default-gateway WLC IP address command in the AP console.
• D. Issue the capwap ap ip address WLC IP address command in the AP console.
• E. Issue the capwap ap controller ip address WLC IP address command in the AP consol

Answer: AD

NEW QUESTION 21
An engineer ran the debug packet logging enable all command, but only 25 packets are shown and none from the client the engineer wants to see.
Which command helps find data that is specific to the client?

• A. debug packet logging enable rx
• B. debug packet logging acl lwapp-ip
• C. debug packet logging enable format
• D. debug packet logging acl ip

Answer: B

NEW QUESTION 22
Refer to the exhibit.

What is the highest mandatory rate in Mpbs configured for the AP?

• A. 54
• B. 36
• C. 24
• D. 48

Answer: C

NEW QUESTION 23
Refer to the exhibit.

An engineer is troubleshooting access point placement issues and suspects that poor placement is causing connectivity issues. When running the show client detail <mac> command, the engineer notices this output. Which option indicates poor access point placement?

• A. excessive number of bytes sent compared to bytes received
• B. high signal-to-noise ratio
• C. excessive number of data retries
• D. low ratio signal strength indicator
• E. duplicate received packets
• F. poor statistics for the last 90 seconds

Answer: CD

NEW QUESTION 24
......