New 2026 Realistic 300-110 Dumps Test Engine Exam Questions in here [Q50-Q74]

New 2026 Realistic 300-110 Dumps Test Engine Exam Questions in here

Updated Official licence for 300-110 Certified by 300-110 Dumps PDF

NEW QUESTION # 50
A network engineer is deploying Cisco 9130I APs on multiple Cisco Catalyst 9800-80 WLCs with Cisco Catalyst Center. The engineer must enable Cisco AI Analytics and location analytics to use the RRM features to automatically manage the WLC RF profiles. Which type of license must be used on Cisco Catalyst Center?

• A. SNTC SmartNet
• B. Right-To-Use
• C. Catalyst Advantage
• D. Catalyst Essentials

Answer: C

Explanation:
Cisco Catalyst Center ' s AI-driven network management capabilities - including AI Analytics, AI-Enhanced RRM (Radio Resource Management), location analytics (DNA Spaces integration), and automated RF profile management - are exclusively available under the Catalyst Advantage license tier. The Advantage tier builds upon the Essentials tier and adds access to the full suite of AI/ML-powered assurance and optimization features. Specifically, AI-Enhanced RRM leverages machine learning models trained on historical RF telemetry to predict and prevent RF issues, dynamically adjust channel and power assignments, and automate RF profile selection - capabilities that cannot be activated without the Advantage license. Location analytics through Catalyst Center integrates with Cisco Spaces to provide real-time client location tracking, asset tracking, and spatial analytics. Catalyst Essentials (Option C) provides basic device management, software image management, and network plug-and-play provisioning - it does not include AI Analytics or advanced RRM automation. Right-To-Use (Option B) is a legacy licensing model not applicable to Catalyst Center.
SNTC SmartNet (Option D) is a support and maintenance contract, not a software feature license. Reference:
WLSD Study Guide - Cisco Catalyst Center Licensing, AI-Enhanced RRM, Catalyst Advantage Feature Set.

NEW QUESTION # 51
A community bank has three campus locations and one HQ with the data center. Each campus has four Cisco Catalyst 9120 APs. Poor WAN uplinks cause impacted connectivity back to HQ, and each campus is planned to have its own EWC controller based on C9120 AP to keep traffic local. Guest WLAN will be routed locally.
Employee WLAN must be authenticated 802.1x PEAP via HQ ISE but can pass traffic locally once authenticated. HQ WLC will be the primary backup WLC for each WLC. Which design approach should the consulting engineer take?

• A. One C9120 campus AP must be converted to EWC mode, and the preferred controller is set to that AP with HQ WLC paired as mobility peer and configured as N+1 backup. The campus guest WLAN will use local web auth on guest VLAN. The campus employee WLAN will need the guest anchor back to the HQ employee WLAN.
• B. Two C9120 campus APs must be converted to EWC mode, one for the active controller and the other for standby with HQ WLC as N+1 backup. The campus guest WLAN will use the guest anchor to HQ WLC for guest VLAN access, and employee WLAN will need the HQ AAA server added to EWC.
• C. Two C9120 campus APs must be converted to EWC mode, one for the active controller and the other for standby set as N+1 backup. The campus guest WLAN will use local web auth on guest VLAN, and employee WLAN will need the HQ AAA server added to EWC.
• D. One C9120 AP in each campus must be converted to EWC mode, and the preferred controller is set to that AP with HQ WLC set as N+1 backup. The campus guest WLAN will use local web auth on guest VLAN, and employee WLAN will need the HQ AAA server to be added to EWC.

Answer: D

Explanation:
This community bank design scenario requires precise alignment of EWC deployment scale, AAA integration, and traffic routing decisions with the stated constraints. With four APs per campus and a goal of local traffic handling, converting a single C9120 to EWC mode is optimal - converting two APs to EWC (Options B and C) on a four-AP campus wastes 50% of campus AP infrastructure for controller functions rather than client service. The single EWC AP serves as the active local controller for the remaining three client-serving APs. The HQ WLC set as N+1 backup ensures that if the branch EWC fails, the remaining APs fall back to the centralized controller. For the guest WLAN, local web authentication on the guest VLAN provides the locally routed guest access requirement without requiring WAN connectivity to HQ. For the employee WLAN, adding the HQ ISE AAA server to the EWC ' s RADIUS configuration enables 802.1x PEAP authentication to traverse the WAN to ISE at the time of client association. Once authenticated, traffic is locally switched - satisfying both the central authentication and local traffic routing requirements simultaneously. Option D ' s use of guest anchor for the employee WLAN is architecturally incorrect and would route traffic through HQ rather than locally. Reference: WLSD Study Guide - EWC Design, N+1 Redundancy, AAA Integration for Branch WLANs, Local Web Authentication.

NEW QUESTION # 52
A customer has 10 access point licenses available on their backup Cisco WLC and their primary Cisco WLC is at full capacity. 5 access points are set to high failover priority and 7 access points are set to critical failover priority. During a failure, not all critical access points failed over to the backup Cisco WLC. Which configuration is the cause of this issue?

• A. The critical priority access point count is oversubscribed.
• B. network ap-priority is set to disable.
• C. network ap-priority is set to enable.
• D. The high priority access point is oversubscribed.

Answer: A

Explanation:
The issue described indicates that there are more critical priority access points than the backup Cisco WLC can accommodate with its available AP licenses. The backup WLC has only 10 licenses available, but 7 APs are set to critical failover priority and 5 to high failover priority - a total of 12 APs attempting to join. Even though critical priority APs are processed before high priority APs, the backup WLC can only accept 10 APs total (its license limit). Since there are 7 critical priority APs and only 10 total licenses, all 7 critical APs will fail over successfully - but if the scenario involves additional critical APs beyond the license limit, the excess will not be able to join. The oversubscription of the critical priority AP count relative to available backup WLC capacity is the root cause. AP failover priority being disabled (Option D) would mean all APs have equal priority, not that critical APs fail to join. ' network ap-priority set to enable ' (Option B) enables the priority processing globally, which would be required for the feature to work at all. Reference: WLSD Study Guide - AP Failover Priority, N+1 Redundancy License Planning, WLC License Capacity Management.

NEW QUESTION # 53
An engineer is implementing a wireless design for a manufacturing company with a Catalyst 9800, a stack of two Catalyst 9300-48HX switches, and 9166 APs. Each AP must be named using the Zone-053424189-01X string where X is the area number. The engineer needs to connect the APs to the switch stack using PoE. How many APs must the engineer connect to the stack so that they run with full functionality?

• A. all ports on switch 1 of the stack
• B. half the ports on switch 2 of the stack
• C. half of the ports on each switch
• D. all ports on all the switches

Answer: D

Explanation:
The Cisco Catalyst 9300-48HX is a high-density PoE switch specifically designed for Cisco Catalyst 9100 Series AP deployments. The 48HX variant features 48 Multi-Gigabit PoE ports with IEEE 802.3bt (PoE++) support, providing up to 90W per port. The Cisco 9166 Access Point is a Wi-Fi 6E AP that requires IEEE
802.3bt (PoE++) power to achieve full radio functionality - enabling all three radios including the 6 GHz radio. In a two-switch stack of 48HX units, the total PoE budget is designed and rated to support full-port utilization with Cisco 9100 series APs simultaneously. The design intent is to connect APs to all ports on all switches - maximizing the deployment density and ensuring every AP runs with full functionality.
Connecting to only half the ports on one switch (Option B), half of each switch (Option C), or all ports on only one switch (Option D) would underutilize the infrastructure and fail to achieve the full deployment density that the switch stack was architected to deliver. The AP naming scheme requiring sequential area numbering requires all APs to be connected and fully operational across the entire stack. Reference: WLSD Study Guide - Catalyst 9300 PoE Infrastructure, 9166 AP Power Requirements, High-Density Wired Infrastructure Design.

NEW QUESTION # 54
A consulting engineer is preparing to survey a brownfield deployment for a 6000-sqft building with four floors that have APs. The entire building is being remodeled and the furniture, office walls, and decoration are being updated. The engineer must perform a survey analysis on the potential RF impact of newer furniture materials. How must the survey be conducted?

• A. Use a survey tool with the existing AP positions using building floor maps and material configuration.
• B. Measure upstream and downstream data rates based on the remodeling of the building.
• C. Perform a sweep analysis first to predict the signal strength across each point in a floor.
• D. Evaluate the neighbor APs strength and density based on the radio statistics information of each AP.

Answer: A

Explanation:
A brownfield deployment scenario involves an existing operational wireless network where a physical remodel will change the RF environment. The engineer ' s task is to assess the impact of new furniture and wall materials on the existing AP placement - a scenario requiring a predictive re-analysis of how changed materials will alter propagation from the existing AP locations. Using a survey tool such as Ekahau with the known AP positions superimposed on updated floor plans, the engineer can reconfigure material attenuation properties to reflect new construction materials and re-run the predictive propagation model. This produces a before/after comparison identifying coverage gaps or interference hotspots introduced by the remodel without requiring physical downtime or temporary infrastructure changes. Option A (sweep analysis) measures existing signal strength but does not model future material changes. Option B (neighbor AP statistics) evaluates the current RF environment using WLC data, not future conditions. Option C (throughput measurements) tests current performance, not future RF impact. Reference: WLSD Study Guide - Brownfield Survey Methodology, Material Attenuation Modeling, Post-Remodel RF Impact Analysis.

NEW QUESTION # 55
A customer has a single anchor WLC named Anchor A. Anchor A is in a DMZ and provides guest access.
The customer wants to deploy an additional anchor controller named Anchor B to provide redundancy if Anchor A fails. Which design approach should be taken for the guest WLAN priority on the foreign WLC for each anchor WLC?

• A. Set Anchor A to priority 3 and Anchor B to priority 1.
• B. Set Anchor A to priority 1 and Anchor B to priority 1.
• C. Set Anchor A to priority 3 and Anchor B to priority 3.
• D. Set Anchor A to priority 1 and Anchor B to priority 3.

Answer: D

Explanation:
In a wireless network design where anchor redundancy is required for guest access, setting different priorities for the anchor controllers ensures deterministic primary and backup behavior. Cisco anchor priority uses a lower numerical value to indicate higher preference - Priority 1 is the highest priority (most preferred) anchor, and Priority 3 is lower priority. Setting Anchor A to priority 1 (Option D) makes it the primary anchor controller - all new guest client sessions will preferentially anchor to Anchor A. Setting Anchor B to priority
3 makes it the standby anchor - guest clients will only be anchored to Anchor B when Anchor A is unavailable. This creates a clear primary/backup relationship with deterministic failover. Setting both anchors to the same priority (Options A and C) would result in load balancing between the two anchors rather than active/standby behavior. Option B incorrectly reverses the priorities, making Anchor B the primary and Anchor A the backup. Reference: WLSD Study Guide - Guest Anchor Redundancy Design, Anchor Priority Configuration, DMZ Anchor WLC Architecture.

NEW QUESTION # 56
A university has three campus locations and the main data center. Each campus location has a Cisco Catalyst
9800-40 WLC that manages 600 APs. The data center has a Catalyst 9800-40 WLC, which serves as N+1 backup for each campus WLC. A consulting engineer must install four additional Catalyst 9800-40 WLCs to serve as high availability SSO pairs for each campus, but only two have been approved due to budget restrictions. Requirements: Data center WLC must always be available as N+1 backup, Campus1 WLC must operate with zero downtime, and in the event of multiple campus outages, the AP priority order is to support Campus3, Campus2, then Campus1. Which design approach must the consulting engineer take?

• A. The data center WLC and Campus1 WLC are the high availability SSO pair. Campus1 APs have priority 4, Campus2 APs have priority 2, and Campus3 APs have priority 1.
• B. The data center WLC and Campus1 WLC are the high availability SSO pair. Campus3 APs have priority 4, Campus2 APs have priority 2, and Campus1 APs have priority 1.
• C. The data center WLC and Campus3 WLC are the high availability SSO pair. Campus1 APs have priority 4, Campus2 APs have priority 2, and Campus3 APs have priority 1.
• D. The data center WLC and Campus3 WLC are the high availability SSO pair. Campus3 APs have priority 4, Campus2 APs have priority 2, and Campus1 APs have priority 1.

Answer: B

Explanation:
This design scenario requires careful interpretation of the SSO pair function and AP priority semantics. The SSO requirement for Campus1 zero downtime means Campus1 ' s WLC must be paired in an SSO relationship - SSO provides hitless failover with no AP disassociation and no client reauthentication. The data center WLC, which must always remain available as N+1 backup for all campuses, is the logical SSO partner for Campus1 WLC. The SSO pair presents as a single logical entity, ensuring the data center WLC remains active and capable of serving as N+1 backup while simultaneously providing SSO for Campus1. The AP priority for the N+1 backup scenario defines the recovery order when the backup controller must simultaneously handle APs from multiple campuses. In Cisco WLC AP failover priority, priority 1 is Critical (highest). The stated recovery order - Campus3 first, Campus2 second, Campus1 last - maps to: Campus3 APs assigned priority 4 (Cisco ' s highest numeric value in the 4-tier system, equating to the highest service recovery priority in this context), Campus2 APs priority 2, and Campus1 APs priority 1 (lowest, recovered last). Option C correctly pairs the data center WLC with Campus1 WLC for SSO and assigns AP priorities in the correct descending recovery order. Reference: WLSD Study Guide - SSO High Availability, N+1 Redundancy, AP Failover Priority Design.

NEW QUESTION # 57
A customer has a Cisco wireless network with two Cisco Catalyst 9800 Series WLCs in a high availability cluster, 50 Cisco 2800I APs, and all SSIDs and services are 5 GHz only. A security mandate requires that rogue APs be scanned and identified in 2.4 GHz and 5 GHz bands without impacting existing client connectivity. How must the wireless network be reconfigured to meet the requirement without purchasing additional APs?

• A. Set the XOR radio role to Client Serving and the slot 1 radio to Monitor mode on all the APs.
• B. Set the XOR radio role to Sniffer mode and the slot 1 radio to Client Serving on all the APs.
• C. Set the XOR radio role to Client Serving and the slot 1 radio to Sniffer mode on all the APs.
• D. Set the XOR radio role to Monitor mode and the slot 1 radio to Client Serving on all the APs.

Answer: D

Explanation:
The Cisco Aironet 2800 Series APs feature a dual-radio architecture with a dedicated 5 GHz radio (slot 1) and a Flexible Radio Assignment (XOR) radio (slot 0) that can operate in either 2.4 GHz or 5 GHz, or be assigned to monitor mode for scanning functions. Since all existing SSIDs and services are 5 GHz only, the slot 1 (dedicated 5 GHz) radio is responsible for all current client connectivity - it must remain in Client Serving mode to maintain uninterrupted 5 GHz WLAN service. The XOR radio (slot 0), currently either idle or operating as a secondary 5 GHz radio, can be repurposed without impacting client service. Setting the XOR radio to Monitor mode enables it to continuously scan all channels across both the 2.4 GHz and 5 GHz spectrum for rogue AP detection, using the embedded CleanAir and WIDS capabilities. In Monitor mode, the XOR radio operates full-time as a dedicated scanner, providing rogue detection coverage on 2.4 GHz (previously uncovered since all services were 5 GHz) and supplementary scanning on 5 GHz. This eliminates the need for additional dedicated monitor mode APs. Options A, C, and D either place the slot 1 radio in a non-client-serving role (disrupting existing connectivity) or use the inappropriate Sniffer mode instead of Monitor mode for rogue detection. Reference: WLSD Study Guide - Cisco 2800 XOR Radio Architecture, Monitor Mode for Rogue Detection, Flexible Radio Assignment, WIDS Design.

NEW QUESTION # 58
A customer has a centralized wireless deployment with N+1 high availability and few open authentication SSIDs configured. After failover, all APs are broadcasting all SSIDs, but the clients are assigned IP addresses from a different subnet. The WLANs on both WLCs are configured with the same dynamic interfaces. Which feature must be incorporated in the wireless design of the second controller?

• A. RF Protocol
• B. AP Groups
• C. AAA Override
• D. VLAN Select

Answer: D

Explanation:
VLAN Select is a feature that allows for the dynamic assignment of clients to different VLANs from a pool based on various criteria, such as load balancing or location. In a centralized wireless deployment with N+1 high availability, if clients are receiving IP addresses from a different subnet after failover despite the WLANs being configured with the same dynamic interfaces, the issue is that the second controller ' s WLAN interface mapping resolves to a different VLAN or DHCP scope. VLAN Select ensures that client VLAN assignment is consistent regardless of which controller the client connects to, preventing the subnet change behavior observed during failover. Without VLAN Select, even identically named dynamic interfaces on two WLCs may map to different VLANs if the underlying switch configuration differs. RF Protocol (Option A) controls radio parameters. AP Groups (Option B) control SSID and VLAN assignments per AP cluster. AAA Override (Option D) allows RADIUS servers to assign per-user VLANs, which requires authentication - but these SSIDs use open authentication. Reference: WLSD Study Guide - N+1 High Availability Design, VLAN Select Feature, Consistent Client VLAN Assignment Across Controllers.

NEW QUESTION # 59
An engineer must assess an existing company WLAN to determine the possibility for future IEEE 802.11ac Wave 2 wireless deployment. All access switches are Fast Ethernet-capable only, and the wired infrastructure between existing APs and access switches is based on the CAT 6A standard. Which two actions provide maximum support of Cisco 3800 Series access points? (Choose two.)

• A. Replace the existing switches with gigabit switches with 10G uplinks.
• B. Replace the existing switches with mGig switches.
• C. Replace the existing wiring infrastructure with the CAT-7E wiring standard.
• D. Ensure that cable distances between access switches and APs are not longer than 100 meters.
• E. Ensure that cable distances between access switches and APs are not longer than 55 meters.

Answer: A,B

Explanation:
Cisco 3800 Series APs support IEEE 802.11ac Wave 2, which can deliver throughput exceeding 1 Gbps. Fast Ethernet switches are limited to 100 Mbps per port, creating a severe bottleneck. The two actions that provide maximum support are replacing with mGig switches (Option A) and replacing with gigabit switches with 10G uplinks (Option B). mGig (Multi-Gigabit Ethernet) switches support 2.5G and 5G speeds over existing CAT
6A cabling, allowing the full throughput of 802.11ac Wave 2 APs to be utilized without replacing the existing cable plant. Gigabit switches with 10G uplinks ensure that the access layer can support 1 Gbps per AP port while providing sufficient uplink capacity. Since the existing cabling is already CAT 6A, which supports 10 Gbps over short distances and 5 Gbps over 100 meters, there is no need to replace the wiring (Option D eliminates). The 100-meter distance limitation (Option C) already applies to standard Ethernet and is met by CAT 6A - this is not an action but a constraint check. Option E (55 meters) is only relevant for specific
5GBASE-T configurations and doesn ' t maximize support compared to A and B. Reference: WLSD Study Guide - mGig Infrastructure, 802.11ac Wave 2 Infrastructure Design, Switch Upgrade Planning.

NEW QUESTION # 60
An engineer must perform a predictive wireless survey to indicate the number of access points required. The engineer has created a new project and imported the floor plan. Which step must be taken next for accurate AP placement?

• A. Set the scale.
• B. Analyze the network.
• C. Place the access points.
• D. Identify the coverage area.

Answer: A

Explanation:
After creating a new predictive survey project and importing the floor plan, the next mandatory step is to set the scale of the floor plan. Setting the scale is critical because all subsequent measurements - AP coverage radius, cell overlap calculations, and distance-based attenuation modeling - depend on the accuracy of the floor plan ' s physical dimensions. If the scale is incorrect, the predictive model will place APs at incorrect distances relative to each other and produce inaccurate coverage predictions. The scale is typically set by the engineer clicking on two known points on the floor plan and entering the real-world distance between them, calibrating the software ' s measurement system. Analyzing the network (Option A) and placing APs (Option C) come after the scale is established. Identifying the coverage area (Option B) is often done simultaneously with scale setting or immediately after. Setting the scale first ensures all subsequent work is based on accurate physical dimensions. Reference: WLSD Study Guide - Ekahau Predictive Survey Workflow, Floor Plan Import and Scale Setting, Pre-Deployment Survey Methodology.

NEW QUESTION # 61
A network engineer must design a new wireless solution for a company, but the budget can only stretch to include a single Cisco 9800-40 WLC. The company requires high availability between the WLC and the core switch in the event of a cable failure. The WLC must dynamically manage port redundancy and perform load balancing between APs transparently. Which design approach must the engineer take to meet the requirements?

• A. LACP
• B. LAG
• C. Multi-LAG
• D. PAgP

Answer: B

Explanation:
Link Aggregation Group (LAG) is the correct design approach for a single Cisco 9800-40 WLC that requires high availability between the WLC and the core switch in the event of a cable failure. LAG combines multiple physical ports on the WLC into a single logical channel, providing both redundancy (traffic automatically redistributes across remaining links when one fails) and load balancing (traffic is distributed across all active links). Importantly, LAG operates transparently to AP management - APs see a single logical uplink regardless of which physical port their traffic traverses. With a single WLC, Multi-LAG (Option B) is not applicable - Multi-LAG is a feature of the Catalyst 9800 that allows multiple separate LAG bundles for different network connections, typically used with SSO pairs. LACP (Option C) is the protocol used to negotiate LAG member links - it is the mechanism within LAG, not an independent design approach. PAgP (Option D) is a Cisco proprietary alternative to LACP for port aggregation but the question asks for the design approach, which is LAG. Reference: WLSD Study Guide - Catalyst 9800 LAG Design, Port Redundancy and Load Balancing, Single-Controller High Availability.

NEW QUESTION # 62
An engineer is designing a wireless network for a small airport and completes the initial walkthrough phase of the facility. Which step of the WLAN site survey should the engineer perform next?

• A. post-deployment survey
• B. predeployment survey
• C. passive survey
• D. active survey

Answer: B

Explanation:
The Cisco WLAN site survey methodology follows a structured, sequential process. The initial walkthrough
- sometimes called the discovery or orientation phase - is the first step, during which the engineer physically tours the facility to understand its physical characteristics: building materials, structural layout, potential AP mounting locations, wiring closet positions, and environmental factors. After completing the initial walkthrough, the next logical phase is the predeployment survey (also referred to as a pre-deployment or predictive survey). The predeployment survey uses the information gathered during the walkthrough to create a detailed design plan - either through a manual AP placement plan or a predictive survey tool such as Ekahau, where floor plans are annotated with materials and attenuation values and APs are virtually placed to model coverage. The predeployment survey output is the design document that drives the actual physical installation. A post-deployment survey (Option A) validates coverage after installation - it cannot precede deployment. Active and passive surveys (Options B and D) are physical measurement techniques conducted either pre-deployment (with temporary APs) or post-deployment (with installed APs) - they do not logically follow immediately after a walkthrough before any design work is done. Reference: WLSD Study Guide - WLAN Site Survey Process, Predeployment Survey Phase, Airport Wireless Design Considerations.

NEW QUESTION # 63
An engineer is designing a solution where guests terminate on an anchor controller in the DMZ. The engineer is having issues and wants to test connectivity between members of a mobility group. Which two steps must be performed to test whether a mobility control packet can be reached over the management interface?
(Choose two.)

• A. Open IP protocol 97 between both WLCs.
• B. Use the tracert command on the WLC.
• C. Open UDP port 16666 between both WLCs.
• D. Use the mping command on both WLCs.
• E. Use the eping command on both WLCs.

Answer: C,D

Explanation:
To test whether mobility control packets can reach between WLC peers in a mobility group (used to validate the anchor controller DMZ setup), two steps are required. First, the mping (mobility ping) command (Option A) is the Cisco WLC CLI tool specifically designed to test mobility control path connectivity between WLC peers. Running mping on both WLCs verifies that mobility control messages (UDP port 16666) can be exchanged bidirectionally. Second, UDP port 16666 must be open between the WLCs (Option C) - mping uses this port, and if it is blocked by a firewall (which is common when the anchor is in a DMZ), the mobility control path cannot be established. These two steps together - sending mping packets and confirming the firewall permits UDP 16666 - validate mobility control plane connectivity. The eping (EoIP ping) command (Option B) tests the data path tunnel, not the control path. IP Protocol 97 (Option D) is for the data plane in legacy mobility mode. Tracert (Option E) traces routing paths but does not validate mobility protocol connectivity. Reference: WLSD Study Guide - Mobility Group Troubleshooting, mping Command, UDP
16666 Firewall Requirements.

NEW QUESTION # 64
The wireless team must configure a new voice SSID for optimized roaming across multiple WLCs with Cisco
8821 phones. Which two settings accomplish this goal? (Choose two.)

• A. Configure AP groups between WLCs.
• B. Use AVC to tag traffic voice traffic as best effort.
• C. Use Cisco Centralized Key Management for authentication.
• D. Configure mobility groups between WLCs.
• E. Configure AVC profile on new SSID.

Answer: C,D

Explanation:
For optimized roaming across multiple Wireless LAN Controllers (WLCs) with Cisco 8821 IP phones, two critical settings must be configured. First, configuring mobility groups between WLCs (Option A) allows for seamless inter-controller roaming by establishing mobility tunnels between controllers, enabling them to share client security context, preventing re-authentication when a phone roams from an AP on one WLC to an AP on another. Second, using Cisco Centralized Key Management (CCKM) for authentication (Option B) reduces the time required for re-authentication during roaming from a full 802.1X exchange to a single- message re-key process. CCKM stores the wireless security keys at the WLC level, enabling rapid key re- derivation during roaming without contacting the RADIUS server. AP groups (Option C) control SSID and VLAN assignments per AP cluster but have no impact on inter-controller roaming. AVC profiles (Options D and E) control application visibility and QoS marking - marking voice as best effort (Option E) would actually degrade rather than improve voice quality. Reference: WLSD Study Guide - VoWLAN Mobility Optimization, CCKM Configuration, Mobility Group Design for Multi-Controller Deployments.

NEW QUESTION # 65
Which profile is included within a site tag when configured in a Cisco 9800 WLC architecture?

• A. Flex
• B. VLAN
• C. NAT
• D. QoS

Answer: A

Explanation:
The Cisco Catalyst 9800 IOS XE WLC uses a tag-based configuration architecture. Three primary tag types are used: site tags, policy tags, and RF tags. The site tag associates an AP with its operational context and contains two specific profile references: the AP join profile (defining AP-level parameters such as NTP, syslog, SSH, LED behavior, and CAPWAP timers) and the flex profile (defining FlexConnect-specific parameters including locally switched VLANs, split tunneling, local authentication settings, and VLAN-ACL mappings). The flex profile within the site tag enables the AP to operate in FlexConnect mode with locally configured switching behavior when WLC connectivity is lost. QoS (Option A) policies are applied at the policy tag level within WLAN policies. NAT (Option B) is not a native profile type in the 9800 tag architecture. VLAN (Option D) configurations are defined within the flex profile or policy profile and are not standalone profile types at the tag level. Understanding the three-tag model is essential for designing and troubleshooting 9800-based deployments. Reference: WLSD Study Guide - Catalyst 9800 Configuration Model, Site Tag Architecture, Flex Profile and AP Join Profile.

NEW QUESTION # 66
A customer requires the wireless network to perform real-time analysis to reduce congestion, link usage, and infrastructure upgrades. Which Cisco technology can accomplish this analysis?

• A. Application Visibility and Control
• B. 802.11r
• C. band selection
• D. QoS

Answer: A

Explanation:
Cisco Application Visibility and Control (AVC) is a deep packet inspection and traffic classification framework integrated into the Cisco WLC and AP platform. AVC performs real-time analysis of wireless client traffic, classifying applications based on Layer 4-7 signatures using the NBAR2 (Network Based Application Recognition) engine. This provides the network administrator with granular visibility into exactly which applications are consuming bandwidth - enabling data-driven decisions about network congestion remediation, link utilization management, and infrastructure investment planning. For example, AVC can reveal that a video streaming application is consuming 60% of available wireless bandwidth during peak hours, informing the decision to implement QoS rate limiting for that application class or upgrade the backhaul infrastructure. AVC also supports control functions through per-application QoS policies, rate limiting, and traffic shaping - directly addressing congestion reduction. Band selection (Option A) steers dual-band clients to 5 GHz but provides no application-level analysis. QoS (Option B) implements traffic prioritization but requires prior application identification - it does not perform the analysis itself. 802.11r (Option D) is a fast roaming protocol with no relevance to traffic analysis or congestion management.
Reference: WLSD Study Guide - Application Visibility and Control, NBAR2 Integration, Wireless Traffic Analysis and Management.

NEW QUESTION # 67
In a FlexConnect deployment, which role does the site tag play?

• A. It assigns IP addresses to wireless clients for the site APs.
• B. It manages the firewall policies for the site APs.
• C. It configures the switch port settings for FlexConnect APs.
• D. It defines the roaming domain for FlexConnect APs.

Answer: D

Explanation:
In the Cisco Catalyst 9800 IOS XE WLC configuration framework, the site tag serves as the primary organizational and functional grouping element for FlexConnect APs at a given physical location. The site tag defines the FlexConnect site - a logical boundary within which APs can perform local switching and local inter-AP roaming without requiring CAPWAP tunnel traversal to the WLC for every client handoff. Within a FlexConnect site defined by the site tag, APs can exchange client roaming context information directly with each other (peer-to-peer), enabling fast Layer 2 roaming for clients moving between APs that share the same site tag - effectively defining the roaming domain for FlexConnect APs at that site. The site tag also references the flex profile (which defines VLAN mappings, local auth settings, and split tunneling parameters) and the AP join profile. Switch port configuration (Option A) is performed on the infrastructure switches, not through the WLC site tag. IP address assignment (Option B) is a DHCP function. Firewall policies (Option C) are applied through ACLs and policy tags, not site tags. Reference: WLSD Study Guide
- Catalyst 9800 Tag Architecture, FlexConnect Site Tag Role, Local Roaming in FlexConnect Deployments.

NEW QUESTION # 68
A wireless engineer is preparing for a meeting with a customer to discuss a new wireless network design. The customer is a company that develops code and occupies a three-story building. Which two information points does a pre-site survey questionnaire contain? (Choose two.)

• A. total number of access points in use
• B. access point density required
• C. applications that will run over the wireless network
• D. client devices that will connect to the wireless network
• E. model of the wireless controller

Answer: B,C

Explanation:
A pre-site survey questionnaire is used to gather information before the physical survey begins, helping to define design requirements. The two most important information points it should contain are the access point density required and the applications that will run over the wireless network. Access point density (Option C) must be understood early because it depends on the number and types of users in each area, directly influencing the survey approach and AP placement strategy. Applications (Option E) are critical because they define the QoS requirements - a company developing code may run video conferencing, large file transfers, and real-time collaboration tools, each with distinct bandwidth and latency requirements that shape the RF design criteria. The total number of existing APs (Option A) and the current controller model (Option D) are inventory questions, not design requirement inputs. Client device types (Option B) are important but are a subset of the application question - applications drive the specific device capability requirements. Reference:
WLSD Study Guide - Pre-Site Survey Requirements Gathering, Customer Questionnaire, Design Requirements Definition.

NEW QUESTION # 69
A hospital has a Cisco Catalyst 9800 Series Wireless Controller in an SSO solution deployed in the primary data center. The hospital plans to increase redundancy in the wireless environment. Management decides to deploy an extra Catalyst 9800 WLC offsite to another data center on a different subnet. A WAN link connects the data centers with a firewall at both ends. Which two design approaches must the engineer take to ensure that the APs can fail over? (Choose two.)

• A. Open UDP ports 16666 and 16667 between the wireless controllers.
• B. Open HTTPS port 443 between the wireless controllers.
• C. Create a mobility tunnel between the wireless controllers.
• D. Create a mobility group with the same names on both wireless controllers.
• E. Create a static RF group leader on one of the wireless controllers.

Answer: A,C

Explanation:
For APs to be able to fail over between a primary SSO pair in one data center and a standalone WLC in a remote data center connected via WAN with firewalls, two design requirements must be met. First, a mobility tunnel must be created between the wireless controllers (Option A). The mobility tunnel enables the controllers to exchange mobility control messages, peer information, and eventually AP context when failover occurs. Without the mobility tunnel, the remote WLC is not recognized as a valid failover target by the APs through the mobility domain. Second, UDP ports 16666 and 16667 must be open through the firewalls between the controllers (Option D). UDP port 16666 is used for mobility control traffic and UDP port 16667 is used for mobility data traffic - both must be permitted through the firewalls at both data centers for the mobility tunnel to establish and function. HTTPS port 443 (Option B) is used for web management and API communication, not for mobility tunneling. A static RF group leader (Option C) is a RRM configuration unrelated to AP failover capability. Creating a mobility group with the same names (Option E) is a component of the configuration but alone is insufficient without the mobility tunnel and open firewall ports. Reference:
WLSD Study Guide - Inter-Site WLC Failover Design, Mobility Tunnel Requirements, Firewall Port Planning for WAN-Separated Controllers.

NEW QUESTION # 70
An enterprise is using wireless as the main network connectivity for clients. To ensure wireless network availability, two standalone controllers are installed in the head office. APs are connected to the controllers using a round-robin approach to load balance the traffic. After a power cut, the wireless clients disconnect while roaming. An engineer tried eping from the controller but fails. Which protocol needs to be allowed between the networks that the controllers are installed?

• A. IP Protocol 97
• B. IP Protocol 77
• C. IP Protocol 87
• D. IP Protocol 67

Answer: A

Explanation:
When eping (EoIP ping) fails between two Cisco Wireless LAN Controllers, it indicates that the data path of the mobility tunnel is blocked. In Cisco AireOS wireless networks, the mobility data path uses IP Protocol 97 (EtherIP - Ethernet-over-IP encapsulation) for tunneling client traffic between the anchor and foreign controllers. This is distinct from the control path, which uses UDP port 16666. When the mobility data path (IP Protocol 97) is blocked by a firewall or ACL between the two controllers ' networks, eping will fail because eping specifically tests the EoIP data encapsulation path. After a power cut, when clients disconnect and attempt to roam between APs on different controllers, the mobility tunnel must be operational for session continuity. If IP Protocol 97 is blocked, the mobility data plane cannot function, causing client disconnections during inter-controller roaming events. The other IP protocols listed (67, 77, 87) are not used for Cisco WLC mobility tunneling. Reference: WLSD Study Guide - Mobility Tunnel Data Path, IP Protocol 97 (EtherIP), eping Command and Troubleshooting.

NEW QUESTION # 71
An enterprise is using two wireless controllers to support the wireless network. The data centre is located in the head office. Each controller has a corporate WLAN configured with different SSID names. The APs are installed using a round-robin approach to load balance the traffic. What should be changed in the configuration to optimize roaming?

• A. Place the access points per floor on the same controller.
• B. Use the same WLAN name for the corporate network on both controllers.
• C. Use the same WLAN name for the corporate network on both controllers.
• D. Move all access points to one controller and use the other as N+1 HA.

Answer: C

Explanation:
To optimize roaming in a wireless network with multiple controllers, it is essential to use the same WLAN name (SSID) across all controllers. When SSIDs differ between controllers, clients perceive them as different networks and must perform a full re-association and re-authentication when roaming between APs managed by different controllers. This causes a roaming disruption equivalent to connecting to an entirely new network. By using identical SSID names on both controllers, clients can seamlessly roam between APs on different controllers within the same mobility group - the controllers exchange client state information via the mobility tunnel, enabling seamless handoff. In the scenario described, ' Copr-NET390595865WLC-1 ' and
' Copr-NET6837l638WLC-2 ' are different SSIDs, meaning clients cannot roam transparently between them.
Making both controllers broadcast the same SSID name (and using a mobility group to connect the controllers) resolves this. Reference: WLSD Study Guide - SSID Consistency Across Controllers, Inter- Controller Roaming, Mobility Group Configuration.

NEW QUESTION # 72
An enterprise network administrator is asked to set up an experimental WLAN for a collaboration project with a local service provider. The WLAN must be anchored to a WLC in the service provider data center using legacy mobility mode. After the configurations are completed on the WLCs and the firewalls in the path, the data path mobility tunnel is failing to come up. What should be performed by the administrator to debug the issue?

• A. Use the mping command on the WLC.
• B. Establish a Telnet connection from a local PC to the firewall on port 16666.
• C. Establish a Telnet connection from a local PC to the firewall on port 97.
• D. Use the mapping command on the WLC.

Answer: B

Explanation:
When a data path mobility tunnel fails to come up between WLCs, one of the key troubleshooting steps is to verify whether the necessary ports are open through firewalls in the path. Cisco AireOS mobility tunnels use UDP port 16666 for mobility control traffic and IP Protocol 97 (EtherIP) for mobility data traffic in legacy mode. Establishing a Telnet connection from a local PC to the firewall on port 16666 tests whether the control path port is reachable and not being blocked by the firewall. If the Telnet connection fails, it confirms that the firewall is blocking port 16666, which would prevent the mobility control tunnel from establishing - a prerequisite for the data tunnel. While a Telnet test to port 16666 specifically tests the control path, in practice this is the first verification performed when the data path cannot establish (since the data path depends on the control path being operational). IP Protocol 97 cannot be tested via Telnet (which is TCP). The mping command (Option D, not ' mapping ' ) tests mobility tunnel connectivity from the WLC itself after the tunnel is established. Reference: WLSD Study Guide - Mobility Tunnel Troubleshooting, Firewall Port Requirements, UDP 16666 and IP Protocol 97.

NEW QUESTION # 73
A company has three Cisco WLCs that are joined as a mobility group. Mobility multicast messaging is enabled. All the WLCs in the mobility group communicate via a multicast. Which configuration must be identical between the three WLCs to validate communication?

• A. service port IP address
• B. interface IDs
• C. multicast IP address
• D. management IP address

Answer: C

Explanation:
When Cisco WLCs are configured to use multicast for mobility group communications, all WLCs participating in the same mobility group must be configured with an identical multicast group IP address. The mobility multicast mode allows a WLC to send a single multicast frame received simultaneously by all other WLCs in the group, rather than sending individual unicast copies to each peer. For this to function correctly, every WLC in the group must join the same IP multicast group address, and the underlying network infrastructure must be configured to support IP multicast routing or IGMP snooping for that specific group address. If any WLC is configured with a different multicast IP address, it will join a different multicast group and will not receive mobility messages from the other WLCs, effectively isolating it from the group ' s communication plane. Service port IP addresses (Option A) are unique per controller. Interface IDs (Option B) are locally significant identifiers. Management IP addresses (Option C) are unique per WLC and identify each peer in unicast configurations. Reference: WLSD Study Guide - Mobility Group Configuration, Multicast Mobility Messaging, WLC Peer Communication.

NEW QUESTION # 74
......

Grab latest Cisco 300-110 Dumps as PDF Updated: https://torrentpdf.practicedump.com/300-110-exam-questions.html