NEW QUESTION 1
A network engineer has identified clients who are experiencing delays white roaming. The network is configured with WPA2-Enterpnse. AES encryption, 802 1X authentication, and Cisco Centralized Key Management Which change resolves the roaming delays?

• A. Utilize a supplicant that supports Cisco Centralized Key Management."
• B. Enable AES and TKIP encryption
• C. Disable client session timeout
• D. Install wireless device drivers from Cisco

Answer: A

NEW QUESTION 2
Refer to the exhibit.

A client reports being unable to log into the wireless network According to the output, which network information should be verified?

• A. the Failed Attempts log on the authentication server
• B. that the AP has IP connectivity to the authentication server
• C. that the user has an account on the authentication server
• D. that the authentication and accounting configuration are correct

Answer: B

NEW QUESTION 3
Which two EAP types are tunneled? (Choose two.)

• A. EAP-MD5
• B. EAP-MSCHAPv2
• C. PAP
• D. EAP-FAST
• E. EAP-MD6

Answer: BD

NEW QUESTION 4
Which statement about the usage of the debug command in a Cisco Unified Wireless Network is true?

• A. Debug is enabled until manual shut off.
• B. Debug is a message logging severity 7.
• C. Debug is a restricted command and is not available in the AP CLI.
• D. Debug is available on the WLC serial console and web interfac

Answer: B

NEW QUESTION 5
When implementing interface groups, how are the IP addresses sourced via DHCP for wireless clients?

• A. through the primary interface of the group
• B. through round robin between interfaces
• C. through interface group definition
• D. through the interface receiving the first response

Answer: B

NEW QUESTION 6
All corporate-issued devices in your network have been configured with EAP-TLS authentication. They authenticate via wireless to an instance of Cisco ISE and AD authorization for the user profiles is un-configured. Which impact occurs to the authentication when a user??s Active Directory username and password expires?

• A. The ISE prompts the user for the new password.
• B. The user must change the password manually on their WLAN profile.
• C. The WLAN profile must be forgotten and reconfigured.
• D. WLAN connectivity is not impacted because EAP-TLS uses certificate

Answer: D

NEW QUESTION 7
Refer to the exhibits. An engineer is troubleshooting connectivity issues on the guest network.



Which cause of the issue is true?

• A. The spanning-tree portfast trunk command must be removed.
• B. The switchport mode must be configured as access.
• C. The interface group has incorrect mappings.
• D. The trunk port does not have the correct VLANs allowe

Answer: D

NEW QUESTION 8
Which two statements about the WLAN are true? (Choose two)

Refer to the exhibit.

• A. The client has a 5 GHz connection.
• B. The client has authenticated.
• C. The client is 802.11n capable.
• D. The Cisco device is a 3600 series AP.
• E. 802 11b data rates are disabled in this WLAN

Answer: CE

NEW QUESTION 9
Access points ate deployed in an office building and users report that the real-time communications quality of experience is poor when users walk between the elevators The elevators are a heavy metallic obstacle, and AP 3 was installed to cover the elevator area, which AP t and AP 2 signal does not reach Communications are captured for a user walking from point A to point C. and it is observed that the user iPhone device suddenly scans all bands and then roams from AP I to AP 3 somewhere between points B and C WLAN is set to 5 GHz only. Open, default rate configuration. Which action improves the real-time application quality of experience in this area?
Refer to the exhibit.

• A. Enable 802 11v on the WLAN
• B. Enable 802 11r on the WLAN
• C. Enable 802 11k on the WLAN
• D. Move AP 2 to point B

Answer: B

NEW QUESTION 10
In a cisco OfficeExtend environment, which encryption type n und between the access point and the mass LAW controller?

• A. DTLS
• B. TIS
• C. STIS
• D. OpenSSL

Answer: A

Explanation:
DTLS data encryption is enabled automatically for OfficeExtend access points but disabled by default for all other access points. Most access points are deployed in a secure network within a company building, so data encryption is not necessary. In contrast, the traffic between an OfficeExtend access point and the controller travels through an unsecure public network, so data encryption is more important for these access points. When data encryption is enabled, traffic is encrypted at the access point before it is sent to the controller and at the controller before it is sent to the client.

NEW QUESTION 11
You detect a coverage hole in some part of the network. After troubleshooting, you find out that the
Cisco 3702i AP is not using all of its transmission power, and hence is not using the 4x4 spatial stream. Which cause of the problem is true?

• A. The upstream switch is not PoE-capable.
• B. The AP antennas have been damaged.
• C. The AP is not 4x4-capable.
• D. The PoE source is not injecting the adequate quantity of powe

Answer: D

NEW QUESTION 12
An engineer has configured 802 1x for the network and all but one of the APs are passing authentication. Which configuration is causing the failure?

• A. The AP has override global credentials checked.
• B. The switch AAA credentials do not match what is configured on ISE.
• C. The controller 802 1x supplicant credentials do not match what is configured on ISE
• D. EAP-FAST is configured on ISE for this A

Answer: A

NEW QUESTION 13
Which three steps would a network engineer use to troubleshoot an AP join problem? (Choose three.)

• A. Validate the STP configuration.
• B. Verify the ping AP from the controller.
• C. Verify the ping AP from the client.
• D. Verify that the AP is getting an address from the DHCP server.
• E. I Validate the SNMP configuration.
• F. Verify the authentication configuration parameter

Answer: ABF

NEW QUESTION 14
Refer to the exhibit.

A VoWLAN has been deployed at a customer site, and users report that audio is choppy in some areas. The exhibit captures a voice exchange between one phone that is associated to the AP at the end of the corridor (172.31.255.101) and another phone that is positioned in a conference room nearby. Which action enhances the voice application quality of experience?

• A. Change the basic rate configuration on the WLC to include 54 Mbps.
• B. Change the WLAN QoS profile to platinum.
• C. Decrease the AP power level.
• D. Disable higher data rates on the controlle

Answer: A

NEW QUESTION 15
Refer to the exhibit.

An engineer is troubleshooting access point placement issues and suspects that poor placement is causing connectivity issues. When running the show client detail <mac> command, the engineer notices this output. Which option indicates poor access point placement?

• A. excessive number of bytes sent compared to bytes received
• B. high signal-to-noise ratio
• C. excessive number of data retries
• D. low ratio signal strength indicator
• E. duplicate received packets
• F. poor statistics for the last 90 seconds

Answer: CD

NEW QUESTION 16
Which three options can be configured as roaming triggers on a WGB? (Choose three.)

• A. SNR
• B. co-channel interference
• C. RSSI
• D. packet fragmentation
• E. packet retries
• F. minimum data rate

Answer: CEF

NEW QUESTION 17
A WLC receives a coverage hole detection alert from an AP. What two conditions must occur for the controller to dynamically mitigate the situation? (Choose two.)

• A. The AP serving the troubled client must currently have a power level 2 or lower.
• B. The client must be able to dynamically raise its power level to match the new AP power.
• C. The AP must be RF visible to additional APs on the other side of the coverage hole for calibration.
• D. The client must have WMM-PS disabled to allow for the increased power usage.
• E. The AP serving the troubled client must currently have a power level higher than 2.

Answer: AB

NEW QUESTION 18
Refer to the exhibit.

A client reports being unable to log into the wireless network, which uses PEAPv2. Which two issues appear in the output? (Choose two)

• A. The AP has the incorrect RADIUS server address
• B. There is a problem with the client supplicant
• C. The AP has lost IP connectivity to the authentication server
• D. The authentic at ion server is misconfigured on the controller
• E. The EAP client timeout value should be increased
• F. The authentication server is misconfigured in the WLAN

Answer: AC

NEW QUESTION 19
An AP will be deployed to an area where DHCP Option 43 is unavailable and the WLAN engineer is unable to have DNS modifications made to support this AP. Which two actions can enable the AP to join the WLC? (Choose two)

• A. Issue the clear capwap private-config command in the AP console.
• B. Pre-stage or prime the AP on the same Layer 2 VLAN as the WLC.
• C. Issue the capwap ap ip default-gateway WLC IP address command in the AP console.
• D. Issue the capwap ap ip address WLC IP address command in the AP console.
• E. Issue the capwap ap controller ip address WLC IP address command in the AP consol

Answer: AD

NEW QUESTION 20
Which three details are contained within the LWAPP discovery response sent by each WLC to enable the LAP to choose a WLC? (Choose three.)

• A. the controller sysName
• B. an AP-manager IP address
• C. the WLC IOS version
• D. the mobility domain name
• E. the master controller flag
• F. the DNS server address

Answer: ABE

NEW QUESTION 21
......