Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 91:

  A voice WLAN supports mobile handsets that roam frequently between APs. The security team wants faster secure reassociation without forcing a full authentication exchange at each roam.

  Which feature should be enabled?

  A. Static channel assignment
  B. DHCP snooping
  C. 802.11r Fast Transition
  D. Rogue AP containment
  C. 802.11r Fast Transition

  ---

  Explanation

  The requirement can be read as follows: A voice WLAN supports mobile handsets that roam frequently between APs. The security team wants faster secure reassociation without forcing a full authentication exchange at each roam. Which feature should be enabled? The matching behavior is 802.11r Fast Transition.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. That configuration maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Static channel assignment does not provide the specific RF, security, forwarding, management, or automation behavior that is required. DHCP snooping would be considered only for a different symptom or design goal. Rogue AP containment can sound related, but it does not own the behavior being tested. A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 92:

  What does a low SNR value result in?

  A. Scheduling of firmware maintenance windows
  B. Activation of automatic failover features
  C. Improved channel reliability
  D. Decreased data integrity with possible errors
  D. Decreased data integrity with possible errors

  ---

  Explanation

  Decreased data integrity with possible errors is the practical selection once the question is reduced to its main requirement: What does a low SNR value result in?

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. The selected mechanism is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  Scheduling of firmware maintenance windows omits the part of the configuration that actually enforces the requested outcome. Activation of automatic failover features shifts attention away from the condition that the client, AP, or controller must satisfy. Improved channel reliability belongs to a different workflow and would leave the stated condition unresolved.

  The key lesson is that Cisco wireless features are usually scoped tightly, and the scope determines whether a choice is usable.

  That reading also helps with the distractors: they may name real wireless concepts, but they do not calculate, configure, or enforce the specific behavior requested here. In review, ask whether applying the choice would immediately change the failure, measurement, policy, or workflow in the stem; if it would not, it should be eliminated.

• Question 93:

  A newly installed AP fails to join a Catalyst 9800 WLC. The AP can ping the controller, but the CAPWAP DTLS join process fails certificate validation. The AP clock shows an incorrect year.

  What should the engineer correct first?

  A. The WLAN session timeout value
  B. Time synchronization on the AP or controller path
  C. The client VLAN ACL
  D. The SSID broadcast setting
  B. Time synchronization on the AP or controller path

  ---

  Explanation

  The key is to match the requested effect, A newly installed AP fails to join a Catalyst 9800 WLC. The AP can ping the controller, but the CAPWAP DTLS join process fails certificate validation. The AP clock shows an incorrect year. What should the engineer correct first?, with the feature or command that actually produces it; that points to Time synchronization on the AP or controller path.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This choice is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  The WLAN session timeout value does not provide the specific RF, security, forwarding, management, or automation behavior that is required. The client VLAN ACL would be considered only for a different symptom or design goal. The SSID broadcast setting can sound related, but it does not own the behavior being tested.

  A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 94:

  A retail store is setting up guest Wi-Fi on a Cisco 9800 WLC. The IT team has these requirements: When a guests associates, they are prompted for web authentication. After login, traffic is restricted to internet-only access.

  Guest WLAN must be available throughout all sales floors.

  Guest WLAN must not impact the existing corporate WLAN.

  Guest SSID must not require a password.

  Which set of configurations must the IT team deploy to meet the requirements?

  A. WPA2-Enterprise authentication on the guest WLAN and use dynamic VLAN assignment.
  B. Local web authentication on the guest SSID and apply ACLs to allow all traffic except FTP and SSH from the guest WLAN.
  C. Central web authentication on the guest WLAN and apply an ACL that denies traffic between devices that use the internal subnets.
  D. MAC filtering on the guest WLAN and enable client exclusion for segregation.
  C. Central web authentication on the guest WLAN and apply an ACL that denies traffic between devices that use the internal subnets.

  ---

  Explanation

  The useful clue is this requirement: A retail store is setting up guest Wi-Fi on a Cisco 9800 WLC. The IT team has these requirements: When a guests associates, they are prompted for web authentication. After login, traffic is restricted to internet-only access. Guest WLAN must be available throughout all sales floors.

  That clue points to Central web authentication on the guest WLAN and apply an ACL that denies traffic between devices that use the internal subnets..

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This choice is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  WPA2-Enterprise authentication on the guest WLAN and use dynamic VLAN assignment. may be useful elsewhere, but it does not apply the control that the stem is asking for. Local web authentication on the guest SSID and apply ACLs to allow all traffic except FTP and SSH from the guest WLAN. changes an adjacent setting instead of the mechanism that produces the required result. MAC filtering on the guest WLAN and enable client exclusion for segregation. addresses a different failure domain, so it would not close the gap described here.

  That is why the correct selection follows the requirement directly instead of merely belonging to the same Cisco wireless product family.

• Question 95:

  A wireless engineer is rolling out a group of new Meraki APs across multiple office floors. The APs must be centrally managed through the Meraki dashboard and be set up for automatic cloud registration. Network connectivity has been established, and the company firewall follows standard security policies. To minimize manual configuration for each AP the engineer must configure them to automatically discover the dashboard.

  Which action must the engineer take?

  A. Set up a site-to-site VPN between the switch on each floor and the data center.
  B. Assign a static management IP to each AP using the local status page.
  C. Register the AP serial numbers in the lease table of the DHCP server.
  D. Connect APs to a network with internet and allow outbound access to Meraki cloud.
  D. Connect APs to a network with internet and allow outbound access to Meraki cloud.

  ---

  Explanation

  Connect APs to a network with internet and allow outbound access to Meraki cloud. is preferred because it changes the behavior described here: A wireless engineer is rolling out a group of new Meraki APs across multiple office floors. The APs must be centrally managed through the Meraki dashboard and be set up for automatic cloud registration. Network connectivity has been established.

  Meraki deployment questions follow the cloud management model. Devices must be claimed, assigned, and allowed to reach dashboard services before they can be centrally managed. The chosen behavior follows that model; the distractors describe local controller habits, DHCP-only preparation, or settings that do not onboard the AP into dashboard control.

  Set up a site-to-site VPN between the switch on each floor and the data center. omits the part of the configuration that actually enforces the requested outcome. Assign a static management IP to each AP using the local status page. shifts attention away from the condition that the client, AP, or controller must satisfy. Register the AP serial numbers in the lease table of the DHCP server. belongs to a different workflow and would leave the stated condition unresolved.

  The key lesson is that Cisco wireless features are usually scoped tightly, and the scope determines whether a choice is usable.

• Question 96:

  Refer to the exhibit.

  import requests

  import json

  API_ENDPOINT = "https://your-api-server.com/api/v1/devices/wireless" AUTH_TOKEN =

  "YOUR_SECRET_API_TOKEN"

  headers = {

  "Accept": "application/json",

  "Authorization": f"Bearer {AUTH_TOKEN}"

  }

  print("Fetching wireless inventory from the API...") try: response = requests.get(API_ENDPOINT, headers=headers, timeout=10) response.raise_for_status() wireless_inventory_list = response.json() print("Successfully retrieved and parsed device data.\n")

  print("--- Wireless Device Summary ---")

  if isinstance(wireless_inventory_list, list) and wireless_inventory_list:

  for device in wireless_inventory_list:

  mac = device.get("macAddress", "N/A") ip = device.get("ipAddress", "N/A") print(f"Device Found - > MAC:

  {mac}, IP: {ip}")

  else:

  print("No wireless devices were found in the inventory.") except requests.exceptions.RequestException as e:

  print(f"Error during API request: {e}")

  except json.JSONDecodeError:

  print("Error: Failed to parse the response from the API. It is not valid JSON.")

  A Cisco engineer is analyzing how a dictionary interacts with key-value pairs in a Python script that processes device records collected from a wireless controller.

  The engineer reviews the construction of the script to interpret the sequence used for data extraction.

  Which element performs the interaction within the script?

  A. pop operation
  B. import function
  C. get() method
  D. format expression
  C. get() method

  ---

  Explanation

  When the stem is reduced to import requests import json API_ENDPOINT = 'API_ENDPOINT_VALUE'

  AUTH_TOKEN = 'YOUR_SECRET_API_TOKEN' headers = { 'Accept': 'application/json', 'Authorization':

  f'Bearer {AUTH_TOKEN}' } print('Fetching wireless inventory from the API...') try: response = requests.get (API_ENDPOINT, headers=headers., get() method is the choice that remains technically aligned.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. The selected mechanism is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  pop operation may be useful elsewhere, but it does not apply the control that the stem is asking for. import function changes an adjacent setting instead of the mechanism that produces the required result. format expression addresses a different failure domain, so it would not close the gap described here.

  That is why the correct selection follows the requirement directly instead of merely belonging to the same Cisco wireless product family.

• Question 97:

  Which 802.11ax technology allows an AP to divide a channel into smaller resource units so that multiple clients can transmit or receive during the same transmission opportunity?

  A. DSSS
  B. CCK
  C. OFDMA
  D. WEP
  C. OFDMA

  ---

  Explanation

  The requirement can be read as follows: Which 802.11ax technology allows an AP to divide a channel into smaller resource units so that multiple clients can transmit or receive during the same transmission opportunity? The matching behavior is OFDMA.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. This choice maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  DSSS omits the part of the configuration that actually enforces the requested outcome. CCK shifts attention away from the condition that the client, AP, or controller must satisfy. WEP belongs to a different workflow and would leave the stated condition unresolved.

  The key lesson is that Cisco wireless features are usually scoped tightly, and the scope determines whether a choice is usable.

  That reading also helps with the distractors: they may name real wireless concepts, but they do not calculate, configure, or enforce the specific behavior requested here. In review, ask whether applying the choice would immediately change the failure, measurement, policy, or workflow in the stem; if it would not, it should be eliminated.

• Question 98:

  A wireless engineer must manage scheduled maintenance for a guest WLAN that uses Cisco Catalyst Center as the primary monitoring solution. The engineer must coordinate downtime and verify that all services resume as intended after planned tasks are complete. The network supports multiple high-availability configurations and relies heavily on consistent visibility into device health. Event logging and alerting must be ensured throughout maintenance windows, and the maintenance process must be centrally managed.

  Which process meets the requirements?

  A. Monitor the Device 360 dashboard.
  B. Monitor the device in Cisco Spaces.
  C. Use the WLC dashboard.
  D. Use scheduled maintenance for the device.
  D. Use scheduled maintenance for the device.

  ---

  Explanation

  The answer follows from the requirement itself: A wireless engineer must manage scheduled maintenance for a guest WLAN that uses Cisco Catalyst Center as the primary monitoring solution. The engineer must coordinate downtime and verify that all services resume as intended after planned tasks are complete. Use scheduled maintenance for the device. is the response that matches that requirement.

  Guest wireless designs must combine onboarding with isolation. The portal, redirect ACL, policy profile, VLAN mapping, and peer blocking controls serve different parts of that design. The chosen behavior satisfies the guest access requirement because it supports the requested user flow or segmentation instead of merely changing a generic WLAN parameter.

  Monitor the Device 360 dashboard. does not provide the specific RF, security, forwarding, management, or automation behavior that is required. Monitor the device in Cisco Spaces. would be considered only for a different symptom or design goal. Use the WLC dashboard. can sound related, but it does not own the behavior being tested.

  A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 99:

  What is the primary modulation technology used by 802.11ax in wireless communications?

  A. frequency hopping spread spectrum
  B. direct sequence spread spectrum
  C. orthogonal frequency-division multiple access
  D. Quadrature Amplitude Modulation OFDMA
  C. orthogonal frequency-division multiple access

  ---

  Explanation

  The stem narrows the problem to What is the primary modulation technology used by 802.11ax in wireless communications? In that context, orthogonal frequency-division multiple access is the setting or feature that applies.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The chosen behavior maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  frequency hopping spread spectrum is too broad or aimed at the wrong layer for this scenario. direct sequence spread spectrum does not provide the specific RF, security, forwarding, management, or automation behavior that is required. Quadrature Amplitude Modulation OFDMA would be considered only for a different symptom or design goal.

  For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.

  A complete review also checks whether the choice would still solve the problem if all other settings stayed the same. That test favors the correct choice because it changes the feature, protocol, or policy named by the question. The distractors may be legitimate Cisco wireless concepts, but they would send the engineer toward a different task and leave the stated requirement unresolved.

• Question 100:

  What is used for measuring gain on a Wi-Fi antenna?

  A. length of the antenna
  B. decibels relative to dBi
  C. voltage against dBm
  D. blend of analog and digital signals
  B. decibels relative to dBi

  ---

  Explanation

  The answer follows from the requirement itself: What is used for measuring gain on a Wi-Fi antenna? decibels relative to dBi is the response that matches that requirement.

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. The chosen setting is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  length of the antenna omits the part of the configuration that actually enforces the requested outcome. voltage against dBm shifts attention away from the condition that the client, AP, or controller must satisfy. blend of analog and digital signals belongs to a different workflow and would leave the stated condition unresolved.

  The key lesson is that Cisco wireless features are usually scoped tightly, and the scope determines whether a choice is usable.

  A complete review also checks whether the choice would still solve the problem if all other settings stayed the same. That test favors the correct choice because it changes the feature, protocol, or policy named by the question. The distractors may be legitimate Cisco wireless concepts, but they would send the engineer toward a different task and leave the stated requirement unresolved.