Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 101:

  An engineer is migrating to a new Cisco Catalyst CW9800-H1 WLC to modernize the wireless infrastructure and enable advanced monitoring capabilities. The organization operates more than 150 access points and uses Cisco Catalyst Center for centralized network management and assurance. As part of the deployment, the engineer must enable wireless service assurance and wireless telemetry to monitor client connectivity, roaming behavior, and performance metrics across the wireless network.

  Which configuration must be applied in Cisco Catalyst Center when onboarding the WLC?

  A. Configure CLI and SNMP credentials and the NETCONF port during device discovery and ensure that device controllability is enabled under device settings. When discovered, assign the WLC and APs to a site with wireless telemetry enabled.
  B. Configure CLI and SNMP credentials and the NETCONF port during device discovery and ensure that wireless telemetry is enabled under system settings. When discovered, assign the WLC to a site with device controllability enabled.
  C. Enable CLI, SNMP, and NETCONF credentials during device discovery and ensure that wireless assurance is enabled globally. When discovered, assign the WLC to a site with device controllability enabled.
  D. Enable CLI, SNMP, and NETCONF credentials during device discovery and ensure that device controllability is enabled globally. When discovered, assign the WLC to a site with wireless assurance enabled.
  D. Enable CLI, SNMP, and NETCONF credentials during device discovery and ensure that device controllability is enabled globally. When discovered, assign the WLC to a site with wireless assurance enabled.

  ---

  Explanation

  Enable CLI, SNMP, and NETCONF credentials during device discovery and ensure that device controllability is enabled globally. When discovered, assign the WLC to a site with wireless assurance enabled. fits because the item is asking about this condition: An engineer is migrating to a new Cisco Catalyst CW9800- H1 WLC to modernize the wireless infrastructure and enable advanced monitoring capabilities. The organization operates more than 150 access points and uses Cisco Catalyst Center for centralized network management and assurance.

  Catalyst 9800 questions often test object ownership. The WLAN profile identifies the SSID, the policy profile carries client policy, and tags bind those objects to APs. The chosen behavior belongs to the object that owns the requested behavior, so it is more precise than a command that changes RF settings, AP join behavior, or an unrelated profile.

  Configure CLI and SNMP credentials and the NETCONF port during device discovery and ensure that device controllability is enabled under device settings. When discovered, assign the WLC and APs to a site with wireless telemetry enabled. would be considered only for a different symptom or design goal.

  Configure CLI and SNMP credentials and the NETCONF port during device discovery and ensure that wireless telemetry is enabled under system settings. When discovered, assign the WLC to a site with device controllability enabled. can sound related, but it does not own the behavior being tested. Enable CLI, SNMP, and NETCONF credentials during device discovery and ensure that wireless assurance is enabled globally. When discovered, assign the WLC to a site with device controllability enabled. omits the part of the configuration that actually enforces the requested outcome.

  The distractors are plausible only if the problem is misread as a different workflow.

• Question 102:

  A staff WLAN must authenticate users against Cisco ISE using WPA2-Enterprise. The RADIUS server group and authentication method list are already configured on the WLC.

  Which WLAN security setting applies the external authentication method to clients?

  A. Enable WPA2-Personal and configure an ASCII preshared key.
  B. Disable all Layer 2 security and use open authentication only.
  C. Enable 802.1X authentication and reference the authentication list.
  D. Configure client exclusion with a 300-second timeout.
  C. Enable 802.1X authentication and reference the authentication list.

  ---

  Explanation

  Enable 802.1X authentication and reference the authentication list. is the practical selection once the question is reduced to its main requirement: A staff WLAN must authenticate users against Cisco ISE using WPA2-Enterprise. The RADIUS server group and authentication method list are already configured on the WLC. Which WLAN security setting applies the external authentication method to clients?

  The useful clue is: A staff WLAN must authenticate users against Cisco ISE using WPA2-Enterprise. The RADIUS server group and authentication method list are already configured on the WLC. Which WLAN security setting applies the external authentication method to clients? In that context, Enable 802.1X authentication and reference the authentication list. is the answer that aligns with the required behavior.

  Antenna questions are about pattern and energy concentration. Gain changes how energy is focused, not the authentication method, VLAN assignment, or controller policy. That selection matches the coverage shape or gain behavior described in the stem, which is why it is preferred over unrelated wireless features.

  Enable WPA2-Personal and configure an ASCII preshared key. may be useful elsewhere, but it does not apply the control that the stem is asking for. Disable all Layer 2 security and use open authentication only. changes an adjacent setting instead of the mechanism that produces the required result. Configure client exclusion with a 300-second timeout. addresses a different failure domain, so it would not close the gap described here. That is why the correct selection follows the requirement directly instead of merely belonging to the same Cisco wireless product family.

• Question 103:

  How does the optimized roaming function operate in a WLC implementation?

  A. It disassociates clients when the RSSI is lower than the set threshold.
  B. It is integrated with external services for client wireless experience.
  C. Device locations are determined through peer-to-peer beacons.
  D. Load balancing is statically defined for all locations.
  A. It disassociates clients when the RSSI is lower than the set threshold.

  ---

  Explanation

  This scenario centers on How does the optimized roaming function operate in a WLC implementation? The response It disassociates clients when the RSSI is lower than the set threshold. works at that same control point.

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That configuration is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  It is integrated with external services for client wireless experience. shifts attention away from the condition that the client, AP, or controller must satisfy. Device locations are determined through peer-to-peer beacons. belongs to a different workflow and would leave the stated condition unresolved. Load balancing is statically defined for all locations. may be useful elsewhere, but it does not apply the control that the stem is asking for.

  The same logic applies on real deployments: fix the component that owns the failure domain first, then validate adjacent services.

• Question 104:

  Which process allows continuous IP address retention in a wireless network during roaming?

  A. static VLAN assignment policy
  B. Layer 3 roaming
  C. deferred probe response technique
  D. redundant RF profile mapping
  B. Layer 3 roaming

  ---

  Explanation

  A direct reading of the item leads to Layer 3 roaming, because the stated requirement is Which process allows continuous IP address retention in a wireless network during roaming? Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The selected mechanism maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  static VLAN assignment policy does not provide the specific RF, security, forwarding, management, or automation behavior that is required. deferred probe response technique would be considered only for a different symptom or design goal. redundant RF profile mapping can sound related, but it does not own the behavior being tested.

  A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

  A complete review also checks whether the choice would still solve the problem if all other settings stayed the same. That test favors the correct choice because it changes the feature, protocol, or policy named by the question. The distractors may be legitimate Cisco wireless concepts, but they would send the engineer toward a different task and leave the stated requirement unresolved.

• Question 105:

  What defines device sensitivity in a wireless environment?

  A. capability to process the signal
  B. detection of redundant gateways
  C. synchronization of beacon intervals
  D. implementation of key refresh schedules
  A. capability to process the signal

  ---

  Explanation

  capability to process the signal is preferred because it changes the behavior described here: What defines device sensitivity in a wireless environment?

  The selection capability to process the signal should be read against the core requirement: What defines device sensitivity in a wireless environment? It is the only response that works at the same layer as that requirement. This question is testing whether the requirement is matched to the feature that actually owns it. Many Cisco wireless terms are related, but only one usually changes the described behavior. That selection is preferred because it applies to the exact condition in the stem, while the remaining choices solve different operational or configuration problems. detection of redundant gateways can sound related, but it does not own the behavior being tested. synchronization of beacon intervals omits the part of the configuration that actually enforces the requested outcome. implementation of key refresh schedules shifts attention away from the condition that the client, AP, or controller must satisfy. In production troubleshooting, that distinction matters because changing the wrong layer can leave the original failure untouched. A complete review also checks whether the choice would still solve the problem if all other settings stayed the same. That test favors the correct choice because it changes the feature, protocol, or policy named by the question. The distractors may be legitimate Cisco wireless concepts, but they would send the engineer toward a different task and leave the stated requirement unresolved.

• Question 106:

  Which hierarchy in a YANG data modeling approach describes a relationship in the context of NETCONF device configuration?

  A. object and attribute model
  B. child and parent structure
  C. hub and spoke model
  D. tree and leaf-based structure
  D. tree and leaf-based structure

  ---

  Explanation

  The answer follows from the requirement itself: Which hierarchy in a YANG data modeling approach describes a relationship in the context of NETCONF device configuration? tree and leaf-based structure is the response that matches that requirement.

  Automation questions are best answered by separating transport, model, and parsing roles. NETCONF transports operations, YANG defines the data structure, JSON parsing creates usable objects, and code methods retrieve values. This feature performs the role named in the question; the alternatives are different programming or automation concepts and would not produce the requested result.

  object and attribute model changes an adjacent setting instead of the mechanism that produces the required result. child and parent structure addresses a different failure domain, so it would not close the gap described here. hub and spoke model is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.

• Question 107:

  Which feature does bridge mode provide in a Cisco wireless mesh architecture?

  A. It enables point-to-point communication between network segments.
  B. It switches all traffic passing through the AP to 2.4 GHz by default.
  C. It adjusts RF transmit power on any neighbor nodes.
  D. It communicates with WAN edge by default.
  A. It enables point-to-point communication between network segments.

  ---

  Explanation

  It enables point-to-point communication between network segments. is the practical selection once the question is reduced to its main requirement: Which feature does bridge mode provide in a Cisco wireless mesh architecture?

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. This choice is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  It switches all traffic passing through the AP to 2.4 GHz by default. would be considered only for a different symptom or design goal. It adjusts RF transmit power on any neighbor nodes. can sound related, but it does not own the behavior being tested. It communicates with WAN edge by default. omits the part of the configuration that actually enforces the requested outcome.

  The distractors are plausible only if the problem is misread as a different workflow.

• Question 108:

  A company wants wireless access decisions to include user identity and endpoint posture, while operations staff need location analytics for wireless devices.

  Which integration set best meets the requirement?

  A. DNS only for identity, local WLC users for posture, and syslog for location analytics
  B. Cisco ISE for identity and posture, MDM for device compliance, and Cisco Spaces for location analytics
  C. SNMP polling for posture, DHCP option 43 for identity, and NTP for location analytics
  D. WPA2-PSK for identity, static VLANs for posture, and AP console logs for location analytics
  B. Cisco ISE for identity and posture, MDM for device compliance, and Cisco Spaces for location analytics

  ---

  Explanation

  The useful clue is this requirement: A company wants wireless access decisions to include user identity and endpoint posture, while operations staff need location analytics for wireless devices. Which integration set best meets the requirement? That clue points to Cisco ISE for identity and posture, MDM for device compliance, and Cisco Spaces for location analytics.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. The chosen setting is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  DNS only for identity, local WLC users for posture, and syslog for location analytics belongs to a different workflow and would leave the stated condition unresolved. SNMP polling for posture, DHCP option 43 for identity, and NTP for location analytics may be useful elsewhere, but it does not apply the control that the stem is asking for. WPA2-PSK for identity, static VLANs for posture, and AP console logs for location analytics changes an adjacent setting instead of the mechanism that produces the required result.

  The tested habit is to avoid picking a familiar wireless term unless it changes the exact condition in the question.

• Question 109:

  A small office WLAN must use WPA2-Personal with a shared ASCII passphrase. The WLAN does not use RADIUS or client certificates.

  Which security configuration is required?

  A. Configure an 802.1X authentication list for the WLAN.
  B. Configure a PSK authentication key for the WLAN.
  C. Enable central web authentication with a redirect ACL.
  D. Enable NAC posture validation on the policy profile.
  B. Configure a PSK authentication key for the WLAN.

  ---

  Explanation

  The question is not asking for a generally related feature; it is asking about A small office WLAN must use WPA2-Personal with a shared ASCII passphrase. The WLAN does not use RADIUS or client certificates.

  Which security configuration is required? That makes Configure a PSK authentication key for the WLAN. the relevant choice.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. The chosen behavior is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  Configure an 802.1X authentication list for the WLAN. addresses a different failure domain, so it would not close the gap described here. Enable central web authentication with a redirect ACL. is too broad or aimed at the wrong layer for this scenario. Enable NAC posture validation on the policy profile. does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

• Question 110:

  To double the range of a transmitter, which value must the transmitter be changed to if it is currently at 17 dBm?

  A. 20 dBm
  B. 27 dBm
  C. 100 dBm
  D. 17 dBm
  B. 27 dBm

  ---

  Explanation

  The question is not asking for a generally related feature; it is asking about To double the range of a transmitter, which value must the transmitter be changed to if it is currently at 17 dBm? That makes 27 dBm the relevant choice.

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. This feature is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  20 dBm belongs to a different workflow and would leave the stated condition unresolved. 100 dBm may be useful elsewhere, but it does not apply the control that the stem is asking for. 17 dBm changes an adjacent setting instead of the mechanism that produces the required result.

  The tested habit is to avoid picking a familiar wireless term unless it changes the exact condition in the question.