Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 111:

  A persistent network issue is impacting connectivity for workstations in a training lab when connecting to a lab SSID. Wireless logs show clients never receive a DHCP offer when trying to obtain an IP address. The APs are operating in Local mode. Network monitoring systems indicate optimal signal quality and radio performance, VLAN assignments for the affected SSID have been configured, and all clients are affected.

  Which action resolves the issue?

  A. Release or renew the client IP configuration.
  B. Enable DHCP option 43.
  C. Configure DHCP relay.
  D. Disable multicast on the WLC.
  C. Configure DHCP relay.

  ---

  Explanation

  The requirement can be read as follows: A persistent network issue is impacting connectivity for workstations in a training lab when connecting to a lab SSID. Wireless logs show clients never receive a DHCP offer when trying to obtain an IP address. The APs are operating in Local mode. The matching behavior is Configure DHCP relay..

  AP join questions are about how the AP discovers and reaches a controller. Static configuration, DNS discovery, DHCP option 43, and fallback controller settings are separate discovery tools. The chosen behavior gives the AP the controller information required by this scenario, while the distractors either name the wrong discovery method or configure a different AP function.

  Release or renew the client IP configuration. addresses a different failure domain, so it would not close the gap described here. Enable DHCP option 43. is too broad or aimed at the wrong layer for this scenario.

  Disable multicast on the WLC. does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

• Question 112:

  A medium-sized enterprise must provide wireless internet to visitors in their lobby using a Cisco 9800 WLC. The solution must meet these requirements:

  Ensure that guests cannot access the corporate LAN.

  Guests are redirected to a login page before browsing.

  The guest network must use a separate VLAN from internal users.

  Access must be limited to web browsing only.

  Guest access does not require any preshared keys or certificates.

  Which two actions must be taken to achieve this solution? (Choose two.)

  A. Create a WLAN that uses a web policy and points to a consent parameter map.
  B. Apply a webauth WLAN with mDNS mode set to drop.
  C. Configure a policy profile that uses an external only ACL and guest VLAN.
  D. Implement a policy profile with p2p blocking enabled and a guest VLAN.
  E. Deploy a WLAN policy that points wireless users to a webauth parameter map.
  A. Create a WLAN that uses a web policy and points to a consent parameter map.
  E. Deploy a WLAN policy that points wireless users to a webauth parameter map.

  ---

  Explanation

  For this scenario, Create a WLAN that uses a web policy and points to a consent parameter map.; Deploy a WLAN policy that points wireless users to a webauth parameter map. is not just related terminology; it is the part that satisfies A medium-sized enterprise must provide wireless internet to visitors in their lobby using a Cisco 9800 WLC. The solution must meet these requirements: Ensure that guests cannot access the corporate LAN. Guests are redirected to a login page before browsing.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This feature is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  Apply a webauth WLAN with mDNS mode set to drop. can sound related, but it does not own the behavior being tested. Configure a policy profile that uses an external only ACL and guest VLAN. omits the part of the configuration that actually enforces the requested outcome. Implement a policy profile with p2p blocking enabled and a guest VLAN. shifts attention away from the condition that the client, AP, or controller must satisfy.

  In production troubleshooting, that distinction matters because changing the wrong layer can leave the original failure untouched.

• Question 113:

  A network engineer must ensure that guest users connecting to a Cisco 9800 WLC are assigned IP addresses from a specific subnet that is separate from corporate users. The guest network must support at least 200 simultaneous connections and isolate traffic from internal devices. The DHCP server must allocate addresses only within the 10.20.30.0/24 subnet.

  Which action must the network engineer take to accomplish this task?

  A. Set up a unique policy tag on the guest WLAN and use a shared DHCP pool.
  B. Create a dedicated guest interface and map it to the guest policy profile for the guest WLAN.
  C. Assign a unique policy tag to the guest WLAN and use a shared DHCP pool with DHCP option 43.
  D. Use static IP address assignment for the guest WLAN interface and use ACLs for separation.
  B. Create a dedicated guest interface and map it to the guest policy profile for the guest WLAN.

  ---

  Explanation

  A direct reading of the item leads to Create a dedicated guest interface and map it to the guest policy profile for the guest WLAN., because the stated requirement is A network engineer must ensure that guest users connecting to a Cisco 9800 WLC are assigned IP addresses from a specific subnet that is separate from corporate users. The guest network must support at least 200 simultaneous connections and isolate traffic from internal devices.

  Guest wireless designs must combine onboarding with isolation. The portal, redirect ACL, policy profile, VLAN mapping, and peer blocking controls serve different parts of that design. This feature satisfies the guest access requirement because it supports the requested user flow or segmentation instead of merely changing a generic WLAN parameter.

  Set up a unique policy tag on the guest WLAN and use a shared DHCP pool. would be considered only for a different symptom or design goal. Assign a unique policy tag to the guest WLAN and use a shared DHCP pool with DHCP option 43. can sound related, but it does not own the behavior being tested. Use static IP address assignment for the guest WLAN interface and use ACLs for separation. omits the part of the configuration that actually enforces the requested outcome.

  The distractors are plausible only if the problem is misread as a different workflow.

• Question 114:

  How does MIMO operate during wireless transmission?

  A. It uses multiple radio paths to increase throughput and reliability.
  B. It applies frequency hopping to prevent crosstalk.
  C. It shares a single connection among endpoints for coverage expansion.
  D. It limits data paths to a single antenna for error reduction.
  A. It uses multiple radio paths to increase throughput and reliability.

  ---

  Explanation

  For this scenario, It uses multiple radio paths to increase throughput and reliability. is not just related terminology; it is the part that satisfies.

  How does MIMO operate during wireless transmission?

  Antenna questions are about pattern and energy concentration. Gain changes how energy is focused, not the authentication method, VLAN assignment, or controller policy. This choice matches the coverage shape or gain behavior described in the stem, which is why it is preferred over unrelated wireless features.

  It applies frequency hopping to prevent crosstalk. is too broad or aimed at the wrong layer for this scenario.

  It shares a single connection among endpoints for coverage expansion. does not provide the specific RF, security, forwarding, management, or automation behavior that is required. It limits data paths to a single antenna for error reduction. would be considered only for a different symptom or design goal. For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.

• Question 115:

  Refer to the exhibit.

  

  A wireless controller is deployed at a branch location to facilitate secure client connectivity.

  A network engineer configures one WLAN using WPA2 Personal authentication and activates the preshared key method to align with company security policies.

  Which action must be taken to enable the client to connect to the WLAN?

  A. Enter the preshared key at the WLAN security configuration prompt
  B. Enable MAC filtering for security group assignment
  C. Configure Active Directory integration for WLAN authentication
  D. Import a client certificate for WPA2 authentication
  A. Enter the preshared key at the WLAN security configuration prompt

  ---

  Explanation

  The key is to match the requested effect, A wireless controller is deployed at a branch location to facilitate secure client connectivity. A network engineer configures one WLAN using WPA2 Personal authentication and activates the preshared key method to align with company security policies., with the feature or command that actually produces it; that points to Enter the preshared key at the WLAN security configuration prompt.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This choice is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  Enable MAC filtering for security group assignment is too broad or aimed at the wrong layer for this scenario. Configure Active Directory integration for WLAN authentication does not provide the specific RF, security, forwarding, management, or automation behavior that is required. Import a client certificate for WPA2 authentication would be considered only for a different symptom or design goal.

  For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.

• Question 116:

  Which process is managed by Ministry of Internal Affairs and Communications in Japan?

  A. RF technical standards
  B. manufacturing batch inspection
  C. customer onboarding documentation
  D. supplier chain evaluation
  A. RF technical standards

  ---

  Explanation

  When the stem is reduced to Which process is managed by Ministry of Internal Affairs and Communications in Japan?, RF technical standards is the choice that remains technically aligned.

  This question is testing whether the requirement is matched to the feature that actually owns it. Many Cisco wireless terms are related, but only one usually changes the described behavior. This choice is preferred because it applies to the exact condition in the stem, while the remaining choices solve different operational or configuration problems.

  manufacturing batch inspection belongs to a different workflow and would leave the stated condition unresolved. customer onboarding documentation may be useful elsewhere, but it does not apply the control that the stem is asking for. supplier chain evaluation changes an adjacent setting instead of the mechanism that produces the required result.

  The tested habit is to avoid picking a familiar wireless term unless it changes the exact condition in the question.

  That reading also helps with the distractors: they may name real wireless concepts, but they do not calculate, configure, or enforce the specific behavior requested here. In review, ask whether applying the choice would immediately change the failure, measurement, policy, or workflow in the stem; if it would not, it should be eliminated.

• Question 117:

  A stadium design requires coverage for a long seating section without wasting RF energy behind the access point. The engineer selects a high-gain patch antenna instead of an omnidirectional antenna.

  Which antenna characteristic is the engineer using?

  A. Focused energy in a narrower coverage pattern
  B. Lower received signal strength at the same distance
  C. Automatic removal of co-channel interference
  D. Conversion of 5 GHz signals into 2.4 GHz signals
  A. Focused energy in a narrower coverage pattern

  ---

  Explanation

  Focused energy in a narrower coverage pattern is the practical selection once the question is reduced to its main requirement: A stadium design requires coverage for a long seating section without wasting RF energy behind the access point. The engineer selects a high-gain patch antenna instead of an omnidirectional antenna. Which antenna characteristic is the engineer using?

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That configuration is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  Lower received signal strength at the same distance is too broad or aimed at the wrong layer for this scenario. Automatic removal of co-channel interference does not provide the specific RF, security, forwarding, management, or automation behavior that is required. Conversion of 5 GHz signals into 2.4 GHz signals would be considered only for a different symptom or design goal.

  For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.

• Question 118:

  Refer to the exhibit.

  

  A network administrator is working on a Cisco Catalyst 9800 WLC running Cisco IOS XE Software to enable user access for staff smartphones using WPA2-Enterprise with RADIUS. The administrator verifies the external authentication configuration and plans to test network connectivity.

  Which configuration command must be added to the box in the code to configure the WLC to support authentication with an external server?

  A. security wpa enable
  B. security dot1x authentication-list rad-group
  C. security dot1x method-list rad-group
  D. security wpa wpa2 akm dot1x
  D. security wpa wpa2 akm dot1x

  ---

  Explanation

  security wpa wpa2 akm dot1x is preferred because it changes the behavior described here: A network administrator is working on a Cisco Catalyst 9800 WLC running Cisco IOS XE Software to enable user access for staff smartphones using WPA2-Enterprise with RADIUS. The administrator verifies the external authentication configuration and plans to test network connectivity.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. The selected mechanism is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  security wpa enable is too broad or aimed at the wrong layer for this scenario. security dot1x authentication-list rad-group does not provide the specific RF, security, forwarding, management, or automation behavior that is required. security dot1x method-list rad-group would be considered only for a different symptom or design goal.

  For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.

• Question 119:

  In an RF environment, what does high interference result in?

  A. unreliable frame aggregation
  B. inconsistent channel performance
  C. scheduled contention access
  D. extended coverage patterns
  B. inconsistent channel performance

  ---

  Explanation

  inconsistent channel performance is the practical selection once the question is reduced to its main requirement: In an RF environment, what does high interference result in?

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. The chosen setting is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  unreliable frame aggregation does not provide the specific RF, security, forwarding, management, or automation behavior that is required. scheduled contention access would be considered only for a different symptom or design goal. extended coverage patterns can sound related, but it does not own the behavior being tested.

  A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

  A complete review also checks whether the choice would still solve the problem if all other settings stayed the same. That test favors the correct choice because it changes the feature, protocol, or policy named by the question. The distractors may be legitimate Cisco wireless concepts, but they would send the engineer toward a different task and leave the stated requirement unresolved.

• Question 120:

  A wireless administrator must configure detailed and comprehensive monitoring for client devices across branch locations. The team wants to streamline operations for faster response during performance degradation. To support the organization's growth, the administrator needs a centralized reporting platform that displays aggregated data.

  Which solution must the administrator use to monitor the clients in the network?

  A. Implement central syslog server.
  B. Use Cisco Catalyst Center Assurance.
  C. Run show logging on WLC CLI.
  D. Use the WLC dashboard.
  B. Use Cisco Catalyst Center Assurance.

  ---

  Explanation

  A direct reading of the item leads to Use Cisco Catalyst Center Assurance., because the stated requirement is A wireless administrator must configure detailed and comprehensive monitoring for client devices across branch locations. The team wants to streamline operations for faster response during performance degradation. To support the organization's growth.

  Branch designs usually test the difference between central management and local data handling.

  FlexConnect behavior is chosen when the AP must keep useful service at the site while still being managed by the controller. The chosen setting fits that branch requirement because it changes forwarding or authentication behavior at the AP site rather than relying on an always-available central path.

  Implement central syslog server. changes an adjacent setting instead of the mechanism that produces the required result. Run show logging on WLC CLI. addresses a different failure domain, so it would not close the gap described here. Use the WLC dashboard. is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.