Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 31:

  A help desk analyst needs a centralized view of a wireless client's onboarding history, RSSI, SNR, roaming events, and failure reasons across the campus.

  Which tool should the analyst use?

  A. AP console session history
  B. Cisco Catalyst Center Assurance Client 360
  C. DHCP option 43 logs only
  D. Local browser cache on the client
  B. Cisco Catalyst Center Assurance Client 360

  ---

  Explanation

  A direct reading of the item leads to Cisco Catalyst Center Assurance Client 360, because the stated requirement is A help desk analyst needs a centralized view of a wireless client's onboarding history, RSSI, SNR, roaming events, and failure reasons across the campus. Which tool should the analyst use?

  The scenario is not asking for every related wireless feature; it is asking what satisfies this condition: A help desk analyst needs a centralized view of a wireless client's onboarding history, RSSI, SNR, roaming events, and failure reasons across the campus. Which tool should the analyst use? That points to Cisco Catalyst Center Assurance Client 360. RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That selection is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings. AP console session history omits the part of the configuration that actually enforces the requested outcome. DHCP option 43 logs only shifts attention away from the condition that the client, AP, or controller must satisfy. Local browser cache on the client belongs to a different workflow and would leave the stated condition unresolved. The key lesson is that Cisco wireless features are usually scoped tightly, and the scope determines whether a choice is usable.

• Question 32:

  Refer to the exhibit.

  

  An engineer must configure a wireless guest WLAN, which requires clients to use VLAN 10 for a deployment at site A.

  Based on the configuration commands shown, which additional configuration meets the requirements?

  A. wlan guest-ssid 4 guest-ssidaccess vlan 10no shutdown
  B. wlan guest-ssid 4 guest-ssidvlan 10no shutdown
  C. wlan policy profile guest-policyaccess vlan 10no shutdown
  D. wireless profile policy guest-policyvlan 10no shutdown
  A. wlan guest-ssid 4 guest-ssidaccess vlan 10no shutdown

  ---

  Explanation

  For this scenario, wlan guest-ssid 4 guest-ssidaccess vlan 10no shutdown is not just related terminology; it is the part that satisfies An engineer must configure a wireless guest WLAN, which requires clients to use VLAN 10 for a deployment at site A. Based on the configuration commands shown, which additional configuration meets the requirements?

  The scenario is not asking for every related wireless feature; it is asking what satisfies this condition: An engineer must configure a wireless guest WLAN, which requires clients to use VLAN 10 for a deployment at site A. Based on the configuration commands shown, which additional configuration meets the requirements? That points to wlan guest-ssid 4 guest-ssidaccess vlan 10no shutdown. Guest wireless designs must combine onboarding with isolation. The portal, redirect ACL, policy profile, VLAN mapping,

  and peer blocking controls serve different parts of that design. That selection satisfies the guest access requirement because it supports the requested user flow or segmentation instead of merely changing a generic WLAN parameter. wlan guest-ssid 4 guest-ssidvlan 10no shutdown omits the part of the configuration that actually enforces the requested outcome. wlan policy profile guest-policyaccess vlan 10no shutdown shifts attention away from the condition that the client, AP, or controller must satisfy. wireless profile policy guest-policyvlan 10no shutdown belongs to a different workflow and would leave the stated condition unresolved. The key lesson is that Cisco wireless features are usually scoped tightly, and the scope determines whether a choice is usable.

• Question 33:

  What is the purpose of YANG when used with the NETCONF protocol in the context of Cisco wireless controllers?

  A. Human-readable data modeling language used to define device configuration and operational data
  B. Security protocol that encrypts configuration data during transmission between network management systems and devices.
  C. Protocol that directly transports configuration data between network devices without requiring any data modeling
  D. Proprietary Cisco scripting language used exclusively for automating wireless controller configurations
  A. Human-readable data modeling language used to define device configuration and operational data

  ---

  Explanation

  Here, Human-readable data modeling language used to define device configuration and operational data is tied to the actual requirement in the stem: What is the purpose of YANG when used with the NETCONF protocol in the context of Cisco wireless controllers?

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The selected mechanism maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Security protocol that encrypts configuration data during transmission between network management systems and devices. can sound related, but it does not own the behavior being tested. Protocol that directly transports configuration data between network devices without requiring any data modeling omits the part of the configuration that actually enforces the requested outcome. Proprietary Cisco scripting language used exclusively for automating wireless controller configurations shifts attention away from the condition that the client, AP, or controller must satisfy.

  In production troubleshooting, that distinction matters because changing the wrong layer can leave the original failure untouched.

• Question 34:

  Refer to the exhibit.

  

  A wireless controller is deployed at a branch location to facilitate guest client connectivity. A network engineer configures one WLAN using Web authentication and activates web-based method to align with company security policies.

  Which configuration enables client authentication for this WLAN?

  A. security web-auth
  B. wlan webauth 2 webauth
  C. no security wpa wpa2
  D. no security wpa akm dot1x
  A. security web-auth

  ---

  Explanation

  The requirement can be read as follows: method to align with company security policies. Which configuration enables client authentication for this WLAN? The matching behavior is security web-auth.

  The selection security web-auth should be read against the core requirement: method to align with company security policies. Which configuration enables client authentication for this WLAN? It is the only response that works at the same layer as that requirement. Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. That selection is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area. wlan webauth 2 webauth changes an adjacent setting instead of the mechanism that produces the required result. no security wpa wpa2 addresses a different failure domain, so it would not close the gap described here. no security wpa akm dot1x is too broad or aimed at the wrong layer for this scenario. This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.

• Question 35:

  An engineer needs an AP to capture all 802.11 frames over the air and forward them to a protocol analyzer during a troubleshooting window. The AP will not serve clients while this is active.

  Which AP mode should be used?

  A. Local
  B. FlexConnect
  C. Bridge
  D. Sniffer
  D. Sniffer

  ---

  Explanation

  When the stem is reduced to An engineer needs an AP to capture all 802.11 frames over the air and forward them to a protocol analyzer during a troubleshooting window. The AP will not serve clients while this is active. Which AP mode should be used?, Sniffer is the choice that remains technically aligned.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The chosen behavior maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Local would be considered only for a different symptom or design goal. FlexConnect can sound related, but it does not own the behavior being tested. Bridge omits the part of the configuration that actually enforces the requested outcome.

  The distractors are plausible only if the problem is misread as a different workflow.

• Question 36:

  A university is deploying Cisco Catalyst 9176 APs at several satellite campuses, each with its own subnet and DNS services.

  The APs will be shipped with only their MAC addresses preregistered on the WLC.

  The satellite campuses do not use DHCP option 43, but they have access to a central DNS server. IT staff want APs to discover and join the Catalyst 9800 WLC automatically without site visits.

  Which solution must the IT staff implement?

  A. Assign static IP addresses to all 9176 APs and configure the controller to be the DNS server.
  B. Set up a multicast group on each different AP subnet to enable automatic controller discovery.
  C. Create DNS entrycisco-capwap-controller.localdomainthat resolves to the WLC management IP address.
  D. Configure a DNS recordap-discoverywith the controller virtual IP address.
  C. Create DNS entrycisco-capwap-controller.localdomainthat resolves to the WLC management IP address.

  ---

  Explanation

  This scenario centers on A university is deploying Cisco Catalyst 9176 APs at several satellite campuses, each with its own subnet and DNS services. The APs will be shipped with only their MAC addresses preregistered on the WLC. The satellite campuses do not use DHCP option 43, but they have access to a central DNS server. The response Create DNS entrycisco-capwap-controller.localdomainthat resolves to the WLC management IP address. works at that same control point. AP join questions are about how the AP discovers and reaches a controller. Static configuration, DNS discovery, DHCP option 43, and fallback controller settings are separate discovery tools. The selected mechanism gives the AP the controller information required by this scenario, while the distractors either name the wrong discovery method or configure a different AP function.

  Assign static IP addresses to all 9176 APs and configure the controller to be the DNS server. addresses a different failure domain, so it would not close the gap described here. Set up a multicast group on each different AP subnet to enable automatic controller discovery. is too broad or aimed at the wrong layer for this scenario. Configure a DNS recordap-discoverywith the controller virtual IP address. does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

• Question 37:

  A corporate WLAN requires certificate-based mutual authentication. Users should not authenticate with passwords, and both the client and server certificates must be validated.

  Which EAP method should be selected?

  A. PEAP-MSCHAPv2
  B. WPA2-Personal
  C. WebAuth
  D. EAP-TLS
  D. EAP-TLS

  ---

  Explanation

  This scenario centers on A corporate WLAN requires certificate-based mutual authentication. Users should not authenticate with passwords, and both the client and server certificates must be validated. Which EAP method should be selected? The response EAP-TLS works at that same control point.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This choice is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  PEAP-MSCHAPv2 changes an adjacent setting instead of the mechanism that produces the required result. WPA2-Personal addresses a different failure domain, so it would not close the gap described here.

  WebAuth is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.

• Question 38:

  New Catalyst APs are installed on subnets that cannot use CAPWAP broadcast discovery. DHCP option 43 is not available, but DNS is centrally managed.

  Which DNS record should be created to allow automatic WLC discovery?

  A. wlc-radius-server
  B. wlan-policy-profile
  C. ap-flexconnect-group
  D. cisco-capwap-controller
  D. cisco-capwap-controller

  ---

  Explanation

  The condition to solve is New Catalyst APs are installed on subnets that cannot use CAPWAP broadcast discovery. DHCP option 43 is not available, but DNS is centrally managed. Which DNS record should be created to allow automatic WLC discovery? cisco-capwap-controller is aligned with that condition rather than with a neighboring workflow.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This feature is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  wlc-radius-server changes an adjacent setting instead of the mechanism that produces the required result. wlan-policy-profile addresses a different failure domain, so it would not close the gap described here. ap-flexconnect-group is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.

• Question 39:

  What does an elevated noise floor indicate in an RF environment?

  A. decreased link reliability
  B. stable time synchronization
  C. enhanced spectrum allocation
  D. minimized bandwidth demand
  A. decreased link reliability

  ---

  Explanation

  The question is not asking for a generally related feature; it is asking about.

  What does an elevated noise floor indicate in an RF environment? That makes decreased link reliability the relevant choice.

  The useful clue is: What does an elevated noise floor indicate in an RF environment? In that context, decreased link reliability is the answer that aligns with the required behavior. RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That selection is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings. stable time synchronization may be useful elsewhere, but it does not apply the control that the stem is asking for. enhanced spectrum allocation changes an adjacent setting instead of the mechanism that produces the required result. minimized bandwidth demand addresses a different failure domain, so it would not close the gap described here. That is why the correct selection follows the requirement directly instead of merely belonging to the same Cisco wireless product family.

• Question 40:

  A wireless team wants application visibility for clients on a Catalyst 9800 WLC. The requirement is to classify traffic by application using NBAR2 so reports show usage by application category.

  Where should AVC be enabled?

  A. On the AP console line
  B. On the RADIUS shared secret
  C. On the DNS discovery record
  D. On the policy profile applied to the WLAN
  D. On the policy profile applied to the WLAN

  ---

  Explanation

  The condition to solve is A wireless team wants application visibility for clients on a Catalyst 9800 WLC.

  The requirement is to classify traffic by application using NBAR2 so reports show usage by application category. Where should AVC be enabled? On the policy profile applied to the WLAN is aligned with that condition rather than with a neighboring workflow.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. This choice maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  On the AP console line shifts attention away from the condition that the client, AP, or controller must satisfy. On the RADIUS shared secret belongs to a different workflow and would leave the stated condition unresolved. On the DNS discovery record may be useful elsewhere, but it does not apply the control that the stem is asking for.

  The same logic applies on real deployments: fix the component that owns the failure domain first, then validate adjacent services.