Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 41:

  An engineer must troubleshoot complex wireless performance issues in a large office which is using a Cisco 9176 AP. The engineer must analyze traffic patterns and identify potential sources of interference.

  The AP must capture all wireless frames in the air and send them to a remote protocol analyzer for detailed inspection. Client connectivity is not required from the AP during the troubleshooting window.

  Which CLI command must the engineer use on the WLC to enable the required AP mode for this purpose?

  A. ap name office1st mode monitor
  B. ap name office1st mode sniffer
  C. ap name office1st mode local
  D. ap name office1st mode rogue-detector
  B. ap name office1st mode sniffer

  ---

  Explanation

  The question is not asking for a generally related feature; it is asking about An engineer must troubleshoot complex wireless performance issues in a large office which is using a Cisco 9176 AP. The engineer must analyze traffic patterns and identify potential sources of interference. That makes ap name office1st mode sniffer the relevant choice.

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That configuration is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  ap name office1st mode monitor is too broad or aimed at the wrong layer for this scenario. ap name office1st mode local does not provide the specific RF, security, forwarding, management, or automation behavior that is required. ap name office1st mode rogue-detector would be considered only for a different symptom or design goal.

  For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.

• Question 42:

  An onsite engineer is working to connect devices to the wireless network using central switching in a corporate environment. Security protocols and network-specific settings must be configured as per enterprise policy. After the initial wireless settings are applied on an iOS tablet, the engineer must ensure that VLAN ID 10 is assigned on the client device to complete a successful enterprise Wi-Fi connection.

  Which action meets this requirement?

  A. Disable VLAN tagging on the WLAN and configure the APs switch port as an access port on VLAN 10 to assign the VLAN to the client device.
  B. Manually set VLAN ID 10 on the iOS tablets Wi-Fi settings to ensure VLAN 10 is allowed through the APs switch port.
  C. Configure the policy profile to use VLAN 10, and ensure the WLAN profile is mapped to it.
  D. Configure the AP to assign VLAN ID 1 by default and rely on the switch to redirect traffic to VLAN 10 based on MAC address filtering.
  C. Configure the policy profile to use VLAN 10, and ensure the WLAN profile is mapped to it.

  ---

  Explanation

  This scenario centers on An onsite engineer is working to connect devices to the wireless network using central switching in a corporate environment. Security protocols and network-specific settings must be configured as per enterprise policy. After the initial wireless settings are applied on an iOS tablet. The response Configure the policy profile to use VLAN 10, and ensure the WLAN profile is mapped to it. works

  at that same control point.

  The useful clue is: An onsite engineer is working to connect devices to the wireless network using central switching in a corporate environment. Security protocols and network-specific settings must be configured as per enterprise policy. In that context, Configure the policy profile to use VLAN 10, and ensure the WLAN

  profile is mapped to it. is the answer that aligns with the required behavior. Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. That selection is the piece that enables or applies that security behavior; the other choices either skip the external

  method, use the wrong authentication model, or affect a separate policy area. Disable VLAN tagging on the WLAN and configure the APs switch port as an access port on VLAN 10 to assign the VLAN to the

  client device. would be considered only for a different symptom or design goal. Manually set VLAN ID 10 on the iOS tablets Wi-Fi settings to ensure VLAN 10 is allowed through the APs switch port. can sound related, but it does not own the behavior being tested. Configure the AP to assign VLAN ID 1 by default and rely on the switch to redirect traffic to VLAN 10 based on MAC address filtering. omits the part of the

  configuration that actually enforces the requested outcome. The distractors are plausible only if the problem is misread as a different workflow.

• Question 43:

  An engineer has been tasked with configuring a Cisco Catalyst 9100 AP to join a WLC using a static configuration as DHCP and DNS discovery methods are not available. The engineer has set the AP hostname to 'AP053540555', and has configured the AP with a static IP address, subnet mask, and default gateway. The engineer must now configure the AP to discover the primary WLC with hostname 'WLC-PRIMARY' and IP address '192.168.100.10'.

  Which CLI command must the engineer use on the AP?

  A. capwap ap WLC-PRIMARY 192.168.100.10
  B. ap primary-base WLC-PRIMARY capwap 192.168.100.10
  C. capwap ap primary-base 192.168.100.10
  D. capwap ap primary-base WLC-PRIMARY 192.168.100.10
  D. capwap ap primary-base WLC-PRIMARY 192.168.100.10

  ---

  Explanation

  Here, capwap ap primary-base WLC-PRIMARY 192.168.100.10 is tied to the actual requirement in the stem: An engineer has been tasked with configuring a Cisco Catalyst 9100 AP to join a WLC using a static configuration as DHCP and DNS discovery methods are not available. The engineer has set the AP hostname to 'AP053540555', and has configured the AP with a static IP address, subnet mask.

  AP join questions are about how the AP discovers and reaches a controller. Static configuration, DNS discovery, DHCP option 43, and fallback controller settings are separate discovery tools. The chosen behavior gives the AP the controller information required by this scenario, while the distractors either name the wrong discovery method or configure a different AP function. capwap ap WLC-PRIMARY 192.168.100.10 may be useful elsewhere, but it does not apply the control that the stem is asking for. ap primary-base WLC-PRIMARY capwap 192.168.100.10 changes an adjacent setting instead of the mechanism that produces the required result. capwap ap primary-base 192.168.100.10 addresses a different failure domain, so it would not close the gap described here.

  That is why the correct selection follows the requirement directly instead of merely belonging to the same Cisco wireless product family.

• Question 44:

  Refer to the exhibit.

  

  An organization wants to use Cisco Spaces for location analytics, and an engineer is setting up the Cisco Catalyst 9800 WLC to send location data.

  The Spaces connector has already been configured and is operational on the WLC.

  The engineer must now configure the controller to forward telemetry data to the correct Spaces cloud endpoint using TLS to complete the integration.

  Which CLI command must be added to the box in the code?

  A. profile spaces-profile ip address 198.51.100.10 receiver tls-native
  B. receiver protocol tls-native profile spaces-profile ip address 198.51.100.10 57555
  C. receiver ip address 198.51.100.10 57555 protocol tls-native profile spaces-profile
  D. profile spaces-profile receiver 198.51.100.10 57555 protocol tls-native
  C. receiver ip address 198.51.100.10 57555 protocol tls-native profile spaces-profile

  ---

  Explanation

  receiver ip address 198.51.100.10 57555 protocol tls-native profile spaces-profile is the practical selection once the question is reduced to its main requirement: An organization wants to use Cisco Spaces for location analytics, and an engineer is setting up the Cisco Catalyst 9800 WLC to send location data. The Spaces connector has already been configured and is operational on the WLC.

  Catalyst 9800 questions often test object ownership. The WLAN profile identifies the SSID, the policy profile carries client policy, and tags bind those objects to APs. The chosen behavior belongs to the object that owns the requested behavior, so it is more precise than a command that changes RF settings, AP join behavior, or an unrelated profile. profile spaces-profile ip address 198.51.100.10 receiver tls-native changes an adjacent setting instead of the mechanism that produces the required result. receiver protocol tls-native profile spaces-profile ip address 198.51.100.10 57555 addresses a different failure domain, so it would not close the gap described here. profile spaces-profile receiver 198.51.100.10 57555 protocol tls-native is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.

• Question 45:

  Which CleanAir feature is used to avoid channels with interference from devices such as outdoor bridges and microwave ovens?

  A. Persistent Device Avoidance
  B. Spectrum Analysis
  C. Air Quality Index
  D. Channel Utilization
  A. Persistent Device Avoidance

  ---

  Explanation

  The answer follows from the requirement itself: Which CleanAir feature is used to avoid channels with interference from devices such as outdoor bridges and microwave ovens? Persistent Device Avoidance is the response that matches that requirement.

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That configuration is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  Spectrum Analysis would be considered only for a different symptom or design goal. Air Quality Index can sound related, but it does not own the behavior being tested. Channel Utilization omits the part of the configuration that actually enforces the requested outcome.

  The distractors are plausible only if the problem is misread as a different workflow.

  A complete review also checks whether the choice would still solve the problem if all other settings stayed the same. That test favors the correct choice because it changes the feature, protocol, or policy named by the question. The distractors may be legitimate Cisco wireless concepts, but they would send the engineer toward a different task and leave the stated requirement unresolved.

• Question 46:

  Refer to the exhibit.

  

  An enterprise is deploying Cisco Catalyst 9800 WLCs and is using Catalyst Center as the management platform to oversee wireless access policies. To meet the organization's compliance requirements, all wireless endpoints must be evaluated with security posture validation before gaining access.

  Which set of CLI commands must be added to the box in the code to complete the configuration?

  A. aaa-overridenac-policy
  B. wireless profile policy my-policyaaa-override
  C. aaa-overridenac
  D. wireless profile policyaaa-override
  C. aaa-overridenac

  ---

  Explanation

  In this case, the decisive fact is An enterprise is deploying Cisco Catalyst 9800 WLCs and is using Catalyst Center as the management platform to oversee wireless access policies. To meet the organization's compliance requirements, all wireless endpoints must be evaluated with security posture validation before gaining access. aaa-overridenac addresses that fact directly. Antenna questions are about pattern and energy concentration. Gain changes how energy is focused, not the authentication method, VLAN assignment, or controller policy. The chosen setting matches the coverage shape or gain behavior described in the stem, which is why it is preferred over unrelated wireless features.

  aaa-overridenac-policy may be useful elsewhere, but it does not apply the control that the stem is asking for. wireless profile policy my-policyaaa-override changes an adjacent setting instead of the mechanism that produces the required result. wireless profile policyaaa-override addresses a different failure domain, so it would not close the gap described here.

  That is why the correct selection follows the requirement directly instead of merely belonging to the same Cisco wireless product family.

• Question 47:

  A wireless engineer must manage a scheduled maintenance window for a mesh network within a network that uses Cisco Catalyst Center as the primary monitoring solution. The engineer must coordinate downtime and verify that all services resume as intended after planned tasks are complete.

  How does the engineer avoid unnecessary alerting in Cisco Catalyst Center throughout the maintenance window?

  A. Disable telemetry on the WLC
  B. Use SWIM for firmware updates on mesh APs
  C. Schedule maintenance for the devices
  D. Enable device suppression
  D. Enable device suppression

  ---

  Explanation

  In this case, the decisive fact is A wireless engineer must manage a scheduled maintenance window for a mesh network within a network that uses Cisco Catalyst Center as the primary monitoring solution. The engineer must coordinate downtime and verify that all services resume as intended after planned tasks are complete. Enable device suppression addresses that fact directly.

  The useful clue is: A wireless engineer must manage a scheduled maintenance window for a mesh network within a network that uses Cisco Catalyst Center as the primary monitoring solution. The engineer must coordinate downtime and verify that all services resume as intended after planned tasks are complete. In that context, Enable device suppression is the answer that aligns with the required behavior.

  Operations questions should distinguish controller configuration from centralized assurance. Catalyst Center is used when the task is fleet visibility, issue handling, telemetry, notifications, or lifecycle workflow.

  That selection points to the management workflow that gives operations staff the needed view or control, rather than a local WLAN setting that would not manage the service lifecycle. Disable telemetry on the WLC would be considered only for a different symptom or design goal. Use SWIM for firmware updates on mesh APs can sound related, but it does not own the behavior being tested. Schedule maintenance for the devices omits the part of the configuration that actually enforces the requested outcome. The distractors are plausible only if the problem is misread as a different workflow.

• Question 48:

  Users report slowness on the network, and it is suspected that certain applications are consuming all the bandwidth. A network engineer must enable the NBAR protocol to improve wireless client traffic visibility and provide advanced, granular, application classification, and analytics.

  How should the network engineer configure NBAR on a 9800 WLC?

  A. Enable NBARv2 on the WLAN.
  B. Enable deep packet inspection on the WLAN.
  C. Configure packet inspection on the policy profile.
  D. Configure AVC on the policy profile.
  D. Configure AVC on the policy profile.

  ---

  Explanation

  The requirement can be read as follows: Users report slowness on the network, and it is suspected that certain applications are consuming all the bandwidth. A network engineer must enable the NBAR protocol to improve wireless client traffic visibility and provide advanced, granular, application classification, and analytics. The matching behavior is Configure AVC on the policy profile..

  Catalyst 9800 questions often test object ownership. The WLAN profile identifies the SSID, the policy profile carries client policy, and tags bind those objects to APs. The selected mechanism belongs to the object that owns the requested behavior, so it is more precise than a command that changes RF settings, AP join behavior, or an unrelated profile.

  Enable NBARv2 on the WLAN. shifts attention away from the condition that the client, AP, or controller must satisfy. Enable deep packet inspection on the WLAN. belongs to a different workflow and would leave the stated condition unresolved. Configure packet inspection on the policy profile. may be useful elsewhere, but it does not apply the control that the stem is asking for.

  The same logic applies on real deployments: fix the component that owns the failure domain first, then validate adjacent services.

• Question 49:

  Refer to the exhibit.

  

  A Cisco 9800 WLC is deployed at a branch location to facilitate secure client connectivity. A network engineer configures a WLAN using WPA2 Enterprise authentication and activates the RADIUS server-based method to align with company security policies.

  Which CLI command must be added to the box in the configuration to enable client authentication for this WLAN?

  A. security dot1x RADIUS_AUTH_LIST CompanyWLAN1
  B. security authentication dot1x RADIUS_AUTH_LIST
  C. security authentication CompanyWLAN1 RADIUS_AUTH_LIST
  D. security dot1x authentication-list RADIUS_AUTH_LIST
  D. security dot1x authentication-list RADIUS_AUTH_LIST

  ---

  Explanation

  The stem narrows the problem to A Cisco 9800 WLC is deployed at a branch location to facilitate secure client connectivity. A network engineer configures a WLAN using WPA2 Enterprise authentication and activates the RADIUS server-based method to align with company security policies. In that context, security dot1x authentication-list RADIUS_AUTH_LIST is the setting or feature that applies.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. That configuration is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  security dot1x RADIUS_AUTH_LIST CompanyWLAN1 does not provide the specific RF, security, forwarding, management, or automation behavior that is required. security authentication dot1x

  RADIUS_AUTH_LIST would be considered only for a different symptom or design goal. security authentication CompanyWLAN1 RADIUS_AUTH_LIST can sound related, but it does not own the behavior being tested.

  A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 50:

  Refer to the exhibit.

  

  An engineer must configure wireless guest networking for a deployment at site A, which requires support for guest VLAN assignment and assignment for wlan guest-network 20. The controller will provide network segregation and restrict access to internal resources.

  Based on the configuration commands, which action meets the requirements?

  A. Establish a mesh bridge connection for the guest VLAN and assign logical interface for isolation.
  B. Create a policy profile for the guest VLAN and a policy tag to map the WLAN to the policy profile.
  C. Assign a policy tag to map the to WLAN and assign a physical interface for isolation.
  D. Implement the Spanning Tree Protocol and assign an AP group name.
  B. Create a policy profile for the guest VLAN and a policy tag to map the WLAN to the policy profile.

  ---

  Explanation

  Create a policy profile for the guest VLAN and a policy tag to map the WLAN to the policy profile. is the practical selection once the question is reduced to its main requirement: An engineer must configure wireless guest networking for a deployment at site A, which requires support for guest VLAN assignment and assignment for wlan guest-network 20. The controller will provide network segregation and restrict access to internal resources. Based on the configuration commands.

  Guest wireless designs must combine onboarding with isolation. The portal, redirect ACL, policy profile, VLAN mapping, and peer blocking controls serve different parts of that design. That configuration satisfies the guest access requirement because it supports the requested user flow or segmentation instead of merely changing a generic WLAN parameter.

  Establish a mesh bridge connection for the guest VLAN and assign logical interface for isolation. addresses a different failure domain, so it would not close the gap described here. Assign a policy tag to map the to WLAN and assign a physical interface for isolation. is too broad or aimed at the wrong layer for this scenario. Implement the Spanning Tree Protocol and assign an AP group name. does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.