Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 61:

  What is an attribute of the workgroup bridge mode for an AP in a wireless network?

  A. allows clients on the 2.4 GHz radio to speak to clients on the 5 GHz radio
  B. broadcast domains are extended across all network interfaces
  C. traffic movement between two of its Ethernet ports
  D. device integration of a wired segment into a wireless network
  D. device integration of a wired segment into a wireless network

  ---

  Explanation

  The condition to solve is What is an attribute of the workgroup bridge mode for an AP in a wireless network? device integration of a wired segment into a wireless network is aligned with that condition rather than with a neighboring workflow.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The chosen behavior maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  allows clients on the 2.4 GHz radio to speak to clients on the 5 GHz radio is too broad or aimed at the wrong layer for this scenario. broadcast domains are extended across all network interfaces does not provide the specific RF, security, forwarding, management, or automation behavior that is required. traffic movement between two of its Ethernet ports would be considered only for a different symptom or design goal.

  For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.

• Question 62:

  A hotel wants to provide guests with wireless connectivity via a captive portal using a Cisco 9800 WLC.

  The solution must meet these requirements:

  - Ensure that guests are redirected to a custom web page for login and after authentication must have only internet access.

  - The guest SSID must not require a password and must be visible to all clients.

  - Network segmentation between staff and guests is required at the VLAN level.

  What must the IT team configure on the WLAN?

  A. central web authentication with WPA2-PSK security and a DNS ACL assigned to the WLAN profile
  B. open authentication with a local web server for the guest WLAN
  C. PSK WLAN with VLAN override and enable mDNS for guest users
  D. central web authentication and assign a policy with ACLs restricting access to internal networks
  D. central web authentication and assign a policy with ACLs restricting access to internal networks

  ---

  Explanation

  central web authentication and assign a policy with ACLs restricting access to internal networks is preferred because it changes the behavior described here: A hotel wants to provide guests with wireless connectivity via a captive portal using a Cisco 9800 WLC. The solution must meet these requirements: - Ensure that guests are redirected to a custom web page for login and after authentication must have only internet access.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. That configuration is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  central web authentication with WPA2-PSK security and a DNS ACL assigned to the WLAN profile belongs to a different workflow and would leave the stated condition unresolved. open authentication with a local web server for the guest WLAN may be useful elsewhere, but it does not apply the control that the stem is asking for. PSK WLAN with VLAN override and enable mDNS for guest users changes an adjacent setting instead of the mechanism that produces the required result.

  The tested habit is to avoid picking a familiar wireless term unless it changes the exact condition in the question.

• Question 63:

  A deployment requires that several APs be connected to edge switches, and each AP must support management and guest Wi-Fi traffic. The APs tag guest traffic separately from management, and the organization expects to add more VLANs for IoT and voice soon, so the configuration must support scalability. The security team requires that guest traffic never mix with internal resources.

  Which port configuration must be used for the switch interfaces that connect to the APs?

  A. Configure the central Layer 3 switch port as an access VLAN port that allows the management VLAN only.
  B. Implement switch port access with the native VLAN for guest traffic and trunk with the management VLAN.
  C. Set a trunk port with the management VLAN as the native VLAN, and allow only management and user VLANs.
  D. Make the port an access port on the management VLAN because all traffic is tunneled back to the WLC.
  C. Set a trunk port with the management VLAN as the native VLAN, and allow only management and user VLANs.

  ---

  Explanation

  When the stem is reduced to A deployment requires that several APs be connected to edge switches, and each AP must support management and guest Wi-Fi traffic. The APs tag guest traffic separately from management, and the organization expects to add more VLANs for IoT and voice soon., Set a trunk port with the management VLAN as the native VLAN, and allow only management and user VLANs. is the choice that remains technically aligned.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The chosen behavior maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Configure the central Layer 3 switch port as an access VLAN port that allows the management VLAN only. does not provide the specific RF, security, forwarding, management, or automation behavior that is required. Implement switch port access with the native VLAN for guest traffic and trunk with the management VLAN. would be considered only for a different symptom or design goal. Make the port an access port on the management VLAN because all traffic is tunneled back to the WLC. can sound related, but it does not own the behavior being tested.

  A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 64:

  Refer to the exhibit.

  

  An engineer is preparing a Cisco 9800-L WLC for deployment in a sensitive area. Only encrypted remote management via SSH is allowed, and all other VTY access methods must be disabled. The 9800-L WLC will be part of a larger deployment, and an external audit will check for any unencrypted management protocols.

  According to the requirements, only SSH is allowed for remote CLI sessions.

  Which set of commands must be executed to complete the Cisco IOS XE CLI configuration on the WLC?

  A. line vty 0 97no transport input telnetlogin authentication default
  B. line vty disable 0 97transport preferred sshlogin authentication defaultexit
  C. line vty 0 97transport input sshlogin authentication defaultexit
  D. line vty 0 97transport sshlogin authentication default
  C. line vty 0 97transport input sshlogin authentication defaultexit

  ---

  Explanation

  The requirement can be read as follows: An engineer is preparing a Cisco 9800-L WLC for deployment in a sensitive area. Only encrypted remote management via SSH is allowed, and all other VTY access methods must be disabled. The 9800-L WLC will be part of a larger deployment. The matching behavior is line vty 0 97transport input sshlogin authentication defaultexit.

  Catalyst 9800 questions often test object ownership. The WLAN profile identifies the SSID, the policy profile carries client policy, and tags bind those objects to APs. This feature belongs to the object that owns the requested behavior, so it is more precise than a command that changes RF settings, AP join behavior, or an unrelated profile. line vty 0 97no transport input telnetlogin authentication default belongs to a different workflow and would leave the stated condition unresolved. line vty disable 0 97transport preferred sshlogin authentication defaultexit may be useful elsewhere, but it does not apply the control that the stem is asking for. line vty 0 97transport sshlogin authentication default changes an adjacent setting instead of the mechanism that produces the required result.

  The tested habit is to avoid picking a familiar wireless term unless it changes the exact condition in the question.

• Question 65:

  A FlexConnect AP must carry its management traffic and locally switched client traffic for employee and guest VLANs. The network team expects to add an IoT WLAN later.

  Which switch port configuration is most appropriate for the AP connection?

  A. Access port in the AP management VLAN only
  B. Routed port with no VLAN tagging
  C. Trunk port with the management VLAN as native and client VLANs allowed
  D. SPAN destination port with all wireless VLANs mirrored
  C. Trunk port with the management VLAN as native and client VLANs allowed

  ---

  Explanation

  For this scenario, Trunk port with the management VLAN as native and client VLANs allowed is not just related terminology; it is the part that satisfies A FlexConnect AP must carry its management traffic and locally switched client traffic for employee and guest VLANs. The network team expects to add an IoT WLAN later. Which switch port configuration is most appropriate for the AP connection?

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The chosen setting maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Access port in the AP management VLAN only addresses a different failure domain, so it would not close the gap described here. Routed port with no VLAN tagging is too broad or aimed at the wrong layer for this scenario. SPAN destination port with all wireless VLANs mirrored does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

• Question 66:

  A Catalyst 9800 WLC is added to Cisco Catalyst Center for wireless assurance. The discovery credentials are correct, but client health and telemetry data are not appearing.

  Which capability is required for model-driven controller data collection?

  A. Telnet access from every AP
  B. NETCONF connectivity to the controller
  C. A guest anchor on every WLAN
  D. A 2.4 GHz-only RF profile
  B. NETCONF connectivity to the controller

  ---

  Explanation

  For this scenario, NETCONF connectivity to the controller is not just related terminology; it is the part that satisfies A Catalyst 9800 WLC is added to Cisco Catalyst Center for wireless assurance. The discovery credentials are correct, but client health and telemetry data are not appearing. Which capability is required for model-driven controller data collection?

  Guest wireless designs must combine onboarding with isolation. The portal, redirect ACL, policy profile, VLAN mapping, and peer blocking controls serve different parts of that design. The chosen behavior satisfies the guest access requirement because it supports the requested user flow or segmentation instead of merely changing a generic WLAN parameter.

  Telnet access from every AP belongs to a different workflow and would leave the stated condition unresolved. A guest anchor on every WLAN may be useful elsewhere, but it does not apply the control that the stem is asking for. A 2.4 GHz-only RF profile changes an adjacent setting instead of the mechanism that produces the required result.

  The tested habit is to avoid picking a familiar wireless term unless it changes the exact condition in the question.

• Question 67:

  A wireless operations team enables AI-RRM for a Catalyst wireless deployment. The goal is to improve channel and power decisions by using historical telemetry and analytics instead of reacting only to current thresholds.

  What is a primary benefit of AI-RRM?

  A. It disables dynamic channel assignment on every access point.
  B. It forces all clients to use a single mandatory data rate.
  C. It uses learned RF behavior to reduce interference and improve channel planning.
  D. It replaces 802.1X authentication with PSK authentication.
  C. It uses learned RF behavior to reduce interference and improve channel planning.

  ---

  Explanation

  It uses learned RF behavior to reduce interference and improve channel planning. fits because the item is asking about this condition: A wireless operations team enables AI-RRM for a Catalyst wireless deployment. The goal is to improve channel and power decisions by using historical telemetry and analytics instead of reacting only to current thresholds. What is a primary benefit of AI-RRM? Here, the requirement is summarized by this condition: A wireless operations team enables AI-RRM for a Catalyst wireless deployment. The goal is to improve channel and power decisions by using historical telemetry and analytics instead of reacting only to current thresholds. What is a primary benefit of AI-RRM? The selection It uses learned RF behavior to reduce interference and improve channel planning. fits because it changes that condition directly. RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. That selection is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings. It disables dynamic channel assignment on every access point. does not provide the specific RF, security, forwarding, management, or automation behavior that is required. It forces all clients to use a single mandatory data rate. would be considered only for a different symptom or design goal. It replaces 802.1X authentication with PSK authentication. can sound related, but it does not own the behavior being tested. A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 68:

  What is a benefit of using AI Enhanced RRM over traditional RRM?

  A. It includes legacy client modes.
  B. It encrypts stored telemetry results.
  C. It reacts to current the condition of network.
  D. It leverages historical data.
  D. It leverages historical data.

  ---

  Explanation

  The useful clue is this requirement: What is a benefit of using AI Enhanced RRM over traditional RRM?

  That clue points to It leverages historical data..

  Here, the requirement is summarized by this condition: What is a benefit of using AI Enhanced RRM over traditional RRM? The selection It leverages historical data. fits because it changes that condition directly.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. That selection maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature. It includes legacy client modes. does not provide the specific RF, security, forwarding, management, or automation behavior that is required. It encrypts stored telemetry results. would be considered only for a different symptom or design goal. It reacts to current the condition of network. can sound related, but it does not own the behavior being tested. A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 69:

  A business is deploying Cisco Catalyst 9100 APs managed by Catalyst 9800 WLCs. The IT team needs policies that adapt based on user identity and device posture and also provide visibility into device activity and location.

  Which configuration meets these requirements?

  A. Integrate Cisco Catalyst Center with Cisco ISE for policy control, add mobile device management for posture checks, and use Cisco Spaces for location visibility.
  B. Use Cisco Catalyst 9800 ACLs combined with mobile device management integration without Catalyst Center or Catalyst Spaces.
  C. Configure Cisco Catalyst Center assurance for visibility and apply static per-service set identifier virtual LAN assignments without Cisco ISE integration.
  D. Integrate Cisco ISE for identity-based policies and omit mobile device management and location services.
  A. Integrate Cisco Catalyst Center with Cisco ISE for policy control, add mobile device management for posture checks, and use Cisco Spaces for location visibility.

  ---

  Explanation

  Here, Integrate Cisco Catalyst Center with Cisco ISE for policy control, add mobile device management for posture checks, and use Cisco Spaces for location visibility. is tied to the actual requirement in the stem: A business is deploying Cisco Catalyst 9100 APs managed by Catalyst 9800 WLCs. The IT team needs policies that adapt based on user identity and device posture and also provide visibility into device activity and location. Which configuration meets these requirements?

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. This choice is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  Use Cisco Catalyst 9800 ACLs combined with mobile device management integration without Catalyst Center or Catalyst Spaces. would be considered only for a different symptom or design goal. Configure Cisco Catalyst Center assurance for visibility and apply static per-service set identifier virtual LAN assignments without Cisco ISE integration. can sound related, but it does not own the behavior being tested. Integrate Cisco ISE for identity-based policies and omit mobile device management and location services. omits the part of the configuration that actually enforces the requested outcome.

  The distractors are plausible only if the problem is misread as a different workflow.

• Question 70:

  Which Cisco technology leverages machine learning methods and a cloud learning platform that helps to identify critical issues?

  A. Catalyst Center Assurance
  B. Network Services
  C. Catalyst Center LLM Insights
  D. AI Network Analytics
  D. AI Network Analytics

  ---

  Explanation

  A direct reading of the item leads to AI Network Analytics, because the stated requirement is Which Cisco technology leverages machine learning methods and a cloud learning platform that helps to identify critical issues?

  Operations questions should distinguish controller configuration from centralized assurance. Catalyst Center is used when the task is fleet visibility, issue handling, telemetry, notifications, or lifecycle workflow.

  That configuration points to the management workflow that gives operations staff the needed view or control, rather than a local WLAN setting that would not manage the service lifecycle.

  Catalyst Center Assurance belongs to a different workflow and would leave the stated condition unresolved. Network Services may be useful elsewhere, but it does not apply the control that the stem is asking for. Catalyst Center LLM Insights changes an adjacent setting instead of the mechanism that produces the required result.

  The tested habit is to avoid picking a familiar wireless term unless it changes the exact condition in the question.