Cisco 350-101 Online Practice Questions and Exam Preparation

Cisco 350-101 Online Questions & Answers

• Question 71:

  A business requires a Cisco 9163E AP to act as a point-to-point connection between two buildings on campus. No wired connection is available between the sites, and the AP must relay network traffic across the wireless link. The administrator must ensure that the AP is configured to forward Ethernet frames between its radio and Ethernet interfaces.

  Which CLI command must the administrator use to configure the AP for this application?

  A. ap name campus mode flexconnect
  B. ap name campus capwap mode p2p
  C. ap name campus mode bridge
  D. ap name campus capwap mode mesh
  C. ap name campus mode bridge

  ---

  Explanation

  For this scenario, ap name campus mode bridge is not just related terminology; it is the part that satisfies A business requires a Cisco 9163E AP to act as a point-to-point connection between two buildings on campus. No wired connection is available between the sites, and the AP must relay network traffic across the wireless link.

  Branch designs usually test the difference between central management and local data handling.

  FlexConnect behavior is chosen when the AP must keep useful service at the site while still being managed by the controller. The chosen setting fits that branch requirement because it changes forwarding or authentication behavior at the AP site rather than relying on an always-available central path.

  ap name campus mode flexconnect changes an adjacent setting instead of the mechanism that produces the required result. ap name campus capwap mode p2p addresses a different failure domain, so it would not close the gap described here. ap name campus capwap mode mesh is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.

• Question 72:

  How does viewing trend deviation in Cisco Catalyst Center AI Analytics benefit wireless operation?

  A. It maintains server time synchronization
  B. It exports event thresholds to external dashboards
  C. It allows earlier notice of abnormal wireless behavior
  D. It backs up existing log files to remote hosts
  C. It allows earlier notice of abnormal wireless behavior

  ---

  Explanation

  In this case, the decisive fact is How does viewing trend deviation in Cisco Catalyst Center AI Analytics benefit wireless operation? It allows earlier notice of abnormal wireless behavior addresses that fact directly.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. This feature maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  It maintains server time synchronization does not provide the specific RF, security, forwarding, management, or automation behavior that is required. It exports event thresholds to external dashboards would be considered only for a different symptom or design goal. It backs up existing log files to remote hosts can sound related, but it does not own the behavior being tested.

  A good review method is to ask whether the choice would still solve the issue if every unrelated setting remained unchanged.

• Question 73:

  A network administrator at a construction company manages a Cisco Catalyst 9800 Series Wireless Controller running Cisco IOS XE 17.x. The WLAN named XYZ-Conference is set up for a large event, but attendees report slow network performance due to misbehaving clients. To improve connectivity, the network administrator decides to change the client exclusion policy on the WLAN to temporarily block the misbehaving clients. The XYZ-Conference WLAN must enable a client exclusion policy with a timeout of

  120 seconds for misbehaving clients.

  Which set of Cisco IOS XE commands must be used?

  A. wireless profile policy XYZ-ConferenceXYZ Conference exclude 120
  B. wireless profile policy XYZ-Conferenceexclusionlist timeout 120
  C. wireless profile policy XYZ-Conferencesecurity exclusion timeout 120
  D. wireless profile policy XYZ-Conferenceclient-exclusion 120
  D. wireless profile policy XYZ-Conferenceclient-exclusion 120

  ---

  Explanation

  The condition to solve is A network administrator at a construction company manages a Cisco Catalyst 9800 Series Wireless Controller running Cisco IOS XE 17.x. The WLAN named XYZ-Conference is set up for a large event, but attendees report slow network performance due to misbehaving clients. To improve connectivity. wireless profile policy XYZ-Conferenceclient-exclusion 120 is aligned with that condition rather than with a neighboring workflow.

  The scenario is not asking for every related wireless feature; it is asking what satisfies this condition: A network administrator at a construction company manages a Cisco Catalyst 9800 Series Wireless Controller running Cisco IOS XE 17.x. The WLAN named XYZ-Conference is set up for a large event, but attendees report slow network performance due to misbehaving clients. That points to wireless profile policy XYZ-Conferenceclient-exclusion 120. Catalyst 9800 questions often test object ownership. The WLAN profile identifies the SSID, the policy profile carries client policy, and tags bind those objects to APs.

  That selection belongs to the object that owns the requested behavior, so it is more precise than a command that changes RF settings, AP join behavior, or an unrelated profile. wireless profile policy XYZ-ConferenceXYZ Conference exclude 120 addresses a different failure domain, so it would not close the gap described here. wireless profile policy XYZ-Conferenceexclusionlist timeout 120 is too broad or aimed at the wrong layer for this scenario. wireless profile policy XYZ-Conferencesecurity exclusion timeout 120 does not provide the specific RF, security, forwarding, management, or automation behavior that is required. The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

• Question 74:

  Which new attribute does IEEE 802.11ax introduce when used in wireless local area networks?

  A. 60 GHz utilization
  B. Wi-Fi multimedia
  C. OFDMA
  D. MIMO
  C. OFDMA

  ---

  Explanation

  Here, OFDMA is tied to the actual requirement in the stem: Which new attribute does IEEE 802.11ax introduce when used in wireless local area networks?

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. That configuration maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  60 GHz utilization addresses a different failure domain, so it would not close the gap described here. Wi-Fi multimedia is too broad or aimed at the wrong layer for this scenario. MIMO does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

  A complete review also checks whether the choice would still solve the problem if all other settings stayed the same. That test favors the correct choice because it changes the feature, protocol, or policy named by the question. The distractors may be legitimate Cisco wireless concepts, but they would send the engineer toward a different task and leave the stated requirement unresolved.

• Question 75:

  An access point transmits at 14 dBm. The engineer increases the transmit power to 17 dBm while the antenna and channel remain unchanged.

  What is the RF effect of this change?

  A. The transmit power is doubled.
  B. The transmit power is reduced by half.
  C. The transmit power is increased by ten times.
  D. The received signal becomes independent of distance.
  A. The transmit power is doubled.

  ---

  Explanation

  The useful clue is this requirement: An access point transmits at 14 dBm. The engineer increases the transmit power to 17 dBm while the antenna and channel remain unchanged. What is the RF effect of this change? That clue points to The transmit power is doubled..

  RF questions should be solved from measurable behavior. Signal level, noise, channel restrictions, interference classification, and propagation effects determine whether a link is stable and compliant. The selected mechanism is tied to that RF behavior, so it explains the observed result without changing unrelated WLAN security or management settings.

  The transmit power is reduced by half. addresses a different failure domain, so it would not close the gap described here. The transmit power is increased by ten times. is too broad or aimed at the wrong layer for this scenario. The received signal becomes independent of distance. does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

• Question 76:

  Refer to the exhibit.

  

  A network engineer is deploying a new Cisco 9800 WLC and is performing the Day-0 setup.

  The IP address and subnet mask have been assigned to the management interface, and network connectivity between the WLC and the upstream switch has been verified.

  Which CLI command must the engineer use next to configure management access?

  A. route add default gw 10.1.10.1
  B. default-route 0.0.255.255 0.0.255.255 10.1.1.1
  C. ip default-gateway 10.1.1.1
  D. ip route 0.0.0.0 0.0.0.0 10.1.10.1
  D. ip route 0.0.0.0 0.0.0.0 10.1.10.1

  ---

  Explanation

  The useful clue is this requirement: A network engineer is deploying a new Cisco 9800 WLC and is performing the Day-0 setup. The IP address and subnet mask have been assigned to the management interface, and network connectivity between the WLC and the upstream switch has been verified. That clue points to ip route 0.0.0.0 0.0.0.0 10.1.10.1.

  Catalyst 9800 questions often test object ownership. The WLAN profile identifies the SSID, the policy profile carries client policy, and tags bind those objects to APs. The selected mechanism belongs to the object that owns the requested behavior, so it is more precise than a command that changes RF settings, AP join behavior, or an unrelated profile.

  route add default gw 10.1.10.1 changes an adjacent setting instead of the mechanism that produces the required result. default-route 0.0.255.255 0.0.255.255 10.1.1.1 addresses a different failure domain, so it would not close the gap described here. ip default-gateway 10.1.1.1 is too broad or aimed at the wrong layer for this scenario.

  This keeps the reasoning tied to the implementation detail rather than to broad wireless terminology.

• Question 77:

  An IT team is deploying Meraki APs at a remote branch and must ensure that they are automatically assigned to the correct network in the Meraki dashboard. The branch is scheduled to receive 20 new APs, and site connectivity to headquarters was set up. Before shipping the APs, the team must make sure that each one is claimed by the intended network for management and monitoring.

  Which deployment action must they take before physically connecting the APs?

  A. Activate mesh networking mode for all the new APs before installation.
  B. Add the AP serial numbers to the required network within the Meraki dashboard.
  C. Preconfigure SSID names and VLAN tags on the local page of each AP in the Meraki dashboard.
  D. Create a separate DHCP scope for all the new APs on the local server.
  B. Add the AP serial numbers to the required network within the Meraki dashboard.

  ---

  Explanation

  Add the AP serial numbers to the required network within the Meraki dashboard. fits because the item is asking about this condition: An IT team is deploying Meraki APs at a remote branch and must ensure that they are automatically assigned to the correct network in the Meraki dashboard. The branch is scheduled to receive 20 new APs, and site connectivity to headquarters was set up. Before shipping the APs.

  Branch designs usually test the difference between central management and local data handling.

  FlexConnect behavior is chosen when the AP must keep useful service at the site while still being managed by the controller. This feature fits that branch requirement because it changes forwarding or authentication behavior at the AP site rather than relying on an always-available central path.

  Activate mesh networking mode for all the new APs before installation. addresses a different failure domain, so it would not close the gap described here. Preconfigure SSID names and VLAN tags on the local page of each AP in the Meraki dashboard. is too broad or aimed at the wrong layer for this scenario.

  Create a separate DHCP scope for all the new APs on the local server. does not provide the specific RF, security, forwarding, management, or automation behavior that is required.

  The answer should therefore be evaluated by effect, not by how recognizable the command or platform name appears.

• Question 78:

  A network engineer must isolate all guest users connected to the WLAN on a Cisco 9800 WLC so they cannot communicate with each other but can access the internet. The WLAN must meet these requirements:

  - SSID named VisitorAccess assigned to VLAN 30.

  - guests prohibited from sharing files with other guests.

  - must be scalable to multiple access points in the building.

  Which action must the network engineer take to meet the requirements?

  A. Enable P2P blocking in the policy profile and map the WLAN to a dedicated guest VLAN.
  B. Set up local authentication and map the WLAN to a dedicated guest VLAN.
  C. Set up a FlexConnect group and use local switching for the guest WLAN internet access.
  D. Enable multicast mode and associate a RADIUS server with the guest WLAN.
  A. Enable P2P blocking in the policy profile and map the WLAN to a dedicated guest VLAN.

  ---

  Explanation

  When the stem is reduced to A network engineer must isolate all guest users connected to the WLAN on a Cisco 9800 WLC so they cannot communicate with each other but can access the internet. The WLAN must meet these requirements: - SSID named VisitorAccess assigned to VLAN 30., Enable P2P blocking in the policy profile and map the WLAN to a dedicated guest VLAN. is the choice that remains technically

  aligned.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. That configuration is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  Set up local authentication and map the WLAN to a dedicated guest VLAN. can sound related, but it does not own the behavior being tested. Set up a FlexConnect group and use local switching for the guest WLAN internet access. omits the part of the configuration that actually enforces the requested outcome.

  Enable multicast mode and associate a RADIUS server with the guest WLAN. shifts attention away from the condition that the client, AP, or controller must satisfy.

  In production troubleshooting, that distinction matters because changing the wrong layer can leave the original failure untouched.

• Question 79:

  Which Cisco Ultra-Reliable Wireless Backhaul process enables devices to establish a reliable connection with the next AP along their path before losing connectivity to the current one in a wireless network during roaming?

  A. Open roaming
  B. Fast client handoff
  C. 802.11v high speed roaming
  D. Make-before-break handover logic
  D. Make-before-break handover logic

  ---

  Explanation

  The stem narrows the problem to Which Cisco Ultra-Reliable Wireless Backhaul process enables devices to establish a reliable connection with the next AP along their path before losing connectivity to the current one in a wireless network during roaming? In that context, Make-before-break handover logic is the setting or feature that applies.

  Protocol questions depend on the exact 802.11 function involved. Airtime scheduling, frame exchange, channel behavior, and secure roaming each solve a different problem. The selected mechanism maps to the protocol mechanism described by the stem rather than to a controller administration task or a general monitoring feature.

  Open roaming shifts attention away from the condition that the client, AP, or controller must satisfy. Fast client handoff belongs to a different workflow and would leave the stated condition unresolved. 802.11v high speed roaming may be useful elsewhere, but it does not apply the control that the stem is asking for.

  The same logic applies on real deployments: fix the component that owns the failure domain first, then validate adjacent services.

• Question 80:

  A guest WLAN uses central web authentication with Cisco ISE. Before authentication, clients must be redirected to the portal but must still reach DHCP, DNS, and the ISE portal.

  Which two configurations are required? (Choose two.)

  A. Apply a preauthentication redirect ACL that permits required services.
  B. Use an 802.1X-only WLAN with no web policy.
  C. Reference the web authentication policy or parameter map for the WLAN.
  D. Disable all ACLs on the guest WLAN.
  E. Place guest clients in the same VLAN as employees.
  A. Apply a preauthentication redirect ACL that permits required services.
  C. Reference the web authentication policy or parameter map for the WLAN.

  ---

  Explanation

  In this case, the decisive fact is A guest WLAN uses central web authentication with Cisco ISE. Before authentication, clients must be redirected to the portal but must still reach DHCP, DNS, and the ISE portal.

  Which two configurations are required? (Choose two.) Apply a preauthentication redirect ACL that permits required services.; Reference the web authentication policy or parameter map for the WLAN. addresses that fact directly.

  Security questions should separate authentication, authorization, and policy enforcement. The WLAN security method gets the client on the network, while RADIUS and policy attributes decide what access the client receives. The selected mechanism is the piece that enables or applies that security behavior; the other choices either skip the external method, use the wrong authentication model, or affect a separate policy area.

  Use an 802.1X-only WLAN with no web policy. is too broad or aimed at the wrong layer for this scenario.

  Disable all ACLs on the guest WLAN. does not provide the specific RF, security, forwarding, management, or automation behavior that is required. Place guest clients in the same VLAN as employees. would be considered only for a different symptom or design goal.

  For exam purposes, separate association, authentication, authorization, forwarding, RF behavior, and management visibility before selecting a command or feature.