Designing Cisco Enterprise Wireless Networks (ENWLSD) practice questions

1. Question 1 of 25

   Which CLI command does an engineer use to validate that the redundancy peer of a Stateful Switchover pair of controllers is up and connected?

   • Arping
   • Bping
   • Ceping
   • Dmping

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   Explanation: rping - Check IPsec status on both controllers to check which link is broken RP or RMI. Perform rping on both controllers to check if the peer is reachable. mping - Mobility ping over UDP—Thistest runs over mobility UDPport 16666. It tests whether the mobility control packet can be reached over the management interface. eping - Mobility ping over EoIP—This test runs over EoIP (IP protocol 97). It tests the mobility data traffic over the management interface Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_010010010.pdf https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-8/config-guide/b_cg88/high_availability.html

   Adapted from community discussion by peer1024 · 2023-02-22 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. R

      rrahim

      2022-02-20

      8 upvotes

      Perform rping on both controllers to check if the peer is reachable. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-8/config-guide/b_cg88/high_availability.html

   2. P

      peer1024

      2023-02-22

      Selected A2 upvotes

      Explanation: rping - Check IPsec status on both controllers to check which link is broken RP or RMI. Perform rping on both controllers to check if the peer is reachable. mping - Mobility ping over UDP—Thistest runs over mobility UDPport 16666. It tests whether the mobility control packet can be reached over the management interface. eping - Mobility ping over EoIP—This test runs over EoIP (IP protocol 97). It tests the mobility data traffic over the management interface Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_010010010.pdf https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-8/config-guide/b_cg88/high_availability.html

   3. T

      tonydiamond

      2021-07-20

      4 upvotes

      wrong. the answer is rping https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-0/HA_SSO_DG/High_Availability_DG.html

   4. N

      NoSpamming

      2022-09-22

      2 upvotes

      "Perform rping on both controllers to check if the peer is reachable." From the referenced Cisco docs

2. Question 2 of 25

   An engineer is trying to determine the most cost-effective way to deploy high availability for a campus enterprise wireless network that currently leverages three wireless LAN controllers. Which architecture should the engineer deploy?

   • AN+N with SSO
   • BN+1 solution without SSO
   • CN+N solution without SSO
   • DN+1 with SSO

   Show answer

   Correct answer: B

   How others answered

   • B57%
   • D43%

   Only 57% agreed on this answer — treat it as contested rather than settled.

   Explanation

   I think it must be answer B Access Point Stateful Switch Over (AP SSO) functionality is not supported for N+1 HA. Source: https://www.cisco.com/c/en/us/td/docs/wireless/technology/hi_avail/N1_High_Availability_Deployment_Guide/N1_HA_Overview.html

   Adapted from community discussion by Liselot · 2022-01-05 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. L

      Liselot

      2022-01-05

      11 upvotes

      I think it must be answer B Access Point Stateful Switch Over (AP SSO) functionality is not supported for N+1 HA. Source: https://www.cisco.com/c/en/us/td/docs/wireless/technology/hi_avail/N1_High_Availability_Deployment_Guide/N1_HA_Overview.html

   2. R

      Ram0n_Aya1a

      2022-06-05

      4 upvotes

      D is Correct. HA (that is, AP SSO) can be deployed with Secondary and Tertiary Controllers just like today. Both Active and Standby WLCs combined in the HA setup should be configured as primary WLC. Only on failure of both Active and Standby WLCs in the HA setup will the APs fall back to Secondary and further to Tertiary WLCs. Check this Section "SSO Deployment with Legacy Primary/Secondary/Tertiary HA" https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-7/High_Availability_DG.html N means Active , while 1 is backup. Primary controller should be SSO Controllers (pair of WLC) Secondary controller sholud be a single controller

   3. M

      madhir

      2022-10-11

      3 upvotes

      I think it might be D The Problem I have with answer B is that the question says "leverages three wireless LAN controllers". N+1 without SSO would just be 2 x WLC's (one primary & the other Secondary). You would need N+N+1 (Chapter9: Designing High Availability - page 199) to achieve HA with 3 controllers and no SSO Involved. So logically the only right answer would be D (the first two "N" WLC's in an HA/SSO pair with the "+ 1" tertiary WLC as the backup). Capwap tunnels would remain in SSO between the HA/SSO pair but would naturally have to be rebuilt if the HA/SSO pair failed and the AP's moved across to the tertiary "+1" controller. Credit where credit is due, these CCIE's that cisco pay to write these exam questions know how to make them tricky :)

   4. J

      Johnconnor2021

      2021-11-17

      5 upvotes

      disagree I found a community that discusses using 1+1, N+1 with SSO. so for me the answer is correct D. https://community.cisco.com/t5/wireless/n-1-or-1-1-with-client-sso/td-p/3339846 https://networkguy.de/cisco-wlc-high-availability/

3. Question 3 of 25

   Select 2

   An engineer is designing a wireless network to support high availability. The network will need to support the total number of APs and client SSO. Live services should continue to work without interruption during the failover. Which two requirements need to be incorporated into the design to meet these needs? (Choose two.)

   • Acontroller high availability pair with one of the WLCs having a valid AP count license
   • BWLC 7.5 code or more recent
   • Credundant vWLC
   • D10 sec RTT
   • Eback-to-back direct connection between WLCs

   Show answer

   Correct answer: A, B

   How others answered

   • AB75%
   • AE25%

   Explanation

   not sure if AE is correct, back-to-back is not needed anymore. Also starting 7.5 release client-sso is supported, so this is also a valid option. https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html#pgfId-53637 I would vote for AB

   Adapted from community discussion by mae2k · 2022-02-22 · 10 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. M

      mae2k

      2022-02-22

      10 upvotes

      not sure if AE is correct, back-to-back is not needed anymore. Also starting 7.5 release client-sso is supported, so this is also a valid option. https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html#pgfId-53637 I would vote for AB

   2. F

      Faridtnx

      2023-05-07

      Selected A, B3 upvotes

      Only version 7.5 supports both AP and client SSO. Previous versions either dont support it or support only AP SSO (v 7.3) From the other side E is not necessarily correct. RP link can be back to back or through a Layer 2 RP connection even in two different DCs.

   3. J

      jzzmth

      2024-03-22

      Selected A, B2 upvotes

      Very tricky question. A and B are correct, and E is also correct, but slightly less correct because you can technically put a switch in between the WLCs. I'm going with A and B

   4. L

      Liselot

      2022-01-05

      3 upvotes

      AE is correct https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-7/High_Availability_DG.html

4. Question 4 of 25

   

   Refer to the exhibit. An enterprise is using wireless as the main network connectivity for clients. To ensure service continuity, a pair of controllers will be installed in a datacenter. An engineer is designing SSO on the pair of controllers. What needs to be included in the design to avoid having the secondary controller go into maintenance mode?

   • AThe redundancy port must be the same subnet as the redundancy mgmt.
   • BThe keep alive timer is too low, which causes synchronization problems.
   • CThe connection between the redundancy ports is missing.
   • DThe Global Configuration of SSO is set to Disabled on the controller.

   Show answer

   Correct answer: C

   How others answered

   • C100%

   Explanation

   C, look at the comment from mohanak here: https://community.cisco.com/t5/wireless/wlc-ha-maintenance-mode/td-p/2927232 There are few scenarios where the Standby WLC may go into Maintenance Mode and not be able to communicate with the network and peer: - Non reachability to Gateway via Redundant Management Interface - WLC with HA SKU which had never discovered peer - Redundant Port is down - Software version mismatch (WLC which boots up first goes into active mode and the other WLC in Maintenance Mode) A / not correct, RP is l2 port where RMI is l3 B/ not correct keepalives doesnt matter and wont cause hotstandby to go to maintenance mode C/ correct, if RP is down that indeed causes standby to go to maintenance mode D/ incorrect, according to the phrasing of the question, engineer is just preparing the confgiuration. enabling SSO is the final step after all the rest of config is finished. Once enabled WLCs will reboot and discover the HA SSO neighbors and join the HA SSO stack. C/

   Adapted from community discussion by mqoltn · 2024-02-01 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • cisco.com documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. M

      mqoltn

      2024-02-01

      3 upvotes

      C, look at the comment from mohanak here: https://community.cisco.com/t5/wireless/wlc-ha-maintenance-mode/td-p/2927232 There are few scenarios where the Standby WLC may go into Maintenance Mode and not be able to communicate with the network and peer: - Non reachability to Gateway via Redundant Management Interface - WLC with HA SKU which had never discovered peer - Redundant Port is down - Software version mismatch (WLC which boots up first goes into active mode and the other WLC in Maintenance Mode) A / not correct, RP is l2 port where RMI is l3 B/ not correct keepalives doesnt matter and wont cause hotstandby to go to maintenance mode C/ correct, if RP is down that indeed causes standby to go to maintenance mode D/ incorrect, according to the phrasing of the question, engineer is just preparing the confgiuration. enabling SSO is the final step after all the rest of config is finished. Once enabled WLCs will reboot and discover the HA SSO neighbors and join the HA SSO stack. C/

   2. A

      Alonzo_Harris

      2024-06-18

      Selected C4 upvotes

      The answer is C Maintenance Mode: There are few scenarios where the Standby WLC may go into Maintenance Mode and not be able to communicate with the network and peer: -Non reachability to Gateway via Redundant Management Interface -WLC with HA SKU which had never discovered peer ***Redundant Port is down*** -Software version mismatch (WLC which boots up first goes into active mode and the other WLC in Maintenance Mode)

   3. R

      RogerTheLodger

      2023-03-21

      4 upvotes

      C - ‘There are few scenarios where the Standby WLC may go into Maintenance Mode and not be able to communicate with the network and peer: • Non reachability to Gateway via Redundant Management Interface • WLC with HA SKU which had never discovered peer • Redundant Port is down • Software version mismatch (WLC which boots up first goes into active mode and the other WLC in Maintenance Mode)’ High Availability (SSO) Deployment Guide - Cisco

   4. F

      ft75

      2023-05-18

      5 upvotes

      D, according to this document: https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-1/HA_SSO_DG/High_Availability_DG.html#pgfId-43357

5. Question 5 of 25

   An engineer designs a new wireless network that uses a Cisco Catalyst 9800 Series wireless controller. The controller must be in a DMZ. The internal network is to be at the main on-premises data center of the customer. In addition, the customer wants to establish an EoIP tunnel to a Cisco 5520 WLC that is in a regional office. How must this requirement be incorporated into the design?

   • AUse Cisco IOS-XE code that supports encryption of the data plane on the Catalyst 9800 WLC.
   • BUse AirOS code that supports encryption of the control plane on the 5520 WLC.
   • CUse Cisco IOS-XE code that supports encryption of the control plane on the Catalyst 9800 WLC.
   • DUse AirOS code that supports encryption of the data plane on the 5520 WLC.

   Show answer

   Correct answer: B

   How others answered

   • B89%

   Explanation

   On the 9800 WLC, control plane encryption is always enabled, which means that you need to have secure mobility enabled on the AireOS side. However, data link encryption is optional. If you enable it on the 9800 side, enable it on AireOS with: config mobility group member data-dtls enable https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213913-building-mobility-tunnels-on-catalyst-98.html

   Adapted from community discussion by Bandito · 2024-02-07 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. B

      Bandito

      2024-02-07

      Selected B7 upvotes

      On the 9800 WLC, control plane encryption is always enabled, which means that you need to have secure mobility enabled on the AireOS side. However, data link encryption is optional. If you enable it on the 9800 side, enable it on AireOS with: config mobility group member data-dtls enable https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213913-building-mobility-tunnels-on-catalyst-98.html

   2. L

      Love2Cod3

      2025-01-14

      Selected B1 upvote

      Provided answer is correct. "AireOS uses EoIP tunnels for mobility. Support for CAPWAP based encrypted mobility (Secure Mobility) was brought in in 8.5. However the support for IRCM with Catalyst 9800 wireless controller is present only in 8.8.111 and above and in the 8.5 IRCM supported release." https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-8/b_c9800_wireless_controller-aireos_ircm_dg.html#id_85243

   3. F

      Farhad123

      2024-10-23

      1 upvote

      B is correct , encryption of the control plane regarding 5520 is required. for 9800 we dont need to enable encryption for control plan as it is enabled by default

   4. J

      Jonycici

      2024-10-28

      1 upvote

      Question is tricky because 9800s don't support EoIP tunnel, only UDP 16667 for data.

6. Question 6 of 25

   Select 2

   A wireless engineer is getting ready to perform a predictive site survey. The new network needs to support data and voice over wireless. Which two Cisco recommendations should be considered for the design? (Choose two.)

   • ASet -19 dBm of separation between APs on the same channel.
   • BUse the 5 GHz radio band due to 40 MHz bandwidth capability.
   • CUse the 5 GHz radio band due to the 24 non-overlapping channels.
   • DSet the cell boundary to -67 dBm.
   • ESet the cell overlap to 15%

   Show answer

   Correct answer: D, E

   How others answered

   • DE39%
   • CD35%
   • BD22%

   Only 39% agreed on this answer — treat it as contested rather than settled.

   Explanation

   D & E is correct. A is incorrect coz this is not in best practice and the same channel is not recommended. B is incorrect coz using 40 MHz will limit the # of channels available. C is also incorrect since 24 non-overlapping channels on 5 GHz will require using UNII-2 and UNII-2e channels w/c require absence of radar. (see pp 3-6) https://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob30dg/Voice.pdf Best practice for voice is -67 dBm cell edge, 25 dB SNR, 15-20% overlap, etc. https://www.cisco.com/c/en/us/td/docs/wireless/technology/vowlan/troubleshooting/vowlan_troubleshoot/8_Site_Survey_RF_Design_Valid.html#wp1053033

   Adapted from community discussion by Love2Cod3 · 2025-01-13 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. D

      dordonezmx

      2024-05-27

      6 upvotes

      I think C & D is correct, 15 % is for High density deployment. Chapter 5 "Applying Wireless Design Requirements" page 355 in CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide 2nd Edition

   2. D

      Donald_Trump

      2022-12-20

      3 upvotes

      I think B&D should be correct https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/Enterprise-Mobility-8-5-Design-Guide/Enterprise_Mobility_8-5_Deployment_Guide/Chapter-9.html#36873 "It is not likely that this 19 dBm of separation can be achieved in most deployments. The most important RF design criteria are the -67 dBm cell radius and the 20 percent recommended overlap between cells. Designing to these constraints optimizes channel separation." "The data rate is 150 Mbps for an 802.11n client on the 5 GHz band with a 40 MHz wide channel and with a one spatial stream client. A laptop running a softphone application such as Jabber can support three spatial streams and have a date rate to 450 Mbps on a 5 GHz, 40 MHz wide channel. Both an 802.11ac client and an 802.11n client that is only 20 MHz wide and supporting one spatial stream can share Wi-Fi channel access on a 40 MHz wide channel with an 802.11ac three spatial stream client on a 80 MHz wide channel."

   3. L

      Love2Cod3

      2025-01-13

      Selected D, E2 upvotes

      D & E is correct. A is incorrect coz this is not in best practice and the same channel is not recommended. B is incorrect coz using 40 MHz will limit the # of channels available. C is also incorrect since 24 non-overlapping channels on 5 GHz will require using UNII-2 and UNII-2e channels w/c require absence of radar. (see pp 3-6) https://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob30dg/Voice.pdf Best practice for voice is -67 dBm cell edge, 25 dB SNR, 15-20% overlap, etc. https://www.cisco.com/c/en/us/td/docs/wireless/technology/vowlan/troubleshooting/vowlan_troubleshoot/8_Site_Survey_RF_Design_Valid.html#wp1053033

   4. S

      ShamsDimashki

      2024-07-28

      Selected D, E3 upvotes

      the available 24 channels make this answer invalid, because of the DFS requirements While 15% of overlap is a recommendation from Cisco No reommendation for 40 MHz Correct answer D + E

7. Question 7 of 25

   An engineer is designing a wireless network to support Cisco Hyperlocation. The customer indicated some locations that require high density. How is the design adjusted?

   • AAdd additional APs to all the comers of the site.
   • BAdd more APs than indicated from the site survey spread across all areas.
   • CAdd an additional AP in the middle of the dense area.
   • DRun the site survey using -57dBm as a threshold.

   Show answer

   Correct answer: C

   How others answered

   • C84%

   Explanation

   Correct Answer is C: Some basic guidelines for site surveys and deployments for Cisco Hyperlocation: • Perform a survey, or try to maintain consistent –65 dBm RSSI for data, voice, video, and location. • Use a 10 to 20 percent cell overlap for optimized roaming and location calculations. • A good general principle is one AP per 2500 square feet (232.26 square meters; best performance). • For high-density applications, perhaps add an extra AP in the middle.

   Adapted from community discussion by Thomas66 · 2023-07-02 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. T

      Thomas66

      2023-07-02

      7 upvotes

      Correct Answer is C: Some basic guidelines for site surveys and deployments for Cisco Hyperlocation: • Perform a survey, or try to maintain consistent –65 dBm RSSI for data, voice, video, and location. • Use a 10 to 20 percent cell overlap for optimized roaming and location calculations. • A good general principle is one AP per 2500 square feet (232.26 square meters; best performance). • For high-density applications, perhaps add an extra AP in the middle.

   2. A

      ALEX_CC

      2023-06-01

      Selected C5 upvotes

      https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-2/b_hyperLocation_best_practices_and_troubleshooting_guide.html

   3. N

      NoSpamming

      2023-03-22

      4 upvotes

      "For high density applications, it is recommended to add an additional AP in the middle of dense areas" https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-2/b_hyperLocation_best_practices_and_troubleshooting_guide.html Clearly C

   4. C

      Cayenne

      2023-05-04

      Selected C3 upvotes

      " it is recommended to add an additional AP in the middle of dense areas "

8. Question 8 of 25

   A network administrator of a global organization is collapsing all controllers to a single cluster located in central Europe. Which concern must be addressed?

   • ASome channels may not be available consistently across the organization.
   • BDifferent RF policies per office are not available in this configuration.
   • CSyslog must be configured to the time-zone of the NMS platform.
   • DCentralized controllers cannot uniformly authenticate global users.

   Show answer

   Correct answer: A

   How others answered

   • A85%
   • C15%

   Explanation

   The question is "Which concern must be addressed", therefore the correct answer will be A. Configuring country codes seems to address that concern: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/country_codes.html

   Adapted from community discussion by AnnieBell2 · 2022-12-24 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. A

      antmich

      2021-03-18

      6 upvotes

      I just looked it up, but you can actually change the channels allowed on a per RF Profile basis, which would allow restriction of channels in the needed regions. The original answer is legit.

   2. J

      JBERTHIER

      2024-03-26

      Selected A5 upvotes

      Even if C could be right I think the critical concern would be to deal with different RF settings par region centralised on this controller in Europe

   3. A

      AnnieBell2

      2022-12-24

      Selected A3 upvotes

      The question is "Which concern must be addressed", therefore the correct answer will be A. Configuring country codes seems to address that concern: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/country_codes.html

   4. N

      Notinmybrain

      2023-02-22

      4 upvotes

      so it says address the concern which A is a concern that needs to be taken into account, syslog is not restricted but if there is a channelling issue that's something to be concerned about

9. Question 9 of 25

   An engineer has performed a predictive site survey for high-speed data and voice in an indoor office. What is the recommended data rate with גˆ’67 dBm signal level for optimal VoWLAN design?

   • A6 Mbps on 802.11 bgn
   • B24 Mbps on 802.11 bgn
   • C12 Mbps on 802.11 an
   • D24 Mbps on 802.11 an

   Show answer

   Correct answer: C

   How others answered

   • C73%
   • D27%

   Only 73% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Answer is C. - CCNP official guide, Chapter 5, Section Designing a Wireless Network for Voice and Video: A better approach is to limit transmissions to use higher data rates so that stations transmit a frame and get off the air sooner, allowing other stations an opportunity to use the channel. That ultimately affects latency and jitter—parameters that are critical for acceptable voice and video performance. You should configure 12Mbps as the lowest and only mandatory data rate, while disabling all rates below that. All data rates greater than 12Mbps should be configured as supported so that they can be used by any device and application as RF conditions permit. - 802.11b supports max 11 Mbps.

   Adapted from community discussion by Babustest · 2023-12-28 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

   1. B

      Babustest

      2023-12-28

      Selected C7 upvotes

      Answer is C. - CCNP official guide, Chapter 5, Section Designing a Wireless Network for Voice and Video: A better approach is to limit transmissions to use higher data rates so that stations transmit a frame and get off the air sooner, allowing other stations an opportunity to use the channel. That ultimately affects latency and jitter—parameters that are critical for acceptable voice and video performance. You should configure 12Mbps as the lowest and only mandatory data rate, while disabling all rates below that. All data rates greater than 12Mbps should be configured as supported so that they can be used by any device and application as RF conditions permit. - 802.11b supports max 11 Mbps.

   2. R

      RogerTheLodger

      2021-09-18

      5 upvotes

      C - ‘For voice or real-time application support, 12Mbps is common, and 24Mbps is expected if real-time video applications (for example, video conferencing) are your target. Here again, as most cells carry both data and voice, designing around 12Mbps minimum has become common even for data-only support, in anticipation of occasional voice activity.’ Official Cert Guide, Ch.3. p.60. para.3.‘As you plan the band and channel assignment for each AP, try to leverage the 5GHz band as much as possible.’ Official Cert Guide, Ch.5. p.106. para.4.‘You should configure 12Mbps as the lowest and only mandatory data rate, while disabling all rates below that.’ Official Cert Guide, Ch.5. p.107. para.2.

   3. F

      Faridtnx

      2023-05-14

      Selected C5 upvotes

      Official CCNP book page 60: For basic data coverage, 6Mbps is common. For voice or real-time application support, 12Mbps is common, and 24Mbps is expected if real-time video applications (for example, video conferencing) are your target. Here again, as most cells carry both data and voice, designing around 12Mbps minimum has become common even for data-only support, in anticipation of occasional voice activity. So the answer is C

   4. T

      tonydiamond

      2021-07-14

      4 upvotes

      found this on Cisco's VoWLAN guide...I think the answer should be D "Because the 2.4 GHz band is so crowded, and coupled with constraints on its channel allocation, Cisco recommends using the 5 GHz Wi-Fi band for new VoWLAN deployments" https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/Enterprise-Mobility-8-5-Design-Guide/Enterprise_Mobility_8-5_Deployment_Guide/Chapter-9.html

10. Question 10 of 25

    

    Refer to the exhibit. What is the main reason why the Wi-Fi design engineer took a different approach than installing the APs in the offices, even though that installation provides better coverage?

    • Aaesthetics
    • Btransmit power considerations
    • Cantenna gain
    • Dpower supply considerations

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    Right answer is A. https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS-DG/wifich5.html FiGure 5-6 For aesthetic reasons, facilities management has decided that access points will not be placed within any of the executive offices or conference rooms located between the hallway corridors and the physical perimeter. Because of these restrictions, our convex hull now lies at the outside edge of the corridor (indicated by the blue rectangle) and not at the true physical perimeter of the floor.

    Adapted from community discussion by Cyrillka · 2021-05-13 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. C

       Cyrillka

       2021-05-13

       11 upvotes

       Right answer is A. https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS-DG/wifich5.html FiGure 5-6 For aesthetic reasons, facilities management has decided that access points will not be placed within any of the executive offices or conference rooms located between the hallway corridors and the physical perimeter. Because of these restrictions, our convex hull now lies at the outside edge of the corridor (indicated by the blue rectangle) and not at the true physical perimeter of the floor.

    2. L

       Liselot

       2022-01-06

       6 upvotes

       Answer A Cyrillka's link is not working anymore. Here is a new one: https://community.cisco.com/kxiwq67737/attachments/kxiwq67737/6015-discussions-wireless/10130/1/Cisco%20Connected%20Mobile%20Experiences%20(CMX)%20CVD.pdf

    3. R

       rrahim

       2022-03-15

       6 upvotes

       Please Validate not Guess, it makes it harder for everyone else to practice this. Correct answer is A. Read the manual https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS-DG/wifich5.html

    4. I

       Impeg

       2022-06-08

       2 upvotes

       I think the answer is correct. The difference between the document "everyone" refers to and the question is the person from which the solution comes: "facilities management has decided" and "Wi-Fi design engineer"

11. Question 11 of 25

    A rapidly expanding company has tasked their network engineer with wirelessly connecting a new cubicle area with Cisco workgroup bridges until the wired network is complete. Each of 42 new users has a computer and VoIP phone. How many APs for workgroup bridging must be ordered to keep cost at a minimum while connecting all devices?

    • A4
    • B5
    • C6
    • D7

    Show answer

    Correct answer: B

    How others answered

    • B89%

    Explanation

    looking at the “42” number, but indeed since it mentions computer + VoIP =84 It’s 5. Workgroup bridges support 20 cliens maximum.

    Adapted from community discussion by skh · 2021-05-11 · 14 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. S

       skh

       2021-05-11

       14 upvotes

       looking at the “42” number, but indeed since it mentions computer + VoIP =84 It’s 5. Workgroup bridges support 20 cliens maximum.

    2. C

       CyborgXCZ

       2023-02-13

       Selected B3 upvotes

       The answer should be B. This is from the deployment guide.. A Cisco WGB provides information about its wired clients via Internet Access Point Protocol (IAPP) messaging. This enables the wireless infrastructure to know the MAC addresses of the WGB’s wired clients. Up to 20 wired clients are supported behind a Cisco WGB. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/workgroup_bridges.pdf Since each user will consume 2 clients (PC/IP Phone) and we have 48 Users we will need minimum of 5x AP's to support 84 Clients

    3. J

       JONATHGA

       2022-06-07

       Selected B2 upvotes

       a WGB is used to provide access to the network through wireless to a device that doesn't have wireless capability, so if they want to use APs on WGB mode, we could assume that the laptops and VoIP phones are not wifi capable, so they will use the ethernet port of the AP to connect to the network. An AP on WGB mode can support up to 20 wired clients, so if there are 42 clients with two devices each, the total amount of devices to be connected to the WGBs will be 84 and we need at least 5 APs on WGB mode to support all those clients: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/workgroup_bridges.html#wgb

    4. R

       rrahim

       2022-02-18

       3 upvotes

       https://community.cisco.com/t5/wireless-mobility-documents/how-many-clients-can-be-connected-to-an-access-point/ta-p/3115019 Number of 802.11b devices per AP: Cisco recommends that you have no more than 15 to 25. 4*25=100 42*2=84 Answer A

12. Question 12 of 25

    A wireless network consultant must assess an existing wireless LAN controller. Which section must the consultant check before replacing the old APs with APs that are IEEE 802.11ac-capable?

    • Anumber of AP licenses
    • Bcontroller PSU
    • Cthroughput capacity
    • Dsoftware version

    Show answer

    Correct answer: D

    How others answered

    • D83%
    • C17%

    Explanation

    I think it is D, since newer APs might not be compatible with older WLC software. Also, if you replace each old AP by a new one, the licenses should remain the same

    Adapted from community discussion by antmich · 2021-03-16 · 21 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. A

       antmich

       2021-03-16

       21 upvotes

       I think it is D, since newer APs might not be compatible with older WLC software. Also, if you replace each old AP by a new one, the licenses should remain the same

    2. T

       tonydiamond

       2021-07-20

       4 upvotes

       answer is D. why would you check ap licenses for replacing existing aps? we are in the process now of replacing old aps with newer models. we have to upgrade the WLC with a newer software version to make it compatible with the newer models.

    3. M

       Macintosh_and_Merida

       2022-12-03

       Selected D3 upvotes

       As it's 'replacing' then the licenses should not be a problem. However, firmware compatibility may be an issue - worth checking on https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html

    4. A

       ALEX_CC

       2022-12-01

       Selected D3 upvotes

       D is corrent, since one AP consumes one Licsens, the typ of AP does not matter

13. Question 13 of 25

    An engineer is reducing the subnet size of the corporate WLAN by segmenting the VLAN into smaller subnets. Clients will be assigned a subnet by location. Which type of groups should the engineer use to map the smaller subnets to the corporate WLAN?

    • AWLC port groups
    • BRF groups
    • CAP groups
    • Dinterface groups

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    c In typical deployment scenarios, each WLAN is mapped to a single dynamic interface per WLC, but consider a deployment scenario where there is a 4404-100 WLC that supports the maximum number of APs (100). Now consider a scenario where 25 users are associated to each AP. That would result in 2500 users who share a single VLAN. Some customer designs can require substantially smaller subnet sizes. One way to deal with this is to break up the WLAN into multiple segments. The AP grouping feature of the WLC allows a single WLAN to be supported across multiple dynamic interfaces (VLANs) on the controller. This is done when a group of APs is mapped to a specific dynamic interface. APs can be grouped logically by employee workgroup or physically by location. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/71477-ap-group-vlans-wlc.html

    Adapted from community discussion by rrahim · 2022-03-15 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. E

       EGD

       2021-11-30

       11 upvotes

       C - "AP groups define the WLAN and VLAN mapping with RF profiles"

    2. R

       rrahim

       2022-03-15

       Selected C5 upvotes

       c In typical deployment scenarios, each WLAN is mapped to a single dynamic interface per WLC, but consider a deployment scenario where there is a 4404-100 WLC that supports the maximum number of APs (100). Now consider a scenario where 25 users are associated to each AP. That would result in 2500 users who share a single VLAN. Some customer designs can require substantially smaller subnet sizes. One way to deal with this is to break up the WLAN into multiple segments. The AP grouping feature of the WLC allows a single WLAN to be supported across multiple dynamic interfaces (VLANs) on the controller. This is done when a group of APs is mapped to a specific dynamic interface. APs can be grouped logically by employee workgroup or physically by location. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/71477-ap-group-vlans-wlc.html

    3. S

       scottj

       2024-06-04

       1 upvote

       I think D Based on the original question about how to map smaller subnets in a corporate WLAN where clients are assigned subnets according to their location, what's being sought is an efficient way to manage the distribution and assignment of these subnets within the network. This management must allow subnets to be assigned consistently with the physical location of users within the organization. The correct choice, D. Interface groups, directly focuses on the administration of subnets and their logical assignment within a larger network, which is the primary goal in this scenario. Interface groups allow for the grouping of multiple network interfaces on the controller, where each group can be associated with a different subnet. This makes it much easier to assign specific subnets to users in different locations, ensuring that the network structure is organized and that access and security policies are appropriately applied based on where the user is connecting.

    4. J

       JBERTHIER

       2024-03-28

       Selected C1 upvote

       tricky question ! You may solve the case with an AP group or with an interface group It depends if an anchor / foreign situation is involved : https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_010101110.html In most cases, a mapping WLAN interface in each AP group per location is the solution. So I would say answer C

14. Question 14 of 25

    An engineer is designing an outdoor mesh network to cover several sports fields. The core of the network is located in a building at the entrance of a sports complex. Which type of antenna should be used with the RAP for backhaul connectivity?

    • A5 GHz, 8-dBi omnidirectional antenna
    • B2.4 GHz, 8-dBi patch antenna
    • C5 GHz, 14-dBi patch antenna
    • D2.4 GHz, 14-dBi omnidirectional antenna

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    C. 5 GHz, 14-dBi patch antenna Here's the rationale for this choice: 5 GHz Frequency Band: The 5 GHz band is generally preferred for backhaul connectivity in a mesh network due to its larger bandwidth capacity and reduced interference compared to the 2.4 GHz band. This is particularly important in an outdoor setting like a sports complex, where there might be other sources of interference. 14-dBi Patch Antenna: A patch antenna with a high gain (14 dBi) is directional and focuses the signal in a specific direction, which is ideal for backhaul links where the signal needs to travel a longer distance from the RAP to other access points in the network. The directional nature of the patch antenna helps in maintaining a strong and focused signal, increasing the link's reliability and performance.

    Adapted from community discussion by Babustest · 2023-12-28 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. E

       EGD

       2021-11-30

       9 upvotes

       A- The RAP has to "cover several sports fields" . . .containing MAPs . .

    2. W

       wili0001

       2022-10-01

       8 upvotes

       Chapter 7 pag.147 ount the RAP such that it has a good view of the area to be covered, using directional antennas if possible. Answer : C

    3. B

       Babustest

       2023-12-28

       Selected C2 upvotes

       C. 5 GHz, 14-dBi patch antenna Here's the rationale for this choice: 5 GHz Frequency Band: The 5 GHz band is generally preferred for backhaul connectivity in a mesh network due to its larger bandwidth capacity and reduced interference compared to the 2.4 GHz band. This is particularly important in an outdoor setting like a sports complex, where there might be other sources of interference. 14-dBi Patch Antenna: A patch antenna with a high gain (14 dBi) is directional and focuses the signal in a specific direction, which is ideal for backhaul links where the signal needs to travel a longer distance from the RAP to other access points in the network. The directional nature of the patch antenna helps in maintaining a strong and focused signal, increasing the link's reliability and performance.

    4. J

       Johnconnor2021

       2021-11-16

       4 upvotes

       it doesnt say how the sports complex are distributed so normally they are spread over a core building, as it suggest the question. Hence, you should think in an omnidirectional. Besides, it does not say how far are the sports fields, so its understandable that are not quite far from the core building either. Therefore 8 dBi should be enough. I would go for A.

15. Question 15 of 25

    What is the attenuation value of a human body on a wireless signal?

    • A3 dB
    • B4 dB
    • C6 dB
    • D12 dB

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    (a) 3 dB vhttps://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/71642-vocera-deploy-guide.html Plasterboard wall 3 dB Glass wall with metal frame 6 dB Cinder block wall 4 dB Office window 3 dB Metal door 6 dB Metal door in brick wall 12 dB Human body 3 dB

    Adapted from community discussion by Gray99 · 2022-10-10 · 15 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. G

       Gray99

       2022-10-10

       15 upvotes

       (a) 3 dB vhttps://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/71642-vocera-deploy-guide.html Plasterboard wall 3 dB Glass wall with metal frame 6 dB Cinder block wall 4 dB Office window 3 dB Metal door 6 dB Metal door in brick wall 12 dB Human body 3 dB

    2. F

       FabriG

       2024-01-16

       6 upvotes

       Answer A. According to Cisco ENWLSD Course, human head between 3 to 6 dB.

    3. R

       RITOBA

       2024-08-10

       1 upvote

       Higher gain antennas can also reduce the number of calls on a WiFi channel because of the increased coverage area. The Cisco AP1130 Series provides the same type of antenna design concept. For voice, a ceiling-mounted antenna is preferred over a wall-mounted patch because the human head and body attenuate 5 dB of the signal (see Figure 11-1). Most floors attenuate 7 dB of the signal. For phones that have the antenna inside the body of the phone, the way the phone is held in the human hand can influence signal attenuation by 4 dB. In some cases, a phone held against the head with the hand covering the antenna can result in a signal drop of 9 dB. The general rule for indoor deployments is that every 9 dB of signal loss reduces the coverage area in half. Figure 11-1 shows an example of the difference in radiating power from a handset when held to the head. https://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob30dg/Voice.html

    4. G

       google_np

       2024-01-12

       1 upvote

       Signal Attenuation Signal attenuation or signal loss occurs even as the signal passes through air. The loss of signal strength is more pronounced as the signal passes through different objects. A transmit power of 20 mW is equivalent to 13 dBm. Therefore, if the transmitted power at the entry point of a plasterboard wall is at 13 dBm, the signal strength is reduced to 10 dBm when exiting that wall. This table shows the likely loss in signal strength caused by various types of objects. Signal Attenuation Caused By Various Types of Objects Object in Signal Path Signal Attenuation through Object Plasterboard wall 3 dB Glass wall with metal frame 6 dB Cinder block wall 4 dB Office window 3 dB Metal door 6 dB Metal door in brick wall 12 dB Human body 3 dB

16. Question 16 of 25

    A customer is looking for a network design with Cisco Hyperlocation using AP4800 for location tracking via a custom mobile app. Issues appeared in the past with refresh rates for location updates. What needs to be implemented to meet these requirements?

    • ACisco CMX SDK in the location app
    • Bdevice Bluetooth via the app
    • CCisco FastLocate technology
    • Dredundant CMX and fetch location in round-robin fashion

    Show answer

    Correct answer: C

    How others answered

    • C86%

    Explanation

    Implementing CMX SDK on the mobile app is not a part of the network design. Faster refresh from mobile devices result in drain of battery. Cisco Fastlocate needs to be enabled so that the location packets are read from the data packets and this is deployed on the Network. So Given answer is correct

    Adapted from community discussion by santoshkotla · 2022-05-21 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. S

       santoshkotla

       2022-05-21

       Selected C6 upvotes

       Implementing CMX SDK on the mobile app is not a part of the network design. Faster refresh from mobile devices result in drain of battery. Cisco Fastlocate needs to be enabled so that the location packets are read from the data packets and this is deployed on the Network. So Given answer is correct

    2. R

       Rastacuache

       2022-07-05

       4 upvotes

       According to the official guide "The Cisco Hyperlocation solution substantially increases the location accuracy of Cisco CMX. The FastLocate technology boosts the refresh rate, so Cisco CMX captures more location data points, and the AoA capabilities increase location accuracy to as close as 1 meter. The improved accuracy provides more granular analytics data and more relevant push content to the customer". So in my oponion the provided answer is correct

    3. T

       TonyVi

       2024-05-21

       3 upvotes

       Cisco CMX SDK in the location app (Option A) is useful for integrating location services into the mobile app, but it alone does not address the issue of refresh rates for location updates. Cisco FastLocate technology (Option C) is specifically designed to enhance location accuracy and reduce the latency of location updates by leveraging advanced algorithms and features of the Cisco AP4800. FastLocate provides more frequent and accurate location updates, addressing the primary issue of refresh rates. (C is correct)

    4. R

       RogerTheLodger

       2021-09-18

       3 upvotes

       Answer is A - The problem listed refers to refresh rates. 'Near real-time refresh Delivers extremely fast refresh rate when the Cisco CMX SDK is embedded in your mobile application.' https://www.cisco.com/c/en/us/solutions/enterprise-networks/hyperlocation-solution/index.html

17. Question 17 of 25

    A customer called with a requirement that internal clients must be on different subnets depending on the building they are in. All APs are operating in local mode and will not be modified, and this is a single controller solution. Which design approach creates the desired result?

    • ACreate FlexConnect groups, place the access points in, and set the correct VLAN to SSID mapping based on location.
    • BCreate mobility anchors for the SSID, and on the controller under the internal SSID, create a foreign map to the desired VLAN based on location.
    • CCreate AP groups for each desired location, map the correct VLANs to the internal SSID, and add the APs for that location.
    • DCreate an SSID, place it to the desired VLAN under WLANs, and configure 802.1x in ISE to assign the correct VLAN based on the SSID from which the client is authenticating.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    I'm 3 hours from the exam. I now believe my comment above is incorrect. (I'm only human! :) The question clearly says, the APs won't be changed from Local Mode, so they can't participate in FlexConnect Groups as that requires a mode change from Local on the APS. I'm still not sure about the answer, but mobility anchors need more than one controller, and who knows if this customer has ISE? So I think the displayed answer is correct, C.

    Adapted from community discussion by HealthyGeneral · 2022-04-24 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. H

       HealthyGeneral

       2022-04-24

       9 upvotes

       I'm 3 hours from the exam. I now believe my comment above is incorrect. (I'm only human! :) The question clearly says, the APs won't be changed from Local Mode, so they can't participate in FlexConnect Groups as that requires a mode change from Local on the APS. I'm still not sure about the answer, but mobility anchors need more than one controller, and who knows if this customer has ISE? So I think the displayed answer is correct, C.

    2. A

       Alonzo_Harris

       2022-12-17

       Selected C4 upvotes

       The answer is definitely C. I have done this many times throughout the hospital.

    3. H

       HealthyGeneral

       2022-04-22

       1 upvote

       Answer is A. From https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-7/config-guide/b_cg87/flexconnect_groups.html "All of the FlexConnect APs in a group can share the same backup RADIUS server, fast secure roaming, local authentication configuration, and WLAN-VLAN mapping information." So flex connect groups are set up for each building, aps within that building are put into the corresponding group, the flex connect group has VLAN settings specific for that building.

    4. F

       Farhad123

       2024-09-24

       1 upvote

       Also read this for more clarification regarding AP group: https://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob30dg/TechArch.html

18. Question 18 of 25

    An engineer is designing a network deployment for a college with six buildings. Each building must have a WLC located in the IDF to support the APs. The wireless clients should be able to roam between the APs and the controllers. Which type of wireless architecture should be used?

    • Acloud
    • Bautonomous
    • Ccentralized
    • Ddistributed

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    Answer is C - Cloud-based architecture has controllers in the cloud, not on premises. Autonomous architecture means each AP is autonomous and is not managed by a WLC, distributed architecture is another term for autonomous architecture, so the same applies. Centralized architecture, a.k.a. split-MAC architecture is when all APs are managed centrally by WLCs, they do not need to be co-located. Understanding Cisco Wireless Architectures - CCNA Wireless 200-355 Official Cert Guide (2016) (apprize.best)

    Adapted from community discussion by RogerTheLodger · 2021-09-19 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. L

       Liselot

       2022-01-06

       12 upvotes

       Answer D Each building has its own WLC https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/cuwn.html

    2. R

       RogerTheLodger

       2021-09-19

       2 upvotes

       Answer is C - Cloud-based architecture has controllers in the cloud, not on premises. Autonomous architecture means each AP is autonomous and is not managed by a WLC, distributed architecture is another term for autonomous architecture, so the same applies. Centralized architecture, a.k.a. split-MAC architecture is when all APs are managed centrally by WLCs, they do not need to be co-located. Understanding Cisco Wireless Architectures - CCNA Wireless 200-355 Official Cert Guide (2016) (apprize.best)

    3. M

       martas

       2021-10-18

       3 upvotes

       shouldn't be distributed rather then cloud according to this? https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/cuwn.html#32233

    4. J

       Johnconnor2021

       2021-11-18

       3 upvotes

       yes its distributed, because the WLC are local in each place. Cloud is normally referred to devices that are not in the same area or region or belong to a ISP or SP. D is correct

19. Question 19 of 25

    An AP is receiving 802.11 packets on its 802.11a radio with an RSSI value of -77 dBm. The current AP is part of an AP group that has been assigned an RF profile with RX-SOP set to Medium for 802.11a. Which action does the AP take with the packets?

    • AAll frames are classified as non-Wi-Fi frames and are not decoded by the 5 GHz radio.
    • BFrames are decoded by the 2.4 GHz radio.
    • CAll frames are classified as non-Wi-Fi frames and are not decoded by the 2.4 GHz radio.
    • DFrames are decoded by the 5 GHz radio.

    Show answer

    Correct answer: D

    How others answered

    • D86%

    Explanation

    My opinion is D: .11a radio means we are at 5Ghz. RxSOP Medium setting means signal lower than -78dBm is ignored. So -77dBm is normally decoded by 5G radio https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/b_cg81_chapter_010001111.pdf

    Adapted from community discussion by walacky · 2024-04-06 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. W

       walacky

       2024-04-06

       11 upvotes

       My opinion is D: .11a radio means we are at 5Ghz. RxSOP Medium setting means signal lower than -78dBm is ignored. So -77dBm is normally decoded by 5G radio https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/b_cg81_chapter_010001111.pdf

    2. A

       Alonzo_Harris

       2024-06-19

       Selected D2 upvotes

       The answer is D Medium Threshold Rx-SOP: 2.4Ghz is -82dBm and 5Ghz is -78dBm All frames received with weaker RSSI than configured RS-SOP will be classified as non-WiFi frames and will not get decoded by the radio, only packets with acceptable RSSI values are decoded. Packets that are not decoded are treated as non-WiFi interference and detected at the AP as noise. So since -77dBm is not at the threshold of -78dBm the RSSI of -77dBm will be decoded by 802.11a (5Ghz)

    3. L

       learningccnp

       2024-06-03

       Selected D2 upvotes

       because 802.11a signal is 5Ghz , and whatever RxSOP, it only decode the 5Ghz signal, and not 2.4Ghz.

    4. M

       madhir

       2024-04-06

       2 upvotes

       They are asking about the 802.11a (5Ghz radio) not the 2.4... As per walacky's comment above, -78dBm or lower is ignored so the answer in this case is D.

20. Question 20 of 25

    Select 2

    An engineer is designing a wireless deployment for a university auditorium. Which two features can be used to help deal with the issues introduced by high AP count? (Choose two.)

    • ATSPEC
    • BRXSOP
    • CTPC
    • DLSS
    • EDFS

    Show answer

    Correct answer: B, C

    How others answered

    • BC67%
    • CE33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    should be (RXSOP) and (TPC) as per definitions: TPC – Transmit Power Control, sets to power to determine the cells boundary RXSOP – The higher the RX-SOP level, the less sensitive the radio is and the smaller the receiver cell size will be As for the other options: TSPEC – Traffic Specification, this is a QoS feature to prioritise traffic LSS – Location Specific Service, has to do with mDNS and Bonjour DFS – Dynamic Frequency Selection, is used to back off of radar bands in case radar signals are detected

    Adapted from community discussion by skh · 2022-11-11 · 20 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. S

       skh

       2022-11-11

       20 upvotes

       should be (RXSOP) and (TPC) as per definitions: TPC – Transmit Power Control, sets to power to determine the cells boundary RXSOP – The higher the RX-SOP level, the less sensitive the radio is and the smaller the receiver cell size will be As for the other options: TSPEC – Traffic Specification, this is a QoS feature to prioritise traffic LSS – Location Specific Service, has to do with mDNS and Bonjour DFS – Dynamic Frequency Selection, is used to back off of radar bands in case radar signals are detected

    2. L

       Liselot

       2023-07-06

       6 upvotes

       While thinking more and more about this: DFS itself is not a feature that you helps dealing with this scenario. DFS dynamically selects other channels when radar is detected. Although it's wise to include DFS channels to minimize co-channel interference, we can't change or configure DFS itself.

    3. K

       kthekillerc

       2023-07-03

       6 upvotes

       Provided answer is correct. AGAIN please read the questions, per your own provided info and the question stating "it is a high AP Count atmosphere, This is precisely what DFS is designed for. The correct answers were provided. Don't speculate but validate!

    4. L

       Liselot

       2023-07-06

       4 upvotes

       This is a discussion forum. Everybody is free to join the discussion, even if they are not 100% sure of the answer. Discussions contribute to learning and understanding. I would not discourage this to anyone. RxSOP reduces the cell sizes and in this scenario I would definitely implement it TPC manages the cell sizes; I would configure it DFS offers more channels, thus more available frequencies, which is an advantage in this scenario. Three features to consider. Let's discuss

21. Question 21 of 25

    What is the 9800 Series Wireless Controller mobility tunnel on a Cisco Catalyst 9800 controller?

    • AIt is an IPsec tunnel with control path only.
    • BIt is a CAPWAP tunnel with data path only.
    • CIt is a CAPWAP tunnel with control path and data path.
    • DIt is an IPsec tunnel with control path and data path.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    Correct answer is C https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html "The Cisco Catalyst 9800 Series Wireless Controller mobility tunnel is a CAPWAP tunnel with control path (UDP 16666) and data path (UDP 16667). The control path is DTLS encypted by default. Data path DTLS can be enabled when you add the mobility peer."

    Adapted from community discussion by Impeg · 2023-12-09 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. I

       Impeg

       2023-12-09

       8 upvotes

       Correct answer is C https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html "The Cisco Catalyst 9800 Series Wireless Controller mobility tunnel is a CAPWAP tunnel with control path (UDP 16666) and data path (UDP 16667). The control path is DTLS encypted by default. Data path DTLS can be enabled when you add the mobility peer."

    2. R

       rufusruru

       2023-03-11

       3 upvotes

       The Cisco Catalyst 9800 Series Wireless Controller mobility tunnel is a CAPWAP tunnel with control path (UDP 16666) and data path (UDP 16667). The control path is DTLS encypted by default. Data path DTLS can be enabled when you add the mobility peer.

    3. S

       santoshkotla

       2023-11-21

       1 upvote

       Given Answer is correct! https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213913-building-mobility-tunnels-on-catalyst-98.html "On the 9800 WLC, control plane encryption is always enabled, which means that you need to have secure mobility enabled on the AireOS side. However, data link encryption is optional. If you enable it on the 9800 side, enable it on AireOS with: config mobility group member data-dtls enable"

    4. D

       d3d4r

       2023-02-28

       2 upvotes

       it should be C https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html

22. Question 22 of 25

    An engineer must configure the virtual IP address on multiple controllers in a mobility group. Which rule must the engineer follow to ensure proper roaming?

    • AEnsure that the DNS entry is tied to the virtual IP address of the WLC.
    • BUse a unique IP address for each WLC.
    • CEnsure that the DNS Host Name field is defined.
    • DUse the same IP address for each WLC.

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    The answer is D Cisco documentation states the following: All controllers within a mobility group must be configured with the same virtual interface IP address. Otherwise, inter-controller roaming may appear to work, but the handoff does not complete, and the client loses connectivity for a period of time.

    Adapted from community discussion by Alonzo_Harris · 2022-12-17 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. A

       Alonzo_Harris

       2022-12-17

       Selected D5 upvotes

       The answer is D Cisco documentation states the following: All controllers within a mobility group must be configured with the same virtual interface IP address. Otherwise, inter-controller roaming may appear to work, but the handoff does not complete, and the client loses connectivity for a period of time.

    2. I

       Impeg

       2022-06-09

       2 upvotes

       I think the given answer is correct. Answer D says IP address, not virtual IP address "To ensure connectivity and web authentication, the DNS server should always point to the virtual interface. If a DNS hostname is configured for the virtual interface, then the same DNS host name must be configured on the DNS server(s) used by the client." https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010011101.html

    3. M

       Mimimimimi

       2023-04-06

       1 upvote

       @Araghas: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_010.html Scroll to step 32: "In the IP Address field, enter the IP address of the controller’s virtual interface. You should enter a fictitious, unassigned IP address." "To ensure connectivity and web authentication, the DNS server should always point to the virtual interface. If a DNS hostname is configured for the virtual interface, then the same DNS host name must be configured on the DNS server(s) used by the client." -> The "if" statement tells is that the DNS host entry is optional.

    4. S

       ShamsDimashki

       2024-07-30

       2 upvotes

       I think it's D As per Cisco book "Be aware that a controller name is not the same as its DNS entry; rather, it is the name string configured on the individual controller." meaning we can configure the WLC with IP only

23. Question 23 of 25

    Multiple WLCs are implemented in a high-availability configuration in a mobility group. APs are deployed with only a primary controller assigned. By default, which mobility group member controller do the orphaned APs join in the event of a failed controller?

    • Acontroller with the most available AP free license capacity
    • Bcontroller with the lowest percent of associated APs per license capacity
    • Ccontroller with the least CPU utilization over the last reporting period
    • Dcontroller with the least number of associated APs

    Show answer

    Correct answer: A

    How others answered

    • A90%

    Explanation

    https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-mobile/71963-apload-apfall-uwn.html "The AP then attempts to join the least loaded WLC, which is the WLC with the greatest available AP capacity."

    Adapted from community discussion by ContactScott · 2023-05-14 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. E

       EGD

       2021-12-12

       4 upvotes

       A? . . . it wouldn't want to pick a small WLC with low license count just because it only has a few associated, but with only a few left in the license. . . shouldn't "greatest available AP capacity" take license availability into consideration? "The AP then attempts to join the least loaded WLC, which is the WLC with the greatest available AP capacity. After an AP joins a WLC, the AP learns the IP addresses of the other WLCs in the mobility group from its joined WLC."

    2. C

       ContactScott

       2023-05-14

       Selected A4 upvotes

       https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-mobile/71963-apload-apfall-uwn.html "The AP then attempts to join the least loaded WLC, which is the WLC with the greatest available AP capacity."

    3. R

       RhJ72

       2021-08-14

       2 upvotes

       You can perform AP load balancing on two (or more) WLCs if you configure mobility groups properly. The LWAPP allows for dynamic redundancy and load balancing. For example, if you specify more than one IP address for option 43, an AP sends LWAPP discovery requests to each of the IP addresses that the AP receives. In the WLC LWAPP discovery response, the WLC embeds this information: Information on the current AP load, which is defined as the number of APs that are joined to the WLC at the time The AP capacity The number of wireless clients that are connected to the WLC The AP then attempts to join the least loaded WLC, which is the WLC with the greatest available AP capacity https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-mobile/71963-apload-apfall-uwn.html

    4. L

       Liselot

       2022-01-05

       4 upvotes

       Sorry, Answer A Least loaded = greatest available AP capacity

24. Question 24 of 25

    An engineer must ensure that the wireless network accomplishes fast, secure roaming by way of caching keys on the APs. Which key caching mechanism is enabled by default on a Cisco AireOS WLC?

    • ASKC
    • BOKC
    • C802.11r
    • DCCKM

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    Answer is B OKC is a fast roaming technique supported by Microsoft and some Android clients. Another fast roaming method is the use of 802.11r, which is supported by Apple and few Andorid clients. OKC is enabled by default on a WLAN. This configuration enables the control of OKC on a WLAN. Disabling OKC on a WLAN disables the OKC even for the OKC-supported clients. A new configuration is introduced for each WLAN in the controller in Cisco IOS XE Amsterdam 17.2.1, to disable or enable fast and secure roaming with OKC at the corresponding AP.

    Adapted from community discussion by Thomas66 · 2023-01-11 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. F

       FabriG

       2023-01-18

       Selected B6 upvotes

       By default, SKC is disabled and opportunistic key caching (OKC) is enabled. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01010010.html

    2. T

       Thomas66

       2023-01-11

       2 upvotes

       Answer is B OKC is a fast roaming technique supported by Microsoft and some Android clients. Another fast roaming method is the use of 802.11r, which is supported by Apple and few Andorid clients. OKC is enabled by default on a WLAN. This configuration enables the control of OKC on a WLAN. Disabling OKC on a WLAN disables the OKC even for the OKC-supported clients. A new configuration is introduced for each WLAN in the controller in Cisco IOS XE Amsterdam 17.2.1, to disable or enable fast and secure roaming with OKC at the corresponding AP.

    3. A

       Antasik

       2022-10-18

       Selected B2 upvotes

       https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-2/config-guide/b_wl_17_2_cg/_opportunistic_key_caching.pdf Page 1 / Step 3

    4. F

       Farhad123

       2024-10-06

       1 upvote

       While 802.11r and CCKM are both key components of fast roaming solutions, the question specifically focuses on caching mechanisms. In this case, only SKC (Sticky Key Caching) and OKC (Opportunistic Key Caching) are relevant. It's important to note that SKC is optional, not widely supported, and does not function across inter-controller roams, which limits its effectiveness. Given these limitations, OKC is the correct choice for fast roaming in most environments.

25. Question 25 of 25

    Select 2

    A wireless engineer must design mobility between two buildings at a campus site. The engineer has one controller at each site. The engineer is investigating inter- controller CAPWAP data and control traffic. Which two ports must be open? (Choose two.)

    • A5246
    • B5247
    • C8443
    • D16666
    • E16667

    Show answer

    Correct answer: D, E

    How others answered

    • DE78%
    • AB23%

    Explanation

    D & E As per this official Cisco Document https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/mobility_groups.html If you have a firewall b/w your mobility group members, open UDP port 16666 and IP protocol 97. If you are using encrypted mobility, open UDP port 5246 and 5247. If you are using New Mobility, UDP port 16666, 16667, and 16668 are used. For information about protocols and port numbers that must be used for management and operational purposes, see the Matrix Site Further more looking at the Matrix Page https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113344-cuwn-ppm.html Source Dest. Protocol Dest. Port Src. Port Description WLC WLC UDP 16666 16666 Mobility - non-secured WLC WLC UDP 16667 n/a Mobility - secured - removed in 5.2 WLC AP UDP 5246-5247 n/a CAPWAP Ctl/Data Since the question is related to controllers between each site (WLC WLC) then D & E is the most logical answer here.

    Adapted from community discussion by CyborgXCZ · 2023-02-13 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-425 or CertExamHQ.

    1. F

       Faridtnx

       2023-05-21

       Selected D, E9 upvotes

       A/B are capwap ports for AP-WLC connection. The question is asking for WLC-WLC D and E is correct

    2. N

       NetworkJoe

       2023-11-27

       Selected D, E7 upvotes

       inter-controller roaming is using UDP/16666 and UDP/16667 CAPWAP tunnels.

    3. P

       peer1024

       2023-01-19

       Selected D, E3 upvotes

       Explanation: Two different building on a campus --> to different IP address ranges --> WLC1 and WLC2 ARE NOT in te same ip address range It will be a Layer 3 inter controller roam with anchor and foreign controller. The most recent platforms, such as the Catalyst 9800, transport mobility control messages over encrypted CAPWAP tunnels. Client data traffic is also transported over CAPWAP tunnels, but encryption is optional. Legacy controller platforms that are based on AireOS software prior to release 8.5 transport mobility messages over Ethernet-over-IP (EoIP) tunnels (IP protocol 97) and UDP port 16666. AireOS platforms running release 8.5 or later support encrypted CAPWAP. (16667) Reference: Cert. guide "CCNP Enterprise ENWLSD 300-425 ENWLSI 300-430 Official Cert Guide", page 169f and page 175

    4. C

       CyborgXCZ

       2023-02-13

       3 upvotes

       D & E As per this official Cisco Document https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/mobility_groups.html If you have a firewall b/w your mobility group members, open UDP port 16666 and IP protocol 97. If you are using encrypted mobility, open UDP port 5246 and 5247. If you are using New Mobility, UDP port 16666, 16667, and 16668 are used. For information about protocols and port numbers that must be used for management and operational purposes, see the Matrix Site Further more looking at the Matrix Page https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113344-cuwn-ppm.html Source Dest. Protocol Dest. Port Src. Port Description WLC WLC UDP 16666 16666 Mobility - non-secured WLC WLC UDP 16667 n/a Mobility - secured - removed in 5.2 WLC AP UDP 5246-5247 n/a CAPWAP Ctl/Data Since the question is related to controllers between each site (WLC WLC) then D & E is the most logical answer here.

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-425 practice, question 1 of 25