Important Cisco 350-101 WLCOR Exam Questions

Answer: A

Explanation:

WPA2 Personal (PSK) authentication relies on a shared secret (preshared key) configured on both the wireless LAN controller (WLC) and the client device. In the exhibit, the WLAN is configured with WPA2 and PSK (set-key ascii MyKey123), which means the network expects clients to use the same preshared key to authenticate. To enable client connectivity, the preshared key must be manually entered on each client device; this aligns the client and WLC authentication parameters. Options B, C, and D are unrelated to WPA2 Personal: MAC filtering is a security policy mechanism, Active Directory integration supports WPA2 Enterprise with 802.1X authentication, and client certificates are used for certificate-based EAP methods, not PSK. Cisco Wireless Core Technologies emphasize that PSK deployments require consistent key configuration across the WLAN and clients, and that the preshared key is the critical element for successful authentication. This ensures secure, encrypted communication while providing simple setup for small or branch deployments without an enterprise RADIUS infrastructure. Reference topics: Client Connectivity Configuration --- WPA2 Personal, preshared key authentication, WLAN configuration, branch deployment WLAN security.

Answer: C

Explanation:

The correct configuration is aaa-override followed by nac under the existing Catalyst 9800 wireless policy profile. The exhibit already places the administrator in policy-profile configuration mode with wireless profile policy my-policy, so the missing commands must be policy-profile subcommands, not another profile declaration. Cisco's Catalyst 9800 configuration examples show the exact sequence: enter wireless profile policy , enable aaa-override, enable nac, then configure VLAN and no shutdown.

aaa-override permits authorization attributes returned by AAA or Cisco ISE, such as VLAN, ACL, QoS, redirect ACL, or posture-related access controls, to override the locally defined policy. Cisco's documentation explicitly states that AAA override applies policies coming from AAA or ISE servers, while nac enables Network Access Control in the policy profile. This is the required behavior when endpoints must be posture-validated before normal network access is granted. Cisco also notes that NAC State is enabled in the policy profile and can only be enabled when AAA override is enabled.

Option A is invalid because nac-policy is not the correct CLI keyword. Options B and D omit NAC. Reference topic: Client Connectivity Configuration --- Catalyst 9800 policy profiles, AAA override, NAC State, posture enforcement, and ISE-based access control.

Answer: D

Explanation:

Fast transition is the correct solution because it refers to IEEE 802.11r Fast BSS Transition, which reduces the authentication delay when a wireless client roams from one AP to another. Cisco describes 802.11r Fast Transition as a feature for seamless wireless roaming and states that, after configuration, the WLAN supports faster client roaming between access points. Cisco's Catalyst 9800 roaming documentation also identifies 802.11r as the mechanism focused on seamless transition between APs, while 802.11k and 802.11v assist with neighbor reporting and network-assisted roaming decisions.

The core advantage is that key negotiation and authentication preparation occur before or during the roam, reducing the interruption experienced by latency-sensitive applications such as voice, video, collaboration tools, and real-time enterprise applications. Static VLAN policy only controls segmentation and does not accelerate roaming. Optimized roaming can help discourage sticky clients from remaining associated to poor-quality APs, but it is not the primary fast-roam authentication mechanism. A redundant RF profile is not an 802.11 roaming solution. Reference topics: 802.11r Fast BSS Transition, client roaming, WLAN mobility behavior, Catalyst 9800 WLAN security, and seamless roaming design.

Answer: D

Explanation:

When a radio wave bends around an obstacle in its path, this phenomenon is called diffraction. Diffraction allows the RF signal to reach areas that are not in the direct line of sight of the transmitter, such as behind walls, corners, or other obstructions. The amount of bending depends on the wavelength of the signal relative to the size of the obstacle---longer wavelengths (lower frequencies) diffract more effectively than shorter wavelengths.

This property is crucial in wireless network design, especially in enterprise or mesh deployments, because it enables coverage in complex indoor environments and around obstructions where direct line-of-sight communication is impossible. Diffraction differs from other RF phenomena: absorption (option A) occurs when RF energy is partially absorbed by materials, reducing signal strength; diffusion (option B) refers to scattering of the signal in multiple directions; and reflection (option C) occurs when RF waves bounce off surfaces like walls or ceilings, which can lead to multipath interference.

Cisco wireless design guides emphasize understanding diffraction for coverage planning, AP placement, and optimizing signal propagation in indoor and campus deployments, ensuring that signals can adequately reach shadowed or obstructed areas without excessive loss or dead spots. Reference topic: RF Fundamentals --- diffraction, reflection, absorption, and indoor wireless propagation.

Answer: B

Explanation:

For in-depth wireless troubleshooting using a Cisco 9176 AP, the correct operational mode is the sniffer mode. This mode allows the AP to capture all RF frames, including management, control, and data frames, across all configured channels, and forward these to a remote protocol analyzer such as Wireshark. Sniffer mode is distinct from other AP modes because the AP does not serve clients in this state; its sole function is passive packet capture for analysis of interference, RF performance, and client behavior. The command ap name mode sniffer executed on the WLC explicitly sets this mode.

Monitor mode (option A) is used to observe client behavior and RF environment, but it does not provide complete over-the-air packet capture. Local mode (option C) is the standard AP mode for client connectivity and normal CAPWAP operation. Rogue-detector mode (option D) is used to identify unauthorized APs and clients but does not capture traffic for external analysis.

Cisco documentation and technical guides for Catalyst APs clearly differentiate these modes, noting that sniffer mode provides full frame capture without client services, making it ideal for troubleshooting complex wireless performance issues in high-density deployments. Reference topic: Wireless Network Operation --- AP modes, sniffer mode configuration, RF troubleshooting, and protocol analyzer integration.

O