Quiz
CCNP Wireless Implementation
This quiz has question types that open in the usual player.
Questions in this quiz (23)
1Which deployment types do FlexConnect provide? Choose 2
- ABranch
- BCampus
- CLocal
- DRemote
- ESmall Office
2Choose the correct options for FlexConnect Hybrid Setup?
The control plane is managed by the [blank_start]central WLC[blank_end]. Data is switched [blank_start]locally at the AP[blank_end]. data plane traffic [blank_start]is not switched[blank_end]. Data plane CAPWAP tunnels [blank_start]are not terminated[blank_end].- AAP
- Bcentral WLC
- Clocal switch
- Dremote switch
- Elocally at the AP
- Flocally athe WLC
- Gremotely at the AP
- Hremotely at the WLC
- Iis switched
- Jis not switched
- Kare not terminated
- Lare terminated
3Compare central and local switching.
Central:
Device: [blank_start]WLC[blank_end]
Traffic Movement: [blank_start]tunnel to WLC via CAPWAP[blank_end]
Local:
Device: [blank_start]FlexConnect AP[blank_end]
Traffic Movement: [blank_start]switched to VLANs via 802.1Q[blank_end]- AWLC
- Btunnel to WLC via CAPWAP
- CFlexConnect AP
- Dswitched to VLANs via 802.1Q
4Compare operating modes.
Standalone
Controller Access: [blank_start]can't be reached[blank_end]
Authentication: [blank_start]local[blank_end]
Services: [blank_start]roaming[blank_end]
Connected
Controller Access: [blank_start]can be reached[blank_end]
Authentication: [blank_start]central[blank_end]
Services: [blank_start]client profiling; RRM[blank_end]- Acan't be reached
- Blocal
- Croaming
- Dcan be reached
- Ecentral
- Fclient profiling; RRM
5Choose the correct term for each statement.
1. All APs share the same local and backup RADIUS server, CCKM (Centralized Key Management), OKC fast roaming keys, smart image upgrade, AVC, AAA-override for local switching, and local EAP authentication configuration information > [blank_start]FlexConnect Groups[blank_end]
2. Allows clients to talk to local devices w/o consuming bandwidth or going through CAPWAP > [blank_start]split tunneling[blank_end]
Allows connections between clients and FlexConnect APs to remain when the AP loses the connection to a WLC, is switching to a secondary WLC, and is reestablishing a connection to the primary WLC > [blank_start]fault tolerance[blank_end]
3. Allows remote users to connect to the corporate network wireless or wired > [blank_start]OEAP[blank_end]
4. Applied per WLAN per AP or for all APs in a group > [blank_start]split tunneling[blank_end]
5. Can be configured at the AP or FlexConnect group level > [blank_start]split tunneling[blank_end]
6. Can get to this mode by first converting to FlexConnect mode > [blank_start]OEAP[blank_end]
7. Does not support multicast or broadcast traffic > [blank_start]split tunneling[blank_end]
8. Enabled by default; cannot be disabled > [blank_start]fault tolerance[blank_end]
9. Enables secure key exchanges whenever a client roams to a different AP > [blank_start]FlexConnect Groups[blank_end]
10. Is enabled by default on IOX-XE and AireOS 8.6 & later > [blank_start]FlexConnect Groups[blank_end]
11. Matching packets are switched locally; all others centrally > [blank_start]split tunneling[blank_end]
12. NAT/PAT is enabled by default and is used to bridge traffic to the local LAN > [blank_start]split tunneling[blank_end]
13. Provides zero downtime during an outage > [blank_start]fault tolerance[blank_end]
14. Required so that CCKM fast roaming can work with the FlexConnect APs > [blank_start]FlexConnect Groups[blank_end]
15. Takes away the need for a full RADIUS EAP authentication > [blank_start]FlexConnect Groups[blank_end]
16. Up to 100 APs each > [blank_start]FlexConnect Groups[blank_end]
17. Used to organize and manage FlexConnect APs > [blank_start]FlexConnect Groups[blank_end]
18. For small branch offices or a home office with only one AP > [blank_start]OEAP[blank_end]- Afault tolerance
- BFlexConnect groups
- COEAP
- Dsplit tunneling
- Efault tolerance
- FFlexConnect groups
- GOEAP
- Hsplit tunneling
- Ifault tolerance
- JFlexConnect groups
- KOEAP
- Lsplit tunneling
- Mfault tolerance
- NFlexConnect groups
- OOEAP
- Psplit tunneling
- Qfault tolerance
- RFlexConnect groups
- SOEAP
- Tsplit tunneling
- Ufault tolerance
- VFlexConnect groups
- WOEAP
- Xsplit tunneling
- Yfault tolerance
- ZFlexConnect groups
- AAOEAP
- ABsplit tunneling
- ACfault tolerance
- ADFlexConnect groups
- AEOEAP
- AFsplit tunneling
- AGfault tolerance
- AHFlexConnect groups
- AIOEAP
- AJsplit tunneling
- AKfault tolerance
- ALFlexConnect groups
- AMOEAP
- ANsplit tunneling
- AOfault tolerance
- APFlexConnect groups
- AQOEAP
- ARsplit tunneling
- ASfault tolerance
- ATFlexConnect groups
- AUOEAP
- AVsplit tunneling
- AWfault tolerance
- AXFlexConnect groups
- AYOEAP
- AZsplit tunneling
- BAfault tolerance
- BBFlexConnect groups
- BCOEAP
- BDsplit tunneling
- BEfault tolerance
- BFFlexConnect groups
- BGOEAP
- BHsplit tunneling
- BIfault tolerance
- BJFlexConnect groups
- BKOEAP
- BLsplit tunneling
- BMfault tolerance
- BNFlexConnect groups
- BOOEAP
- BPsplit tunneling
- BQfault tolerance
- BRFlexConnect groups
- BSOEAP
- BTsplit tunneling
- BUfault tolerance
- BVFlexConnect groups
- BWOEAP
- BXsplit tunneling
6Match the term with its definition.
lets you decide which policies are for which site and what characteristic to implement > [blank_start]RF tags[blank_end]
the same as AP groups in AireOS & are broadcast domains > [blank_start]policy tags[blank_end]
the same as Flex Groups in AireOS & are for local mode APs > [blank_start]site tags[blank_end]- ARF tags
- Bpolicy tags
- Csite tags
7Match the term with its definition.
[blank_start]UP (User Priority)[blank_end] > a 3-bit field in the header; used between wireless stations
[blank_start]AIFSN[blank_end] > a spacing timer that is different for each AC; the higher the priority of the AC the shorter the initial wait period; higher transmits first; reduces latency/jitter
[blank_start]Contention Window (CW)[blank_end] > a value that is generated when the DIFS is complete; a number between 0 and 15
[blank_start]TXOP[blank_end] > allows transmission until timer expires; interval is unique for each AC
[blank_start]SIFS (short interframe space)[blank_end] > confirms the station is finished transmitting
[blank_start]EDCA[blank_end] > determines how a station can access the medium so it can transmit frames; has 4 Access Categories
[blank_start]AVC Policy[blank_end] > functions on the WLC in centralized mode and the on the AP in Flex mode; applied upstream or downstream
[blank_start]AVC[blank_end] > gives visibility to and identifies/classifies applications on the network via deep packet inspection; provides for NBAR2, Flexible NetFlow, Fastlane (only on WLC), DSCP remarking, traffic dropping, and rate limiting, and performance metrics collection/viewing
[blank_start]Background (AC_BK)[blank_end] > lowest priority; 1 or 2 UP; bulk data
[blank_start]Silver[blank_end] > max DSCP value is 0; used for hotspots and guest users
[blank_start]Bronze[blank_end] > max DSCP value is 10; use is limited
[blank_start]Gold[blank_end]: max DSCP value is 34; use is limited
[blank_start]Platinum[blank_end]: max DSCP value is 46; used the most; for enterprise environments
[blank_start]TSpec[blank_end] > prioritizes real-time applications by reserving bandwidth on the AP prior to transmission; required to be configured on the AP; is optional on client stations
[blank_start]CSMA/CD[blank_end] > requires that all frames have to be acknowledged b/c it helps to know if a collision has occurred
[blank_start]CSMA/CA[blank_end] > requires that receipt of an ACK by the client to know that the transmission was successful
[blank_start]Video (AC_VI)[blank_end] > second highest priority; 4 or 5 UP
[blank_start]Best Effort (AC_BE)[blank_end] > second lowest priority; 0 or 3 UP; call signaling, transactional/interactive data
[blank_start]QoS profiles[blank_end] > sets the max DSCP value on the CAPWAP header and downstream UP value
[blank_start]Voice (AC_VO)[blank_end] > the highest priority; 6 or 7 UP
[blank_start]DCF Interframe Spaces timer[blank_end] > the “listen before you transmit” model; 34ms- AUP (User Priority)
- BDCF Interframe Spaces timer
- CVoice (AC_VO)
- DQoS profiles
- EBest Effort (AC_BE)
- FVideo (AC_VI)
- GCSMA/CA
- HCSMA/CD
- ITSpec
- JPlatinum
- KGold
- LBronze
- MSilver
- NBackground (AC_BK)
- OAVC
- PAVC Policy
- QEDCA
- RSIFS (short interframe space)
- STXOP
- TContention Window (CW)
- UAIFSN
8Hosts can leave and join a group dynamically?
- ATrue
- BFalse
9Hosts can only be a member of one group at any time?
- ATrue
- BFalse
10On a layer 2 switch, all multicast traffic is forwarded by default?
- ATrue
- BFalse
11On a layer 3 switch, all multicast traffic is forwarded by default?
- ATrue
- BFalse
12Both layer 2 and layer 3 devices participates in IGMP join requests?
- ATrue
- BFalse
13By default, WLCs operate in unicast mode?
- ATrue
- BFalse
14IGMP snooping allows layer 3 devices to eavesdrop on IGMP membership reports?
- ATrue
- BFalse
15What port number do mDNS use?
- ATCP 5253
- BUDP 5354
- CUDP 5353
- DTCP 5353
16Which IPv4 and IPv6 addresses do mDNS send advertisements to?
- A224.0.0.252 & FF02:AC
- B224.0.0.251 & FF02:FB
- C244.0.0.251 & FF02:FB
- D244.0.0.252 & FF02:AC
17What other names is multicast direct known as? Choose 2
- AAudio Stream
- BData Stream
- CMedia Stream
- DVideoStream
- EVoice Stream
18Choose the license from the drop-down that provides the listed feature.
API > [blank_start]DNA Spaces Act only[blank_end]
Captive Portal > [blank_start]DNA Spaces Act only[blank_end]
CMX Analytics > [blank_start]Advanced only[blank_end]
CMX Connect > [blank_start]Base & Advanced[blank_end]
CMX Locate and Detect > [blank_start]Base & Advanced[blank_end]
DNA Spaces Connector > [blank_start]Advanced only[blank_end]
High Availability > [blank_start]Base & Advanced[blank_end]
Hyperlocation > [blank_start]DNA Spaces Act only[blank_end]
Location Hierarchy Visual > [blank_start]DNA Spaces See & Act[blank_end]
Partner Stream Feature > [blank_start]DNA Spaces Act only[blank_end]
Real-time Metrics > [blank_start]DNA Spaces See & Act[blank_end]
RSSI trilateration > [blank_start]DNA Spaces See & Act[blank_end]
Wi-Fi > [blank_start]DNA Spaces See & Act[blank_end]- AAdvanced only
- BBase & Advanced
- CDNA Spaces Act only
- DDNA Spaces See & Act
- EAdvanced only
- FBase & Advanced
- GAdvanced only
- HBase & Advanced
- IAdvanced only
- JBase & Advanced
- KAdvanced only
- LBase & Advanced
- MAdvanced only
- NBase & Advanced
- OAdvanced only
- PBase & Advanced
- QAdvanced only
- RBase & Advanced
- SAdvanced only
- TBase & Advanced
- UAdvanced only
- VBase & Advanced
- WAdvanced only
- XBase & Advanced
- YAdvanced only
- ZBase & Advanced
- AAAdvanced only
- ABBase & Advanced
- ACDNA Spaces Act only
- ADDNA Spaces Act only
- AEDNA Spaces Act only
- AFDNA Spaces Act only
- AGDNA Spaces Act only
- AHDNA Spaces Act only
- AIDNA Spaces Act only
- AJDNA Spaces Act only
- AKDNA Spaces Act only
- ALDNA Spaces Act only
- AMDNA Spaces Act only
- ANDNA Spaces Act only
- AODNA Spaces See & Act
- APDNA Spaces See & Act
- AQDNA Spaces See & Act
- ARDNA Spaces See & Act
- ASDNA Spaces See & Act
- ATDNA Spaces See & Act
- AUDNA Spaces See & Act
- AVDNA Spaces See & Act
- AWDNA Spaces See & Act
- AXDNA Spaces See & Act
- AYDNA Spaces See & Act
- AZDNA Spaces See & Act
19RSSI > [blank_start]the use of 3+ APs as reference points[blank_end]
RSSI > [blank_start]accuracy within 7 to 9 meters[blank_end]
RSSI > [blank_start]uses CAPWAP to send client information[blank_end]
RSSI > [blank_start]uses broadcast management frames[blank_end]
RSSI > [blank_start]associated and unassociated stations[blank_end]
RSSI > [blank_start]frames sent at a low data rate[blank_end]
FastLocate > [blank_start]a combo of broadcast and unicast frames[blank_end]
FastLocate > [blank_start]accuracy within 5 to 7 meters[blank_end]
FastLocate > [blank_start]WLC sends client info to MSE; no CAPWAP[blank_end]
FastLocate > frames sent at [blank_start]the highest possible data rate[blank_end]
FastLocate > [blank_start]frames sent only by associated stations[blank_end]
AoA > [blank_start]accuracy within 1 to 3 meters[blank_end]
AoA > [blank_start]associated and unassociated stations[blank_end]
AoA > [blank_start]WLC sends client info to MSE; no CAPWAP[blank_end]
AoA > [blank_start]uses broadcast and unicast frames[blank_end]
AoA > [blank_start]uses hyperlocation[blank_end]- Athe use of 3+ APs as reference points
- Buses hyperlocation
- Cuses broadcast and unicast frames
- Daccuracy within 7 to 9 meters
- Euses CAPWAP to send client information
- Fuses broadcast management frames
- Gassociated and unassociated stations
- Hframes sent at a low data rate
- Ia combo of broadcast and unicast frames
- Jaccuracy within 5 to 7 meters
- KWLC sends client info to MSE; no CAPWAP
- LWLC sends client info to MSE/no CAPWAP
- Massociated & unassociated stations
- Naccuracy within 1 to 3 meters
- Oframes sent only by associated stations
- Pthe highest possible data rate
20Fill-in-the-blank by dragging the answer choices below to the appropriate statement.
Uses [blank_start]CAPWAP[blank_end] to send alarm info to WLCs and config info to APs
Uses [blank_start]NMSP[blank_end] to communicate alarm info between WLCs and the MSE; controller TCP port 16113
Uses [blank_start]SOAP/XML[blank_end] so the MSE and PI can communicate; MSE TCP port 443
Uses [blank_start]SNMP[blank_end] to send wIPs alarm info to the PI from MSE- ACAPWAP
- BNMSP
- CSOAP/XML
- DSNMP
21Fill-in-the-blank by dragging the answer choices below to the appropriate statement.
[blank_start]Pre-shared keys[blank_end] – usually for home networks; each device has to be keyed
[blank_start]Supplicant[blank_end] – provides client’s username and password to the AP/WLC
[blank_start]Authenticator[blank_end] – network device that authenticates the client
[blank_start]Authentication Server (AS)[blank_end] - authenticates client via AP/WLC and applies network policy controls
[blank_start]Identity store[blank_end] – a directory server accessed using LDAP; ex. Active Directory
[blank_start]802.1x[blank_end] - authentication from client to WLC
[blank_start]EAP-MSCHAPv2[blank_end] - an EAP method that transmits username and password from the client to the RADIUS server
[blank_start]EAP-GTC[blank_end] - an EAP method created by Cisco as an alternative
[blank_start]EAP-TLS[blank_end] - an X.509 method that requires both client and server-side certificates
[blank_start]PEAP[blank_end] - an EAP method that only requires a certificate on the server and forms a tunnel between the client and server
[blank_start]EAP-FAST[blank_end] - an EAP method that requires no certificates and uses PAC on the client
[blank_start]RADIUS[blank_end] - authentication from WLC to server
[blank_start]EAP[blank_end] - from end to end; encapsulates usernames, passwords, certificates, and tokens- APre-shared keys
- BSupplicant
- CAuthenticator
- DAuthentication Server (AS)
- EIdentity store
- F802.1x
- GEAP-MSCHAPv2
- HEAP-GTC
- IEAP-TLS
- JPEAP
- KEAP-FAST
- LRADIUS
- MEAP
22Identify those which of the listed can be seen by both the WLC and ISE, which can be seen by only the ISE, and which of these policies can be enforced on.
ACLs > [blank_start]policy enforcement[blank_end]
AVC policy > [blank_start]policy enforcement[blank_end]
DHCP option fields > [blank_start]WLC & ISE[blank_end]
HTTP headers > [blank_start]WLC & ISE[blank_end]
NetFlow scans > [blank_start]ISE[blank_end]
NMAP scan info > [blank_start]ISE[blank_end]
passwords > [blank_start]WLC & ISE[blank_end]
QoS profile > [blank_start]policy enforcement[blank_end]
session timeout value > [blank_start]policy enforcement[blank_end]
time of day > [blank_start]WLC & ISE[blank_end]
time of day usage > [blank_start]policy enforcement[blank_end]
user's role > [blank_start]ISE[blank_end]
usernames > [blank_start]WLC & ISE[blank_end]
VLAN assignment > [blank_start]policy enforcement[blank_end]- AISE
- Bpolicy enforcement
- CWLC & ISE
- DISE
- Epolicy enforcement
- FWLC & ISE
- GISE
- Hpolicy enforcement
- IWLC & ISE
- JISE
- Kpolicy enforcement
- LWLC & ISE
- MISE
- Npolicy enforcement
- OWLC & ISE
- PISE
- Qpolicy enforcement
- RWLC & ISE
- SISE
- Tpolicy enforcement
- UWLC & ISE
- VISE
- Wpolicy enforcement
- XWLC & ISE
- YISE
- Zpolicy enforcement
- AAWLC & ISE
- ABISE
- ACpolicy enforcement
- ADWLC & ISE
- AEISE
- AFpolicy enforcement
- AGWLC & ISE
- AHISE
- AIpolicy enforcement
- AJWLC & ISE
- AKISE
- ALpolicy enforcement
- AMWLC & ISE
- ANISE
- AOpolicy enforcement
- APWLC & ISE
23Determine which characteristic listed below is representative of CWA and LWA.
ACLs implemented on the ISE > [blank_start]CWA[blank_end]
ACLs implemented on the WLC > [blank_start]LWA[blank_end]
Authentication by an external RADIUS server or local user database > [blank_start]LWA[blank_end]
Authentication by the server and sent to the WLC > [blank_start]CWA[blank_end]
Layer 2 and 3 > [blank_start]CWA[blank_end]
Layer 3 only > [blank_start]LWA[blank_end]
Layer 3 security policy is required > [blank_start]LWA[blank_end]
Layer 3 security policy is not required > [blank_start]CWA[blank_end]
Portal located on the server > [blank_start]CWA[blank_end]
Portal located on the WLC or another server > [blank_start]LWA[blank_end]
Redirection to the guest portal done by the server > [blank_start]CWA[blank_end]
Redirection to the guest portal done by the WLC > [blank_start]LWA[blank_end]
Requires one certificate > [blank_start]CWA[blank_end]
Requires two certificates > [blank_start]LWA[blank_end]- ACWA
- BLWA
- CCWA
- DLWA
- ECWA
- FLWA
- GCWA
- HLWA
- ICWA
- JLWA
- KCWA
- LLWA
- MCWA
- NLWA
- OCWA
- PLWA
- QCWA
- RLWA
- SCWA
- TLWA
- UCWA
- VLWA
- WCWA
- XLWA
- YCWA
- ZLWA
- AACWA
- ABLWA
Information
- Description
- FlexConnect / Qos / Multicast / Location Services / Security / Hardening / Alarms
- Author
- Brittanie Kelley
- Language
- English
- Views
- 6
- Tags
- Rating
- No ratings yet Rate this quiz