Cisco CCNP Enterprise 300-425 Questions & Answers

• Question 61:

  Refer to the exhibit.

  

  An engineer must design a mobility group that has these requirements:

  The mobility group must consist of five WLCs.

  All WLCs must run software version 8.0 or later.

  The WLCs must connect via an IPv4 network.

  Two of the WLCs must be in an SSO high availability pair.

  Which two configurations must be included in the design? (Choose two.)

  A. All the WLCs must be of the same model or type.

  B. Only WLCs in an SSO high availability pair must use the same virtual IP address.

  C. The WLAN SSID must be consistent across all the WLCs.

  D. All the WLCs must run the same software version.

  E. Each WLC must use the same mobility domain name.

  Correct Answer: DE

• Question 62:

  An architect configures a set of AirOS controllers to be in the same mobility group as the existing controllers. The implementation should facilitate inter-controller roaming for users in their new campus. After the configuration, the mobility tunnel is not operational for the data path in the network. Which two validations should be performed? (Choose two.)

  A. firewall port 16666

  B. mping

  C. eping

  D. rping

  E. firewall IP protocol 97

  Correct Answer: AE

• Question 63:

  A network consultant is designing a wireless network for a government agency. The customer requires high security between any device communication. The design includes AireOS, Cisco IOS-XE controllers, and Cisco 4800 Series APs. Which requirement must be met to enhance the mobility group security?

  A. Use a different group name for each mobility member.

  B. Enable MIC authentication between the mobility group members.

  C. Enable Mobility Encryption on the network.

  D. Use a complex group name for the mobility group.

  Correct Answer: B

• Question 64:

  Refer to the exhibit.

  

  An engineer is about to establish a mobility peer connection between a Cisco Catalyst 9800-CL version 16.10.1e and Cisco AireOS 5520 version 8.8.120.0. The data path between the 9800-CL and AireOS 5520 is down, but its control path is up. Based on the configuration, what is the cause of the issue?

  A. The certificate hash key is incorrect, which causes the data path to be down.

  B. Encrypted mobility is being used in the 5520 configuration, which causes the data path to be down.

  C. The data-dtls is disabled on the AireOS 5520 WLC, which causes the data path to be down.

  D. The data-link-encryption configuration is missing from the 9800-CL configuration.

  Correct Answer: C

• Question 65:

  An engineer is designing a solution where guests terminate on an anchor controller in the DMZ. The engineer is having issues and wants to test connectivity between members of a mobility group. Which command must be issued to test whether a mobility control packet is able to be reached over the management interface?

  A. show logging

  B. mping

  C. eping

  D. tracert

  Correct Answer: B

• Question 66:

  An engineer working for an enterprise deployed multiple Cisco WLCs. A controller that sits in the RandD division is connected through a firewall and is part of the same mobility group. The engineer must ensure that the mobility tunneling is available through the firewall and test it as RandD engineers roam the production floor within their department. How is this requirement met?

  A. mping on UDP port 16666 and eping on Protocol 96 between management ports

  B. mping on UDP port 16666 and eping on Protocol 97 between management ports

  C. mping on UDP port 16667 and eping on Protocol 97 between management ports

  D. mping on UDP port 16667 and eping on Protocol 96 between management ports

  Correct Answer: B

• Question 67:

  An engineer is working for a manufacturing company that has a centralized deployment model. Guests at headquarters need wireless access for presentations, demonstrations, and sharing of information. The engineer must provide external users with secure guest access by connecting to anchor controllers on the DMZ. Auto-Anchor Mobility has been selected in the mobility group to accomplish it. Both anchors are configured as part of the mobility group for HQ. Which design approach ensures that clients connect to the primary controller first and are pushed to the secondary if the primary fails?

  A. Set the Anchor priority for the primary controller to 1.

  B. Set the Anchor priority for the secondary controller to 1.

  C. Configure ECMP but weigh the cost to be higher to go to the primary.

  D. Configure ECMP but weigh the cost to be higher to go to the secondary.

  Correct Answer: A

• Question 68:

  A customer uses a Cisco Catalyst 9800 Series wireless controller to manage all of the APs for a campus network. Secure guest access is required for the guest network. A Cisco 5520 anchor controller is deployed within a DMZ. Which design approach ensures that the mobility tunnel is established successfully between the wireless controller and the anchor controller?

  A. Run an Inter-Release Controller Mobility compatible software version on the wireless controller.

  B. Enable control plane encryption on the wireless controller.

  C. Disable data link encryption on the anchor controller.

  D. Run an Inter-Release Controller Mobility compatible software version on the anchor controller.

  Correct Answer: A

• Question 69:

  A school deploys a Cisco wireless infrastructure in its classrooms to support a high density of mobile devices. The network administrator wants to bond channels in groups of two and only allow APs to send 802.11 management frames at 24 MB. What should be included in the design to accomplish this objective?

  A. Set the channel width for 802.11b to 40 MHz and set data rates to 24 MB and Mandatory.

  B. Set the channel width for 802.11a to 40 MHz and set data rates to 24 MB and Supported.

  C. Set the channel width for 802.11a to 40 MHz and set data rates to 24 MB and Mandatory.

  D. Set the channel width for 802.11b to 40 MHz and set data rates to 24 MB and Supported.

  Correct Answer: C

• Question 70:

  An engineer designed a new wireless network for an enterprise customer. The customer is concerned that some wireless features may not be available because the bill of materials has only Base and no WPlus licenses for the Cisco WLC version 8. What is the reason for the engineer to take this approach regarding the licenses?

  A. OfficeExtend AP needs a WPlus license.

  B. CAPWAP Data Encryption licenses are required for this feature.

  C. All WLC features are available because WPLUS license is now included in the Base license.

  D. To have all the features, Plus licenses must be installed on the WLC.

  Correct Answer: D