Pass the Cisco CCNP Wireless 300-110 Questions and answers with CertsForce

Enabling AP fallback globally on the WLC allows access points to reconnect to their primary controller after they have connected to a secondary controller due to the primary being offline. This is the exact behavior described in the scenario — APs successfully fail over to the secondary WLC but do not return to the primary WLC when it recovers. AP Fallback is a WLC-level setting that monitors the availability of each AP ' s configured primary controller and initiates a reconnection when the primary becomes reachable again. Without AP Fallback enabled, APs remain on whatever controller they most recently joined — in this case, the secondary — even after the primary recovers. The CAPWAP AP Controller IP Address command (Option A) permanently changes the primary controller configuration on the AP, which is not the intended solution — the AP already has the correct primary configured. DHCP Option 43 (Option B) is used for initial AP discovery, not fallback. AP Failover Priority (Option D) controls which APs are processed first during a failover event, not whether APs return to their primary controller. Reference: WLSD Study Guide — AP Fallback Configuration, N+1 Redundancy Recovery, Controller Primary/Secondary Hierarchy.

A predictive survey (also called a virtual or model-based survey) is the appropriate and only feasible methodology for a facility that does not yet physically exist in its complete form. Since the warehouse has only its foundation and perimeter walls, it is impossible to conduct any form of physical (active or passive) survey of the complete environment. A predictive survey uses architectural floor plans imported into a tool such as Ekahau Site Survey, where the engineer defines attenuation areas representing planned materials and structures: concrete block walls, steel shelving racks, metallic surfaces, and other warehouse-specific obstructions. The software models RF propagation through these defined attenuation values, enabling accurate AP placement planning, antenna selection, and channel planning without physical access to the complete facility. The output is a validated bill of materials with AP counts, models, and associated infrastructure requirements. Passive surveys (Options A and C) require physical APs transmitting RF signals to collect measurement data — impossible in an incomplete building. A hybrid approach mixing passive survey with predictive modeling introduces measurement errors from the incomplete physical state. Reference: WLSD Study Guide — Survey Types, Predictive Survey Methodology, Pre-Deployment Planning for New Construction.

Metal doors cause the most signal attenuation among common building materials due to the fundamental electromagnetic properties of metal. Metal is highly reflective and absorptive of radio frequency signals — it creates what is effectively a Faraday cage effect around any room or space it encloses. In wireless design attenuation modeling tools such as Ekahau, metal is assigned the highest attenuation value among standard building materials, typically 30+ dB per surface. Cinder block walls (Option A) are dense and provide significant attenuation (10-15 dB) but are not as RF-impenetrable as solid metal. Glass walls (Option C) and office windows (Option D) have relatively low attenuation values (2-4 dB) due to the minimal RF-absorbing properties of glass. When engineers model attenuation materials in predictive survey tools, metal doors and metal-containing structures consistently produce the highest per-surface attenuation values, making them the primary barrier obstacles to plan around. Reference: WLSD Study Guide — RF Signal Attenuation, Building Material Attenuation Values, Predictive Survey Material Modeling.

This WGB (Workgroup Bridge) design scenario requires satisfying multiple simultaneous constraints. EAP-FAST (Flexible Authentication via Secure Tunneling) is the correct authentication protocol because it provides enterprise-grade 802.1X security using protected access credentials (PAC) without requiring a certificate to be installed on each AP or WGB device — directly satisfying the enterprise-grade security without certificates requirement. EAP-TLS (Options B and D) requires client certificates on every authenticating device, which is explicitly excluded. Mobile station mode is required rather than static mode (Options C and D) because mobile station mode enables the WGB to aggressively scan and roam to optimal mesh neighbors dynamically, evaluating neighbor signal quality and switching to better RAPs/MAPs as the truck moves along its path. Static mode fixes the WGB to a specific channel or AP, preventing the aggressive scanning and roaming required for the latency-sensitive application. The dot1q-capable switch connection supports multiple clients in different VLANs via 802.1Q VLAN tagging between the WGB and the truck ' s local network switch. Reference: WLSD Study Guide — Workgroup Bridge Design, EAP-FAST Authentication, Mobile vs. Static WGB Mode, Industrial Wireless Design.

For optimized roaming across multiple Wireless LAN Controllers (WLCs) with Cisco 8821 IP phones, two critical settings must be configured. First, configuring mobility groups between WLCs (Option A) allows for seamless inter-controller roaming by establishing mobility tunnels between controllers, enabling them to share client security context, preventing re-authentication when a phone roams from an AP on one WLC to an AP on another. Second, using Cisco Centralized Key Management (CCKM) for authentication (Option B) reduces the time required for re-authentication during roaming from a full 802.1X exchange to a single-message re-key process. CCKM stores the wireless security keys at the WLC level, enabling rapid key re-derivation during roaming without contacting the RADIUS server. AP groups (Option C) control SSID and VLAN assignments per AP cluster but have no impact on inter-controller roaming. AVC profiles (Options D and E) control application visibility and QoS marking — marking voice as best effort (Option E) would actually degrade rather than improve voice quality. Reference: WLSD Study Guide — VoWLAN Mobility Optimization, CCKM Configuration, Mobility Group Design for Multi-Controller Deployments.

This community bank design scenario requires precise alignment of EWC deployment scale, AAA integration, and traffic routing decisions with the stated constraints. With four APs per campus and a goal of local traffic handling, converting a single C9120 to EWC mode is optimal — converting two APs to EWC (Options B and C) on a four-AP campus wastes 50% of campus AP infrastructure for controller functions rather than client service. The single EWC AP serves as the active local controller for the remaining three client-serving APs. The HQ WLC set as N+1 backup ensures that if the branch EWC fails, the remaining APs fall back to the centralized controller. For the guest WLAN, local web authentication on the guest VLAN provides the locally routed guest access requirement without requiring WAN connectivity to HQ. For the employee WLAN, adding the HQ ISE AAA server to the EWC ' s RADIUS configuration enables 802.1x PEAP authentication to traverse the WAN to ISE at the time of client association. Once authenticated, traffic is locally switched — satisfying both the central authentication and local traffic routing requirements simultaneously. Option D ' s use of guest anchor for the employee WLAN is architecturally incorrect and would route traffic through HQ rather than locally. Reference: WLSD Study Guide — EWC Design, N+1 Redundancy, AAA Integration for Branch WLANs, Local Web Authentication.

An active ping survey is used to validate network performance by sending and receiving data packets to measure end-to-end network performance, including latency, packet loss, and throughput. Ekahau site survey tools can perform active ping surveys to test the connectivity and performance of the wireless network while the surveyor walks the floor plan, producing a geographically correlated map of network performance metrics. This differs fundamentally from passive surveys, which only measure signal strength from beacons. A GPS-assisted survey (Option A) is used for large outdoor areas to automate location tracking. Spectrum analysis (Option B) identifies Layer 1 RF conditions but does not measure network performance. A passive survey (Option C) measures RSSI and SNR but does not test actual data connectivity or throughput. Active ping is the correct tool for validating that the network delivers the expected end-to-end service levels. Reference: WLSD Study Guide — Ekahau Survey Types, Active Survey Methodology, Post-Deployment Validation.

The Cisco Aironet 2800 Series APs feature a dual-radio architecture with a dedicated 5 GHz radio (slot 1) and a Flexible Radio Assignment (XOR) radio (slot 0) that can operate in either 2.4 GHz or 5 GHz, or be assigned to monitor mode for scanning functions. Since all existing SSIDs and services are 5 GHz only, the slot 1 (dedicated 5 GHz) radio is responsible for all current client connectivity — it must remain in Client Serving mode to maintain uninterrupted 5 GHz WLAN service. The XOR radio (slot 0), currently either idle or operating as a secondary 5 GHz radio, can be repurposed without impacting client service. Setting the XOR radio to Monitor mode enables it to continuously scan all channels across both the 2.4 GHz and 5 GHz spectrum for rogue AP detection, using the embedded CleanAir and WIDS capabilities. In Monitor mode, the XOR radio operates full-time as a dedicated scanner, providing rogue detection coverage on 2.4 GHz (previously uncovered since all services were 5 GHz) and supplementary scanning on 5 GHz. This eliminates the need for additional dedicated monitor mode APs. Options A, C, and D either place the slot 1 radio in a non-client-serving role (disrupting existing connectivity) or use the inappropriate Sniffer mode instead of Monitor mode for rogue detection. Reference: WLSD Study Guide — Cisco 2800 XOR Radio Architecture, Monitor Mode for Rogue Detection, Flexible Radio Assignment, WIDS Design.

The requirement for users to retain their session state and IP address when roaming between buildings managed by different WLCs is a Layer 3 roaming scenario. In Cisco ' s wireless architecture, IP address preservation across controller boundaries is achieved through inter-controller mobility — specifically the foreign-anchor mobility tunnel mechanism. When a client roams from Building A (WLC-A) to Building B (WLC-B), WLC-B becomes the foreign controller and WLC-A becomes the anchor controller. WLC-B tunnels the client ' s traffic back to WLC-A, allowing the client to retain its original IP address even while physically associated to an AP managed by WLC-B. This requires a mobility tunnel between WLC-A and WLC-B with both controllers configured in the same mobility group name — the group name is the trust identifier that permits the mobility tunnel and anchor-foreign relationship to form. Without the same group name, the controllers will not form a trusted mobility peer relationship. AP groups (Option C) control SSID and VLAN assignments per AP cluster but have no impact on inter-controller roaming. HA cluster configuration (Option B) creates SSO redundancy, not roaming capability between separate N+1 controllers. Redundancy port connection (Option D) is used for SSO keepalive and state sync, not mobility tunneling. Reference: WLSD Study Guide — Inter-Controller Mobility, Mobility Tunnels, Layer 3 Roaming and IP Address Preservation.

The Cisco Aironet 4800 Series Access Point is a tri-radio, high-performance access point designed for high-density environments. It draws significantly more power than older dual-radio APs and requires IEEE 802.3bt (also known as PoE++), which provides up to 90W per port at the Power Sourcing Equipment. IEEE 802.3af (Type 1 PoE) delivers only 15.4W and 802.3at (Type 2 PoE+) provides up to 30W — both are insufficient for full functionality of the 4800 series, which has a dedicated third scanning radio that requires the additional power budget provided by 802.3bt. IEEE 802.3ac is a standard related to VLAN tagging and is entirely unrelated to Power over Ethernet. Engineers designing wired infrastructure for Cisco 4800 deployments must ensure switches support 802.3bt Type 3 or Type 4 to guarantee full AP functionality across all three radios simultaneously. Reference: WLSD Study Guide — Wired Infrastructure Design, PoE Standards and Power Budget Planning, Cisco 4800 Series AP Specifications.