350-101 Exam Dumps - Cisco CCIE Wireless Questions and Answers

The correct answer isBbecause Wi-Fi antenna gain is expressed usingdBi, which means decibels relative to an isotropic radiator. Cisco’s Wireless RF Reference Guide states that antenna gain is measured in decibels relative to isotropic gain, ordBi. Cisco RF design documentation also explains that dBi is used to describe the power gain rating of antennas by comparing real antennas against an ideal isotropic antenna that radiates equally in all directions.

Antenna gain is not a measurement of physical antenna length. Length may influence antenna design and resonance, but it is not the operational unit used to express gain. It is also not measured as voltage against dBm.dBmis an absolute power reference relative to one milliwatt, commonly used for transmit power or received signal strength, whiledBidescribes antenna gain. Cisco’s EIRP calculation reinforces this separation: transmitter power is in dBm, antenna gain is in dBi, and cable loss is in dB. A “blend of analog and digital signals” has no RF measurement relevance. Reference topic:RF Fundamentals — antenna gain, dB/dBi/dBm, isotropic radiator reference, EIRP, and RF propagation behavior.

IEEE 802.11ax, also known as Wi-Fi 6, introduces several advancements to improve network performance, particularly in dense environments. Among these,OFDMA (Orthogonal Frequency Division Multiple Access)is a key feature introduced by 802.11ax. OFDMA allows more efficient use of the available spectrum by enabling multiple users to share the same channel simultaneously. This is done by subdividing the channel into smaller sub-channels, allowing data to be transmitted to multiple devices at the same time, improving overall throughput and reducing latency.

Option A: 60 GHz utilizationrefers to Wi-Fi standards like 802.11ad and 802.11ay, which use the 60 GHz band, but 802.11ax focuses on improving efficiency in the 2.4 GHz and 5 GHz bands, not the 60 GHz band.

Option B: Wi-Fi multimediais related to Wi-Fi features that prioritize multimedia traffic, but it is not a new attribute specifically introduced by 802.11ax.

Option D: MIMO (Multiple Input, Multiple Output)is a technology that allows multiple antennas to be used at both the transmitter and receiver, and while MIMO is supported in 802.11ac, it was enhanced in 802.11ax withMU-MIMO (Multi-User MIMO)for uplink, not a new technology introduced by 802.11ax.

Therefore,OFDMA(Option C) is the correct answer, as it is a key feature that 802.11ax introduces to improve network efficiency and capacity.

AI Enhanced Radio Resource Management (RRM) in Cisco wireless networks improves upon traditional RRM by leveraging historical data in addition to real-time measurements to optimize network performance. Traditional RRM reacts primarily to instantaneous conditions, such as current interference or load, and adjusts parameters like transmit power and channel assignment accordingly. In contrast, AI Enhanced RRM uses historical telemetry to identify patterns, predict congestion, and preemptively adjust network parameters, providing a more stable and high-performing wireless environment. This predictive capability allows the system to make informed adjustments for channel reuse, load balancing, and interference mitigation before network degradation occurs. While real-time adjustments are still made, the inclusion of historical data allows for smarter decisions and more consistent client experience. Options A and B do not describe the core benefits of AI Enhanced RRM, as legacy client support or telemetry encryption are unrelated to predictive or adaptive resource management. Option C only highlights reactive behavior, which is a characteristic of traditional RRM, not AI Enhanced RRM. Cisco documentation and design guides emphasize that AI Enhanced RRM’s key advantage is its predictive approach using historical analytics, enabling proactive network optimization across high-density or dynamic wireless environments. Reference topics:Automation and AI — AI Enhanced RRM, predictive network management, historical telemetry, channel and power optimization.

The correct action is to expose only encrypted management services: HTTPS for WebUI administration and SSH for remote CLI administration. The exhibit confirms the WLC wireless management interface is VLAN 10 with IP address 10.10.1.2, but interface placement alone does not enforce secure management protocol policy. Cisco Catalyst 9800 documentation identifies web admin settings as controller management configuration that determines administrator access, protocols, and interfaces for remote management. Cisco further states that administrators can connect securely over HTTPS, while HTTP “is not a secure connection,” and that HTTPS encrypts data to and from the server.

For CLI access, Cisco’s Catalyst 9800 Secure Shell guidance states that SSH enables secure remote access, and usingtransport input sshprevents non-SSH Telnet connections, limiting the device to SSH-only access. Therefore, options A and B violate policy because they permit Telnet and/or HTTP. Option C fails because console access is local, not remote, and disabling only HTTP still leaves Telnet exposure unresolved. Reference topics:Wireless Monitoring and Management — WLC management access, secure administration, HTTPS, SSH, and management-plane hardening.

The correct configuration isaaa-overridefollowed bynacunder the existing Catalyst 9800 wireless policy profile. The exhibit already places the administrator in policy-profile configuration mode with wireless profile policy my-policy, so the missing commands must be policy-profile subcommands, not another profile declaration. Cisco’s Catalyst 9800 configuration examples show the exact sequence: enter wireless profile policy < policy-profile-name > , enable aaa-override, enable nac, then configure VLAN and no shutdown.

aaa-override permits authorization attributes returned by AAA or Cisco ISE, such as VLAN, ACL, QoS, redirect ACL, or posture-related access controls, to override the locally defined policy. Cisco’s documentation explicitly states that AAA override applies policies coming from AAA or ISE servers, while nac enables Network Access Control in the policy profile. This is the required behavior when endpoints must be posture-validated before normal network access is granted. Cisco also notes that NAC State is enabled in the policy profile and can only be enabled when AAA override is enabled.

Option A is invalid because nac-policy is not the correct CLI keyword. Options B and D omit NAC. Reference topic:Client Connectivity Configuration — Catalyst 9800 policy profiles, AAA override, NAC State, posture enforcement, and ISE-based access control.

Bridge mode in a Cisco wireless mesh deployment allows access points to operate as mesh infrastructure nodes, typically as a Root AP (RAP) or Mesh AP (MAP), so Ethernet segments can be connected across a wireless backhaul. Cisco’s mesh design documentation states that in a point-to-point bridging scenario, a mesh AP can extend a remote network by using the backhaul radio “to bridge two segments of a switched network.” This directly maps to option A: point-to-point communication between network segments.

In Catalyst 9800 mesh deployments, Cisco documents converting an AP to bridge mode withcapwap ap mode bridge, after which the AP rejoins the controller in bridge mode and can be assigned a mesh role. Cisco also defines the RAP as the AP with the wired connection toward the WLC, while the MAP joins through its radio path toward the RAP. Option B is incorrect because bridge mode does not force all traffic to 2.4 GHz; Cisco mesh backhaul can use configured backhaul radios. Option C describes RRM/TPC behavior, not bridge mode. Option D incorrectly associates mesh bridge mode with WAN edge functions. Reference topics:Wireless Network Implementation — mesh AP roles, RAP/MAP operation, wireless backhaul, and Ethernet bridging.

‘

An RTS frame is an 802.11control frameused in the Request to Send/Clear to Send exchange. Cisco identifies RTS as a Request to Send frame and explains that 802.11 control frames assist in delivering data frames between stations. Cisco further states that the RTS/CTS function is optional, helps reduce collisions when hidden stations are associated to the same access point, and that a station sends an RTS frame as the first phase before transmitting a data frame.

Therefore, option B is correct because the RTS frame requests access to the wireless medium before data transmission. If the receiving station or AP replies with CTS, nearby stations defer transmission based on the duration information, reducing collision probability. This is especially relevant in hidden-node environments where two clients can hear the AP but cannot hear each other. Option A refers to RF spectral-mask compliance, which is a physical-layer regulatory concept. Option C confuses NAV behavior with roaming; RTS/CTS may influence virtual carrier sensing, not client roaming updates. Option D is unrelated because frame compression is not an RTS function. Reference topics:802.11 frame types, control frames, RTS/CTS, CSMA/CA, hidden-node mitigation, and medium reservation.

When a radio wavebends around an obstaclein its path, this phenomenon is calleddiffraction. Diffraction allows the RF signal to reach areas that are not in the direct line of sight of the transmitter, such as behind walls, corners, or other obstructions. The amount of bending depends on the wavelength of the signal relative to the size of the obstacle—longer wavelengths (lower frequencies) diffract more effectively than shorter wavelengths.

This property is crucial in wireless network design, especially in enterprise or mesh deployments, because it enables coverage in complex indoor environments and around obstructions where direct line-of-sight communication is impossible. Diffraction differs from other RF phenomena:absorption(option A) occurs when RF energy is partially absorbed by materials, reducing signal strength;diffusion(option B) refers to scattering of the signal in multiple directions; andreflection(option C) occurs when RF waves bounce off surfaces like walls or ceilings, which can lead to multipath interference.

Cisco wireless design guides emphasize understanding diffraction forcoverage planning, AP placement, and optimizing signal propagationin indoor and campus deployments, ensuring that signals can adequately reach shadowed or obstructed areas without excessive loss or dead spots. Reference topic:RF Fundamentals — diffraction, reflection, absorption, and indoor wireless propagation.

The failure is occurring during WPA/WPA2 key management, not during mobility anchoring. The radioactive trace showsFailed to validate eapol mic. MIC mismatchfollowed byFailed to validate eapol key m2, which means the authenticator and supplicant derived different key material during the PSK handshake. Cisco’s Catalyst 9800 client-connectivity troubleshooting maps this log pattern directly to a wrong password condition and lists the corrective actions as fixing the password on the endpoint or on the SSID/WLAN. The11r MIC validation failedphrase does not automatically make 802.11r the root cause; it only shows that the failed MIC validation occurred while Fast Transition key logic was in use. Disabling 802.11r would be a workaround only for client capability or FT interoperability issues, but the trace points to PSK mismatch. Removing the anchor WLC would break the intended DMZ anchoring design, and matching WLANs on foreign and anchor is required for anchor deployments, but it would not produce this EAPOL M2 MIC failure. The correct remediation is to ensure the client-entered PSK matches the WLAN PSK. Reference topics: WPA/WPA2-PSK authentication, EAPOL 4-way handshake, Catalyst 9800 radioactive trace analysis, and client connectivity troubleshooting.

Theworkgroup bridge modeon a Cisco access point is designed to integrate awired network segment into an existing wireless infrastructure. In this mode, the AP acts as a client to a root AP or wireless controller-managed network, bridging Ethernet-connected devices on its wired ports to the wireless LAN. This is commonly deployed in environments where wired devices, such as printers, legacy systems, or isolated office equipment, require network connectivity but cannot directly connect to the wired backbone.

Traffic from devices on the wired segment is encapsulated and transmitted over the wireless link to the root AP, effectively extending network access without running physical cabling. Unlike bridging between multiple AP radios (2.4 GHz vs. 5 GHz), or providing inter-Ethernet port forwarding, the primary attribute of a workgroup bridge iswireless-to-wired integration, not radio-to-radio communication or internal LAN segmentation. Broadcast domains are limited to the bridged wired segment and the wireless uplink; they are not automatically extended across all interfaces without VLAN configuration.

Cisco deployment guides emphasize that workgroup bridge mode is ideal forconnecting remote wired clusters to a centralized WLAN, providing seamless connectivity while maintaining security and management under the controller or root AP. Reference topic:Wireless Network Implementation — AP operational modes, workgroup bridge, and wired segment integration.