Implementing Cisco Enterprise Wireless Networks (ENWLSI) Free Sample Questions

The optimal configuration is to enable Multicast-Unicast mode, which ensures reliable delivery by converting multicast frames to unicast frames over the air. Disabling Global IGMP Snooping on the WLC prevents it from processing IGMP reports from the wired side, thus protecting its CPU. The WLC will still snoop IGMP packets from wireless clients to manage multicast group membership for the unicast conversion.

Cisco DNA Center integrates with Cisco CleanAir technology. When an AP detects non-Wi-Fi interference, the Spectrum Analyzer view can be accessed for that AP. This tool provides detailed information about the RF environment and classifies interference sources based on their signatures, allowing the engineer to identify devices like microwave ovens, cordless phones, or Bluetooth devices.

The Certificate Authentication Profile in Cisco ISE is specifically designed for granular control over certificate-based authentication. Within this profile, you can configure ISE to check specific attributes of a client certificate, such as the Subject, Common Name (CN), or Subject Alternative Name (SAN), and use those values in policy decisions. This is the correct location to enforce a check against a specific SAN value.

Cisco Hyperlocation achieves high accuracy by using Angle of Arrival (AoA) technology. This is enabled by a special hardware component, the Hyperlocation Module (e.g., WSM01), which attaches to a compatible AP. This module contains a circular array of 32 antennas that can determine the precise direction from which a client's signal is arriving, significantly improving location accuracy from the standard 5-7 meters down to 1-3 meters.

A Control Plane ACL is specifically designed to protect the CPU of a network device like a WLC or router. It filters traffic that is punted to the control plane for processing, such as management traffic (SSH, SNMP, HTTPS) and routing protocol updates. Applying a Control Plane ACL is a best practice for hardening the controller against DoS attacks and unauthorized access attempts directed at the device itself.

In the Catalyst 9800's policy model, the Policy Profile is where QoS settings for wireless clients are defined. Within the Policy Profile, under the QoS tab, you can configure both upstream (client to AP) and downstream (AP to client) QoS mappings. To mark traffic from the client with DSCP EF, you would configure the 'UP QoS Map' to map the WMM UP value for voice (typically 6) to a DSCP value of EF (46).

RLDP (Rogue Location Discovery Protocol) is a dual-purpose feature. While primarily for locating rogue devices, it also enables the tracking of Wi-Fi RFID tags. When RLDP is enabled, the WLC can instruct associated APs to send special frames to the RFID tag. The tag's response is heard by multiple APs, and this information is forwarded via NMSP to CMX, which then calculates the tag's location without requiring the tag to be a fully authenticated data client.

Bonjour uses multicast DNS (mDNS), which relies on link-local multicast addresses (224.0.0.251) that are not routable. To allow discovery across different VLANs (subnets), the WLC must act as an mDNS Gateway. When this feature is enabled, the WLC listens for mDNS advertisements on one VLAN, caches them, and then responds to mDNS queries from clients on other VLANs, effectively bridging the service discovery process across Layer 3 boundaries.

This is true. When FlexConnect Local Authentication is configured, the WLC pushes the user credentials or certificate information for currently associated clients to the FlexConnect AP. If the AP enters standalone mode, it can use this cached information to act as a limited RADIUS server and authenticate new or re-authenticating clients without needing to contact the central ISE server. This provides a high degree of fault tolerance.