1.2 Deploy FlexConnect Capabilities 300-430 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In a FlexConnect deployment, where is the configuration for VLAN-based central switching typically applied?

   • AOn the client's device, by setting the VLAN priority
   • BOn the WLAN configuration in the controller, by specifying the VLAN to be centrally switched
   • COn the switch port that connects the AP to the wired network
   • DOn the FlexConnect AP's configuration, either locally on the AP or via the controller's FlexConnect group settings
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A branch office has FlexConnect APs with a local VLAN for internal users and a separate VLAN for guest access. The guest VLAN must be tunneled to the central controller for internet access, but internal users should be switched locally. Additionally, the internal users must not be able to reach the guest subnet. Which configuration should be applied?

   • AConfigure both VLANs for local switching and use a VLAN ACL on the upstream switch to block internal-to-guest traffic.
   • BConfigure the guest VLAN for central switching and the internal VLAN for local switching, then apply a FlexConnect ACL on the AP to block internal-to-guest traffic.
   • CConfigure the internal VLAN for central switching and the guest VLAN for local switching, then apply an ACL on the controller.
   • DConfigure both VLANs for central switching and rely on the controller's firewall to block internal-to-guest traffic.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has 100 FlexConnect APs at remote sites connected to a central WLC over a WAN with limited bandwidth. The APs need to be upgraded to a new software version. The company wants to minimize the impact on the WAN. Which feature should be enabled?

   • AFlexConnect local switching, which allows APs to upgrade without contacting the WLC.
   • BThe WLC's default AP image upgrade, which sends the image to each AP over the WAN.
   • CSmart AP image upgrade, which allows APs to download the image from a local peer AP or a local server.
   • DFlexConnect groups, which allow APs to share the same image file.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which configuration element on a FlexConnect AP determines whether a specific VLAN's traffic is switched locally or tunneled to the controller?

   • AThe ACL applied to the WLAN on the controller
   • BThe VLAN-to-SSID mapping on the controller
   • CThe AP's native VLAN setting on the switch port
   • DThe FlexConnect VLAN configuration on the AP, which lists VLANs as either 'local' or 'central'
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A branch office has FlexConnect APs with both locally switched and centrally switched VLANs. The security policy requires that clients on the locally switched VLAN cannot access a specific internal server, but they must be able to access the internet. The administrator wants to enforce this policy on the AP without involving the controller for every packet. What should the administrator configure?

   • AUse a firewall on the local server to block access from the clients.
   • BApply a standard ACL on the controller to the centrally switched VLAN.
   • CApply a Flex ACL to the locally switched VLAN that denies traffic to the internal server and permits all other traffic.
   • DConfigure the locally switched VLAN as centrally switched and apply a Flex ACL.
   Reveal Solution Discussion Select an answer first