1.2 Deploy FlexConnect Capabilities 300-430 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a FlexConnect ACL?

   • ATo define which VLANs are allowed to use central switching
   • BTo filter traffic on the controller before it is sent to the AP
   • CTo filter traffic locally on the AP for both centrally and locally switched traffic
   • DTo restrict which APs can join a FlexConnect group
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In a Smart AP image upgrade, how can a FlexConnect AP obtain the new software image?

   • AFrom a USB drive connected to the AP
   • BFrom the controller only if the AP is in the same subnet as the controller
   • CFrom a local TFTP/FTP server or from another AP that has already downloaded the image
   • DOnly from the controller over the CAPWAP tunnel
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the purpose of configuring split tunneling on a FlexConnect AP?

   • ATo allow the AP to use both wired and wireless uplinks simultaneously for redundancy
   • BTo split the wireless traffic between 2.4 GHz and 5 GHz bands to improve performance
   • CTo allow the AP to connect to multiple controllers for load balancing
   • DTo enable the AP to switch some VLANs locally while tunneling other VLANs to the controller
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A FlexConnect AP at a remote site loses connectivity to its WLC. The AP is configured with a local VLAN for data traffic and a central-switched VLAN for voice traffic. The network administrator wants to ensure that data clients remain connected and can access local resources during the WLC outage. What should be verified or configured?

   • AThe AP will automatically switch the voice VLAN to local switching to maintain connectivity.
   • BThe AP must maintain a CAPWAP tunnel to the WLC to continue forwarding data traffic.
   • CThe AP will drop all client traffic until the WLC is reachable again.
   • DThe AP must have the local VLAN mapped to a local switching profile and the FlexConnect ACLs cached locally to continue forwarding data traffic.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A FlexConnect AP is configured with a local VLAN for data and a central-switched VLAN for guest access. The security team wants to block guest clients from accessing the local data subnet. The guest traffic is centrally switched, but the ACL should be enforced at the AP. Which type of ACL should be used?

   • AA standard ACL applied on the controller's VLAN interface.
   • BA firewall rule on the central firewall that blocks guest-to-data traffic.
   • CA FlexConnect ACL applied to the guest SSID on the AP.
   • DA VLAN ACL applied on the upstream switch for the local data VLAN.
   Reveal Solution Discussion Select an answer first