1.2 Deploy FlexConnect Capabilities 300-430 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has 50 FlexConnect APs at remote sites connected to a central WLC over a low-bandwidth WAN. The APs are running an older software version and need to be upgraded. The company wants to minimize WAN bandwidth usage during the upgrade. Which approach should be used?

   • AUpgrade the APs one at a time during off-peak hours to reduce bandwidth impact.
   • BEnable Smart AP image upgrade so that APs can download the new image from a local peer AP or a local server.
   • CManually upgrade each AP by connecting a console cable to the AP.
   • DUse the WLC's default AP image upgrade, which sends the image to each AP over the WAN.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A school has FlexConnect APs in a remote building. The building has a local server that students need to access. The WAN link to the controller is down. The administrator wants to ensure that students can still access the local server and that new client associations are allowed. What should the administrator do?

   • AConfigure the local server VLAN for central switching to ensure the controller can still reach it.
   • BPre-configure the APs to allow new associations only when the controller is reachable.
   • CEnsure the local server VLAN is configured for local switching on the FlexConnect APs.
   • DUse a backup WAN link to maintain connectivity to the controller.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which statement best describes how a FlexConnect AP maintains client connectivity when the controller is unreachable?

   • AThe AP reboots and reloads its configuration from a local file, then resumes normal operation with all VLANs switched locally.
   • BThe AP automatically reconfigures itself to switch all VLANs locally to maintain connectivity.
   • CThe AP uses locally cached configuration and continues to switch locally switched VLANs, but centrally switched VLANs may not be available.
   • DThe AP continues to tunnel traffic to the controller using a backup WAN link, so all VLANs remain operational.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A FlexConnect AP is configured with two SSIDs: one for employees (local switching) and one for guests (central switching). The security policy requires that guest clients cannot access the employee subnet, and employee clients cannot access the guest subnet. Where should the ACL be applied to enforce this policy for both SSIDs?

   • AApply an ACL only on the upstream switch for the local switched employee SSID.
   • BApply an ACL only on the controller for the central switched guest SSID.
   • CUse a VLAN ACL on the WLC's VLAN interface to filter traffic between the two subnets.
   • DApply a FlexConnect ACL on the AP that filters traffic for both the local and central switched SSIDs.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has a FlexConnect AP at a small branch office. The AP is connected to a switch that provides two VLANs: VLAN 10 for employee devices and VLAN 20 for a local printer. The WAN link to the central office is reliable but has limited bandwidth. The company wants employee traffic to be inspected by the central firewall, but printer traffic should remain local. Which configuration should be used?

   • AConfigure both VLANs for central switching to ensure all traffic is inspected by the firewall.
   • BConfigure both VLANs for local switching and rely on the central firewall to inspect traffic via a site-to-site VPN.
   • CConfigure VLAN 10 for central switching and VLAN 20 for local switching on the FlexConnect AP.
   • DConfigure VLAN 20 for central switching and VLAN 10 for local switching.
   Reveal Solution Discussion Select an answer first