Users report slowness on the network, and it is suspected that certain applications are consuming all the bandwidth. A network engineer must enable the NBAR protocol to improve wireless client traffic visibility and provide advanced, granular, application classification, and analytics. How should the network engineer configure NBAR on a 9800 WLC?
Correct Answer: D
The correct configuration approach is to enable Application Visibility and Control on the policy profile. On the Catalyst 9800, WLANs are not configured as isolated monolithic objects; the WLAN profile is mapped to a policy profile through a policy tag, and many client traffic services are applied from that policy profile. Cisco defines AVC as the wireless feature set that identifies and monitors applications using DPI, creates rules to manage application bandwidth and usage, and integrates with Flexible NetFlow for per-application or per-protocol statistics. Cisco further states that AVC benefits from NBAR running on the AP or controller, and that the NBAR2 engine analyzes and recognizes traffic flows.
Operationally, Cisco’s 9800 AVC guide shows that AVC is enabled by navigating to Configuration > Services > Application Visibility and selecting the relevant Policy Profile. It also shows the CLI form under the policy profile: wireless profile policy AVC_testing followed by ip nbar protocol-discovery, with verification showing NBAR Protocol Discovery : Enabled. Options A and B are incorrect because the feature is not enabled directly on the WLAN. Option C is generic and incomplete; the Cisco feature construct is AVC. Reference topics: AVC, NBAR2, Flexible NetFlow, Catalyst 9800 policy profiles, and wireless application visibility.
A university is deploying Cisco Catalyst 9176 APs at several satellite campuses, each with its own subnet and DNS services. The APs will be shipped with only their MAC addresses preregistered on the WLC. The satellite campuses do not use DHCP option 43, but they have access to a central DNS server. IT staff want APs to discover and join the Catalyst 9800 WLC automatically without site visits. Which solution must the IT staff implement?
Correct Answer: C
For Cisco Catalyst 9176 APs deployed at remote sites without DHCP option 43, automatic WLC discovery can be accomplished using DNS-based CAPWAP controller discovery. By creating a DNS A record named cisco-capwap-controller. that resolves to the WLC management IP address, APs can query DNS and locate their centralized controller automatically, eliminating the need for site visits or manual configuration. This method is preferred for large-scale or satellite deployments where APs may exist on different subnets and traditional DHCP-based discovery is unavailable. Option A is impractical because manually assigning static IPs to hundreds of APs is operationally complex and error-prone. Option B, using a multicast group, is not supported for cross-subnet controller discovery in CAPWAP; multicast is limited to local subnets. Option D (ap-discovery) is not a recognized standard for WLC discovery; Cisco specifically documents cisco-capwap-controller as the required DNS entry for CAPWAP-based automatic discovery. This approach ensures zero-touch provisioning, simplifies network operations, and guarantees that APs join the correct controller, supporting centralized management and consistent configuration across multiple campuses. Reference topics: Wireless Network Implementation — CAPWAP discovery, DNS-based controller discovery, Catalyst 9800 WLC onboarding, zero-touch provisioning.
A managed service is rolling out advanced wireless infrastructure to support an expanding organization with diverse device types. The implementation requires integration of dynamic endpoint profiling for secure access and device classification. According to the baseline deployment with ISE policy sets, the engineering group must enforce access parameters based on device category rules. Which configuration action must be taken to fulfill the initiative?
Correct Answer: B
Dynamic endpoint profiling in Cisco wireless networks is used to classify devices based on type, behavior, and attributes, enabling policy enforcement that adapts to device posture. In a deployment integrated with Cisco ISE, profiling groups are created to define rules and categories for device types such as smartphones, laptops, printers, and IoT devices. These profiling groups allow the wireless controller to map devices to the correct ISE policy sets dynamically, ensuring that security policies, VLAN assignments, and access controls are applied according to the device profile. Option A (device-type groups) is a generic categorization that does not fully leverage ISE dynamic profiling capabilities. Option C (user ID groups) focuses on user identity rather than device characteristics. Option D (endpoint group mapping) is typically applied after device profiling and classification, but initial enforcement requires creating profiling groups. By configuring profiling groups, the IT team ensures that the network can classify endpoints automatically, enforce access policies consistently, and integrate with ISE for context-aware security and compliance monitoring. Reference topics: Wireless Monitoring and Management — Dynamic endpoint profiling, Cisco ISE policy integration, profiling groups, device classification for secure access.
What is used for measuring gain on a Wi-Fi antenna?
Correct Answer: B
Wi-Fi antenna gain is measured in dBi, meaning decibels referenced to an isotropic radiator. Cisco’s Wireless RF Reference Guide states that antennas have gain measured in decibels relative to isotropic gain, or dBi, and further explains that antenna gain is a ratio comparing the gain of a specific antenna to a theoretical isotropic antenna. Cisco’s RF design documentation also defines dBi as the power gain rating of antennas, where real antennas are compared to an isotropic antenna that radiates the same power density equally in all directions.
Option B is therefore the correct selection, although the technically precise phrase is decibels relative to isotropic, abbreviated dBi. Antenna length can influence resonance and design, but it is not the measurement unit for gain. Voltage against dBm is incorrect because dBm references absolute power relative to 1 milliwatt, not antenna gain. Analog/digital signal blending is unrelated to RF antenna performance. Reference topics: RF Fundamentals — antenna gain, dBi, isotropic radiator, EIRP, antenna patterns, and WLAN RF design.
Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.
Please contact info@Prep2Certs.com and we will provide you with alternative payment options.
You can by Contacting our sales team.