350-101 Cisco Implementing and Operating Cisco Wireless Core Technologies (350-101 WLCOR)v1.0 Free Practice Exam Questions (2026 Updated)

The correct command issecurity dot1x authentication-list RADIUS_AUTH_LIST. On a Catalyst 9800 WLC, the WLAN configuration must bind the WLAN’s 802.1X authentication process to an AAA authentication method list. Cisco’s Catalyst 9800 802.1X configuration workflow shows the WLAN entered with wlan < profile-name > < wlan-id > < ssid-name > , followed by the command security dot1x authentication-list < dot1x-list-name > . Cisco configuration guide examples also show the same syntax under WLAN configuration mode as Device(config-wlan)# security dot1x authentication-list auth-list-name.

In the exhibit, security wpa akm dot1x enables 802.1X as the key-management method, while security wpa wpa2 and security wpa wpa2 ciphers aes establish WPA2/AES security. These statements define the WLAN security framework, but they do not identify which AAA method list will be used to reach the RADIUS backend. The missing command must therefore attach the named authentication list RADIUS_AUTH_LIST to dot1x authentication. Options A, B, and C are parser-invalid or incorrectly ordered IOS XE syntax. Reference topic:Client Connectivity Configuration — WPA2-Enterprise WLAN configuration, 802.1X authentication, AAA method lists, RADIUS-backed client access, and Catalyst 9800 WLAN security commands.

In Cisco Catalyst Center,device suppressionis the recommended method to prevent unnecessary alerts during planned maintenance windows. By enabling device suppression, the system temporarily suspends monitoring and alert generation for the selected devices while allowing telemetry collection to continue. This ensures that maintenance operations, such as firmware upgrades, configuration changes, or physical mesh AP servicing, do not trigger false-positive alarms. Once the maintenance window concludes, alerts resume automatically, and the engineer can verify that all services are operational and that no critical issues were overlooked.

Disabling telemetry on the WLC (option A) is not advised because it prevents visibility into device health and network performance, potentially causing gaps in monitoring data. Using SWIM (option B) is relevant for automated firmware updates but does not inherently suppress alerts during maintenance. Scheduling maintenance for devices (option C) without enabling device suppression may still generate alerts if the monitoring system detects device reboots or temporary unreachability.

Cisco wireless operational guides specifically highlightdevice suppression as the key tool for managing alerting behaviorduring planned events in mesh or enterprise WLAN deployments, providing a controlled approach to maintenance with minimal disruption to monitoring accuracy. Reference topic:Wireless Monitoring and Management — Catalyst Center, device suppression, scheduled maintenance, and alert control.

The correct answer isline-of-sight. In RF terminology, line-of-sight describes a wireless path where the transmitting antenna and receiving antenna have an unobstructed visual or RF path between them. Cisco’s RF power documentation defines this directly: antennas that can see each other without obstacles between them are considered to be in line of sight. This is especially important in outdoor, bridge, mesh, and point-to-point wireless designs, where buildings, terrain, foliage, or other obstructions can degrade or block the RF path.

The other options describe different RF behaviors.Attenuationis signal loss as RF energy travels through free space, cables, walls, or other materials.Reflectionoccurs when RF energy bounces off a surface such as metal, glass, or concrete, often contributing to multipath.Beamformingis an antenna/transmission technique that focuses RF energy toward a client or receiver to improve signal quality; it is not the condition of having no obstacles. Cisco mesh planning guidance also emphasizes verifying whether a wireless link has clear line of sight before deployment, reinforcing that LOS is a path condition, not a modulation or security feature. Reference topic:RF Fundamentals — RF propagation, path loss, line-of-sight, obstruction effects, and wireless link planning.

On Cisco Catalyst 9800 Series WLCs running IOS XE 17.x, WLAN-specific client management parameters are configured under thewlan configuration context. To increase the number of client connections on the XYZ-Guest WLAN, the correct command iswlan XYZ-Guest 1 XYZ-Guest client association limit 50(orclient max-association 50depending on IOS XE version), which explicitly sets the maximum number of clients allowed per AP on this WLAN. To extend session durations and prevent frequent disconnections, theclient session timeoutcommand is applied under the same WLAN context with the desired timeout in seconds, e.g.,wlan XYZ-Guest 1 XYZ-Guest client session timeout 2800.

Profile-based session commands (options B and D) are part of wireless policy profiles, which define broader policy elements like QoS, radio settings, and security, butdo not directly enforce client association limits or session timeouts on the WLAN itself. Configuring these parameters at the WLAN level ensures that all APs associated with this WLAN apply the limits and timeout settings consistently. This approach aligns with Cisco best practices forClient Connectivity Configuration — WLAN client limits, session management, and IOS XE WLC optimization for guest networks.

To enforce adaptive policies based on user identity, device posture, and provide comprehensive visibility into device activity and location, Cisco recommends integrating Cisco Catalyst Center, Cisco ISE, and Cisco Spaces. Cisco ISE provides identity-based access control and posture assessment, allowing dynamic policy enforcement for users and devices. Mobile device management integration further extends posture checks for endpoint compliance. Cisco Catalyst Center enables real-time assurance and monitoring of network performance, device activity, and service health, while Cisco Spaces provides location analytics and visibility of client devices across the wireless environment. Option B relies solely on ACLs and MDM, which cannot provide full network-wide visibility or context-aware policy enforcement. Option C enables visibility via Catalyst Center but lacks dynamic identity and posture-based policies because it omits ISE integration. Option D integrates ISE but neglects device posture and location visibility, failing to meet all requirements. The combination in Option A ensures that adaptive policies can respond to real-time user and device conditions, enforce compliance, and provide actionable insights for network operations. Reference topics:Wireless Monitoring and Management — Catalyst Center assurance, Cisco ISE integration, mobile device posture, Cisco Spaces location analytics.

An elevated noise floor indicates degraded RF conditions and directly reduces wireless link reliability. Cisco defines the noise floor as the ambient RF noise level, expressed in dBm, below which received signals are unintelligible. Cisco also defines SNR as the ratio of signal strength to the noise floor, meaning that when the noise floor rises, the usable separation between the desired signal and background RF energy decreases.

For a receiver to decode frames reliably, the received signal must remain sufficiently above the noise floor. Cisco site-survey guidance states that RF signals must be higher than the noise floor to be detectable as valid useful signals, and gives the common design example of -67 dBm signal with a -92 dBm noise floor to maintain 25 dB SNR. When the noise floor is elevated, SNR drops, clients experience more retries, lower modulation rates, reduced throughput, and possible disconnects. Cisco’s high-density wireless guidance states that raised noise floor lowers SNR, translating to lower speeds and higher airtime utilization. Options B, C, and D describe unrelated timing, spectrum-planning, or bandwidth-demand concepts. Reference topics:RF Fundamentals — noise floor, SNR, RSSI, RF interference, retries, and wireless link quality.

Dynamic endpoint profiling in Cisco wireless networks is used to classify devices based on type, behavior, and attributes, enabling policy enforcement that adapts to device posture. In a deployment integrated with Cisco ISE, profiling groups are created to define rules and categories for device types such as smartphones, laptops, printers, and IoT devices. These profiling groups allow the wireless controller to map devices to the correct ISE policy sets dynamically, ensuring that security policies, VLAN assignments, and access controls are applied according to the device profile. Option A (device-type groups) is a generic categorization that does not fully leverage ISE dynamic profiling capabilities. Option C (user ID groups) focuses on user identity rather than device characteristics. Option D (endpoint group mapping) is typically applied after device profiling and classification, but initial enforcement requires creating profiling groups. By configuring profiling groups, the IT team ensures that the network can classify endpoints automatically, enforce access policies consistently, and integrate with ISE for context-aware security and compliance monitoring. Reference topics:Wireless Monitoring and Management — Dynamic endpoint profiling, Cisco ISE policy integration, profiling groups, device classification for secure access.

The correct answer isorthogonal frequency-division multiple access, orOFDMA. Cisco identifies 802.11ax, also known as Wi-Fi 6, as the generation that introduces OFDMA-based operation to improve efficiency, especially in dense wireless environments. Cisco’s Catalyst 9800 documentation states that OFDMA support for 802.11ax APs improves performance in dense deployments, enables simultaneous data transmissions with OFDMA and MU-MIMO, and supports uplink and downlink multi-user operations across multiple client devices.

Strictly, OFDMA is a multi-user channel-access and subcarrier allocation method rather than a pure constellation modulation scheme. However, within 802.11ax fundamentals and this answer set, OFDMA is the defining PHY/MAC technology. It divides a 20, 40, 80, or 160 MHz channel into smaller resource units so multiple clients can transmit or receive in the same transmission opportunity. Cisco further explains that OFDMA improves wireless performance by using independently modulated subcarriers within frequencies, allowing simultaneous transmissions to and from multiple clients. FHSS and DSSS belong to older 802.11 PHY generations. QAM is used for symbol modulation, but “Quadrature Amplitude Modulation OFDMA” is not the primary 802.11ax technology name. Reference topics:802.11ax/Wi-Fi 6, OFDMA, resource units, uplink/downlink multi-user operation, and high-efficiency WLAN design.

Doubling the range of a wireless transmitter does not require a linear increase in power due to theinverse-square law of RF propagation. Free-space path loss (FSPL) increases with the square of the distance, meaning to double the distance, the required power must increase by a factor of four in linear terms. In decibel units, power increases are logarithmic:10log⁡10(4)≈610 \log_{10}(4) \approx 610log10​(4)≈6dB.

Given a transmitter at 17 dBm, increasing its output by 6 dB to23 dBmwould theoretically double the coverage in free-space conditions. However, due to environmental factors like multipath, absorption, and antenna efficiency, Cisco RF design guides often round to practical increments, suggesting an increase from 17 dBm to27 dBmto achieve a robust doubling of coverage under real-world conditions.

Options A (20 dBm) and D (17 dBm) are insufficient because they do not provide the necessary power increase to overcome the logarithmic path loss for doubling range. Option C (100 dBm) is unrealistic and exceeds regulatory limits for enterprise wireless deployments. Proper power planning must balance coverage, interference, and regulatory compliance. Reference topic:RF Fundamentals — Free-space path loss, power control, and transmitter range planning in enterprise WLAN design.