2026 Actual Cisco 350-101 Dumps, Updated Exam Questions for Guaranteed Pass

350-101 free sample questions and answers

Cisco 350-101 practice quiz with correct answers for search indexing.

1. Question 1

   What does an elevated noise floor indicate in an RF environment?

   Adecreased link reliability
   

   Bstable time synchronization
   

   Cenhanced spectrum allocation
   

   Dminimized bandwidth demand
   

   Correct answer: A

   An elevated noise floor indicates degraded RF conditions and directly reduces wireless link reliability. Cisco defines the noise floor as the ambient RF noise level, expressed in dBm, below which received signals are unintelligible. Cisco also defines SNR as the ratio of signal strength to the noise floor, meaning that when the noise floor rises, the usable separation between the desired signal and background RF energy decreases.

   For a receiver to decode frames reliably, the received signal must remain sufficiently above the noise floor. Cisco site-survey guidance states that RF signals must be higher than the noise floor to be detectable as valid useful signals, and gives the common design example of -67 dBm signal with a -92 dBm noise floor to maintain 25 dB SNR. When the noise floor is elevated, SNR drops, clients experience more retries, lower modulation rates, reduced throughput, and possible disconnects. Cisco's high-density wireless guidance states that raised noise floor lowers SNR, translating to lower speeds and higher airtime utilization. Options B, C, and D describe unrelated timing, spectrum-planning, or bandwidth-demand concepts. Reference topics: RF Fundamentals --- noise floor, SNR, RSSI, RF interference, retries, and wireless link quality.

   
   

2. Question 2

   Which solution enables a seamless user experience when roaming in a wireless network?

   Astatic VLAN policy
   

   Boptimized roaming
   

   Credundant RF profile
   

   Dfast transition
   

   Correct answer: D

   Fast transition is the correct solution because it refers to IEEE 802.11r Fast BSS Transition, which reduces the authentication delay when a wireless client roams from one AP to another. Cisco describes 802.11r Fast Transition as a feature for seamless wireless roaming and states that, after configuration, the WLAN supports faster client roaming between access points. Cisco's Catalyst 9800 roaming documentation also identifies 802.11r as the mechanism focused on seamless transition between APs, while 802.11k and 802.11v assist with neighbor reporting and network-assisted roaming decisions.

   The core advantage is that key negotiation and authentication preparation occur before or during the roam, reducing the interruption experienced by latency-sensitive applications such as voice, video, collaboration tools, and real-time enterprise applications. Static VLAN policy only controls segmentation and does not accelerate roaming. Optimized roaming can help discourage sticky clients from remaining associated to poor-quality APs, but it is not the primary fast-roam authentication mechanism. A redundant RF profile is not an 802.11 roaming solution. Reference topics: 802.11r Fast BSS Transition, client roaming, WLAN mobility behavior, Catalyst 9800 WLAN security, and seamless roaming design.

   
   

3. Question 3

   A medium-sized enterprise must provide wireless internet to visitors in their lobby using a Cisco 9800 WLC. The solution must meet these requirements:

   Ensure that guests cannot access the corporate LAN.

   Guests are redirected to a login page before browsing.

   The guest network must use a separate VLAN from internal users.

   Access must be limited to web browsing only.

   Guest access does not require any preshared keys or certificates.

   Which two actions must be taken to achieve this solution? (Choose two.)

   ACreate a WLAN that uses a web policy and points to a consent parameter map.
   

   BApply a webauth WLAN with mDNS mode set to drop.
   

   CConfigure a policy profile that uses an external only ACL and guest VLAN.
   

   DImplement a policy profile with p2p blocking enabled and a guest VLAN.
   

   EDeploy a WLAN policy that points wireless users to a webauth parameter map.
   

   Correct answer: A, E

   To implement a guest Wi-Fi network on a Cisco 9800 WLC with the requirements mentioned, the solution must ensure that guests are isolated from the corporate LAN and are redirected to a login page before being able to access the internet. Additionally, access needs to be restricted to web browsing only, with no need for preshared keys or certificates.

   Option A: 'Create a WLAN that uses a web policy and points to a consent parameter map.'

   This is necessary to enforce the login page and redirect users to a webauth page. By creating a WLAN with web policy, you ensure that users are redirected to a captive portal where they can accept the terms and conditions or login to the network. This solution also helps in segregating the guest network from the corporate network, as users are contained within their VLAN.

   Option E: 'Deploy a WLAN policy that points wireless users to a webauth parameter map.'

   Web authentication (webauth) is an essential part of guest access. Deploying a WLAN policy with webauth ensures that users are directed to the login page (a webauth parameter map), allowing them to authenticate before browsing the internet.

   Other options:

   Option B would block mDNS, but it does not directly address the need for a login page or VLAN segregation.

   Option C is important for enforcing access control policies, but it doesn't fulfill all the requirements of the login page and limited access (web browsing only).

   Option D is unrelated to the requirement of providing access only to web browsing, as it primarily addresses peer-to-peer traffic blocking, which is not directly tied to web access control.

   Therefore, the correct solution involves combining a web policy with a webauth parameter map for login page redirection (A and E).

   
   

4. Question 4

   A retail store is setting up guest Wi-Fi on a Cisco 9800 WLC. The IT team has these requirements:

   Guests are prompted for web authentication.

   After login, traffic is restricted to internet-only access.

   Guest WLAN must be available throughout all sales floors.

   Guest WLAN must not impact the existing corporate WLAN.

   Guest SSID must not require a password.

   Which set of configurations must the IT team deploy to meet the requirements?

   AWPA2-Enterprise authentication on the guest WLAN and use dynamic VLAN assignment.
   

   BLocal web authentication on the guest SSID and apply ACLs to allow all traffic except FTP and SSH from the guest WLAN.
   

   CCentral web authentication on the guest WLAN and apply an ACL that denies traffic between devices that use the internal subnets.
   

   DMAC filtering on the guest WLAN and enable client exclusion for segregation.
   

   Correct answer: C

   For a retail guest WLAN deployment, Cisco best practices dictate using central web authentication (web-auth) combined with access control lists (ACLs) to enforce network segmentation and restrict guest traffic to internet-only access. Central web authentication allows all guest devices to be redirected to a captive portal for login without requiring a pre-shared key or WPA2-Enterprise credentials, satisfying the ''no password'' requirement. Applying an ACL that blocks access to internal subnets ensures that guest traffic cannot interfere with corporate networks while still permitting internet connectivity. Option A is unsuitable because WPA2-Enterprise and dynamic VLAN assignment are designed for employee or secure networks, not open guest access. Option B provides local web-auth, which is limited to a single WLC and does not scale across multiple floors effectively. Option D (MAC filtering) only enforces device-level access but does not provide web-based login or segmentation, failing the requirement for captive portal and internet-only access. Cisco Wireless Core Technologies recommend central web authentication with ACL enforcement for guest networks to provide consistent coverage, network isolation, and compliance with security policies across multiple APs and WLCs. Reference topics: Client Connectivity Configuration --- Guest WLAN deployment, central web-auth, ACL enforcement, segmentation from corporate WLAN.

   
   

5. Question 5

   An engineer has been tasked with configuring a Cisco Catalyst 9100 AP to join a WLC using a static configuration as DHCP and DNS discovery methods are not available. The engineer has set the AP hostname to 'AP053540555', and has configured the AP with a static IP address, subnet mask, and default gateway. The engineer must now configure the AP to discover the primary WLC with hostname 'WLC-PRIMARY' and IP address '192.168.100.10'. Which CLI command must the engineer use on the AP?

   Acapwap ap WLC-PRIMARY 192.168.100.10
   

   Bap primary-base WLC-PRIMARY capwap 192.168.100.10
   

   Ccapwap ap primary-base 192.168.100.10
   

   Dcapwap ap primary-base WLC-PRIMARY 192.168.100.10
   

   Correct answer: D

   The correct AP-side command is capwap ap primary-base WLC-PRIMARY 192.168.100.10. Cisco's Catalyst AP command reference shows the syntax for configuring the primary controller as capwap ap primary-base <controller-name> <controller-ip-address>, and provides the same structure in its example: capwap ap primary-base wlc-5520 209.165.200.224. Cisco's Catalyst 9800 AP join documentation also identifies the primary controller discovery entry as capwap ap primary-base <wlc-hostname> <wlc-IP-address>.

   This command statically primes the lightweight AP with the preferred WLC when DHCP option 43, DNS discovery, broadcast discovery, or prior learned controller information is unavailable. The hostname AP053540555 is only the AP's local identity and is not part of the WLC discovery command. Option A omits the primary-base keyword, so it is not valid syntax. Option B places keywords in the wrong order and does not match Cisco CAPWAP AP CLI. Option C omits the required controller name before the IP address. Reference topics: Wireless Network Implementation --- CAPWAP discovery, AP priming, Catalyst 9100 AP onboarding, static WLC discovery, and Catalyst 9800 AP join process.