300-120 Practice Questions
Prepare for 300-120 with more than an answer.
- Exam fee
- $300 USD
- Level
- Specialist / Professional (CCNP Wireless concentration)
- Valid for
- 3 years
Domains covered on the exam 8
- FlexConnect15%
- QoS on a Wireless Network10%
- Multicast10%
- Location Services10%
- Advanced Location Services10%
- Security for Wireless Client Connectivity20%
- Monitoring15%
- Device Hardening10%
- 1
A hospital IT department is troubleshooting poor voice quality on their Voice over WLAN (VoWLAN) deployment. The network consists of Cisco Catalyst 9120 APs in local mode, connected to Catalyst 9300 access switches, which tunnel traffic back to a centralized Catalyst 9800 WLC.
Packet captures reveal that downstream voice packets from the WLC to the wireless clients retain their DSCP EF (46) markings and are properly prioritized over the air. However, upstream voice packets originating from the wireless clients are arriving at the core network marked as Best Effort (DSCP 0), leading to jitter and packet loss during congestion.
The wireless clients are verified to be transmitting with UP 6. Which configuration adjustment is necessary to correct this QoS asymmetry?
flowchart LR Client([Wireless Client]) -->|UP 6| AP[Catalyst 9120 AP] AP -->|CAPWAP| Switch[Catalyst 9300 Switch] Switch -->|Drops to DSCP 0| Core[Core Network] Core --> WLC[Catalyst 9800 WLC]Show answer details
Correct answer: C
In a centralized CAPWAP architecture, the AP encapsulates the wireless frame (including its QoS markings) into a CAPWAP packet and copies the QoS value to the outer IP header (DSCP). If the upstream access switch port connected to the AP is not configured to trust DSCP, the switch will remark the incoming traffic to DSCP 0 (Best Effort) by default, stripping the prioritization before it reaches the core and the WLC.
- 2
When implementing multicast on a Cisco Wireless LAN Controller, the network administrator configures the AP Multicast Mode to 'Multicast'. How does the WLC deliver multicast traffic to the Access Points in this mode?
sequenceDiagram participant Source as Multicast Source participant WLC as Catalyst 9800 WLC participant Net as Wired Network participant AP1 as AP-1 participant AP2 as AP-2 Source->>WLC: Original Multicast Packet (e.g., 239.1.1.1) WLC->>Net: Encapsulated Packet Net->>AP1: Delivers Packet Net->>AP2: Delivers PacketShow answer details
Correct answer: B
In Multicast-Multicast mode, the WLC encapsulates the original client multicast packet inside a CAPWAP multicast packet destined for the WLC's configured multicast group address. The underlying wired network infrastructure is then responsible for replicating and routing this multicast packet to all APs that have joined that CAPWAP multicast group, greatly reducing the CPU load on the WLC.
- 3
A university is deploying IPTV services over its wireless network using Multicast. However, users in crowded lecture halls complain about severe video artifacts and freezing. The wireless engineer decides to implement Cisco VideoStream (Multicast Direct) to resolve the issue.
What is the primary technical mechanism that VideoStream uses to improve multicast video reliability over the RF medium?
Show answer details
Correct answer: B
Standard 802.11 multicast is transmitted without MAC-layer acknowledgments (ACKs) and usually at a low mandatory data rate, making it highly susceptible to packet loss and wasting airtime. VideoStream (Multicast Direct) solves this by having the AP convert the multicast stream into individual unicast frames for each subscribed client. This allows for 802.11 ACKs, retransmissions, and the use of optimal (faster) data rates, dramatically improving video reliability.
- 4
A network architect is designing a FlexConnect deployment for 50 remote retail branches using Catalyst 9800 controllers. The security policy requires that specific traffic from wireless clients be dropped before traversing the WAN link to the data center, while still allowing local branch printing. Which configuration approach optimally achieves this requirement?
flowchart TD Client([Wireless Client]) --> AP[FlexConnect AP] AP -->|Local Switching| Switch[Branch Switch] Switch -->|WAN Link| Core[Data Center Core] Core --> WLC[Catalyst 9800 WLC] AP -.->|Flex ACL Applied| Drop[Drop Traffic]Show answer details
Correct answer: B
In a FlexConnect deployment with local switching, traffic is placed directly onto the local branch network and does not traverse the CAPWAP data tunnel. To filter this traffic locally before it hits the WAN, a FlexConnect ACL (Flex ACL) must be configured on the WLC and pushed to the AP, where it is mapped to the locally switched VLAN or the client.
- 5
When implementing the Smart AP Image Upgrade feature for a large FlexConnect deployment across multiple branch offices, which TWO operational phases drastically reduce the WAN bandwidth consumption during a Catalyst 9800 controller upgrade? (Select TWO)
Show answer details
Correct answer: A, C
The Smart AP Image Upgrade (also known as AP Image Predownload for FlexConnect) optimizes WAN bandwidth. Instead of every AP downloading the image over the WAN, a single Master AP per model in the FlexConnect group downloads the image from the WLC. Then, the Master AP distributes the image to the Subordinate APs locally over the LAN.
The Smart AP Image Upgrade (also known as AP Image Predownload for FlexConnect) optimizes WAN bandwidth. Instead of every AP downloading the image over the WAN, a single Master AP per model in the FlexConnect group downloads the image from the WLC. Then, the Master AP distributes the image to the Subordinate APs locally over the LAN.
- 6
A multinational retail organization is deploying wireless networks across 500 branch locations. Each branch has 3 to 5 APs and relies on a central Catalyst 9800 WLC located in the primary data center.
The organization requires that branch employees can continue to scan inventory and process local point-of-sale (POS) transactions even if the WAN link to the data center completely fails. The local POS servers are hosted on a server at each branch.
However, guest traffic must be funneled directly back to the data center for deep packet inspection and centralized logging, regardless of WAN state. If the WAN fails, guest access should immediately cease to prevent uninspected traffic from accessing the internet locally.
Which combination of FlexConnect configurations will satisfy these business requirements?
Show answer details
Correct answer: B
For the Employee WLAN to survive a WAN outage and access local resources, it must be configured for Local Switching (to drop traffic on the local LAN) and Local Authentication (to authenticate clients without reaching the WLC). For the Guest WLAN to be forced to the data center and fail closed during a WAN outage, it must be configured for Central Switching. Central Switching tunnels traffic to the WLC; if the WLC is unreachable, the SSID stops broadcasting or clients lose connectivity, fulfilling the security requirement.
