Free 300-425 Practice Test Questions 2026

Explanation:

Key Concepts:

RX-SOP (Receiver Start of Packet Threshold)

Controls the minimum signal strength (RSSI) at which an AP will process incoming 802.11 frames.

Higher RX-SOP values (e.g., -65 dBm) ignore weaker signals, reducing interference.

Lower RX-SOP values (e.g., -80 dBm) allow processing of weaker signals.

RX-SOP Levels for 802.11a (5 GHz)

Low: -85 dBm (default)

Medium: -82 dBm

High: -77 dBm

Scenario Details:

RSSI of received packets: -77 dBm

RX-SOP setting: Medium (-82 dBm)

Since -77 dBm > -82 dBm, the AP will process the frames.

Why Option D is Correct:

The 5 GHz radio (802.11a) receives and decodes the frames because:

The RSSI (-77 dBm) is stronger than the RX-SOP Medium threshold (-82 dBm).

The AP does not ignore the frames.

Why Other Options Are Incorrect:

Option A (Non-Wi-Fi frames) → Incorrect, because -77 dBm is above the RX-SOP threshold, so frames are valid Wi-Fi signals.

Option B (2.4 GHz radio) → Incorrect, because the frames are received on the 802.11a (5 GHz) radio, not 2.4 GHz.

Option C (Non-Wi-Fi on 2.4 GHz) → Incorrect for the same reasons as A and B.

Reference:

Cisco RF Profile Configuration Guide → Explains RX-SOP thresholds and their impact on frame processing.

Cisco Wireless LAN Controller Best Practices → Recommends adjusting RX-SOP to balance coverage and interference.

Explanation:

Key Concept:

The human body causes signal attenuation (weakening) of approximately 3 dB when obstructing a wireless signal.

This means the signal strength is halved (since a 3 dB loss = 50% power reduction).

Why This Matters in Wireless Design:

In high-density environments (e.g., offices, stadiums), human movement can cause fluctuations in signal strength.

Designers must account for this when planning AP placement and coverage overlap.

Why Other Options Are Incorrect:

Option B (4 dB) & Option C (6 dB) → Overestimates typical human body attenuation.

Option D (12 dB) → Far too high; this would apply to denser obstructions (e.g., concrete walls).

Reference:

Cisco Wireless LAN Design Best Practices: Recommends accounting for 3 dB human attenuation in capacity planning.

Explanation:

Key Problem:

Co-channel interference in a 5 GHz network with 40 MHz channels and three SSIDs.

Wider channels (40 MHz) reduce the number of non-overlapping channels, increasing interference.

Solution 1: Decrease Channel Bonding to 20 MHz (Option D)

Why?

5 GHz has more non-overlapping channels at 20 MHz (e.g., 25 channels in UNII-1/2/2e/3) vs. fewer at 40 MHz.

Reduces co-channel interference by increasing available channels for APs.

Impact:

Sacrifices some throughput (lower max data rates) but improves reliability.

Solution 2: Reduce AP Power (Option E)

Why?

Lowering transmit power shrinks cell sizes, reducing overlap between APs on the same channel.

Works best in high-density deployments (e.g., open-plan offices).

Impact:

Requires careful tuning to avoid coverage gaps.

Why Other Options Are Incorrect:

Option A (Increase SSIDs) → More SSIDs = more management overhead and airtime contention (worsens interference).

Option B (40 MHz in 2.4 GHz) → 2.4 GHz should never use 40 MHz (only 3 non-overlapping channels; bonding causes severe interference).

Option C (Disable Band Steering) → Band steering pushes clients to 5 GHz (reducing 2.4 GHz congestion). Disabling it does not help 5 GHz interference.

Reference:

Cisco Wireless Design Guide: Recommends 20 MHz channels in 5 GHz for high-density deployments.

Explanation:

Key Issue:

After SSO (Stateful Switchover) failover, only half the clients are visible on the secondary (now active) WLC.

The secondary WLC shows Active role, confirming SSO is operational, but client sessions are missing.

Root Cause:

WebAuth-Req State Clients:

Clients in Web Authentication (WebAuth) pending state (e.g., waiting for portal login) are not fully established.

SSO does not sync these partially authenticated sessions to the standby WLC.

After failover, these clients must reauthenticate, causing the drop in client count.

Why Other Options Are Incorrect:

Option A (Secondary WLC Capacity) → If the WLC couldn’t handle the load, it would reject new clients, not lose existing ones.

Option B (Incomplete Database Sync) → SSO syncs all client states (except WebAuth-Req). If sync failed, far fewer clients would appear.
Option C (SSO Misconfiguration) → If SSO were broken, the secondary WLC would not take over as Active.

Reference:

Cisco High Availability SSO Deployment Guide: Confirms that WebAuth-pending sessions are not synced during failover.

Cisco Wireless LAN Controller Troubleshooting: Lists WebAuth as a common cause of client count discrepancies in SSO.

Solution:

Ensure fast WebAuth redirection or use PSK/MAB for critical clients to avoid session loss.

Explanation:

Key Issue:

Handheld mobile scanners (used for credit card payments) are experiencing roaming problems in a high-density environment.

These devices typically use low-power radios and struggle with interference and weak signals during AP transitions.

Why RX-SOP (Option A) is the Correct Solution:

RX-SOP adjusts the minimum signal strength (RSSI) at which an AP will process incoming frames.

In high-density deployments:

Lowering RX-SOP (e.g., to -85 dBm) allows APs to hear weak client signals better, improving roaming.

Prevents APs from ignoring scanners during handoffs.

Impact:

Scanners maintain connectivity even at the edge of AP coverage, reducing roaming failures.

Why Other Options Are Incorrect:

Option B (802.11w - Management Frame Protection) → Secures control frames but does not improve roaming.

Option C (AP Heartbeat Timeout) → Detects AP failures but does not affect client roaming.

Option D (Application Visibility Control - AVC) → Provides QoS for apps but does not address signal/roaming issues.

Reference:

Cisco High-Density Design Guide: Recommends tuning RX-SOP for low-power devices in dense environments.

PCI DSS Wireless Guidelines: Emphasizes reliable roaming for payment terminals.

Explanation:

Key Issue:

Guest anchoring is configured, but mobility tunnels are down.

EPING (Echo Ping) fails between the foreign WLC and anchor WLC, indicating a firewall blockage.

Required Firewall Rule:

UDP Port 16666 must be open between the controllers for:

Mobility tunneling (guest traffic encapsulation).

Control-plane communication (e.g., EPING, CAPWAP mobility messages).

Why Other Options Are Incorrect:

Option B (IP Protocol 97) → Incorrect. IP protocol 97 is EIGRP, unrelated to WLC mobility.

Option C (UDP Port 97) → Incorrect. UDP 97 is NIOSH (a legacy protocol), not used by Cisco WLCs.

Option D (TCP Port 97) → Incorrect. TCP 97 is unused in Cisco mobility architectures.

Reference:

Cisco Wireless LAN Controller Mobility Groups Guide: Explicitly states UDP 16666 for inter-controller tunnels.

Cisco Firewall Best Practices for WLCs: Mandates allowing UDP 16666 between anchor/foreign WLCs.

Explanation:

Key Requirements for the Wireless Services:

Internet, Email, Voice, and Inventory Database

Voice (VoWLAN): Demands high-quality RF (low latency, minimal jitter/packet loss).

Inventory Database: Requires reliable data throughput (low retries, strong signal).

Why Option A is Correct:

Signal Strength: -67 dBm

Ideal for real-time apps (voice) and data reliability.

Meets Cisco’s minimum recommended coverage (-67 dBm for VoWLAN).

SNR: 25 dB

Ensures clear signal distinction from noise (critical for voice and database apps).

Cisco recommends ≥25 dB SNR for HD voice/video.

Packet Loss: ≤1%

Mandatory for voice quality (VoIP tolerates <1% loss).

Why Other Options Fail:

Option B: 20 dB SNR and 5% packet loss are too low for voice/database apps.

Option C: +67 dBm is impossible (signal strength is always negative in dBm).

Option D: -70 dBm is too weak, and 10% packet loss breaks voice calls.

Reference:

Cisco Wireless LAN Design Best Practices (CVD):

-67 dBm signal strength for voice/data mixed networks.

25 dB SNR for high-density deployments.

Explanation:

Key Requirements for a Point-to-Multipoint Mesh Network Survey:

Tx Power (Transmit Power) (Option E)

Must be adjusted to balance coverage and interference between mesh APs.

Too high: Causes co-channel interference.

Too low: Weak backhaul links.

Rx Power (Receive Sensitivity) (Option B)

Determines the minimum signal strength needed for reliable backhaul links.

Critical for link budget calculations (ensuring MAPs can "hear" RAPs).

Why Other Options Are Incorrect:

Option A (MAP Hostnames): Administrative, not RF-related.

Option C (Mesh on 2.4 GHz): Avoid 2.4 GHz for mesh (only 3 non-overlapping channels; use 5 GHz instead).

Option D (Bridge Group Name): Logical grouping, not a survey parameter.

Reference:

Cisco Outdoor Mesh Deployment Guide: Recommends Tx/Rx power tuning for optimal backhaul performance.

Explanation:

Key Requirements:

Bridging wired IP cameras in a parking lot via a mesh AP.

The cameras are wired devices, so they must connect to an AP’s Ethernet port.

Why MAP (Option B) is Correct:

MAPs (Mesh Access Points) are designed to provide wired connectivity in a mesh network:

They extend the network by connecting to a RAP (Root AP) wirelessly.

Their Ethernet ports can bridge wired devices (like cameras) back to the network.

RAPs (Option C) typically connect to the wired LAN and do not host wired clients.

Why Other Options Are Incorrect:

Option A (FlexConnect): AP mode for branch office tunneling, not mesh bridging.

Option C (RAP): Root APs uplink to the wired network—they don’t host downstream wired clients.

Option D (Local): Refers to client-serving mode, not bridging.

Reference:

Cisco Outdoor Mesh Deployment Guide: States that MAPs provide wired bridging for devices like cameras.

Cisco 1560 Series Mesh AP Datasheet: Confirms Ethernet bridging support on MAPs.

Explanation:

Key Requirements for the Outdoor Mesh Backhaul:

Sports Field Coverage:

Requires focused, high-gain backhaul links to reach distant MAPs (Mesh Access Points).

Core Location:

The RAP (Root AP) is in a building at the entrance, so it needs directional antennas to target specific fields.

Why Option D is Correct:

5 GHz Band:

Less interference than 2.4 GHz (critical for reliable backhaul).

More non-overlapping channels (e.g., UNII-1/2/3 bands).

14-dBi Patch Antenna:

Directional (focuses signal toward sports fields, reducing wasted energy).

High gain extends range while maintaining link quality.

Why Other Options Are Incorrect:

Option A (5 GHz Omni):

Omnidirectional antennas waste power broadcasting in all directions (unsuitable for targeted backhaul).

Option B (2.4 GHz Patch):

2.4 GHz is congested (poor for high-capacity backhaul).

8 dBi is too low for long-range sports field coverage.

Option C (2.4 GHz Omni):

Omnidirectional + 2.4 GHz = Worst choice (interference + unfocused coverage).

Reference:

Cisco Outdoor Mesh Antenna Guide: Recommends 5 GHz directional antennas for backhaul.

Explanation:

Key Scenario:

A mesh AP has a wired connection back to the infrastructure (i.e., it is the root of the mesh network).

Before changing the AP mode (e.g., from local to bridge), the AP role must first be set to RAP.

Why RAP (Option B) is Correct:

AP Role vs. AP Mode:

Role: Defines the AP’s function in the mesh (RAP, MAP).

Mode: Defines how clients connect (local, flex, bridge).

Design Workflow:
Step 1: Set the AP role to RAP (since it’s the root wired node).

Step 2: Configure the mode (e.g., bridge for wired clients).

Why Other Options Are Incorrect

Option A (Monitor): A passive scanning role, unrelated to mesh.

Option C (Bridge): An AP mode, not a role (cannot be set before role).

Option D (Local): An AP mode for client serving, not a role.

Reference:

Cisco Mesh Deployment Guide: States that RAP role must be assigned first before mode changes.

Cisco 1560 Series AP Configuration: Requires role configuration before mode.

Explanation:

Key Concept:

Liquid materials (e.g., water, chemicals) absorb and scatter RF signals more than dry goods (e.g., boxes, wood, plastic).

Water, in particular, has a high dielectric constant, causing significant signal attenuation.

Large cases of liquids act like RF barriers, weakening Wi-Fi signals passing through them.

Why Option A is Correct:

Higher signal loss: Liquids cause 3–20 dB+ attenuation depending on density (vs. dry goods at ~3–6 dB).

Impact on RF Design:

Requires more APs or higher power to penetrate liquid-storage areas.

Cisco’s warehouse design guides explicitly account for liquid-induced attenuation.

Why Other Options Are Incorrect:

Option B (Not impactful): Incorrect. Liquids do impact RF (verified in real-world deployments).

Option C (Less than dry goods): Opposite of reality. Liquids attenuate more.

Option D (Impactful but negligible): Contradictory. If impactful, it’s not negligible in design.

Reference:

Cisco Warehouse Wireless Design Guide: Recommends additional APs near liquid storage.