- (Topic 1)
Which AP mode allows an engineer to scan configured channels for rogue access points?

1. A. sniffer
2. B. monitor
3. C. bridge
4. D. local

Correct Answer: B

- (Topic 1)

Refer to the exhibit. An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN. What action resolves this issue?

1. A. implement MFP client protection
2. B. implement split tunneling
3. C. implement P2P blocking
4. D. implement Wi-Fi direct policy

Correct Answer: C
This control determines whether the Wireless LAN Controller is configured to prevent clients connected to the same Wireless Local Area Controller from communicating with each other.
Wireless Client Isolation prevents wireless clients from communicating with each other over the RF. Packets that arrive on the wireless interface are forwarded only out the wired interface of an Access Point. One wireless client could potentially compromise another client sharing the same wireless network.

- (Topic 4)
What is the function of the fabric control plane node in a Cisco SD-Access deployment?

1. A. It is responsible for policy application and network segmentation in the fabric
2. B. It performs traffic encapsulation and security profiles enforcement in the fabric
3. C. It holds a comprehensive database that tracks endpoints and networks in the fabric
4. D. It provides integration with legacy nonfabric-enabled environments

Correct Answer: C

- (Topic 4)
A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10Gb connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?

1. A. Port mirroring
2. B. Log aggregation
3. C. Flow data
4. D. Packet capture

Correct Answer: C
This is because flow data is a method of collecting and analyzing information about the traffic flows on a network. Flow data can provide details such as the source and destination IP addresses, ports, protocols, and bytes transferred for each flow. Flow data can help identify the source of the saturation by showing which hosts and applications are generating or consuming the most bandwidth. Flow data can be collected using protocols such as NetFlow, IPFIX, or sFlow. The source of this answer is the Cisco ENCOR v1.1 course, module 10, lesson 10.1: Implementing NetFlow and IPFIX.

- (Topic 4)
By default, which virtual MAC address does HSRP group 22 use?

1. A. c0:42:01:67:05:16
2. B. c0:07:0c:ac:00:22
3. C. 00:00:0c:07:ac:16
4. D. 00:00:0c:07:ac:22

Correct Answer: D