What is the minimum number of rules that is necessary in a CPU ACL to allow all access from a
single VLAN to the management interface, yet prevent management access from all other VLANs
while permitting all other traffic?

Refer to the exhibit.

Your manager has asked you to configure a remote office Cisco WLC to support local EAP
authentication. The manager wants the clients to use EAP-FAST. The LDAP server is Microsoft
Active Directory. All users, including the account that is used to bind to the LDAP server, are in the
default Users container in Active Directory. No RADIUS servers are configured on the Cisco WLC.
The client is using the latest Intel card and supplicant.
Why does the test client fail to authenticate?

A wireless network administrator needs to limit guest user TCP traffic to no more than 50,000 kb/s,
to conserve bandwidth on the guest WLAN. To do this, the administrator configures the average
real-time rate to 50,000 kb/s and the burst real-time rate to 60,000 kb/s. Why does a test of the
guest account show no restriction for the client TCP traffic?

Refer to the exhibit.

You are a senior wireless network administrator and have just completed the configuration of
TACACS+ on your production Cisco WLC server. You can successfully log into the Cisco WLC by
using your domain credentials. However, junior administrators, who have only local management
accounts on the Cisco WLC, are complaining that they can no longer log into the Cisco WLC GUI
or CLI. What is the cause of this problem?

After performing a wireless site survey, you determine that to achieve proper HR-DSSS coverage
within the rooms along a hallway area, the AP radios that service the hallway must be at 12 mW or
higher. After the APs are all installed, you note that RRM is decreasing the power on the AP radios
in the hallway to 6 mW. Which two methods can you use to prevent the HRDSSS AP radio power
levels from dropping below 12 mW? (Choose two.)

Refer to the exhibit.

You are testing coverage-hole detection in your lab. You are using the default Cisco WLC
coverage-hole detection configuration that is shown. You have 14 test clients, all associated to the
same AP. You move three of the clients far away from the AP so that they have an RSSI of -85
dBm or lower for 1 minute. To your surprise, you see precoverage-hole alarms, but no coveragehole alarm is triggered.
Which two scenarios explain this issue? (Choose two.)

A wireless ISP has hired you to help set up a new Cisco WLC to provide wireless access to
subscription-based customers. Each customer that uses the wireless network needs to pay their
bill every 30 days. How do you configure the WLAN security to help meet this requirement?

When is the Poor Link SNR Alarm generated in a mesh network?

A 7-Mb multicast traffic stream is being sent to wireless clients and it is using up most of the
available wireless spectrum in the 2.4-GHz unlicensed band. As a result, many of the data
applications have become sluggish and the video is choppy. What is the best option to send the
multicast over the wireless network more efficiently and leave some bandwidth for the data
applications (assuming the network is capable of supporting this option)?

The helpdesk is reporting that many users are reporting slow wireless connections in one of the
office buildings. You look at the CleanAir statistics and do not see any interferers, but you see very
high 2.4-GHz channel utilization from the Wi-Fi devices. WCS is reporting the following mix of
802.11 chipsets in the building: 10 percent 802.11b, 75 percent 802.11g and 15 percent 802.11a.
You do a survey and see that you have a very dense deployment of APs and a lot of co-channel
interference.
Which two steps would help lower your channel utilization in this area? (Choose two.)