Free Cisco 300-425 Practice Questions 2026 | Designing Cisco Enterprise Wireless Networks (ENWLSD)

Explanation:

Cisco Catalyst Center's licensing is divided into tiers, and the Catalyst Advantage license is required to enable the specified features. For wireless networks, the advantage tier provides all the capabilities of the Essentials tier, plus advanced assurance, location analytics, and AI Network Analytics, which are the technologies needed for AI-Enhanced RRM.

The task requires enabling Cisco AI Analytics and location analytics, as well as using RRM features to automatically manage RF profiles. According to Cisco's product description, these are explicitly features of the Catalyst Advantage license. The Essentials tier is limited to basic management and automation.

AI-Enhanced RRM is part of the larger AI Network Analytics suite, which uses machine learning to improve network performance through features like trend-based RRM. Cisco documentation confirms that this feature set requires the DNA Advantage license level.

Why Other Options are Incorrect:

B. SNTC SmartNet:
SmartNet is a support contract for hardware and software TAC services, not a license that unlocks Catalyst Center software features. It does not provide access to AI Analytics or location services.

C. Right-To-Use:
This is a licensing model for software usage, not a specific feature tier. It does not define which features are available in Catalyst Center.

D. Catalyst Essentials:
This license provides basic network management and provisioning. It does not include the advanced assurance, AI Analytics, or location analytics features required for the scenario.

References:

Cisco Product Description: Catalyst Advantage includes service assurance, policy, security functionality, and access to cloud-based features such as Cisco AI Network Analytics.

Cisco Live Support Matrix for AI-Enhanced RRM specifies the DNA Advantage license requirement.

Explanation:

The question describes the standard workflow for a predictive wireless site survey. This process is fundamental for determining the correct number of access points and their optimal placement. It is supported by various tools like Cisco Prime Infrastructure, Ekahau, and others .

The first step is to obtain and upload the floor plan into the planning software. However, before any meaningful simulation can happen, the software must understand the physical dimensions of the space. This is done by setting the scale of the floor plan .

Why Other Options are Incorrect:

A. Analyze the network:
This is a later step after the scale, APs, and other variables (walls, materials) have been configured. The analysis runs simulations to determine coverage and recommend placements .

B. Identify the coverage area:
While necessary, this is not the immediate next step. The coverage area is defined after the scale is set, as the software needs to know the physical layout and size of the space .

C. Place the access points:
Access points cannot be placed accurately until the scale is set, because the software must know the distance between potential AP locations and coverage areas to calculate RF propagation accurately .

References:

Ekahau Site Survey documentation emphasizes that it is "highly important to set the correct scale! Otherwise some visualizations and simulations may not be shown correctly" .

Cisco's general site survey guidance confirms that a predictive survey requires "floor plans, scale of the floor plans, [and] wall/ceiling structure" .

Explanation:

An RF (Radio Frequency) profile is the correct tool for this scenario because it provides granular control over the RF parameters of a specific group of access points, which is essential for optimizing performance in a high-density area like an auditorium .

In high-density deployments, the wireless environment often presents challenges such as high co-channel interference from many APs. An RF profile allows an engineer to directly mitigate this by adjusting specific parameters for the APs in that group . For instance, within an RF profile, one can adjust:

Dynamic Channel Allocation (DCA): To plan and assign channels that minimize overlap and interference .

Transmit Power Control (TPC): To set minimum and maximum power levels, ensuring APs are not "shouting" over one another and creating interference .

Receiver Start of Packet (RxSOP): To set a sensitivity threshold, effectively shrinking the cell size so APs ignore weaker signals and focus on the clients within their intended coverage area .

Why Other Options are Incorrect

A. QoS profile:
Used for managing traffic priority and application performance (e.g., voice and video), not for adjusting RF or channel settings to mitigate physical layer interference .

B. AVC (Application Visibility and Control) profile:
Utilized for classifying and controlling specific applications on the network, unrelated to the radio frequency environment or channel allocation .

D. ISE (Identity Services Engine) profile:
Pertains to network access control, security, and user authentication policies, which do not influence the RF parameters responsible for co-channel interference .

References:

Cisco Live Documentation: "Use RF Profiles for granular RF control... Dynamic Channel Allocation (DCA) per RF Profile, Transmit Power Control (TPC) minimum & maximum per RF Profile, RX-SOP to selectively reduce sensitivity" .

Cisco Configuration Guide: "RF profiles allow you to optimize the RF settings for set of APs that operate in different environments or coverage zones" .

Explanation:

A predictive survey is the type of wireless site survey that uses predictive modeling software instead of physically visiting the site. In this approach, the engineer imports the floor plan into specialized planning software (such as Ekahau, Cisco Prime Infrastructure, or Tamograph), defines the scale, specifies building materials, and configures parameters to simulate how RF signals will propagate through the environment . The software then calculates the expected coverage, suggests optimal AP placements, estimates the number of APs required, and predicts potential interference issues before any hardware is physically deployed .

This method is the most cost-effective approach for initial planning and estimating the scale of a deployment. It is particularly useful for preliminary budgeting, evaluating "what-if" scenarios, and creating a baseline design for new building projects where physical access is not yet available.

Why Other Options are Incorrect:

A. Passive survey:
A passive survey requires physically visiting the site with a laptop and Wi-Fi adapter to listen to beacons from existing APs . It does not use predictive software and is typically used during post-deployment to validate coverage.

C. Active survey:
An active survey also requires physical presence at the site. The engineer connects a client device to the network to perform throughput tests, ping latency measurements, and authentication tests while walking the floor . It measures actual performance, not predictions.

D. Post-deployment survey:
A post-deployment survey is performed after APs have been installed, requiring physical site visits to validate actual coverage matches the design and to identify any problems.

References:

Cisco Site Survey Guide distinguishes predictive surveys from active and passive surveys, stating that predictive surveys use predictive modeling software .

Cisco Networkers documentation on wireless site surveys confirms that predictive surveys are performed using planning software and do not require physical site visits .

Explanation:

The scenario describes a classic "brownfield" deployment challenge, where an existing network is being redesigned due to environmental changes, such as updated furniture and wall materials . The core task is to analyze the potential RF impact of these new materials on signal propagation . The most effective and accurate method is to use a predictive modeling tool to conduct a new survey. This involves using the existing AP locations as a foundation, but updating the building floor maps and material configurations to reflect the upcoming changes .

A key point from best practices is that if the map is not properly calibrated or the material data is incorrect, the resulting heat maps will be inaccurate and the survey useless . By updating the material database in the survey tool (e.g., specifying new wall types and furniture), the software can accurately model the new RF environment and predict changes in coverage, interference, and required AP adjustments. This is the standard approach for evaluating the impact of physical changes on a wireless network.

Why Other Options are Incorrect:

A. Perform a sweep analysis first:
A sweep analysis is typically performed post-deployment to measure actual signal strength and data rates at various points . This is a validation step, not a predictive method for evaluating future material changes.

C. Measure upstream and downstream data rates:
This is an active survey technique to measure the current performance of a deployed network. It cannot predict the future impact of remodeling .

D. Evaluate neighbor APs strength:
While assessing neighbor APs is part of a site survey, it does not address the core requirement of modeling the effect of newly introduced materials on the RF environment.

References:

Cisco Site Survey guidelines explain the use of predictive software to place APs based on coverage area information and define building materials .

Research on Wi-Fi signal attenuation confirms that different construction materials have varying impacts on signal propagation, and this data is a key input for planning software .

Explanation:

The correct minimum RSSI for a data-only WLAN design is -70 dBm. This standard is established in Cisco's Radio Resource Management (RRM) and client roaming configurations, where the minimum RSSI for data clients is set to -80 dBm, while the scan threshold that typically triggers a roam is -70 dBm. In practical high-density data designs, Cisco recommends a cell edge of -70 dBm or better for reliable data connectivity.

Why Other Options are Incorrect:

A. –67 dBm:
This is the recommended cell edge for voice applications, not data. Voice requires a stronger, more reliable signal to maintain call quality and seamless roaming.

C. –75 dBm:
While -75 dBm may suffice for basic location tracking requiring detection by multiple APs, it is generally considered too weak for reliable data throughput in production environments.

D. –80 dBm:
This is the absolute minimum threshold at which a client can remain associated, but it is not a viable design target for production data services, as reliable communication is often impossible at this level.

For a data-focused WLAN design, targeting a cell edge RSSI of -70 dBm ensures a good Signal-to-Noise Ratio (SNR) of roughly 23 dB, which is sufficient for mid-range data rates and a stable connection.

References:

Cisco Wireless Controller Configuration Guide: 802.11a/n/ac Client Roaming parameters define -80 dBm as the Minimum RSSI and -72 dBm as the Scan Threshold, supporting a design target of approximately -70 dBm for data clients.

Cisco's "Location Voice and Data Co-Existence" design guide recommends a minimum of -67 dBm RSSI for voice and -70 dBm for reliable data rates like 86.7 Mbps.

Explanation:

This question refers to a significant change in Cisco's AireOS licensing model that was implemented in software release 6.0.196, a detail that remains relevant for understanding features in Version 8 . Before this change, licenses were separated into Base and WPlus types, where WPlus was required for advanced features . However, with version 6.0.196 and all later code (including all 7.0 and 8.0 releases), all features previously included in a WPlus license were consolidated into the Base license .

Since the WLC is running Version 8, the WPlus license is no longer a separate, required purchase. The engineer's approach is correct because the Base license for this version inherently provides access to the full suite of wireless features . The older licensing distinction has been effectively eliminated for these software versions.

Why Other Options are Incorrect:

A. ForceExtend AP needs a WPlus license:
This is incorrect. The feature is typically called OfficeExtend, not "ForceExtend". More importantly, with the licensing change in version 6.0.196 and later, the OfficeExtend feature, once a WPlus-only feature, was included in the Base license .

B. CAPWAP Data Encryption licenses are required for this feature:
This statement is not the reason the engineer can proceed without a WPlus license. CAPWAP DTLS encryption is a standard, configurable security feature, not a licensed feature dependent on a separate "CAPWAP Data Encryption license".

D. To have all the features, Plus licenses must be installed on the WLC:
This is the opposite of the correct licensing state for the specified software version. Installing WPlus licenses is not required on Version 8 as WPlus features are already part of the Base license .

References:

"With 6.0.196 and all later code... All features included in a Wireless LAN Controller Wplus license are now included in the base license." - Cisco Community (Understanding Cisco 5508 WLC Licensing) .

Exam discussion for 300-425 confirms this exact question and notes the licensing change .

Explanation:

The Cisco Catalyst 9800 Series Wireless Controller mobility tunnel operates using the CAPWAP protocol, and it encompasses both a control path and a data path. The control path, which operates over UDP port 16666, is responsible for exchanging information between controllers—such as access point details, wireless client data, and Radio Resource Management (RRM) information . The data path operates over UDP port 16667 and is dedicated to forwarding user data traffic between the controllers . The correct state of this CAPWAP-based tunnel is "Up," which indicates that both the control and data paths are functioning properly . Cisco documentation for the 9800 series confirms that mobility tunnels are CAPWAP-based, not IPsec-based .

Why Other Options are Incorrect:

A. It is an IPsec tunnel with control path only:
Incorrect. The tunnel is CAPWAP-based, not IPsec-based. While Data Link Encryption (DTLS) can be enabled for the data path, the underlying protocol is CAPWAP . Additionally, the tunnel has both control and data paths, not just control.

B. It is a CAPWAP tunnel with data path only:
Incorrect. The mobility tunnel includes both a control path (UDP 16666) and a data path (UDP 16667), not just the data path .

D. It is an IPsec tunnel with control path and data path:
Incorrect. This is false as the mobility tunnel on the 9800 controller is a CAPWAP tunnel. Although IPsec is referenced in some contexts, it is not the protocol used for the primary mobility tunnel on this platform .

References:

"WLC mobility tunnel... Mobility tunnels work over CAPWAP udp ports 16666 and 16667 from which udp port 16666 is for Control Path and 16667 for Data Path" .

Cisco configuration guide for Catalyst 9800 mobility confirms the CAPWAP-based tunnel structure .

Explanation:

The primary limitation with an existing gigabit uplink when upgrading to 802.11ac Wave 2 APs is interface throughput. 802.11ac Wave 2 APs support much higher aggregate wireless data rates that can exceed the 1 Gbps capacity of a standard gigabit Ethernet interface . This creates a potential bottleneck, as the single switch uplink would be carrying the traffic of all connected clients .

The existing switches already provide 802.3at (PoE+), which supports up to 30W . While 802.3at is generally sufficient for most 802.11ac Wave 2 APs (which typically require around 20W), the older 802.3af (15.4W) standard was often insufficient, but that is not the case here .

Why Other Options are Incorrect:

B. high availability:
This is unrelated to the switch limitation described in the scenario.

C. collision domains:
Modern Ethernet switches create separate collision domains per port, so this is not a concern.

D. output power:
The switches provide 802.3at, which is adequate for most Wave 2 APs; the limitation is throughput, not power .

Reference:
Cisco Exam Topics discussion and deployment guidance indicate that for 802.11ac Wave 2 APs, using a Multigigabit Ethernet port (2.5 Gbps or higher) is recommended to avoid throughput bottlenecks when the switch uplink is carrying traffic from multiple clients .

Explanation:

A patch antenna is the best choice for covering a long corridor. It is a directional antenna that focuses its RF energy into a specific, wedge-shaped coverage area. This characteristic is ideal for "covering a long hallway in a hospital or office corridor" because it efficiently directs the signal down the length of the corridor and reduces unwanted interference in other directions .

Why Other Options are Incorrect:

A. Omni-directional antenna:
An omni-directional antenna radiates signal in all directions (like a doughnut). While it provides broad coverage, it is inefficient for long corridors because much of its signal is wasted on the walls and sides. Using omni-antennas in a corridor would likely create excessive overlap and interference with neighboring APs, making it a poor design choice.

C. Yagi antenna:
Yagi antennas are highly directional with a very narrow beamwidth. Although some old design guides suggested them for corridors, they are generally more suitable for long-distance point-to-point connections. In practice, they are not recommended for indoor corridor deployments where clients roam, as their narrow focus can create coverage gaps and are difficult to align . Patch antennas are more commonly recommended for this specific indoor use case.

D. Dipole antenna:
A dipole is a basic omnidirectional antenna. Like other omni designs, it does not focus the signal down the corridor and can contribute to interference issues, making it less effective than a patch antenna.

References:
Cisco Community discussion recommends patch antennas over Yagi for indoor corridor coverage .
Cisco design guidance identifies patch antennas as suitable for RF coverage down a hallway .