350-101 — frequently asked questions

Reflection involves waves bouncing off a surface, while diffraction involves waves bending around the edges of an obstacle.

No, absorption reduces signal power as it passes through materials. Diffraction is required for bending around obstacles.

GCMP-256 is computationally lighter than AES-CCMP, reducing the CPU load on the controller and APs, which allows them to process packets faster and sustain higher throughput.

No, TKIP is a legacy security protocol with significant performance limitations and should never be used for high-speed Wi-Fi 7 applications.

A wrong PSK fails the ordinary four-way handshake, whereas this trace shows the MIC failing specifically during 802.11r Fast Transition key derivation.

Matching WLANs are required for anchoring, but the RA trace reports no anchor or WLAN identity problem — only a Fast Transition MIC validation failure.

AAA override tells the WLC to honor per-session RADIUS attributes from ISE instead of only its static WLAN policy, so ISE can restrict a client until posture passes.

Those commands configure the ISE side of the policy; the question asks for a change applied at the WLAN level of the WLC, which is option A.

Interactive SSH uses the named AAA method list applied to the vty lines, while NETCONF over SSH authenticates via the global default method lists. If TACACS+ is only in the named list, NETCONF has no TACACS+ server to reach and is rejected.

Enable TACACS+ in the default AAA login and EXEC authorization lists, then enable the NETCONF agent (netconf / netconf agent ssh) with the required YANG models so Catalyst Center can subscribe to wireless client telemetry.

The native VLAN carries untagged frames. If a connected device sends untagged traffic, it defaults to the native VLAN. If the native VLAN is the Management VLAN, unintended untagged traffic from user or guest networks could inadvertently enter the management plane, leading to potential security breaches or VLAN hopping attacks.

Not necessarily. If these appliances are configured to communicate solely via their management IP address (pulling telemetry via SNMP/gRPC over the Mgmt VLAN), they can reside on an Access Port. They do not need to bridge user VLANs unless they are acting as transparent proxies or require direct Layer 2 visibility into specific user segments.

Navigate to Assurance > Issue Settings. From there, you can manage subscriptions and configure email notifications for specific issue types.

Platform Event Notifications are typically used for system-level events and API integrations via webhooks. Assurance Issue Settings are designed for operational alerts regarding network health, client connectivity, and performance issues.