350-101 — Frequently Asked Questions

Reflection involves waves bouncing off a surface, while diffraction involves waves bending around the edges of an obstacle.

No, absorption reduces signal power as it passes through materials. Diffraction is required for bending around obstacles.

GCMP-256 is computationally lighter than AES-CCMP, reducing the CPU load on the controller and APs, which allows them to process packets faster and sustain higher throughput.

No, TKIP is a legacy security protocol with significant performance limitations and should never be used for high-speed Wi-Fi 7 applications.

A wrong PSK fails the ordinary four-way handshake, whereas this trace shows the MIC failing specifically during 802.11r Fast Transition key derivation.

Matching WLANs are required for anchoring, but the RA trace reports no anchor or WLAN identity problem — only a Fast Transition MIC validation failure.

AAA override tells the WLC to honor per-session RADIUS attributes from ISE instead of only its static WLAN policy, so ISE can restrict a client until posture passes.

Those commands configure the ISE side of the policy; the question asks for a change applied at the WLAN level of the WLC, which is option A.

Interactive SSH uses the named AAA method list applied to the vty lines, while NETCONF over SSH authenticates via the global default method lists. If TACACS+ is only in the named list, NETCONF has no TACACS+ server to reach and is rejected.

Enable TACACS+ in the default AAA login and EXEC authorization lists, then enable the NETCONF agent (netconf / netconf agent ssh) with the required YANG models so Catalyst Center can subscribe to wireless client telemetry.