2.0 Switching and Network Access
Wireless LAN Controller Practice Questions
Updated for CCNA v2.0
WLC setup, WLANs, and AP association.
Author-reviewed by LabFabric · 8 September 2026 · Report a content issue
One solved question, so you can see how these are marked
Which protocol do Cisco lightweight access points use for control communication with a Wireless LAN Controller?
CAPWAP
Cisco lightweight APs use CAPWAP for controller discovery, join, and control communication. In central switching, client data also traverses a CAPWAP data tunnel to the WLC; FlexConnect local switching can instead bridge client data onto the local wired network.
Every question in the set below is marked like this. The answers stay hidden until you pick one.
Find related practice in the CCNA pathAll 5 Wireless LAN Controller questions in this set
Answers and explanations appear when you work through the set above.
On a Cisco AireOS WLC, what is a dynamic interface primarily used for?
- Mapping a WLAN to a specific VLAN so client traffic is placed on the correct Layer 3 subnet
- Providing the physical uplink port between the WLC and the wired switch
- Allowing administrators to log in to the WLC's management GUI
- Advertising the WLC's own IP address to access points via CAPWAP discovery only
A newly powered-on access point on the same local network as a WLC needs to discover it. Without any DHCP option configured, how does the AP typically find the WLC?
- By sending broadcast CAPWAP discovery messages on the local subnet, which the WLC replies to
- It cannot find the WLC unless DHCP option 43 is configured
- By statically configuring the WLC's IP address on the AP before boot
- Through CDP advertisements from the neighboring switch
What is the purpose of DHCP option 43 in a wireless deployment where APs live on a different subnet from the WLC?
- It supplies one or more candidate WLC management IP addresses for CAPWAP discovery across subnets
- It assigns the wireless client's default gateway
- It specifies the SSID broadcast by the access point
- It configures the encryption type used by the WLAN
When creating a WLAN that must use a shared passphrase rather than 802.1X, which listed security setting provides AES-based encryption?
- WPA2-PSK with AES/CCMP
- Open authentication with no encryption
- WEP
- MAC filtering only
An administrator creates separate Internal and Guest WLANs on a WLC, each mapped to its own dynamic interface and VLAN. What is the main benefit of this design?
- It creates separate Layer 2 and IP policy boundaries so routing and security controls can treat guest and internal clients differently
- It allows both WLANs to share the exact same IP subnet without conflicts
- It removes the need to configure any encryption on either WLAN
- It doubles the maximum number of clients the WLC can support