Skip to content
AvailabilitySign inBook a DemoStart free lab
Topic: Wireless LAN ControllerSwitch
All CCNA topics

2.0 Switching and Network Access

Wireless LAN Controller Practice Questions

Updated for CCNA v2.0

WLC setup, WLANs, and AP association.

Author-reviewed by LabFabric · 8 September 2026 · Report a content issue

One solved question, so you can see how these are marked

Which protocol do Cisco lightweight access points use for control communication with a Wireless LAN Controller?

CAPWAP

Cisco lightweight APs use CAPWAP for controller discovery, join, and control communication. In central switching, client data also traverses a CAPWAP data tunnel to the WLC; FlexConnect local switching can instead bridge client data onto the local wired network.

Every question in the set below is marked like this. The answers stay hidden until you pick one.

Find related practice in the CCNA path
All 5 Wireless LAN Controller questions in this set

Answers and explanations appear when you work through the set above.

  1. On a Cisco AireOS WLC, what is a dynamic interface primarily used for?

    • Maps a WLAN to its client VLAN and IP subnet
    • Providing the physical uplink port between the WLC and the wired switch
    • Allowing administrators to log in to the WLC's management GUI
    • Advertising the WLC's own IP address to access points via CAPWAP discovery only

  2. A newly powered-on access point on the same local network as a WLC needs to discover it. Without any DHCP option configured, how does the AP typically find the WLC?

    • Local-subnet broadcast CAPWAP discovery, answered by the controller
    • It cannot find the WLC unless DHCP option 43 is configured
    • Manual WLC management-IP entry on the AP before its first boot
    • Through CDP advertisements from the neighboring switch

  3. What is the purpose of DHCP option 43 in a wireless deployment where APs live on a different subnet from the WLC?

    • Supplies candidate WLC management IP addresses for CAPWAP discovery across subnets
    • It assigns the wireless client's default gateway
    • Supplies the advertised SSID and WLAN security profile to configure on each AP
    • It configures the encryption type used by the WLAN

  4. When creating a WLAN that must use a shared passphrase rather than 802.1X, which listed security setting provides AES-based encryption?

    • WPA2-PSK with AES/CCMP
    • Open authentication with no encryption
    • WEP
    • MAC filtering only

  5. An administrator creates separate Internal and Guest WLANs on a WLC, each mapped to its own dynamic interface and VLAN. What is the main benefit of this design?

    • Separate Layer 2 and IP boundaries permit distinct guest and internal policies
    • Both WLANs can use the same IP subnet because dynamic interfaces eliminate all address conflicts
    • It removes the need to configure any encryption on either WLAN
    • It doubles the maximum number of clients the WLC can support