When implementing a web authentication-based WLAN, which two of these statements are correct? (Choose two.)

• A. When using the Cisco WLC as a web auth server, wireless clients will never be able to validate the Self Signed Certificate (SCC) so a Locally Significant Certificate (LSC) must be used.
• B. When using an external web authentication server, a pre-auth ACL is required for the WLC 5500.
• C. You need to configure DNS resolution for the IP address of the Cisco WLC virtual interface.
• D. If you are using an external web server for the login portal, wireless clients may be required to trust two certificates: one from the external web server and one from the Cisco WLC.

You calculate that your AP should transmit at 6 dBm to provide appropriate wireless coverage, while still complying with EIRP, with the antennas that you selected. However, the AP is transmitting at 1 dBm only, even though it is on power level 1. How can you increase the transmitting power?

• A. Disable auto-RF.
• B. Activate 802.11n legacy beamforming on the Cisco WLC.
• C. Switch to a custom Tx power level and increase the power level.
• D. Decrease the antenna gain that is configured on the Cisco WLC.
• E. Choose appropriate antennas types.

Which three statements about workgroup bridges in a unified environment are true? (Choose three)

• A. If your AP has two radios, then you can configure both for workgroup bridge mode.
• B. Web authentication is not supported for use with workgroup bridges.
• C. VLANs are supported for use with workgroup bridges.
• D. Wired clients that connect to a workgroup bridge inherit the QoS and AAA override attributes of the bridge.
• E. The lightweight feature Cisco CKM is supported for use with a workgroup bridge.
• F. If a workgroup bridge associates to a web-authentication WLAN, then the bridge is added to the exclusion list and all the workgroup bridge wired clients are deleted.

You are tasked to convert autonomous AP static WEP users to Cisco Unified WLC 802.1X EAP users using their current Microsoft Active Directory accounts using a single WLAN. You need to preserve the wired VLAN that these users were connecting on. Which of the below procedures provides the best solution for this conversion?

• A. Configure the access point groups feature for two groups and map the WLAN to the correct
  interfaces for each group.
  Set the access points to the correct access point group for where these converted WEP
  users will be located.
  Connecting users will be placed on the correct Layer 2 VLAN.
• B. Configure the WLAN for the appropriate Layer 2 security settings and ensure that AAA
  override is configured.
  Configure an external RADIUS server to authenticate each user against the Microsoft
  Active Directory.
  Configure the external RADIUS server to pass down IETF RADIUS attributes 64, 65, and
  81 containing the appropriate Layer 2 VLAN to the users.
• C. Configure the WLAN for Layer 2 security and use the WLC local RADIUS for
  authentication.
  Configure the WLC local RADIUS server to authenticate each user against the Microsoft
  Active Directory.
  Configure the WLC local RADIUS server to pass down IETF RADIUS attributes 64, 65, and
  81 containing the appropriate Layer 2 VLAN to the users.
• D. Configure two WLANs, one WEP, and one with EAP, but only broadcast the EAP WLAN so
  that only one SSID is visible.
  Configure each WLAN interface mapping to the correct and corresponding dynamic
  interface. Then, use the WLC local RADIUS to authenticate users against the current
  Microsoft Active Directory.
  Configure the WLC connecting trunk port to allow the appropriate user wired Layer 2
  VLAN.
  Configure the interface group feature to contain all of the dynamic interfaces needed.
  Configure the single WLAN to use the interface group and authenticate to an external
  RADIUS server configured to check the users against the Microsoft Active Directory.
  The authenticated users will be placed on the correct VLANs dynamically.

You are designing a wireless guest access solution to be used on a central campus and remote sites, where APs are configured in FlexConnect mode. The guest Internet access service is offered by the domain controller. You want to use the guest anchor feature on the Cisco WLC. Which Cisco WLC type should you consider deploying?

• A. Any Cisco WLC.
• B. A Cisco 2504 WLC, running Release 7.0.116.0, because guest access is a best-effort service and does not need to support large loads.
• C. A Cisco WLC by itself is not sufficient to support guest anchor and captive portal services.
• D. A Cisco 5508 WLC, running Release 7.0.116.0, deployed as a guest anchor WL