Cisco
300-365 · Question #98
300-365 Question #98: Real Exam Question with Answer & Explanation
The correct answer is D: FlexConnect group. CCKM requires a FlexConnect group to synchronize PMK cache across APs at the remote site, enabling fast secure roaming without full 802.1X re-authentication.
Question
Clients at a remote FlexConnect site with ID 338789750 are experiencing poor roaming despite the fact that Cisco Centralized Key Management is enabled on the SSID. Which FlexConnect feature must be configured to resolve this issue?
Options
- Alocal authentication
- Bcentral switching
- Clearn client IP address
- DFlexConnect group
Explanation
CCKM requires a FlexConnect group to synchronize PMK cache across APs at the remote site, enabling fast secure roaming without full 802.1X re-authentication.
Common mistakes.
- A. Local authentication controls where 802.1X EAP processing occurs but does not provide the shared PMK cache that CCKM requires to perform fast roaming between APs.
- B. Central switching determines whether client data traffic is forwarded locally or tunneled back to the WLC via CAPWAP, and has no effect on the key caching mechanism used during a roam event.
- C. Learn client IP address allows FlexConnect APs to track client IP assignments for local routing decisions, but it is unrelated to the security key distribution that CCKM depends on.
Concept tested. FlexConnect group enabling CCKM fast secure roaming
Reference. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/flexconnect.html
Community Discussion
No community discussion yet for this question.