nerdexam
Cisco

300-370 · Question #22

Refer to the exhibit. Which statement about the join process of the access point is true?

The correct answer is B. The time on the controller is outside of the certificates validity time interval so the join phase. The access point failed to join the controller because the controller's system time was outside the validity period of the AP's certificate, leading to a certificate validation failure during the join process.

Troubleshooting Wireless Security

Question

Refer to the exhibit. Which statement about the join process of the access point is true?

Exhibit

300-370 question #22 exhibit

Options

  • AThe AP failed to join because the self-signed certificate of the AP was not correct on the
  • BThe time on the controller is outside of the certificates validity time interval so the join phase
  • CThe AP moved from this controller to its primary controller.
  • DThe AP successfully joined the controller.

How the community answered

(44 responses)
  • A
    5% (2)
  • B
    59% (26)
  • C
    25% (11)
  • D
    11% (5)

Why each option

The access point failed to join the controller because the controller's system time was outside the validity period of the AP's certificate, leading to a certificate validation failure during the join process.

AThe AP failed to join because the self-signed certificate of the AP was not correct on the

While certificate issues can prevent joins, a time validity issue is a specific type of certificate problem that directly invalidates even a correctly signed certificate, making it a more precise explanation.

BThe time on the controller is outside of the certificates validity time interval so the join phaseCorrect

APs and WLCs rely on certificates for secure communication, and a common reason for join failures is when the system time on either device is outside the certificate's validity period, causing the controller to reject the AP's certificate during the DTLS setup phase.

CThe AP moved from this controller to its primary controller.

The statement that the AP moved to its primary controller implies a successful discovery and join process followed by a re-association, which contradicts an exhibit showing a join failure.

DThe AP successfully joined the controller.

The exhibit, as implied by the problem, indicates a failure in the join process, making the statement that the AP successfully joined incorrect.

Concept tested: AP WLC certificate validation and time synchronization

Source: https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-wlc/70308-ap-notjoin-wlc.html

Topics

#AP join process#Certificate validation#WLC time sync#CAPWAP troubleshooting

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-370 Practice