nerdexam
Cisco

350-401 · Question #1045

Refer to the exhibit. An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending t

The correct answer is A. Enable AAA Override.. Enabling AAA Override on the Wireless LAN Controller (WLC) allows it to apply dynamic mDNS roles pushed by Cisco ISE to users.

Submitted by haruto_sh· Mar 6, 2026Security

Question

Refer to the exhibit. An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending the correct values, but name resolution is not functioning as expected. Which WLC configuration change resolves the issue?

Exhibits

350-401 question #1045 exhibit 1
350-401 question #1045 exhibit 2

Options

  • AEnable AAA Override.
  • BEnable Aironet IE.
  • CSet MFP client protection to Required.
  • DChange NAC state to ISE NAC.

How the community answered

(36 responses)
  • A
    56% (20)
  • B
    14% (5)
  • C
    25% (9)
  • D
    6% (2)

Why each option

Enabling AAA Override on the Wireless LAN Controller (WLC) allows it to apply dynamic mDNS roles pushed by Cisco ISE to users.

AEnable AAA Override.Correct

When Cisco ISE dynamically assigns policies, such as mDNS roles, to users, the Wireless LAN Controller (WLC) must have 'AAA Override' enabled on the WLAN. This feature permits the WLC to accept and enforce attributes (like mDNS profiles) pushed from the AAA server (ISE) after successful authentication and authorization.

BEnable Aironet IE.

Aironet IE (Information Element) relates to Cisco's proprietary wireless extensions for features like load balancing or rogue AP detection, not dynamic policy assignment via ISE.

CSet MFP client protection to Required.

MFP (Management Frame Protection) client protection secures management frames, which is a security feature unrelated to mDNS resolution or dynamic policy application.

DChange NAC state to ISE NAC.

Changing NAC state to ISE NAC configures the WLC to use ISE for Network Access Control, which is a prerequisite, but 'AAA Override' is the specific setting allowing the WLC to apply dynamic attributes from ISE.

Concept tested: WLC AAA Override for ISE policies

Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/m_aaa_override.html

Topics

#Cisco WLC#Cisco ISE#mDNS#AAA Override

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice