Exam 300-430 topic 1 question 16 discussion

D. Allow UDP ports 5246 and UDP port 5247 on the firewall. These ports are used for communication between the OEAP and the WLC (Wireless LAN Controller). Allowing them ensures the OEAP can establish a connection to the controller. E. Allow UDP ports 12222 and 12223 on the firewall. These ports are also used for CAPWAP (Control and Provisioning of Wireless Access Points) communication between the OEAP and the WLC, enabling the AP to join the controller.

Going with B. and D. on this one but I agree with anagy11 comment that the wording "on the firewall" is confusing. D. and E. would be the only 2 answers that you make sense from that perspective but OEAP does not require ports 12222 and 12223 so E. makes no sense in that regard. Terrible question wording. Corporate Firewall The Wireless LAN Controller should be placed in DMZ and the corporate Firewall must allow CAPWAP Control and CAPWAP Data traffic through the Firewall to the Wireless LAN Controller.The general configuration on the firewall is to allow CAPWAP control and CAPWAP management port numbers through the firewall. Note The UDP 5246 and 5247 ports need to be opened on the firewall for communication between the Wireless LAN controller and the Cisco OfficeExtend Access Point 1810.

Strange question wording... "Which two configurations must be performed on the firewall to allow the AP to join the controller?" on the firewall...

B. Enable NAT Address on the 5520 with an Internet-routable IP address. & D. Allow UDP ports 5246 and UDP port 5247 on the firewall. is correct https://mrncciew.com/2013/03/12/how-does-oeap-work/

should be DE?