300-430 Online Practice Questions and Answers

DRAG DROP

The network management team in a large shopping center has detected numerous rogue APs from local coffee shops that are broadcasting SSIDs. All of these SSIDs have names starting with ATC (for example, ATC302, ATC011, and ATC566). A wireless network engineer must appropriately classify these SSIDs using the Rogue Rules feature. Drag and drop the options from the left onto the categories in which they must be used on the right. Not all options are used.

Select and Place:

A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the

Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

A. There is an IEEE invalid 802.1X authentication policy on the authentication server.

B. The user Active Directory account is locked out after several failed attempts.

C. There is an invalid 802.1X authentication policy on the authenticator.

D. The laptop has not received a valid IP address from the wireless controller.

Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure and be able to track the location of clients/rogues on maps? (Choose two.)

A. Synchronize access points with the MSE.

B. Add the MSE to Cisco Prime Infrastructure using the CLI credentials.

C. Add the MSE to Cisco Prime Infrastructure using the Cisco Prime Infrastructure communication credentials configured during set up.

D. Apply a valid license for Wireless Intrusion Prevention System.

E. Apply a valid license for location tracking.

An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?

A. split tunneling

B. SE-connect

C. FlexConnect

D. AP failover priority

The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?

A. RADIUS server overwrite interface

B. AAA override

C. WLAN local policy

D. custom AVC profile

A customer wants the APs in the CEO's office to have different usernames and passwords for administrative support than the other APs deployed throughout the facility. Which feature must be enabled on the WLC and APs to achieve this goal?

A. local management users

B. HTTPS access

C. 802.1X supplicant credentials

D. override global credentials

You enter the command or a Cisco Catalyst 3850 Series Switch that runs Cisco ISO XE. What does the command do?

A. It defines the user identity or the device identity to be validated by the RADIUS server.

B. It captures information on the length of the authorized session, as well as the bandwidth usage of the client.

C. It defines the RADIUS server used to track which sessions are still active.

D. It defines the level of access of the user or the device.

An engineer is setting up a new unique NAD on a Cisco ISE.

Which two parameters must be configured? (Choose two.)

A. device host name

B. device password

C. RADIUS fallback

D. device IP address

E. RADIUS shared secret

Refer to the exhibit.

An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogues?

A. config location notification interval rssi rogues 5

B. config nmsp notification interval rssi rogues 5

C. config subscription notification interval rssi rogues 5

D. config cmx notification interval rssi rogues 5

An engineer has many different WLANs on a WLC but does not want to broadcast them to every AP in the building. Which group must be configured on the WLC to allow different WLANs on the different APs without creating new interfaces?

A. ACL

B. interface group

C. mobility group

D. AP group

A wireless engineer must configure access control on a WLC using a TACAS+ server for a company that is implementing centralized authentication on network devices. Which role must be configured under the shell profile on the TACAS+ server for a user with ready-only permissions?

A. MANAGEMENT

B. MONITOR

C. ADMIN

D. READ

An engineer is setting up a WLAN to work with a Cisco ISE as the AAA server. The company policy requires that all users be denied access to any resources until they pass the validation. Which component must be configured to achieve this stipulation?

A. AAA override

B. preauthentication ACL

C. WPA2 passkey

D. CPU ACL

A network engineer needs to configure multicast in the network. The implementation will use multiple multicast groups and PIM routers. Which address provides automatic discovery of the best RP for each multicast group?

A. 224.0.0.13

B. 224.0.0.14

C. 224.0.1.39

D. 224.0.1.40

An IT administrator is managing a wireless network in which most devices are Apple iOS. A QoS issue must be addressed on the WLANs. Which configuration must be performed?

A. Enable Fastlane globally under Wireless > Access Points > Global Configuration.

B. Create a new AVC Profile named AUTOQOS-AVC-PROFILE and apply to all WLANs.

C. Enable Fastlane under each WLAN setting.

D. Enable WMM TSPEC/TCLAS negotiation under Wireless > Advanced.

A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location. Which Cisco FlexConnect configuration must be used?

A. central authentication and local switching

B. central authentication and central switching

C. local authentication and local switching

D. local authentication and central switching