What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

EAP-FAST with CAPWAP DTLS + port authentication

EAP-PEAP with 802.1x port authentication

EAP-TLS with 802.1x port authentication

EAP-FAST with CAPWAP DTLS + port authentication

An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9. Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes?(Choose two.)

Permit 0.0.0.0 0.0.0.0 UDP DNS any

Permit 0.0.0.0 0.0.0.0 UDP any DNS

Permit 0.0.0.0 0.0.0.0 any DNS any

Permit 0.0.0.0 0.0.0.0 UDP DNS any

Permit 0.0.0.0 0.0.0.0 UDP any DNS

Permit 0.0.0.0 0.0.0.0 UDP any any

CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

Allow HTTPs traffic only before authentication and block all other traffic.

Allow all the traffic before authentication and intercept HTTP only.

Allow HTTP traffic only before authentication and block all the traffic.

Allow all the traffic before authentication and intercept HTTPS only.

Allow HTTPs traffic only before authentication and block all other traffic.

Allow all the traffic before authentication and intercept HTTP only.

Allow SNMP traffic only before authentication and block all the traffic.

Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down.Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

authentication-local/switch-local

authentication-central/switch-central

Refer to the exhibit. An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP-PEAP cannot connect to the network. Based on the local EAP debug on the controller provided, why is the client unable to connect?

The client is failing to accept certificate.

The Cisco WLC is configured for the incorrect date.

The Cisco WLC local EAP profile is misconfigured.

The user is using invalid credentials.

Refer to the exhibit. The security team has implemented ISE as an AAA solution for the wireless network. The wireless engineer notices that though clients are able to authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?

Use ASCII for the key input format.

A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

There is an invalid 802.1X authentication policy on the authenticator.

There is an IEEE invalid 802.1X authentication policy on the authentication server.

The user Active Directory account is locked out after several failed attempts.

There is an invalid 802.1X authentication policy on the authenticator.

The laptop has not received a valid IP address from the wireless controller.

A wireless engineer is configuring LWA using ISE. The customer is a startup company and requested the wireless users to authenticate against a directory, but LDAP is unavailable. Which solution should be proposed in order to have the same security and user experience?

Use the internal database of the RADIUS server.

Use a preshared key on the corporate WLAN.

An engineer has implemented 802.1x authentication on the wireless network utilizing the internal database of a RADIUS server. Some clients reported that they are unable to connect. After troubleshooting, it is found that PEAP authentication is failing. A debug showed the server is sending an Access- Reject message. Which action must be taken to resolve authentication?

Disable the server certificate to be validated on the client.

Use the user password that is configured on the server.

Disable the server certificate to be validated on the client.

Update the client certificate to match the user account.

Replace the client certificates from the CA with the server certificate.

A customer has a distributed wireless deployment model where the WLCs are located in the data centers. Because the file servers are located in the data center, the traffic from the corporate WLAN “Corp-401266017” must go through the controllers, where the guest WLAN “Guest-19283746” traffic must use the local Internet line installed in each office. Which configuration will accomplish this task?

Enable Local Switching for the corporate WLAN and disable it for the guest WLAN.

Disable Local Switching for the corporate and guest WLAN.

Disable Local Switching for the corporate WLAN and enable it for the guest WLAN.

Enable Local Switching for the corporate and guest WLAN.

Enable Local Switching for the corporate WLAN and disable it for the guest WLAN.

A network engineer is implementing BYOD on a wireless network. Based on the customer requirements, a dual SSID approach must be taken. Which two advanced WLAN configurations must be performed? (Choose two.)

Set Allow AAA Override to Enabled.

Set DHCP Addr. Assignment to Required.

Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

Wireless Intrusion Prevention System

Cisco Connected Mobile Experiences

A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

CleanAir reports on Cisco Prime Infrastructure

Performance reports on Cisco Prime Infrastructure

Interference Devices reports on Cisco Wireless LAN Controller

Air Quality reports on Cisco Wireless LAN Controller

An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN. Which output is produced when the Adaptive wIPS Top 10 AP report is run?

last 10 wIPS events from monitor mode APs

last 10 wIPS events from sniffer mode APs

last of 10 sniffer mode APs with the most wIPS events

last of 10 monitor mode APs with the most wIPS events

Refer to the exhibit. An engineer tries to manage the rogues on the Cisco WLC. Based on the configuration, which AP is marked as malicious by the controller?

rogue AP with SSID admin seen for 3000 seconds and heard at -70dBm

rogue AP with SSID admin seen for 4000 seconds and heard at -70dBm

rogue AP with SSID admin seen for 3000 seconds and heard at -60dBm

rogue AP with SSID admin seen for 4000 seconds and heard at -60dBm

rogue AP with SSID admin seen for 3000 seconds and heard at -70dBm

Which devices can be tracked with the Cisco Context Aware Services?

Cisco certified wireless devices

An engineer must create an account to log in to the CLI of an access point for troubleshooting. Which configuration on the WLC will accomplish this?

Global Configuration Enable Password

After receiving an alert about a rogue AP, a network engineer logs into Cisco Prime Infrastructure and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines that the rogue device is actually inside the campus.The engineer determines that the rogue is a security threat and decides to stop if from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?

Update the status of the rogue in Cisco Prime Infrastructure to contained.

Go to the location where the rogue device is indicated to be and disable the power.

Create an SSID similar to the rogue to disable clients from connecting to it.

Update the status of the rogue in Cisco Prime Infrastructure to contained.

Classify the rogue as malicious in Cisco Prime Infrastructure.

Cisco 300-430 Practice Test 3 - Free Online Exam Prep & Questions

Question 1 / 40

A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments. Which solution must the engineer choose?

Configure a second WLC to support half of the APs in the deployment.

Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.

Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.

Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.

Comment (0)

Cisco 300-430 Practice Test 3

Question

Cisco 300-430 Practice Tests

Practice Tests