The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?

RADIUS server overwrite interface

Refer to the exhibit. A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that they are unable to connect. During troubleshooting, the engineer notices that the authentication requests are being dropped. Which action will resolve the issue?

Configure the shared-secret keys on the controller and the RADIUS server.

Allow connectivity from the wireless controller to the IP of the RADIUS server.

Provide a valid client username that has been configured on the RADIUS server.

Configure the shared-secret keys on the controller and the RADIUS server.

Authenticate the client using the same EAP type that has been set up on the RADIUS server.

Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop- down list?

It must be Inbound because traffic goes to the WLC.

Packet direction has no significance; it is always Any.

It must be Outbound because it is traffic that is generated from the WLC.

To have the complete list of options, the CPU ACL must be created only by the CLI.

An engineer is implementing RADIUS to restrict administrative control to the network with the WLC management IP address of 192.168.1.10 and an AP subnet of 192.168.2.0/24. Which entry does the engineer define in the RADIUS server?

administrative access defined on the WLC and the network range 192.168.2.0/255.255.254.0

NAS entry of the virtual interface and the network range 192.168.2.0/255.255.255.0

shared secret defined on the WLC and the network range 192.168.1.0/255.255.254.0

WLC roles for commands and the network range 192.168.1.0/255.255.255.0

A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location. Which Cisco FlexConnect configuration must be used?

local authentication and central switching

central authentication and local switching

central authentication and central switching

local authentication and local switching

local authentication and central switching

Refer to the exhibit. An engineer must restrict some subnets to have access to the WLC. When the CPU ACL function is enabled, no ACLs in the drop-down list are seen. What is the cause of the problem?

No ACLs have been created under the Access Control List tab.

The ACL does not have a rule that is specified to the Management interface.

No ACLs have been created under the Access Control List tab.

When the ACL is created, it must be specified that it is a CPU ACL.

This configuration must be performed through the CLI and not though the web GUI.

An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

Cisco Centralized Key Management

Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration?(Choose three.)

Configure WLAN to authenticate using ISE.

Configure the access point with the root certificate from ISE.

Configure WGB as a network device in ISE.

Configure the certificate, WLAN, and radio interface on WGB.

Configure the certificate on the WLC.

Configure WLAN to authenticate using ISE.

Configure the access point with the root certificate from ISE.

Configure WGB as a network device in ISE.

Configure a policy on ISE to allow devices to connect that validate the certificate.

A network administrator managing a Cisco Catalyst 9800-80 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC. Which two configurations are required? (Choose two.)

Assign a policy map under global security policy settings.

Enable device classification on global wireless settings.

Assign a policy map under global security policy settings.

Add local profiling policy under global security policy settings.

Allow HTTP and DHCP profiling under policy map.

Enable device classification on global wireless settings.

An engineer is assembling a PCI report for compliance purposes and must include missed best practices that are related to WLAN controllers. The engineer has access to all WLCs, Cisco MSE, and Cisco Prime Infrastructure. Which method most efficiently displays a summary of inconsistencies?

Cisco Prime Infrastructure monitoring

Cisco Prime Infrastructure reporting

An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?

Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.

Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command.

Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.

Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.

Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.

A Cisco 8540 WLC manages Cisco Aironet 4800 Series Aps and send AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperlocation. No AoA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics. How must the network administrator resolve this issue?

Use one Hyperlocation-enabled WLC and CMX for AoA data.

Enable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.

Enable the HALO module on the CMX appliance for the data collection.

Allow port 2003 for AoA packets to flow through between the CMX appliances.

Use one Hyperlocation-enabled WLC and CMX for AoA data.

On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational. Which command set prevents this connection?A. config terminalwireless flexconnect profile [profile name]ethernet-fallback-enableend

config terminalwireless profile flex [profile name]ethernet-fallback-enableend

config terminalwireless flexconnect profile [profile name]fallback-radio-shutend

config terminalwireless profile flex [profile name]fallback-radio-shutend

config terminalwireless profile flex [profile name]ethernet-fallback-enableend

The security policy mandates that only controller web management traffic is allowed from the IT subnet. In testing, an engineer is trying to connect to a WLAN with Web Authentication for guest users, but the page is timing out on the wireless client browser. What is the cause of the issue?

The implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.

Web Authentication Redirect is not supported with CPU ACLs.

The DNS server that is configured on the controller is incorrect.

Web Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.

A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)

Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.

The interference is less than or equal to 30% on the 5 GHz radio.

The interference is less than or equal to 30% on the 2.4 GHz radio.

The interference is less than or equal to 50% on the 2.4 GHz radio.

Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.

The interference is less than or equal to 30% on the 5 GHz radio.

Cisco DNA Center does not include interference in the AP health score.

A network engineer must segregate all IPads on the guest WLAN to a separate VLAN. How does the engineer accomplish this task without using Cisco ISE?

Create a local policy on the WLC.

Use 802.1x authentication to profile the devices.

Use an mDNS profile for the iPad device.

Enable RADIUS DHCP profiling on the WLAN.

An engineer added more APs to newly renovated areas in building. The engineer is now receiving Out-of-Sync alarms on Cisco Prime Infrastructure. Which two actions resolve this issue? (Choose two.)

Add new APs to maps on Cisco Prime Infrastructure.

Manually synchronize from Cisco Prime Infrastructure.

Enable automatic synchronization on Cisco Prime Infrastructure.

Enable automatic synchronization on MSE.

Add new APs to maps on Cisco Prime Infrastructure.

Refer to the exhibit. An engineer implemented the CPU ACL on your Cisco 5520 Series Wireless LAN Controller, and the controller is no longer manageable via the network. What must be changes on this CPU ACL to enable it to manage the controller again?

Permit statements must be added to the top of the ACL in both directions, which specify the network to be managed from and the virtual interface of the controller.

Line 1 must be set to a destination port of HTTP.

Permit statements must be added to the top of the ACL, which specify the network to be managed from.

Line 1 must be set to the inbound direction.

When configuring a large, high-availability wireless network, which change to a mobility group creates less load on the controllers and maintains the same mobility messages?

Configure mobility group multicast messaging.

Remove unnecessary controllers from the mobility group.

Configure the controllers into separate RF groups from the mobility groups.

Separate the controllers into different mobility groups per controller.

A healthcare organization notices many rogue APs and is concerned about a honeypot attack. Which configuration must a wireless network engineer perform in Cisco Prime Infrastructure to prevent these attacks most efficiently upon detection?

Set the manual containment level to 4 and select the Ad Hoc Rogue AP containment option.

Set the auto containment level to 0 and select the Using Our SSID containment option.

Set the manual containment level to 4 and select the Ad Hoc Rogue AP containment option.

Set the auto containment level to 0 and select the Ad Hoc Rogue AP containment option.

Set the auto containment level to 4 and select the Using Our SSID containment option.

An engineer is configuring a new wireless network for guest access. The Facebook page of the company must be viewed by the guest users before they get access to the network. A Cisco MSE is used as a wireless component. Which URL must be used in the configuration as the external redirection URL?

http://<MSE>:8084/fbwifi/forward

http://<MSE>:8083/visitor/login.do

http://<MSE>:8083/fbwifi/forward

http://<MSE>:8084/visitor/login.do

http://<MSE>:8084/fbwifi/forward

Cisco 300-430 Practice Test 4 - Free Online Exam Prep & Questions

A wireless engineer must configure access control on a WLC using a TACACS+ server for a company that is implementing centralized authentication on network devices. Which role value must be configured under the shell profile on the TACACS+ server for a user with read-only permissions?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-430 Practice Test 4

Question

Cisco 300-430 Practice Tests

Practice Tests