An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the main campus. The APs on the main campus are configured to use Local mode and the APs in the branches use FlexConnect mode. Which configuration must be applied to the APs for corporate devices on the main campus to be mapped to the local LAN switch on different VLANs according to the VLAN tag ID and WLAN?

Enable Central DHCP Processing.

Enable FlexConnect Local Switching.

Disable VLAN-based Central Switching.

An engineer wants to upgrade the APs in a Cisco FlexConnect group. To accomplish this upgrade, the FlexConnect AP Upgrade setting will be used. One AP of each model with the lowest MAC address in the group must receive the upgrade directly from the controller. Which action accomplishes this direct upgrade?

Allocate the master APs to different groups.

Reboot all APs before the upgrade.

Allocate the master APs to different groups.

Refer to the exhibit. An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogues?

config nmsp notification interval rssi rogues 5

config location notification interval rssi rogues 5

config nmsp notification interval rssi rogues 5

config subscription notification interval rssi rogues 5

config cmx notification interval rssi rogues 5

Refer to the exhibit. An engineer is configuring a Cisco wireless LAN controller and needs wireless multicast to use the 54Mbps rates. Which action meets this requirement?

Set all data rates below 54 Mbps to Disable.

Change the 24 Mpbs to Supported.

Set all data rates below 54 Mbps to Supported.

Change the 54 Mpbs to Mandatory.

Set all data rates below 54 Mbps to Disable.

A network administrator managing a Cisco Catalyst 9800 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC.Which two configurations are required? (Choose two.)

Enable device classification on global wireless settings.

Assign a policy map under global security policy settings.

Add local profiling policy under global security policy settings.

Allow HTTP and DHCP profiling under policy map.

Enable device classification on global wireless settings.

An engineer is planning an image upgrade of the WLC, and hundreds of APs are spread across remote sites with limited WAN bandwidth. The engineer must minimize the WAN utilization for this upgrade. Which approach must be used for the AP image upgrade?

Use the Smart AP image upgrade feature.

Predownload the new code to the APs.

Use the Smart AP image upgrade feature.

Allow the APs to download their code after WLC reboot.

Execute parallel TFTP code upgrade on the APs via SSH.

Refer to the exhibit. An engineer configured a BYOD policy that allows for printing on the WLAN using Bonjour services.However, the engineer cannot get printing to work. The WLC firmware is 8.x. What must be implemented on the controller?

Activate location-specific services.

Configure Secure Web Mode Cipher-Option SSLv2.

Increase the IGMP Query Interval value

A network administrator just completed the basic implementation of Cisco CMX and tries to implement location tracking. The administrator is having trouble establishing connectivity between one of the WLCs through NMSP. What must be configured to establish this connectivity? (Choose two.)

Allow on the firewall port 16113 between Cisco CMX and the WLC.

Add permanent licenses on the Cisco CMX server.

Allow on the firewall port 16113 between Cisco CMX and the WLC.

Reboot Cisco CMX after adding the WLC for the first time.

Add to the WLC the MAC address and SSC key for the Cisco CMX server.

Refer to the exhibit. An engineer must provide a position of rogue APs on a floor map using Cisco PI 3.0, but no rogue AP options are showing on the left-hand navigation menu under Maps. What is the reason for this omission?

An assurance license is not installed.

The controller operational status background task is disabled.

The Show Detected Interferers feature under the AP option is disabled.

Cisco MSE has not been added to Cisco PI.

WPA2 Enterprise with 802.1X is being used for clients to authenticate to a wireless network through a Cisco ISE server. For security reasons, the network engineer wants to ensure that only PEAP authentication is used. The engineer sent instructions to clients on how to configure the supplicants, but the ISE logs still show users authenticating using EAP-FAST. Which action ensures that access to the network is restricted for these users unless the correct authentication mechanism is configured?

Enable AAA override on the SSID and configure an access policy in Cisco ISE that allows access only when the EAP authentication method is PEAP.

Enable AAA override on the SSID, gather the usernames of these users, and disable the RADIUS accounts until the devices are correctly configured.

Enable AAA override on the SSID and configure an ACL on the WLC that allows access to users with IP addresses from a specific subnet.

Enable AAA override on the SSID and configure an access policy in Cisco ISE that denies access to the list of MACs that have used EAP-FAST.

Enable AAA override on the SSID and configure an access policy in Cisco ISE that allows access only when the EAP authentication method is PEAP.

Refer to the exhibit. What is the reason that the wireless client cannot get the RUN state?

It is not getting the IP address.

It has no communication with Cisco ISE.

An authentication error has occurred.

It is not getting the IP address.

Because of central switching, the AP must reach the Cisco ISE directly.

Refer to the exhibit. An engineer has deployed the Cisco CMX solution to track and detect the number of users who visit the office each day. The CMX dashboard is not showing any dat a. Which action resolves this issue?

Configure Single Sign-On authentication.

Copy the exported Maps from CMX server to PI using SCP.

Install an evaluation license to CMX server.

Refer to the exhibit. A network architect configured the Cisco Catalyst 9800 Series Controller to find out information on client types in the wireless network. RADIUS profiling is enabled so that the controller forwards the information about clients to a Cisco ISE server through vendor-specific RADIUS attributes. The ISE server is not profiling any data from the controller. Which configuration must be added in the blank in the code to accomplish the profiling on the Cisco 9800 Series controller?

aaa accounting network acct_method start-stop group rad-group

aaa accounting identity acct_method start-stop group rad-group

aaa accounting network acct_method start-stop group rad-group

aaa accounting exec acct_method start-stop group rad-group

aaa accounting commands acct_method start-stop group rad-group

A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.IP address of the primary serverIP address of the secondary server failover mode to be configured as automatic root password of the secondary server email ID for NOC notifications Enabling high availability fails when these parameters are used. Which action resolves the issue?

Insert the cmxadmin password of the secondary server.

Use IP protocol 4242 for the controller to reach the CMX server.

Place primary and secondary servers in different subnets.

Enable the virtual IP address of the primary server.

Refer to the exhibit. An engineer is troubleshooting a client connectivity issue. The client is in the RUN state, and no traffic is passed after authenticating by using Cisco ISE. Which action resolves the problem?

Configure a different client VLAN after authentication.

Disable the ACL that prevents traffic from being allowed.

Enable rate-limiting to the client.

The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied.However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?

Access to Cisco ISE must be allowed on the pre authentication ACL.

The guest portal must be configured on the CPU ACLs on the Cisco WLC.

Access to Cisco ISE must be allowed on the pre authentication ACL.

Management traffic from the guest network must be configured on the ACL rules. D. Traffic toward the virtual interface must be permitted.

Which two configurations are applied on the WLC to enable multicast, check multicast stream subscriptions, and stream content only to subscribed clients? (Choose two)

Set the IGMP timeout to 180 seconds

Enable 802.3x flow control mode.

Set the AP multicast to 238.255.255.255

Which condition introduce security risk to a BYOD policy?

access to LAN without implementing MDM solution

enterprise-managed MDM platform used for personal devices

access to LAN without implementing MDM solution

enforcement of BYOD access to internet only network

enterprise life-cycle enforcement of personal device refresh

An engineer is adding APs to an existing VolMLAN to allow for location based services. Which option will the primary change be to the network?

increased transmit power on all APs

A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE.The controllers are configured using auto-anchor for the guest network.Which three components must be implemented for the foreign WLC?(Choose three.)

downloadable preauth ACL on ISE

An engineer has configured passive fallback mode for RADIUS with default timer settings. What will occur when the primary RADIUS fails then recovers?

After the inactive time expires the controller will send RADIUS to the primary.

RADIUS requests will be sent to the secondary RADIUS server until the secondary fails to respond.

The controller will immediately revert back after it receives a RADIUS probe from the primary server.

After the inactive time expires the controller will send RADIUS to the primary.

Once RADIUS probe messages determine the primary controller is active the controller will revert back to the primary RADIUS.

Cisco 300-430 Practice Test 5 - Free Online Exam Prep & Questions

An IT administrator deployed an OEAP to the home of a remote user, but the OEAP cannot reach the WLC. Which two configuration settings must be completed before an OEAP is deployed successfully?

(Choose two.)

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-430 Practice Test 5

Question

Cisco 300-430 Practice Tests

Practice Tests