ExamGecko
Home Home / Cisco / 300-430

Cisco 300-430 Practice Test - Questions Answers, Page 15

Question list
Search
Search

List of questions

Search

Related questions











An engineer is assembling a PCI report for compliance purposes and must include missed best practices that are related to WLAN controllers. The engineer has access to all WLCs, Cisco MSE, and Cisco Prime Infrastructure. Which method most efficiently displays a summary of inconsistencies?

A.

WLC running-config

A.

WLC running-config

Answers
B.

Cisco Prime Infrastructure monitoring

B.

Cisco Prime Infrastructure monitoring

Answers
C.

Cisco Prime Infrastructure reporting

C.

Cisco Prime Infrastructure reporting

Answers
D.

WLC logs

D.

WLC logs

Answers
Suggested answer: B

An engineer is ensuring that, on the IEEE 802.1X wireless network, clients authenticate using a central repository and local credentials on the Cisco WLC. Which two configuration elements must be completed on the WLAN? (Choose two.)

A.

TACACS+

A.

TACACS+

Answers
B.

MAC authentication

B.

MAC authentication

Answers
C.

local EAP enabled

C.

local EAP enabled

Answers
D.

web authentication

D.

web authentication

Answers
E.

LDAP server

E.

LDAP server

Answers
Suggested answer: A, D

An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?

A.

Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command.

A.

Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command.

Answers
B.

Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.

B.

Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.

Answers
C.

Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.

C.

Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.

Answers
D.

Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.

D.

Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.

Answers
Suggested answer: B

A Cisco 8540 WLC manages Cisco Aironet 4800 Series Aps and send AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperlocation. No AoA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics. How must the network administrator resolve this issue?

A.

Enable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.

A.

Enable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.

Answers
B.

Enable the HALO module on the CMX appliance for the data collection.

B.

Enable the HALO module on the CMX appliance for the data collection.

Answers
C.

Allow port 2003 for AoA packets to flow through between the CMX appliances.

C.

Allow port 2003 for AoA packets to flow through between the CMX appliances.

Answers
D.

Use one Hyperlocation-enabled WLC and CMX for AoA data.

D.

Use one Hyperlocation-enabled WLC and CMX for AoA data.

Answers
Suggested answer: D

An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificate type helps resolve this issue?

A.

Public-Signed Root

A.

Public-Signed Root

Answers
B.

Public-Signed SAN

B.

Public-Signed SAN

Answers
C.

Self-Signed Wildcard

C.

Self-Signed Wildcard

Answers
D.

Self-Signed Standard

D.

Self-Signed Standard

Answers
Suggested answer: C

On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational. Which command set prevents this connection?

A. config terminal

wireless flexconnect profile [profile name]

ethernet-fallback-enable

end

A.

config terminal

wireless flexconnect profile [profile name]

fallback-radio-shut

end

A.

config terminal

wireless flexconnect profile [profile name]

fallback-radio-shut

end

Answers
B.

config terminal

wireless profile flex [profile name]

fallback-radio-shut

end

B.

config terminal

wireless profile flex [profile name]

fallback-radio-shut

end

Answers
C.

config terminal

wireless profile flex [profile name]

ethernet-fallback-enable

end

C.

config terminal

wireless profile flex [profile name]

ethernet-fallback-enable

end

Answers
Suggested answer: C

The security policy mandates that only controller web management traffic is allowed from the IT subnet. In testing, an engineer is trying to connect to a WLAN with Web Authentication for guest users, but the page is timing out on the wireless client browser. What is the cause of the issue?

A.

The implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.

A.

The implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.

Answers
B.

Web Authentication Redirect is not supported with CPU ACLs.

B.

Web Authentication Redirect is not supported with CPU ACLs.

Answers
C.

The DNS server that is configured on the controller is incorrect.

C.

The DNS server that is configured on the controller is incorrect.

Answers
D.

Web Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.

D.

Web Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.

Answers
Suggested answer: A

A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)

A.

The interference is less than or equal to 30% on the 2.4 GHz radio.

A.

The interference is less than or equal to 30% on the 2.4 GHz radio.

Answers
B.

The interference is less than or equal to 50% on the 2.4 GHz radio.

B.

The interference is less than or equal to 50% on the 2.4 GHz radio.

Answers
C.

Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.

C.

Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.

Answers
D.

The interference is less than or equal to 30% on the 5 GHz radio.

D.

The interference is less than or equal to 30% on the 5 GHz radio.

Answers
E.

Cisco DNA Center does not include interference in the AP health score.

E.

Cisco DNA Center does not include interference in the AP health score.

Answers
Suggested answer: C, D

An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features does the engineer configure to accomplish this task?

(Choose two.)

A.

Device Admin Policy Set

A.

Device Admin Policy Set

Answers
B.

User Access Mode: ReadWrite

B.

User Access Mode: ReadWrite

Answers
C.

ACL

C.

ACL

Answers
D.

RADIUS server

D.

RADIUS server

Answers
E.

TACACS server

E.

TACACS server

Answers
Suggested answer: C, E

A network engineer must segregate all IPads on the guest WLAN to a separate VLAN. How does the engineer accomplish this task without using Cisco ISE?

A.

Create a local policy on the WLC.

A.

Create a local policy on the WLC.

Answers
B.

Use 802.1x authentication to profile the devices.

B.

Use 802.1x authentication to profile the devices.

Answers
C.

Use an mDNS profile for the iPad device.

C.

Use an mDNS profile for the iPad device.

Answers
D.

Enable RADIUS DHCP profiling on the WLAN.

D.

Enable RADIUS DHCP profiling on the WLAN.

Answers
Suggested answer: A
Total 216 questions
Go to page: of 22