Cisco 300-430 Practice Test - Questions Answers, Page 15
List of questions
Related questions
An engineer is assembling a PCI report for compliance purposes and must include missed best practices that are related to WLAN controllers. The engineer has access to all WLCs, Cisco MSE, and Cisco Prime Infrastructure. Which method most efficiently displays a summary of inconsistencies?
WLC running-config
Cisco Prime Infrastructure monitoring
Cisco Prime Infrastructure reporting
WLC logs
An engineer is ensuring that, on the IEEE 802.1X wireless network, clients authenticate using a central repository and local credentials on the Cisco WLC. Which two configuration elements must be completed on the WLAN? (Choose two.)
TACACS+
MAC authentication
local EAP enabled
web authentication
LDAP server
An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?
Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command.
Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.
Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.
Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.
A Cisco 8540 WLC manages Cisco Aironet 4800 Series Aps and send AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperlocation. No AoA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics. How must the network administrator resolve this issue?
Enable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.
Enable the HALO module on the CMX appliance for the data collection.
Allow port 2003 for AoA packets to flow through between the CMX appliances.
Use one Hyperlocation-enabled WLC and CMX for AoA data.
An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificate type helps resolve this issue?
Public-Signed Root
Public-Signed SAN
Self-Signed Wildcard
Self-Signed Standard
On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational. Which command set prevents this connection?
A. config terminal
wireless flexconnect profile [profile name]
ethernet-fallback-enable
end
config terminal
wireless flexconnect profile [profile name]
fallback-radio-shut
end
config terminal
wireless profile flex [profile name]
fallback-radio-shut
end
config terminal
wireless profile flex [profile name]
ethernet-fallback-enable
end
The security policy mandates that only controller web management traffic is allowed from the IT subnet. In testing, an engineer is trying to connect to a WLAN with Web Authentication for guest users, but the page is timing out on the wireless client browser. What is the cause of the issue?
The implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.
Web Authentication Redirect is not supported with CPU ACLs.
The DNS server that is configured on the controller is incorrect.
Web Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.
A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)
The interference is less than or equal to 30% on the 2.4 GHz radio.
The interference is less than or equal to 50% on the 2.4 GHz radio.
Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.
The interference is less than or equal to 30% on the 5 GHz radio.
Cisco DNA Center does not include interference in the AP health score.
An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features does the engineer configure to accomplish this task?
(Choose two.)
Device Admin Policy Set
User Access Mode: ReadWrite
ACL
RADIUS server
TACACS server
A network engineer must segregate all IPads on the guest WLAN to a separate VLAN. How does the engineer accomplish this task without using Cisco ISE?
Create a local policy on the WLC.
Use 802.1x authentication to profile the devices.
Use an mDNS profile for the iPad device.
Enable RADIUS DHCP profiling on the WLAN.
Question