Cisco 300-430 Practice Test - Questions Answers, Page 18
Question list
List of questions
Related questions
Refer to the exhibit.
An engineer must provide a position of rogue APs on a floor map using Cisco PI 3.0, but no rogue AP options are showing on the left-hand navigation menu under Maps. What is the reason for this omission?
An assurance license is not installed.
The controller operational status background task is disabled.
The Show Detected Interferers feature under the AP option is disabled.
Cisco MSE has not been added to Cisco PI.
WPA2 Enterprise with 802.1X is being used for clients to authenticate to a wireless network through a Cisco ISE server. For security reasons, the network engineer wants to ensure that only PEAP authentication is used. The engineer sent instructions to clients on how to configure the supplicants, but the ISE logs still show users authenticating using EAP-FAST. Which action ensures that access to the network is restricted for these users unless the correct authentication mechanism is configured?
Enable AAA override on the SSID, gather the usernames of these users, and disable the RADIUS accounts until the devices are correctly configured.
Enable AAA override on the SSID and configure an ACL on the WLC that allows access to users with IP addresses from a specific subnet.
Enable AAA override on the SSID and configure an access policy in Cisco ISE that denies access to the list of MACs that have used EAP-FAST.
Enable AAA override on the SSID and configure an access policy in Cisco ISE that allows access only when the EAP authentication method is PEAP.
Refer to the exhibit.
What is the reason that the wireless client cannot get the RUN state?
It has no communication with Cisco ISE.
An authentication error has occurred.
It is not getting the IP address.
Because of central switching, the AP must reach the Cisco ISE directly.
A wireless engineer deployed all remote sites as FlexConnect. The client VLAN assignment on these sites is configured manually mapped by WLAN and using local switching. Dynamic VLAN assignment is provided by the newly deployed
Cisco ISE. Which IETF attribute must be configured on the AAA server to send that VLAN ID?
Tunnel-Medium-Type
Tunnel-Client-Endpoint
Tunnel-Assignment-ID
Tunnel-Private-Group-ID
Refer to the exhibit.
An engineer has deployed the Cisco CMX solution to track and detect the number of users who visit the office each day. The CMX dashboard is not showing any dat a. Which action resolves this issue?
Configure Single Sign-On authentication.
Add the WLCs to CMX.
Copy the exported Maps from CMX server to PI using SCP.
Install an evaluation license to CMX server.
Refer to the exhibit.
A network architect configured the Cisco Catalyst 9800 Series Controller to find out information on client types in the wireless network. RADIUS profiling is enabled so that the controller forwards the information about clients to a Cisco ISE server through vendor-specific RADIUS attributes. The ISE server is not profiling any data from the controller. Which configuration must be added in the blank in the code to accomplish the profiling on the Cisco 9800 Series controller?
aaa accounting identity acct_method start-stop group rad-group
aaa accounting network acct_method start-stop group rad-group
aaa accounting exec acct_method start-stop group rad-group
aaa accounting commands acct_method start-stop group rad-group
Company XYZ recently migrated from AireOS to IOS XE 9800 WLCs. The Internet bandwidth must be limited to 5 Mbps for each guest client as per the global standard. In which configuration on the Cisco Catalyst 9800 WLC must the QoS requirement be added?
table map
policy map
service policy
class map
An engineer needs read/write access to rename access points and add them to the correct AP groups on a wireless controller. Using Cisco ISE TACACS, which custom attributes is the minimum required?
role1=WLAN
role1=WLAN role2=SECURITY
role1=WLAN role2=WIRELESS
role1=WIRELESS
An engineer set up a VoWLAN with QoS on the WLC and a class map on the switch, but the markings are not being preserved correctly in the end-to- end traffic flow. Which two configurations on the wired network ensure end-to-end QoS?
(Choose two.)
trust boundaries
access lists
policy maps
QoS licenses
NetFlow
An engineer is in the process of implementing Fastlane on a wireless network with a Mobility Express AP installed. The network must support voice and video applications for Apple devices. Due to a security concern, all iPhones are updated to version 14.5.432302546. Which QoS profile must the engineer configure on the user WLAN?
Bronze
Best Effort
Silver
Platinum
Question