300-430 practice questions 1–10

1. Question 1 · 294 in bank

   On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?

   • AISE NAC is enabled
   • B802.11r Fast Transition is enabled
   • CClient Exclusion is enabled
   • DFlexConnect Local Auth is disabled

   Show answer

   Answer: A

   Explanation

   As per cisco documentation All 802.11 authentication and association processing occurs regardless of which operational mode the AP is in. When in connected mode, the FlexConnect AP forwards all association/authentication information to the WLC. When in standalone mode, the AP cannot notify the WLC of such events, which is why WLANs that make use of central authentication/switching methods are unavailable.

   Source: Adapted from community discussion — poy4242

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 2 · 294 in bank

   Select 2

   An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

   • AStatic WEP + 802.1X
   • BWPA+WPA2
   • CStatic WEP
   • DCKIP
   • E802.1X

   Show answer

   Answer: BE

   Explanation

   nevertheless B+C are correct answers. "When setting the security setting in the WLAN, there are specific elements that are not supported on the 600 series. For Layer 2 Security, only these options are supported for the Cisco Aironet 600 Series OEAP: None WPA+WPA2 Static WEP can also be used but not for .11n data rates." https://www.cisco.com/c/en/us/support/docs/wireless/aironet-600-series-officeextend-access-point/113003-office-extend-config-00.html#wlan-settings

   Source: Adapted from community discussion — Igur

   References

   • Cisco documentation

   Next question

3. Question 3 · 294 in bank

   A customer wants to allow employees to easily onboard their personal devices to the wireless network. The visitors also must be able to connect to the same network without the need to engage with anyone from the reception desk. Which process must be configured on Cisco ISE to support this requirement?

   • AMAC authentication bypass
   • Bnative supplicant provisioning
   • Clocal web auth
   • Dself-registration guest portal

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

4. Question 4 · 294 in bank

   A customer has a distributed wireless deployment model where the WLCs are located in the data centers. Because the file servers are located in the data center, the traffic from the corporate WLAN `Corp-401266017` must go through the controllers, where the guest WLAN `Guest-19283746` traffic must use the local Internet line installed in each office. Which configuration will accomplish this task?

   • ADisable Local Switching for the corporate and guest WLAN.
   • BDisable Local Switching for the corporate WLAN and enable it for the guest WLAN.
   • CEnable Local Switching for the corporate and guest WLAN.
   • DEnable Local Switching for the corporate WLAN and disable it for the guest WLAN.

   Show answer

   Answer: B

   Explanation

   B seems to meet the state requirement of sending Corp traffic to the data centers via the WLC and allowing guest traffic to traverse to the internet locally.

   Source: Adapted from community discussion — daeman

   Next question

5. Question 5 · 294 in bank

   Select 2

   A network engineer is implementing BYOD on a wireless network. Based on the customer requirements, a dual SSID approach must be taken. Which two advanced WLAN configurations must be performed? (Choose two.)

   • ASet NAC State to Radius NAC.
   • BSet Allow AAA Override to Enabled.
   • CSet DHCP Addr. Assignment to Required.
   • DSelect DHCP Profiling.
   • ESelect Enable Session Timeout.

   Show answer

   Answer: AB

   Next question

6. Question 6 · 294 in bank

   Select 3

   Which three characteristics of a rogue AP pose a high security risk? (Choose three.)

   • Aopen authentication
   • Bhigh RSSI
   • Cforeign SSID
   • Daccepts clients
   • Elow RSSI
   • Fdistant location

   Show answer

   Answer: ABD

   Explanation

   A - Open Authentication means that the clients will not go through security checks, including the clients authenticating the system. B - High RSSI, it means that the Rogue is close enough for your clients to connect to it, it also may indicate that it is in your building and not a neighbor's AP D - If your corporate clients are joining an unknown AP that is a big problem, especially if they don't realize it. Not C - Foreign SSIDs are an indication that they are not your APs; if they use the same SSID that is a problem, as they are mimicking your network to entrap users. Not E - low RSSI means that they are probably outside your building and clients may not even detect them or be able to join consistantly Not F - Distant location is the same as low RSSI, users might not even detect or be able to join

   Source: Adapted from community discussion — NoWiresIncluded

   References

   • Cisco documentation

   Next question

7. Question 7 · 294 in bank

   Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

   • A1800s
   • B3600e
   • C3800s
   • D4800i

   Show answer

   Answer: A

   References

   • Cisco documentation
   • Cisco documentation

   Next question

8. Question 8 · 294 in bank

   Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

   • ACisco Hyperlocation Module
   • BWireless Intrusion Prevention System
   • CCisco Connected Mobile Experiences
   • DCisco Mobility Services Engine

   Show answer

   Answer: C

   Explanation

   C is for sure the correct answer: Cisco Connected Mobile Experiences (CMX) is a smart Wi-Fi solution that uses the Cisco wireless infrastructure to provide location services and location analytics for consumers' mobile devices.

   Source: Adapted from community discussion — NightmareCreature

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 9 · 294 in bank

   Select 2

   The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

   • ACSV
   • BPDF
   • CXLS
   • DDOC
   • Eplain text

   Show answer

   Answer: AB

   References

   • Cisco documentation

   Next question

10. Question 10 · 294 in bank

    A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

    • ACleanAir reports on Cisco Prime Infrastructure
    • BPerformance reports on Cisco Prime Infrastructure
    • CInterference Devices reports on Cisco Wireless LAN Controller
    • DAir Quality reports on Cisco Wireless LAN Controller

    Show answer

    Answer: A

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 1. 294 questions available.