300-430 practice questions 111–120

1. Question 111 · 294 in bank

   An engineer must implement intrusion protection on the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which AP mode and submode must be implemented?

   • AAP mode: local, AP submode: none
   • BAP mode: monitor, AP submode: WIPS
   • CAP mode: monitor, AP submode: none
   • DAP mode: local, AP submode: WIPS

   Show answer

   Answer: D

   Explanation

   https://www.cisco.com/c/en/us/td/docs/wireless/technology/wips/deployment/guide/WiPS_deployment_guide.html On-Channel vs. Off-Channel Scanning per wIPS Mode The figure below explains the radio’s behavior. When a radio is on its serving channel it is considered “on-channel”, when the radio is scanning other channels, it is considered “off-channel”. An AP in local mode is mostly “on-channel”, making it difficult to detect attackers “off-channel”. A monitor mode AP is always “off-channel”, but cannot server clients, the WSM module provides a great combination of both.

   Source: Adapted from community discussion — Vlad_Is_Love_ua

   References

   • Cisco documentation

   Next question

2. Question 112 · 294 in bank

   A network engineer is deploying 8865 IP phones with wireless clients connected to them. In order to apply the appropriate QoS, the IP voice traffic needs to be distinguished from client data traffic. Which switch configuration feature must be enabled?

   • AVoice VLAN
   • BQBSS
   • CWME
   • DQoS routing

   Show answer

   Answer: A

   Next question

3. Question 113 · 294 in bank

   An engineer enabled Cisco Centralized Key Management (CKM) on a WLAN with local and FlexConnect mode APs. The engineer notices that Cisco CKM is not working for the FlexConnect APs when looking at roaming, but it works for local mode APs. Which change must be made on the controller for the configuration to work properly?

   • AConfigure VLAN-based central switching.
   • BEnable Cisco FlexConnect Central Assoc.
   • CUse local authentication.
   • DPlace APs in a Cisco FlexConnect group.

   Show answer

   Answer: D

   Explanation

   FlexConnect groups are responsible for sharing services between APs in the group. For example, the following services are shared within a FlexConnect group: Cisco Centralized Key Management (CCKM) / Opportunistic Key Caching (OKC) fast roaming keys Local/backup RADIUS server keys Local EAP (Extensible Authentication Protocol) authentication Smart Image upgrade FlexConnect AVC (Application Visibility and Control) AAA-Override for local switching

   Source: Adapted from community discussion — Vlad_Is_Love_ua

   Next question

4. Question 114 · 294 in bank

   An engineer is trying to log in to their lightweight access point joined to a WLC that does not have AP credentials defined. Which credentials does the engineer use?

   • Aadmin/Cisco123
   • BCisco/Cisco
   • CTACACS credentials
   • DAP Global Configuration configured credentials

   Show answer

   Answer: D

   Explanation

   Looks like D is better Option B (Cisco/Cisco) is not the correct answer because it is a common default username and password combination that is typically used for initial setup or testing purposes. However, in a production environment, it is recommended to use more secure and unique credentials.

   Source: Adapted from community discussion — [Removed]

   Next question

5. Question 115 · 294 in bank

   A network engineer is configuring a Cisco AireOS 8.2 WLC, Cisco MSE, and Cisco PI with Cisco 3700 Series APs and Cisco Hyperlocation modules. The engineer configures and enables a WLAN with Hyperlocation. During testing, the engineer notices that the Hyperlocation module cannot be seen on the WLC. Which action resolves the issue?

   • AConfigure the APs to be in monitor mode.
   • BEnable Hyperlocation in the Global Configuration settings of the WLC.
   • CAdd the key hash that is used to add the Hyperlocation module to the WLC.
   • DEnable the NTP server that is connected to the Hyperlocation module.

   Show answer

   Answer: B

   Explanation

   Step 1 Choose Wireless > Access Points > Global Configuration. Step 2 In the Hyperlocation Config Parameters section: Check the Enable Hyperlocation check box. Based on AP and installed module, checking the Enable Hyperlocation check box enables different location service (PRL-based or AoA-based). https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_011010.html#config-hyperlocation-global:~:text=Check%20the%20Enable%20Hyperlocation%20check%20box.

   Source: Adapted from community discussion — Vlad_Is_Love_ua

   References

   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 116 · 294 in bank

   A wireless engineer must configure IEEE 802.1X authentication on a WLAN that supports new and legacy wireless devices. Which condition must be met for the legacy clients to be able to associate and authenticate without issues?

   • AThe authenticator and the authentication server must support the same authentication protocol.
   • BThe client and the authenticator must support the same authentication protocol.
   • CThe client and the controller must support the same authentication protocol.
   • DThe client and the authentication server must support the same authentication protocol.

   Show answer

   Answer: B

   Explanation

   I think is D. EAP method is only defined on the client (supplicant) and RADIUS Server (Authentication Server). Not on the WLC/AP (Authenticator) from https://community.cisco.com/t5/wireless-mobility-knowledge-base/802-1x-eap-troubleshooting/ta-p/3155512

   Source: Adapted from community discussion — [Removed]

   References

   • cisco.com documentation

   Next question

7. Question 117 · 294 in bank

   Select 2

   An engineer is configuring the maps on the Cisco Prime Infrastructure, but clients fail to show up on the maps. Which two actions are needed to complete this configuration? (Choose two.)

   • AInstall event group services in Cisco Prime Infrastructure.
   • BSynchronize the Cisco WLC with Cisco Prime Infrastructure.
   • CSynchronize the network designs with the Cisco MSE.
   • DActivate the context-aware service on the Cisco MSE.
   • EInstall wIPS licenses on the Cisco MSE.

   Show answer

   Answer: BD

   Next question

8. Question 118 · 294 in bank

   A network engineer is configuring a Cisco AireOS 8.2 WLC, Cisco MSE, and Cisco PI with Cisco 3700 Series APs and Cisco Hyperlocation modules. The engineer configures and enables a WLAN with Hyperlocation. During testing, the engineer notices that location accuracy is poor. Which action resolves the issue?

   • AEnable DCA in the Global Configuration settings of the WLC.
   • BInstall WLC software that supports the Hyperlocation module.
   • CUse the same NTP server for syncing the time on the WLC, MSE, and PI.
   • DOpen SNMP port 161 and NMSP port 16113 on the controller.

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

9. Question 119 · 294 in bank

   The IT department creates a video containing instructions for employees who have just joined the company. Newcomers need to join the wireless network named NEW4501999110. The WLAN name will be changed daily by IT support. Only new employees must receive the video over wireless multicast. What allows this feature?

   • AWMF
   • BWMM
   • CTPC
   • DDCA

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

10. Question 120 · 294 in bank

    Select 2

    A municipality customer uses a Cisco 5520 Series Wireless Controller for the wireless network. The customer intends to move the depot of its stores from using legacy bespoke voice-over-Wi-Fi handsets to a VoIP software package running on 5 GHz-capable laptops, tablets, and smartphones. Bluetooth headsets will be used for any voice communication on any data device. Assuming that a suitable RF site survey for 5 GHz has already been carried out, which two configuration settings ensure the best possible voice experience? (Choose two.)

    • AConfigure AVC on the controller to prioritize voice over other applications' traffic on the same device.
    • BRemark all traffic coming from the new voice-capable devices with DSCP 46 (EF) at the AP.
    • CAssign the Platinum QoS profile to the SSID carrying the new-style voice traffic.
    • DCreate mobility groups and include all the APs in the high-density areas.
    • ETurn off the 2.4 GHz radios on all APs where the voice application is used.

    Show answer

    Answer: AC

    Explanation

    Types of control include the following: - Marking of DSCP Reference: Official Cert Guide "CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430", Page 270 - Rate-limiting/policing traffic in the upstream or downstream direction - Dropping certain traffic types

    Source: Adapted from community discussion — peer1024

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 111. 294 questions available.