300-430 practice questions 171–180

1. Question 171 · 294 in bank

   An engineer must define credentials for an autonomous access point that is configured to use 802.1X authentication against the switch port is attached to. Where are the credentials defined?

   • ARADIUS server
   • BCisco Prime Infrastructure
   • Cwireless LAN controller
   • DTACACS server

   Show answer

   Answer: A

   Next question

2. Question 172 · 294 in bank

   Select 2

   You are seeing an excessive number of rogue AP alarms in Cisco Prime Infrastructure. All these alarms have a severity level of Minor. Which two actions must be taken to make more efficient use of rogue AP alarms? (Choose two.)

   • ACreate and install configuration templates to establish rogue rules that use specific criteria to declare rogue APs as Friendly rogues.
   • BDisable rogue detection on the infrastructure APs that are detecting the rogue APs.
   • CCreate and install a configuration template that modifies the minimum rogue detection RSSI of the controller to a stronger value
   • DDelete the alarms. They do not return even if the same rogue AP is detected again.
   • EClear the alarms. They do not return even if the same rogue AP is detected again.

   Show answer

   Answer: AC

   Next question

3. Question 173 · 294 in bank

   

   Refer to the exhibit. An administrator sees interferers that cause connectivity issues in the 2.4GHz band. The DCA cycle on the Cisco Catalyst 9800 Series wireless controller runs every six hours for this band. The RF environment is dynamic on that floor, so the APs must change channels when a certain level of interference is detected. Which feature should be enabled to manage the interference?

   • AAir Quality Alarms
   • BEvent-Driven RRM
   • CInterference Device Alarms
   • DUnclassified interference

   Show answer

   Answer: B

   Next question

4. Question 174 · 294 in bank

   An engineer configured a single WLAN with WPA2 Enterprise and wants to use Cisco ISE to implement AVC profiles for users in different departments. Each department is placed into its own unique VLAN and is assigned to an AVC profile, after successfully authenticating to the wireless network. Which feature on the Cisco WLC must be enabled?

   • ALocal Profiling
   • Brole-based access control
   • CAAA Override
   • DChange of Authorization

   Show answer

   Answer: C

   Next question

5. Question 175 · 294 in bank

   A wireless network has lightweight APs distributed on multiple buildings and different AP groups. An administrator reported that AppleTV from one building is discovered in other buildings after it is queried. Why is this happening?

   • AAppleTV service is discovered as a wired service provider.
   • BmDNS service is configured as a wireless service provider for user access.
   • CLightweight APs incorrectly filter mDNS service for each location.
   • DNo ACL entry has been deployed to filter mDNS service advertisement between AP groups.

   Show answer

   Answer: D

   Next question

6. Question 176 · 294 in bank

   

   Refer to the exhibit. An engineer must maintain consistent parity between incoming and outgoing voice traffic for the trunk switch ports on a wireless controller. Which QoS value must be trusted?

   • ADSCP
   • BCoS
   • CIP precedence
   • D802.1p

   Show answer

   Answer: B

   Next question

7. Question 177 · 294 in bank

   An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

   • Apermit-ACL
   • BWMM required
   • Cmark
   • Drate-limit

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

8. Question 178 · 294 in bank

   Select 2

   

   Refer to the exhibit. An engineer receives a report that a client cannot authenticate via phone in a secure WLAN. The phone uses Layer 2 Security WPA2, and other clients can authenticate successfully. The engineer issues the (CONTROLLER) >debug client 64:89:9a:31:7f:a1 and (CONTROLLER) >debug aaa all enable commands in the controller and sees this output. What are two sources of this issue? (Choose two.)

   • AAn invalid user account or password was used.
   • BRADIUS is incorrectly configured
   • CThe server certificate is expired or not in use
   • DCertificate services are not working properly.
   • EThe incorrect EAP method was configured on the client device.

   Show answer

   Answer: AB

   Next question

9. Question 179 · 294 in bank

   An engineer configures QoS on an AireOS WLC v8.5. The engineer configures a WLAN for voice traffic and must set the data rates within the QoS profile. How should the data rates be configured to ensure that the QoS profile allows traffic to and from the wireless client?

   • AThe burst data rate should be configured before the average data rate.
   • BThe burst data rate should be greater than or equal to the average data rate.
   • CData rates should be applied per AP radio.
   • DThe burst data rate should be set to a non-zero value.

   Show answer

   Answer: B

   Next question

10. Question 180 · 294 in bank

    Select 2

    

    Refer to the exhibit. A customer implements AVC on the AireOS controllers. All of the NetFlow data is configured for export to Cisco Prime Infrastructure to be analyzed for a specified period. During testing, no data is reported from the controllers. Which two configurations must be applied for the data to be exported? (Choose two.)

    • Aconfig flow add monitor AVC_test record ipv4_client_app_flow_record
    • Bconfig flow create exporter Export_to_Prime_Infrastructure 10.20.30.6 port 9991
    • Cconfig flow create exporter Export_to_Prime_Infrastructure 10.20.30.6 port 8080
    • Dconfig flow add monitor Export_to_Prime_Infrastructure exporter AVC_test
    • Econfig flow add monitor AVC_test exporter Export_to_Prime_Infrastructure

    Show answer

    Answer: AE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 171. 294 questions available.