300-430 practice questions 261–270

1. Question 261 · 294 in bank

   What must be configured on ISE version 2.1 BYOD when using Single SSID?

   • Aopen authentication
   • B802.1x
   • Cno authentication
   • DWPA2

   Show answer

   Answer: A

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

2. Question 262 · 294 in bank

   A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments. Which solution must the engineer choose?

   • AConfigure a second WLC to support half of the APs in the deployment.
   • BConfigure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.
   • CConfigure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.
   • DConfigure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.

   Show answer

   Answer: B

   Next question

3. Question 263 · 294 in bank

   Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

   • AFlexConnect ACL
   • BVLAN name override
   • CCCKM/OKC
   • DAAA override

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

4. Question 264 · 294 in bank

   Select 3

   Which three properties are used for client profiling of wireless clients? (Choose three.)

   • AHTTP user agent
   • BDHCP
   • CMAC OUI
   • Dhostname
   • EOS version
   • FIP address

   Show answer

   Answer: ABC

   Explanation

   Answer is correct The user can configure these policies and enforce end-points with specified policies. The wireless clients will be profiled based on MAC OUI, DHCP, HTTP user agent (valid Internet is required for successful HTTP profiling). The WLC uses these attributes and predefined classification profiles to identify devices. https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/NativeProfiling75.html

   Source: Adapted from community discussion — skh

   References

   • Cisco documentation

   Next question

5. Question 265 · 294 in bank

   What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

   • AEAP-PEAP with 802.1x port authentication
   • BEAP-TLS with 802.1x port authentication
   • CEAP-FAST with CAPWAP DTLS + port authentication
   • DEAP-FAST with CAPWAP DTLS

   Show answer

   Answer: D

   References

   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 266 · 294 in bank

   An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?

   • A1
   • B2
   • C3
   • D4

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/wireless/technology/roguedetection_deploy/Rogue_Detection.html

   Source: Adapted from community discussion — skh

   References

   • Cisco documentation

   Next question

7. Question 267 · 294 in bank

   Select 2

   An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9. Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)

   • APermit 0.0.0.0 0.0.0.0 any DNS any
   • BPermit 0.0.0.0 0.0.0.0 UDP DNS any
   • CPermit 0.0.0.0 0.0.0.0 UDP any DNS
   • DPermit any any any
   • EPermit 0.0.0.0 0.0.0.0 UDP any any

   Show answer

   Answer: CE

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

   Next question

8. Question 268 · 294 in bank

   Select 2

   CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

   • AAllow HTTP traffic only before authentication and block all the traffic.
   • BAllow all the traffic before authentication and intercept HTTPS only.
   • CAllow HTTPs traffic only before authentication and block all other traffic.
   • DAllow all the traffic before authentication and intercept HTTP only.
   • EAllow SNMP traffic only before authentication and block all the traffic.

   Show answer

   Answer: CD

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/CMX_Connect_Engage_Visitor_Connect/Guide/ Cisco_CMX_Connect_Engage_Config_Guide_VC/CMX_Facebook_Wi-Fi.html

   Source: Adapted from community discussion — malkana

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

9. Question 269 · 294 in bank

   An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?

   • Asplit tunneling
   • BSE-connect
   • CFlexConnect
   • DAP failover priority

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/wireless/aironet-602-officeextend-access-point/117540-configure-splittunneloeap-00.html

   Next question

10. Question 270 · 294 in bank

    An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?

    • AHR_ACL appended with BASE_ACL
    • BHR_ACL only
    • CBASE_ACL appended with HR_ACL
    • DBASE_ACL only

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 261. 294 questions available.