300-430 practice questions 21–30

1. Question 21 · 294 in bank

   After receiving an alert about a rogue AP, a network engineer logs into Cisco Prime Infrastructure and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines that the rogue device is actually inside the campus. The engineer determines that the rogue is a security threat and decides to stop if from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?

   • AGo to the location where the rogue device is indicated to be and disable the power.
   • BCreate an SSID similar to the rogue to disable clients from connecting to it.
   • CUpdate the status of the rogue in Cisco Prime Infrastructure to contained.
   • DClassify the rogue as malicious in Cisco Prime Infrastructure.

   Show answer

   Answer: A

   Explanation

   "to stop if from broadcasting" - this ist not containment. containment means to send disassociation frames to clients. No power...no broadcasting !

   Source: Adapted from community discussion — peer1024

   Next question

2. Question 22 · 294 in bank

   Refer to the exhibit.

   

   Which area indicates the greatest impact on the wireless network when viewing the Cisco CleanAir Zone of Impact map of interferers?

   • AA
   • BB
   • CC
   • DD

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112139-cleanair-uwn-guide-00.html

   Next question

3. Question 23 · 294 in bank

   A wireless network engineer must present a list of all rogue APs with a high severity score to senior management. Which report must be created in Cisco Prime Infrastructure to provide this information?

   • ARogue AP Count Summary
   • BNew Rogue APs
   • CRogue AP Events
   • DRogue APs

   Show answer

   Answer: D

   Explanation

   On Prime 3.10 the name is Rogue APs(Updated). It generates a list of rogue AP WITHOUT any time stap. Just a list.... I will stay with D

   Source: Adapted from community discussion — peer1024

   Next question

4. Question 24 · 294 in bank

   What is configured to use more than one port on the OEAP to extend the wired network?

   • Aremote LAN ACL
   • BAAA override
   • Cclient load balancing
   • Dremote LAN

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

5. Question 25 · 294 in bank

   An engineer must run a Client Traffic Stream Metrics report in Cisco Prime Infrastructure. Which task must be run before the report?

   • Ascheduled report
   • Bradio performance
   • Cclient status
   • Dsoftware

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-0/user/guide/prime_infra_ug/reps.html

   References

   • cisco.com documentation

   Next question

6. Question 26 · 294 in bank

   What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

   • A3 hours
   • B24 hours
   • C3 days
   • D7 days

   Show answer

   Answer: D

   Explanation

   D - 7 days. 24 Hours drop-down list Allows you to display information on the window based on the time range you select. Default is 24 Hours. Do the following: From the 24 Hours drop-down list, choose a time range: 3 hours, 24 hours, or 7 days.

   Source: Adapted from community discussion — Skliffi

   Next question

7. Question 27 · 294 in bank

   A wireless engineer must configure access control on a WLC using a TACACS+ server for a company that is implementing centralized authentication on network devices. Which role value must be configured under the shell profile on the TACACS+ server for a user with read-only permissions?

   • AADMIN
   • BMANAGEMENT
   • CMONITOR
   • DREAD

   Show answer

   Answer: C

   Explanation

   C. MONITOR is correct Usage: In order to grant the user read-only access, the value must be set to monitor. In order to grant the user read-write access https://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/115926-tacacs-radius-devices-00.html

   Source: Adapted from community discussion — KalRona

   References

   • Cisco documentation

   Next question

8. Question 28 · 294 in bank

   The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?

   • AWLAN local policy
   • BRADIUS server overwrite interface
   • CAAA override
   • Dcustom AVC profile

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

9. Question 29 · 294 in bank

   

   Refer to the exhibit. A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that they are unable to connect. During troubleshooting, the engineer notices that the authentication requests are being dropped. Which action will resolve the issue?

   • AAllow connectivity from the wireless controller to the IP of the RADIUS server.
   • BProvide a valid client username that has been configured on the RADIUS server.
   • CConfigure the shared-secret keys on the controller and the RADIUS server.
   • DAuthenticate the client using the same EAP type that has been set up on the RADIUS server.

   Show answer

   Answer: C

   References

   • cisco.com documentation

   Next question

10. Question 30 · 294 in bank

    What must be configured on the Global Configuration page of the WLC for an AP to use 802.1x to authenticate to the wired infrastructure?

    • Alocal access point credentials
    • BRADIUS shared secret
    • CTACACS server IP address
    • Dsupplicant credentials

    Show answer

    Answer: D

    Explanation

    Incorrect should be D: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_01101000.pdf Choose Wireless > Access Points > Global Configuration to open the Global Configuration page. Under 802.1x Supplicant Credentials, select the 802.1x Authentication check box. In the Username text box, enter the username that is to be inherited by all access points that join the controller.

    Source: Adapted from community discussion — daeman

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 21. 294 questions available.