Implementing Cisco Enterprise Wireless Networks (ENWLSI)294 questions across 30 pages are complete and free, with no account or card.
294 questions in this bank
Free access · progress saved on this device
For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to as soon as the change is made?
Answer: D
Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?
Answer: B
Does not matter which direction is selected. It will always be any for a CPU ACL. Answer is B. Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/access_control_lists.html#:~:text=If%20you%20are%20planning%20to%20apply%20this%20ACL%20to%20the%20controller%20CPU%2C%20the%20packet%20direction%20does%20not%20have%20any%20significance%2C%20it%20is%20always%20%E2%80%98Any%E2%80%99.
Source: Adapted from community discussion — Mimimimimi
An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?
Answer: C
An engineer needs to configure an autonomous AP for 802.1x authentication. To achieve the highest security an authentication server is used for user authentication. During testing, the AP fails to pass the user authentication request to the authentication server. Which two details need to be configured on the AP to allow communication between the server and the AP? (Choose two.)
Answer: CD
An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?
Answer: C
A customer wants the APs in the CEO's office to have different usernames and passwords for administrative support than the other APs deployed throughout the facility. Which feature must be enabled on the WLC and APs to achieve this goal?
Answer: D
Correct answer is D: You can set a global username, password, and enable password that all access points that are currently joined to the controller and any that join in the future inherit as they join the controller. If desired, you can override the global credentials and assign a unique username, password, and enable password for a specific access point. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01101011.html
Source: Adapted from community discussion — cskshiet
An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted. Which cause of this issue is true?
Answer: B
An engineer is implementing RADIUS to restrict administrative control to the network with the WLC management IP address of 192.168.1.10 and an AP subnet of 192.168.2.0/24. Which entry does the engineer define in the RADIUS server?
Answer: C
I would say the correct answer should be C because the subnet given will cover both the mgmt interface and the AP range. Also the shared secret used on the WLC needs to be defined on the RADIUS.
Source: Adapted from community discussion — Robesera
A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location. Which Cisco FlexConnect configuration must be used?
Answer: D
I can clearly say that I found the options on WLC 9800. Within Policy Profile: Central Switching, Central Authentication, Central DHCP, Central Association. Each option can be set to on (enabled) or off (disabled) The option to define a local RADIUS server or local users as well is within the flex profile. The solution “local authentication and central switching“ is possible on WLC 9800.
Source: Adapted from community discussion — peer1024
Refer to the exhibit.
An engineer must restrict some subnets to have access to the WLC. When the CPU ACL function is enabled, no ACLs in the drop-down list are seen. What is the cause of the problem?
Answer: A
When the CPU ACL function is enabled on the WLC, only the ACLs that have a rule specified for the Management interface will appear in the drop-down list. The Management interface is used for WLC management traffic, and if an ACL is not associated with it, it will not be available to be used as a CPU ACL. Therefore, the engineer needs to ensure that the ACL has a rule specified for the Management interface in order to be able to select it as a CPU ACL.
Source: Adapted from community discussion — TJR72
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-430 practice, question 31. 294 questions available.
Version 1.0.0. How we source questions