300-430 practice questions 51–60

1. Question 51 · 294 in bank

   An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?

   • ASet ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command.
   • BSet ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.
   • CSet ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.
   • DSet ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.

   Show answer

   Answer: D

   Explanation

   I think D is correct LSS status cannot be enabled for services with ORIGIN set to WIRED and vice-versa. ref: https://www.cisco.com/c/en/us/td/docs/wireless/technology/bonjour/7-5/Bonjour_Gateway_Phase-2_WLC_software_release_7-5.html#:~:text=LSS%20status%20cannot%20be%20enabled%20for%20services%20with%20ORIGIN%20set%20to%20WIRED%20and%20vice%2Dversa. (WLC) >config mdns service lss

   Source: Adapted from community discussion — rph02533

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 52 · 294 in bank

   A Cisco 8540 WLC manages Cisco Aironet 4800 Series Aps and send AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperlocation. No AoA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics. How must the network administrator resolve this issue?

   • AEnable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.
   • BEnable the HALO module on the CMX appliance for the data collection.
   • CAllow port 2003 for AoA packets to flow through between the CMX appliances.
   • DUse one Hyperlocation-enabled WLC and CMX for AoA data.

   Show answer

   Answer: D

   Explanation

   D is correct: Any given controller can only talk to a single CMX 10.2.x system running AoA. (A second non-Hyperlocation CMX 10.x system can be added, but ensure that this system NEVER has Hyperlocation feature enabled).

   Source: Adapted from community discussion — daeman

   References

   • Cisco documentation

   Next question

3. Question 53 · 294 in bank

   An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificate type helps resolve this issue?

   • APublic-Signed Root
   • BPublic-Signed SAN
   • CSelf-Signed Wildcard
   • DSelf-Signed Standard

   Show answer

   Answer: B

   Explanation

   "Two-node Cisco ISE deployment." "A Subject Alternate Name (or SAN) certificate is a digital security certificate which allows multiple hostnames to be protected by a single certificate."

   Source: Adapted from community discussion — Klimy

   Next question

4. Question 54 · 294 in bank

   On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational. Which command set prevents this connection?

   • Aconfig terminal wireless flexconnect profile [profile name] ethernet-fallback-enable end
   • Bconfig terminal wireless flexconnect profile [profile name] fallback-radio-shut end
   • Cconfig terminal wireless profile flex [profile name] fallback-radio-shut end
   • Dconfig terminal wireless profile flex [profile name] ethernet-fallback-enable end

   Show answer

   Answer: C

   Explanation

   C is right and can be found in the manuals.... But..to which problem this question is a solution? I had Cisco PoE WLAN AP all my life. If ethernet fails, PoE fails and no power - the WLAN AP is off. Our observed fallback was AP SHUTDOWN due to no power.....

   Source: Adapted from community discussion — peer1024

   References

   • Cisco documentation

   Next question

5. Question 55 · 294 in bank

   The security policy mandates that only controller web management traffic is allowed from the IT subnet. In testing, an engineer is trying to connect to a WLAN with Web Authentication for guest users, but the page is timing out on the wireless client browser. What is the cause of the issue?

   • AThe implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.
   • BWeb Authentication Redirect is not supported with CPU ACLs.
   • CThe DNS server that is configured on the controller is incorrect.
   • DWeb Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.

   Show answer

   Answer: A

   Next question

6. Question 56 · 294 in bank

   Select 2

   A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)

   • AThe interference is less than or equal to 30% on the 2.4 GHz radio.
   • BThe interference is less than or equal to 50% on the 2.4 GHz radio.
   • CCisco DNA Center includes only Cisco CleanAir interferers in the AP health score.
   • DThe interference is less than or equal to 30% on the 5 GHz radio.
   • ECisco DNA Center does not include interference in the AP health score.

   Show answer

   Answer: BD

   Explanation

   Your source is good. Your judgement seems incorrect to me: Answer D: 30 % interference on 5 GHz is more than 20%. Corrects answers are AB as 50% and 30% are both applicable for a score of 10 on the 2,4 GHz band.

   Source: Adapted from community discussion — Mimimimimi

   References

   • Cisco documentation
   • Cisco documentation

   Next question

7. Question 57 · 294 in bank

   An engineer is responsible for a wireless network for an enterprise. The enterprise has distributed offices around the globe, and all APs are configured in FlexConnect mode. The network must be configured to support 802.11r and CCKM. What needs to be implemented to accomplish this goal?

   • AEnable VLAN-based central switching.
   • BEnable FlexConnect local authentication.
   • CEnable FlexConnect local switching.
   • DCreate FlexConnect groups.

   Show answer

   Answer: D

   Explanation

   VLAN based switching is not relevant to the question. 11r is not supported with FlexConnect local auth. Although local switching is supported for 11r, to use CCKM fast roaming with FlexConnect access points, you must configure FlexConnect Groups. 11r is only supported when all AP's are in the same Flex group. Therefore, provided answer D is correct.

   Source: Adapted from community discussion — Robesera

   References

   • Cisco documentation

   Next question

8. Question 58 · 294 in bank

   Select 2

   An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features does the engineer configure to accomplish this task? (Choose two.)

   • ADevice Admin Policy Set
   • BUser Access Mode: ReadWrite
   • CACL
   • DRADIUS server
   • ETACACS server

   Show answer

   Answer: AE

   Explanation

   A and E seem to be the best answers when meeting the requirement for 2 valid choices. B is incorrect as that is for local users and the question states that we're not using local auth on the WLC. C doesn't meet any of the stated requirements either. D is a valid response and RADIUS inherently does not offer RBAC as it only provides Authentication. However since two answers are required only A and E can be combined to provide two steps that will provide admin access. Although RBAC is not required TACACS can define an admin policy set that sets all admin users to have full read/write access without defining any other more granular access.

   Source: Adapted from community discussion — daeman

   Next question

9. Question 59 · 294 in bank

   A network engineer must segregate all IPads on the guest WLAN to a separate VLAN. How does the engineer accomplish this task without using Cisco ISE?

   • ACreate a local policy on the WLC.
   • BUse 802.1x authentication to profile the devices.
   • CUse an mDNS profile for the iPad device.
   • DEnable RADIUS DHCP profiling on the WLAN.

   Show answer

   Answer: A

   Next question

10. Question 60 · 294 in bank

    In a Cisco WLAN deployment, it is required that all Aps from branch1 remain operational even if the control plane CAPWAP tunnel is down because of a WAN failure to headquarters. Which operational mode must be configured on the APs?

    • Adisconnected
    • Bstandalone
    • Clightweight
    • Dconnected

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 51. 294 questions available.