300-430 practice questions 61–70

1. Question 61 · 294 in bank

   Select 2

   An engineer added more APs to newly renovated areas in building. The engineer is now receiving Out-of-Sync alarms on Cisco Prime Infrastructure. Which two actions resolve this issue? (Choose two.)

   • AManually synchronize from Cisco Prime Infrastructure.
   • BManually synchronize from MSE.
   • CEnable automatic synchronization on Cisco Prime Infrastructure.
   • DEnable automatic synchronization on MSE.
   • EAdd new APs to maps on Cisco Prime Infrastructure.

   Show answer

   Answer: AC

   Explanation

   A. This would immediately sync the system and then C. would keep it in sync going forward when future changes happen. I think E. is wrong because the APs have already been added to the map which is why there is an out of sync with MSE to begin with.

   Source: Adapted from community discussion — GoldLeader

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 62 · 294 in bank

   A wireless administrator must assess the different client types connected to Cisco Catalyst 9800 Series Wireless Controller without using any external servers. Which configuration must be added to the controller to achieve this assessment?

   • Anative profile
   • BMAC classification
   • Clocal profile
   • Ddevice classification

   Show answer

   Answer: D

   Explanation

   I'm going to go with D here. The checkbox to enable local profiling is called Device Classification. Source: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215661-in-depth-look-into-client-profiling-on-9.html and logging into my own 9800.

   Source: Adapted from community discussion — Spineraptor

   References

   • Cisco documentation

   Next question

3. Question 63 · 294 in bank

   Select 2

   A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure. Which two technologies must they deploy? (Choose two.)

   • AFlexConnect mode
   • Bmonitor mode
   • Csniffer mode with no submode
   • Dlocal mode with WIPS submode
   • Erogue detector mode

   Show answer

   Answer: DE

   Explanation

   I'd say the provided answer is correct BD. The AP in rogue detector mode would not scan channels: Rogue Detector Access Point Rogue Detector—In this mode, the AP radio is turned off, and the AP listens to wired traffic only. The controller passes the APs configured as rogue detectors as well as lists of suspected rogue clients and AP MAC addresses. The rogue detector listens for ARP packets only, and can be connected to all broadcast domains through a trunk link if desired. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/70987-rogue-detect.html

   Source: Adapted from community discussion — wirelessvibes

   References

   • Cisco documentation

   Next question

4. Question 64 · 294 in bank

   A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates instead of 802.11n data rates. To what must the WMM policy of the WLAN be set to accomplish this task?

   • Arequired
   • Ballowed
   • Cdisabled
   • Dmandatory

   Show answer

   Answer: C

   Explanation

   Agree with wirelessvibes. Based on https://www.cisco.com/c/en/us/support/docs/wireless-mobility/voice-over-wireless-lan-vowlan/116056-technote-qos-00.html WMM also shortens the Interframe Spacing requirements for high priority packets so that voice and video can be sent in bursts without the need to wait as much for lower priority data inbetween. Additionally, WMM is needed in order to obtain 802.11n and 802.11ac data rates. This means that with --== WMM disabled ==-- or for non-WMM clients, the maximum usable data rate is 54 Mbps. WMM Enable WMM on a WLAN in order to create the simplest implementation of QoS; this option is on the QoS tab in the WLAN configuration menu. Other WMM policy settings are: Disabled - WMM is not in use on the WLAN. Required - Clients must support WMM or they are not permitted to access the WLAN. Allowed - Clients that support WMM may use it, while those that do not support WMM can still connect to the network.

   Source: Adapted from community discussion — Yod_Jjot

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

5. Question 65 · 294 in bank

   

   Refer to the exhibit. An engineer implemented the CPU ACL on your Cisco 5520 Series Wireless LAN Controller, and the controller is no longer manageable via the network. What must be changes on this CPU ACL to enable it to manage the controller again?

   • APermit statements must be added to the top of the ACL in both directions, which specify the network to be managed from and the virtual interface of the controller.
   • BLine 1 must be set to a destination port of HTTP.
   • CPermit statements must be added to the top of the ACL, which specify the network to be managed from.
   • DLine 1 must be set to the inbound direction.

   Show answer

   Answer: C

   Explanation

   CCNP Enterprise ENWLSD 300-425 ENWLSI 300-430 Official Cert Guide.pdf Page 454 For AireOS controllers using versions 6.0 and later, CPU ACLs are applicable for traffic originating both to and from the controller. Thus, when you’re creating the ACLs and attaching them to the CPU, the ACL direction fields do not have any relevance. Page 79 As with CAPWAP, the controller’s management interface is used to communicate with AAA servers, as well as a host of other services, including MSE/CMX, directory servers, other controllers, and more. --> we need an ACL without direction, which includes the management interface and the admin network.

   Source: Adapted from community discussion — peer1024

   Next question

6. Question 66 · 294 in bank

   Select 2

   A hospital wants to offer indoor directions to patient rooms utilizing its existing wireless infrastructure. The wireless network has been using location services specifications. Which two components must be installed to support this requirement? (Choose two.)

   • AWIPS
   • BCisco MSE
   • CCisco CMX Visitor Connect
   • DCisco CMX AppEngage
   • ECisco CMX Analytics

   Show answer

   Answer: BD

   Next question

7. Question 67 · 294 in bank

   When configuring a large, high-availability wireless network, which change to a mobility group creates less load on the controllers and maintains the same mobility messages?

   • AConfigure mobility group multicast messaging.
   • BRemove unnecessary controllers from the mobility group.
   • CConfigure the controllers into separate RF groups from the mobility groups.
   • DSeparate the controllers into different mobility groups per controller.

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

8. Question 68 · 294 in bank

   Select 2

   A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the network readiness is pending. Which two configurations must be performed on the firewall to allow the AP to join the controller? (Choose two.)

   • ABlock UDP ports 1812 and 1813 on the firewall.
   • BEnable NAT Address on the 5520 with an Internet-routable IP address.
   • CConfigure a static IP on the OEAP 1810.
   • DAllow UDP ports 5246 and UDP port 5247 on the firewall.
   • EAllow UDP ports 12222 and 12223 on the firewall.

   Show answer

   Answer: BD

   Explanation

   Strange question wording... "Which two configurations must be performed on the firewall to allow the AP to join the controller?" on the firewall...

   Source: Adapted from community discussion — anagy11

   Next question

9. Question 69 · 294 in bank

   A healthcare organization notices many rogue APs and is concerned about a honeypot attack. Which configuration must a wireless network engineer perform in Cisco Prime Infrastructure to prevent these attacks most efficiently upon detection?

   • ASet the auto containment level to 0 and select the Using Our SSID containment option.
   • BSet the manual containment level to 4 and select the Ad Hoc Rogue AP containment option.
   • CSet the auto containment level to 0 and select the Ad Hoc Rogue AP containment option.
   • DSet the auto containment level to 4 and select the Using Our SSID containment option.

   Show answer

   Answer: D

   Explanation

   Answer is D. Honeypot attacks: A honeypot AP spoofs the SSID (and eventually MAC) of a real AP. Level 0 containment does not exist. Using our SSID option ensures that any rogue AP with the same SSID as "My Network" is contained.

   Source: Adapted from community discussion — Mimimimimi

   References

   • Cisco documentation

   Next question

10. Question 70 · 294 in bank

    An engineer is configuring a new wireless network for guest access. The Facebook page of the company must be viewed by the guest users before they get access to the network. A Cisco MSE is used as a wireless component. Which URL must be used in the configuration as the external redirection URL?

    • Ahttp://<MSE>:8083/visitor/login.do
    • Bhttp://<MSE>:8083/fbwifi/forward
    • Chttp://<MSE>:8084/visitor/login.do
    • Dhttp://<MSE>:8084/fbwifi/forward

    Show answer

    Answer: D

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 61. 294 questions available.