Pass Your Cisco Exam with 300-430 Exam Dumps (Updated 143 Questions)
300-430 Exam Dumps - Cisco Practice Test Questions
NEW QUESTION 51
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?
- A. local EAP
- B. authentication caching
- C. pre-authentication
- D. Cisco Centralized Key Management
Answer: A
Explanation:
NEW QUESTION 52
A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC. Which configuration should be used to accomplish this goal?
- A. FlexConnect mode with local authentication
- B. FlexConned mode with central switching enabled
- C. FlexConnect mode with central authentication
- D. FlexConnect mode with OfficeExtend enabled
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/72/configuration/guide/cg/cg_flexconnect.html#wp12
NEW QUESTION 53
A network engineer needs to configure multicast in the network. The implementation will use multiple multicast groups and PIM routers. Which address provides automatic discovery of the best RP for each multicast group?
- A. 224.0.0.13
- B. 224.0.1.40
- C. 224.0.0.14
- D. 224.0.1.39
Answer: B,D
NEW QUESTION 54
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
- A. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
- B. Controller software must be newer than 7.0.6+.
- C. mDNS is not supported over IPv6.
- D. mDNS cannot use UDP port 5353 as the destination port.
- E. mDNS uses only UDP port 5436 as a destination port.
Answer: A,C
Explanation:
NEW QUESTION 55
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?
- A. local EAP
- B. authentication caching
- C. pre-authentication
- D. Cisco Centralized Key Management
Answer: A
Explanation:
NEW QUESTION 56
An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)
- A. client description
- B. client MAC address
- C. WLC IP address
- D. AP name
- E. X, Y real location
Answer: B,E
NEW QUESTION 57
What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?
- A. 30 seconds
- B. 15 seconds
- C. 10 seconds
- D. 60 seconds
Answer: B
NEW QUESTION 58
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)
- A. Static WEP
- B. WPA+WPA2
- C. 802.1X
- D. Static WEP + 802.1X
- E. CKIP
Answer: A,B
Explanation:
Explanation
"When setting the security setting in the WLAN, there are specific elements that are not supported on the 600 series. For Layer 2 Security, only these options are supported for the Cisco Aironet 600 Series OEAP: None WPA+WPA2 Static WEP can also be used but not for .11n data rates."
https://www.cisco.com/c/en/us/support/docs/wireless/aironet-600-series-officeextend-access-point/113003-office
NEW QUESTION 59
Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)
- A. The Cisco Hyperlocation feature must be enabled on the wireless LAN controller and Cisco CMX.
- B. The Cisco Hyperlocation feature must be enabled only on the wireless LAN controller.
- C. NTP can be configured, but that is not recommended.
- D. After enabling Cisco Hyperlocation on Cisco CMX, the APs and the wireless LAN controller must be restarted.
- E. If the Cisco CMX server is a VM, a high-end VM is needed for Cisco Hyperlocation deployments.
Answer: A,D
NEW QUESTION 60
Refer to the exhibit.
The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?
- A. Use ASCII for the key input format
- B. Disable KeyWrap
- C. Change the CoA Port
- D. Correct the shared secret.
Answer: C
NEW QUESTION 61
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.
Which configuration is needed to complete this task?
- A. Create an ACL for WebEx
- B. Create an AVC profile for WebEx
- C. Change the WLAN reserved bandwidth for WebEx
- D. Change the AVC application WebEx-app-sharing to mark
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/AVC_dg7point5.html
NEW QUESTION 62
An engineer must achieve the highest level of location accuracy possible for a new mobile application. Which technology must be implemented for this use case?
- A. ToA lateration
- B. RSS lateration
- C. Bluetooth Low Energy
- D. Time Difference of Arrival
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBSDG/wifich2.html
NEW QUESTION 63
On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?
- A. Client Exclusion is enabled
- B. FlexConnect Local Auth is disabled
- C. ISE NAC is enabled
- D. 802.11r Fast Transition is enabled
Answer: B
NEW QUESTION 64
An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted. Which cause of this issue is true?
- A. DNS query is disabled
- B. Fallback is enabled
- C. Fallback is disabled
- D. DNS query is enabled
Answer: C
Explanation:
NEW QUESTION 65
Refer to the exhibit.
An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)
- A. Configure the certificate, WLAN, and radio interface on WGB.
- B. Configure a policy on ISE to allow devices to connect that validate the certificate.
- C. Configure WGB as a network device in ISE.
- D. Configure the certificate on the WLC.
- E. Configure the access point with the root certificate from ISE.
- F. Configure WLAN to authenticate using ISE.
Answer: A,B,F
NEW QUESTION 66
An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a reliable way for a Media Stream to work between Cisco FlexConnect APs. Which feature must be enabled to guarantee delivery?
- A. Multicast Direct
- B. IGMP Direct
- C. Multicast-Unicast Direct
- D. Unicast Direct
Answer: C
NEW QUESTION 67
An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?
- A. FlexConnect
- B. split tunneling
- C. AP failover priority
- D. SE-connect
Answer: B
NEW QUESTION 68
Which customizable security report on Cisco Prime Infrastructure will show rogue APs detected since a point in time?
- A. Rogue APs Count Summary
- B. New Rogue APs
- C. Rogue APs Events
- D. Network Summary
Answer: D
NEW QUESTION 69
Which three properties are used for client profiling of wireless clients? (Choose three.)
- A. HTTP user agent
- B. OS version
- C. MAC OUI
- D. DHCP
- E. IP address
- F. hostname
Answer: A,C,D
Explanation:
NEW QUESTION 70
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?
- A. Option C
- B. Option B
- C. Option A
- D. Option D
Answer: D
Explanation:
Note: To enable Local switching, you have to disable central switching
NEW QUESTION 71
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.
Which configuration is needed to complete this task?
- A. Create an ACL for WebEx
- B. Create an AVC profile for WebEx
- C. Change the WLAN reserved bandwidth for WebEx
- D. Change the AVC application WebEx-app-sharing to mark
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/AVC_dg7point5.html
NEW QUESTION 72
Refer to the exhibit.
An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)
- A. Configure the certificate, WLAN, and radio interface on WGB.
- B. Configure a policy on ISE to allow devices to connect that validate the certificate.
- C. Configure WGB as a network device in ISE.
- D. Configure the certificate on the WLC.
- E. Configure the access point with the root certificate from ISE.
- F. Configure WLAN to authenticate using ISE.
Answer: A,B,F
NEW QUESTION 73
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?
- A. received signal strength
- B. angle of incidence
- C. triangulation
- D. time distance of arrival
Answer: B
NEW QUESTION 74
......
New Real 300-430 Exam Dumps Questions: https://drive.google.com/open?id=1m5TN0kN6Yxs7VVbRz3rDLiY8W4QRV6fl
Pass Your 300-430 Exam Easily with Accurate PDF Questions: https://www.trainingdump.com/Cisco/300-430-practice-exam-dumps.html