Cisco 300-375 Exam Dumps 2021

NEW QUESTION 1
Refer to the exhibit.

An engineer utilizing ISE as the wireless AAA service noticed that the accounting process on the server at 10.10.2.3 has failed, but authentication process is still functional.
Which ISE nodes receive WLC RADIUS traffic, using the CLI output and assuming the WLAN uses the servers in their indexed order?

• A. authentication to 10.10.2.4, accounting to 10.10.2.3.
• B. authentication to 10.10.2.3, accounting to 10.10.2.3.
• C. authentication to 10.10.2.4, accounting to 10.10.2.4.
• D. authentication to 10.10.2.3, accounting to 10.10.2.4.

Answer: B

Explanation:  

NEW QUESTION 2
WPA2 Enterprise with 802.1x is being used for clients to authenticate to a wireless network through an ISE server. For security reasons, the network engineer wants to ensure only PEAP authentication can be used. The engineer sent instructions to clients on how to configure their supplicants, but
users are still in the ISE logs authentication using EAP-FAST. Which option describes the most efficient way the engineer can ensure these users cannot access the network unless the correct
authentication mechanism is configured?

• A. Enable AAA override on the SSID, gather the usernames of these users, and disable their RADIUS accounts until they make sure they correctly configured their devices.
• B. Enable AAA override on the SSID and configure an access policy in ACS that denies access to the list of MACs that have used EAP-FAST.
• C. Enable AAA override on the SSID and configure an access policy in ACS that allows access only when the EAP authentication method is PEAP.
• D. Enable AAA override on the SSID and configure an access policy in ACS that puts clients that authenticated using EAP-FAST into a quarantine VLAN.

Answer: C

Explanation:  

NEW QUESTION 3
An engineer is configuring a BYOD provisioning WLAN. Which two advanced WLAN settings are required? (Choose two)

• A. DHCP profiling
• B. DHCP address assignment
• C. passive client
• D. RADIUS NAC
• E. AAA override

Answer: DE

Explanation:
Allow AAA Override: Enabled NAC State: Radius NAC (selected)
https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113476- wireless-byod-ise-00.html
 

NEW QUESTION 4
Which two options are types of MFP that can be performed? (Choose two.)

• A. message integrity check
• B. infrastructure
• C. client
• D. AES-CCMP
• E. RSN

Answer: BC

Explanation:  

NEW QUESTION 5
When using the Standalone Profile Editor in the Cisco AnyConnect v3.0 to create a new NAM profile, which two statements describe the profile becoming active? (Choose two.)

• A. selects the new profile from NAM
• B. selects "Network Repair" from NAM
• C. becomes active after a save of the profile name
• D. ensures use of "configuration.xml" as the profile name
• E. ensures use of "config.xml" as the profile name
• F. ensures use of "nam.xml" as the profile name

Answer: BD

Explanation:  

NEW QUESTION 6
An engineer is working on a remote site that is configured using FlexConnect. They are worried that the access points will not send RADIUS requests directly to the authentication server is standalone mode. Which command ensures direct authentication using the default ports as defined on the WLC?

• A. config filexconnect group Remote radius server acct add primary 10.10.10.10 1813 Cisco123
• B. config filexconnect group Remote radius server auth add primary 10.10.10.10 1813 Cisco123
• C. config filexconnect group Remote radius server acct add primary 10.10.10.10 1812 Cisco123
• D. config filexconnect group Remote radius server auth add primary 10.10.10.10 1812 Cisco123

Answer: C

Explanation:  

NEW QUESTION 7
Which client roam is considered the fastest in a wireless deployment using Cisco IOS XE mobility controllers and mobility agents?

• A. Roam within stack members
• B. Inter-SPG roam
• C. Interdomain roam
• D. Intermobility roam
• E. lntra-SPG roam

Answer: B

Explanation:
• Inter-SPG, Intra-subdomain roaming?The client roaming between mobility agents in different SPGs
within the same subdomain. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/system_m anagement/configuration_guide/b_sm_3se_3850_cg/b_sm_3se_3850_cg_chapter_0111.pdf
 

NEW QUESTION 8
An engineer requires authentication for WPA2 that will use fast rekeying to enable clients to roam from one access point to another without going through the controller. Which security option should be configured?

• A. PSK
• B. AES
• C. Cisco Centralized key Management
• D. 802.1x

Answer: C

Explanation:  

NEW QUESTION 9
While deploying PEAP authentication on a customer laptop with the native Windows supplicant, the PEAP security options do not appear. Which option describes what must be done?

• A. Enable automatic connection to the WLAN.
• B. Enable static DNS on the WLAN.
• C. Enable AES on the WLAN settings.
• D. Enable WLAN autoconfig services on the P

Answer: C

Explanation:  

NEW QUESTION 10
Which three options are valid client profile probes m Cisco ISE? (Choose three.)

• A. DHCP
• B. 802.1X
• C. CCX
• D. NetFlow
• E. TACACS
• F. HTTP

Answer: ADF

Explanation:  

NEW QUESTION 11
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which option must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

• A. local EAP
• B. authentication caching
• C. pre-authentication
• D. Cisco Centralized Key Management

Answer: A

Explanation:  

NEW QUESTION 12
An engineer has configured passive fallback mode for RADIUS with default timer settings. What will occur when the primary RADIUS fails then recovers?

• A. RADIUS requests will be sent to the secondary RADIUS server until the secondary fails to respond.
• B. The controller will immediately revert back after it receives a RADIUS probe from the primary server.
• C. After the inactive time expires the controller will send RADIUS to the primary.
• D. Once RADIUS probe messages determine the primary controller is active the controller will revert back to the primary RADIUS.

Answer: C

Explanation:  

NEW QUESTION 13
A customer is concerned that radar is impacting the access point that service the wireless network in an office located near an airport. On which type of channel should you conduct spectrum analysis to identify if radar is impacting the wireless network?

• A. UNII-3 channels
• B. UNII-1 channels
• C. 802.11b channels
• D. 2.4 GHz channels
• E. UMII-2 channels
• F. Channels 1, 5, 9, 13

Answer: E

Explanation:  

NEW QUESTION 14
802.1X AP supplicant credentials have been enabled and configured on a Cisco WLC v7.0 in both the respective Wireless>AP>Global Configuration location and AP>Credentials tab locations. What describes the 802.1X AP authentication process when connected via Ethernet to a switch?

• A. Only WLC AP global credentials are used.
• B. Only AP credentials are used.
• C. WLC global AP credentials are used first; upon failure, the AP credentials are used.
• D. AP credentials are used first; upon failure, the WLC global credentials are use

Answer: B

Explanation:  

NEW QUESTION 15
Which security method does a Cisco guest wireless deployment that relies on Cisco ISE guest portal for user authentication use?

• A. Layer 2 and Layer 3
• B. Layer 2 only
• C. No security methods are needed to deploy CWA
• D. Layer 3 only

Answer: B

Explanation:  

NEW QUESTION 16
Which two attacks represent a social engineering attack? (Choose two.)

• A. using AirMagnet Wi-Fi Analyzer to search for hidden SSIDs
• B. calling the IT helpdesk and asking for network information
• C. spoofing the MAC address of an employee device
• D. entering a business and posing as IT support staff

Answer: BD

Explanation:  

NEW QUESTION 17
A customer wants to allow employees to easily onboard their devices to the wireless network. Which process can be configured on Cisco ISE to support this requirement?

• A. self registration guest portal
• B. client provisioning
• C. native supplicant provisioning
• D. local web auth

Answer: B

Explanation: