Exam Code: 300-375 (), Exam Name: Securing Cisco Wireless Enterprise Networks, Certification Provider: Cisco Certifitcation, Free Today! Guaranteed Training- Pass 300-375 Exam.
Free demo questions for Cisco 300-375 Exam Dumps Below:
NEW QUESTION 1
Refer to the exhibit.
In this IBN topology, which device acts as the RADIUS server?
- A. directory server
- B. Cisco ISE
- C. Cisco UCS
- D. Cisco Catalyst 3850 Series Switch
Answer: D
Explanation:
NEW QUESTION 2
Refer to the exhibit.
What is the 1.1.1.1 IP address?
- A. the wireless client IP address
- B. the RADIUS server IP address
- C. the controller management IP address
- D. the lightweight IP address
- E. the controller AP-manager IP address
- F. the controller virtual interface IP address
Answer: F
Explanation:
NEW QUESTION 3
Refer to the exhibit.
You are configuring a controller that runs Cisco IOS XE by using the CLI. Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)
- A. mandatory
- B. association-comeback
- C. SA teardown protection
- D. saquery-retry-time
- E. enable
- F. comeback-time
Answer: ABD
NEW QUESTION 4
A customer is concerned about DOS attacks from a neighboring facility. Which feature can be enabled to help alleviate these concerns and mitigate DOS attacks on a WLAN?
- A. PMF
- B. peer-to-peer blocking
- C. Cisco Centralized Key Management
- D. split tunnel
Answer: A
Explanation:
NEW QUESTION 5
Which configuration step is necessary to enable Visitor Connect on an SSID?
- A. A preauthentication ACL must be defined.
- B. Local client profiling must be enabled.
- C. The SSID must use MAC filtering.
- D. A passive client must be enabled.
Answer: A
Explanation:
The Pre-Authentication Flex Connect ACL is required for filex mode deployments. For more information, see the Configuring FlexConnect ACLs. https://www.cisco.com/c/en/us/td/docs/wireless/mse/7-6/CMX_Dashboard/Guide/
NEW QUESTION 6
An engineer is configuring EAP-TLS with a client trusting server model and has configured a public root certification authority. Which action does this allow?
- A. specifies a second certification authority to trust
- B. utilizes two subcertification authority servers
- C. creates a PKI infrastructure
- D. validates the AAA server
Answer: D
Explanation:
To support EAP-TLS, the AAA server (for example, Cisco Secure ACS) must have a certificate. Either a public certification authority or a private certification authority can be used to issue the AAA server certificate. The AAA server will trust a client certificate that was issued from the same root
certification authority that issued its certificate.
https://www.cisco.com/en/US/tech/ CK7 22/ CK8 09/technologies_white_paper09186a008009256b.sht ml
NEW QUESTION 7
Which condition introduce security risk to a BYOD policy?
- A. enterprise-managed MDM platform used for personal devices
- B. access to LAN without implementing MDM solution
- C. enforcement of BYOD access to internet only network
- D. enterprise life-cycle enforcement of personal device refresh
Answer: B
Explanation:
NEW QUESTION 8
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be verified?
- A. shared secret
- B. device ID
- C. SNMP RO community
- D. device interface credentials
Answer: A
Explanation:
NEW QUESTION 9
When a wireless client uses WPA2 AES, which keys are created at the end of the four way handshake process between the client and the access point?
- A. AES key, TKIP key, WEP key
- B. AES key, WPA2 key, PMK
- C. KCK, KEK, TK
- D. KCK, KEK, MIC key
Answer: A
Explanation:
NEW QUESTION 10
Which mobility mode must a Cisco 5508 wireless Controller be in to use the MA functionality on a cisco catalyst 3850 series switch with a cisco 550 Wireless Controller as an MC?
- A. classic mobility
- B. new mobility
- C. converged access mobility
- D. auto-anchor mobility
Answer: C
Explanation:
NEW QUESTION 11
Which three configuration steps are necessary on the WLC when implementing central web authentication in conjunction with Cisco ISE. (Choose three.)
- A. Set P2P Blocking Action to Drop.
- B. Enable Security Layer 3 Web Policy.
- C. Set NAC state to SNMP NAC.
- D. Enable Allow AAA override.
- E. Enable Security Layer 2 MAC Filtering.
- F. Set NAC state to RADIUS NA
Answer: DEF
Explanation:
NEW QUESTION 12
What are two of the benefits that the Cisco AnyConnect v3.0 provides to the administrator for client WLAN security configuration? (Choose two.)
- A. Provides a reporting mechanism for rouge APs
- B. Prevents a user from adding any WLANs
- C. Hides the complexity of 802.1X and EAP configuration
- D. Supports centralized or distributed client architectures
- E. Provides concurrent wired and wireless connectivity
- F. Allows users to modify but not delete admin-created profiles
Answer: CD
Explanation:
NEW QUESTION 13
A company is deploying wireless PCs on forklifts within its new 10,000-square-foot (3048-squaremeter) facility. The clients are configured for PEAP-MS-CHAPv2 with WPA TKIP. Users report that applications frequently drop when the clients roam between access points on the floor. A
professional site survey was completed. Which configuration change is recommended to improve the speed of client roaming?
- A. EAP-FAST
- B. EAP-TLS
- C. WPA AES
- D. WPA2 AES
Answer: D
Explanation:
Although the controller and APs support WLAN with SSID using WiFi Protected Access (WPA) and WPA2 simultaneously, it is common that some wireless client drivers cannot handle complex SSID settings. Whenever possible, Cisco recommends WPA2 only with Advanced Encryption Standard (AES). However, due to standards and mandatory WiFi Alliance certification process, TKIP support is required across future software versions. Keep the security policies simple for any SSID. Use a separate WLAN/SSID with WPA and Temporal Key Integrity Protocol (TKIP), and a separate one with WPA2 and Advanced Encryption Standard (AES). Since TKIP is being deprecated, Cisco recommends to use TKIP together with WEP, or to migrate out of TKIP completely and use PEAP, if possible.
NEW QUESTION 14
Refer to the exhibit. What do the red circles represent in the exhibit?
- A. detected interferes
- B. RSSI cutoff
- C. wIPs attackers
- D. zones of impact
Answer: C
Explanation:
NEW QUESTION 15
What two actions must be taken by an engineer configuring wireless Identity-Based Networking for a WLAN to enable VLAN tagging? (Choose two.)
- A. enable AAA override on the WLAN
- B. create and apply the appropriate ACL to the WLAN
- C. update the RADIUS server attributes for tunnel type 64, medium type 65, and tunnel private group type 81
- D. configure RADIUS server with WLAN subnet and VLAN ID
- E. enable VLAN Select on the wireless LAN controller and the WLAN
Answer: AC
Explanation:
NEW QUESTION 16
Which of the following user roles can access CMX Visitor Connect?
- A. Administrator
- B. Power User
- C. Guest User
- D. Super Administrator
Answer: A
Explanation:
NEW QUESTION 17
An engineer configures 802.1 X authentication for the access points using the config ap 802.1Xuser add username admin password secret AP_01 command.
Which EAP method does the access point use to authenticate?
- A. EAP-TLS
- B. MS-CHAPv2 PEAP
- C. LEAP
- D. EAP-FAST
Answer: D
Explanation:
Enables or disables Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST) authentication.
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-0/cmdref/b_cr80/config_commands_a_to_i.html
P.S. Simply pass now are offering 100% pass ensure 300-375 dumps! All 300-375 exam questions have been updated with correct answers: https://www.simply-pass.com/Cisco-exam/300-375-dumps.html (124 New Questions)