Latest 300-430 Ebook 2021

NEW QUESTION 1
All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?

• A. The multicast group includes all APs
• B. The wrong multicast address was used
• C. The multicast group is assigned the wrong VLAN
• D. Multicast IGMP snooping is not enabled

Answer: D

NEW QUESTION 2
Which QoS level is recommended for guest services?

• A. gold
• B. bronze
• C. platinum
• D. silver

Answer: B

NEW QUESTION 3
Which three properties are used for client profiling of wireless clients? (Choose three.)

• A. HTTP user agent
• B. DHCP
• C. MAC OUI
• D. hostname
• E. OS version
• F. IP address

Answer: ABC

NEW QUESTION 4
An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?

• A. split tunneling
• B. SE-connect
• C. FlexConnect
• D. AP failover priority

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/aironet-602-officeextend-access-point/117540-configure-splittunneloeap-00.html

NEW QUESTION 5
Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

• A. Cisco Hyperlocation Module
• B. Wireless Intrusion Prevention System
• C. Cisco Connected Mobile Experiences
• D. Cisco Mobility Services Engine

Answer: A

NEW QUESTION 6
An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?

• A. 1
• B. 2
• C. 3
• D. 4

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/technology/roguedetection_deploy/Rogue_Detection.html

NEW QUESTION 7
An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

• A. network policy server
• B. RADIUS
• C. TACACS+
• D. LDAP

Answer: C

NEW QUESTION 8
Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?

• A. The Cisco CMX server receives NetFlow data from the WLC.
• B. The Cisco CMX server receives NMSP traffic from the WLC.
• C. The Cisco CMX server receives SNMP traffic from the WLC.
• D. The Cisco CMX server receives Angle-of-Arrival data from the WLC.

Answer: D

NEW QUESTION 9
An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?

• A. Platinum QoS configured on the WLAN
• B. WMM set to required on the WLAN
• C. msl qos trust dscp configured on the controller switch port
• D. msl qos trust cos configured on the controller switch port

Answer: C

NEW QUESTION 10
A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the issue?

• A. controller IGMP snooping
• B. multicast AP multicast mode
• C. broadcast forwarding
• D. unicast AP multicast mode

Answer: B

NEW QUESTION 11
What is an important consideration when implementing a dual SSID design for BYOD?

• A. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
• B. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
• C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
• D. One SSID is for provisioning and the other SSID is for gaining access to the networ
• E. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.

Answer: D

NEW QUESTION 12
Refer to the exhibit. A network administrator deploys the DHCP profiler service in two ISE servers: 10.3.10.101 and 10.3.10.102. All BYOD devices connecting to WLAN on VLAN63 have been incorrectly profiled and are assigned as unknown profiled endpoints. Which action efficiently rectifies the issue according to Cisco recommendations?

• A. Nothing needed to be added on the Cisco WLC or VLAN interfac
• B. The ISE configuration must be fixed.
• C. Disable DHCP proxy on the Cisco WLC.
• D. Disable DHCP proxy on the Cisco WLC and run the ip helper-address command under the VLAN interface to point to DHCP and the two ISE servers.
• E. Keep DHCP proxy enabled on the Cisco WLC and define helper-address under the VLAN interface to point to the two ISE servers.

Answer: C

NEW QUESTION 13
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9. Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)

• A. Permit 0.0.0.0 0.0.0.0 UDP any any
• B. Permit 0.0.0.0 0.0.0.0 any DNS any
• C. Permit 0.0.0.0 0.0.0.0 UDP DNS any
• D. Permit 0.0.0.0 0.0.0.0 UDP any DNS
• E. Permit any any any

Answer: AD

NEW QUESTION 14
An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

• A. permit-ACL
• B. WMM required
• C. mark
• D. rate-limit

Answer: C

NEW QUESTION 15
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

• A. pre-authentication
• B. local EAP
• C. authentication caching
• D. Cisco Centralized Key Management

Answer: B

NEW QUESTION 16
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

• A. Static WEP + 802.1X
• B. WPA+WPA2
• C. Static WEP
• D. CKIP
• E. 802.1X

Answer: BC

NEW QUESTION 17
Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

• A. authentication-local/switch-local
• B. WPA2 personal
• C. authentication-central/switch-central
• D. lightweight mode
• E. standalone mode
• F. WEB authentication

Answer: ABE

NEW QUESTION 18
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?

• A. HR_ACL appended with BASE_ACL
• B. HR_ACL only
• C. BASE_ACL appended with HR_ACL
• D. BASE_ACL only

Answer: B

NEW QUESTION 19
Which devices can be tracked with the Cisco Context Aware Services?

• A. wired and wireless devices
• B. wireless devices
• C. wired devices
• D. Cisco certified wireless devices

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html

NEW QUESTION 20
Which two events are outcomes of a successful RF jamming attack? (Choose two.)

• A. disruption of WLAN services
• B. unauthentication association
• C. deauthentication broadcast
• D. deauthentication multicast
• E. physical damage to AP hardware

Answer: AE

NEW QUESTION 21
An engineer is implementing a FlexConnect group for access points at a remote location using local switching but central DHCP. Which client feature becomes available only if this configuration is changed?

• A. multicast
• B. static IP
• C. fast roaming
• D. mDNS

Answer: B

NEW QUESTION 22
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

• A. WPA key
• B. session key
• C. encryption key
• D. shared-secret key

Answer: B

NEW QUESTION 23
Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

• A. Configure the certificate, WLAN, and radio interface on WGB.
• B. Configure the certificate on the WLC.
• C. Configure WLAN to authenticate using ISE.
• D. Configure the access point with the root certificate from ISE.
• E. Configure WGB as a network device in ISE.
• F. Configure a policy on ISE to allow devices to connect that validate the certificate.

Answer: ACF

NEW QUESTION 24
......