Labour Day Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

Home > Cisco > CCNP Enterprise > 300-430

300-430 Implementing Cisco Enterprise Wireless Networks (ENWLSI) Question and Answers

Question # 4

What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?

A.

10 seconds

B.

15 seconds

C.

30 seconds

D.

60 seconds

Full Access
Question # 5

A network administrator managing a Cisco Catalyst 9800-80 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC. Which two configurations are required? (Choose two.)

A.

Assign a policy map under global security policy settings.

B.

Add local profiling policy under global security policy settings.

C.

Create a service template.

D.

Allow HTTP and DHCP profiling under policy map.

E.

Enable device classification on global wireless settings.

Full Access
Question # 6

A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

A.

SOAP/XML

B.

NMSP

C.

CAPWAP

D.

SNMP

Full Access
Question # 7

An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9. Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)

A.

Permit 0.0.0.0 0.0.0.0 any DNS any

B.

Permit 0.0.0.0 0.0.0.0 UDP DNS any

C.

Permit 0.0.0.0 0.0.0.0 UDP any DNS

D.

Permit any any any

E.

Permit 0.0.0.0 0.0.0.0 UDP any any

Full Access
Question # 8

An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a reliable way for a Media Stream to work between Cisco FlexConnect APs. Which feature must be enabled to guarantee delivery?

A.

Unicast Direct

B.

IGMP Direct

C.

Multicast Direct

D.

Multicast-to-Unicast Direct

Full Access
Question # 9

An engineer is configuring multicast for two WLCs. The controllers are in different physical locations and each handles around 500 wireless clients. How should the CAPWAP multicast group address be assigned during configuration?

A.

Each WLC must be assigned a unique multicast group address.

B.

Each WLC management address must be in the same multicast group.

C.

Both WLCs must be assigned the same multicast group address.

D.

Each WLC management address must be in a different multicast group.

Full Access
Question # 10

A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the network readiness is pending. Which two configurations must be performed on the firewall to allow the AP to join the controller? (Choose two.)

A.

Block UDP ports 1812 and 1813 on the firewall.

B.

Enable NAT Address on the 5520 with an Internet-routable IP address.

C.

Configure a static IP on the OEAP 1810.

D.

Allow UDP ports 5246 and UDP port 5247 on the firewall.

E.

Allow UDP ports 12222 and 12223 on the firewall.

Full Access
Question # 11

An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted. Which cause of this issue is true?

A.

Fallback is enabled

B.

Fallback is disabled

C.

DNS query is disabled

D.

DNS query is enabled

Full Access
Question # 12

You are configuring the social login for a guest network. Which three options are configurable social connectors in Cisco CMX Visitor Connect? (Chose three)

A.

Linkedn

B.

Pinterest

C.

Medium

D.

Google+

E.

Facebook

F.

Myspace

Full Access
Question # 13

An engineer set up identity-based networking with ISE and configured AAA override on the WLAN. Which two attributes must be used to change the client behavior from the default settings? (Choose two.)

A.

DHCP timeout

B.

DNS server

C.

IPv6 ACL

D.

DSCP value

E.

multicast address

Full Access
Question # 14

An engineer is implementing a FlexConnect group for access points at a remote location using local switching but central DHCP. Which client feature becomes available only if this configuration is changed?

A.

multicast

B.

static IP

C.

fast roaming

D.

mDNS

Full Access
Question # 15

A network engineer must get an autonomous AP to authenticate to the upstream switch via IEEE 802.1 X. Drag and drop the commands from the left onto the right to complete the configuration.

Full Access
Question # 16

An engineer is in the process of implementing Fastlane on a wireless network with a Mobility Express AP installed. The network must support voice and video applications for Apple devices. Due to a security concern, all iPhones are updated to version 14.5.432302546. Which QoS profile must the engineer configure on the user WLAN?

A.

Bronze

B.

Best Effort

C.

Silver

D.

Platinum

Full Access
Question # 17

Refer to the exhibit.

An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

A.

Configure the certificate, WLAN, and radio interface on WGB.

B.

Configure the certificate on the WLC.

C.

Configure WLAN to authenticate using ISE.

D.

Configure the access point with the root certificate from ISE.

E.

Configure WGB as a network device in ISE.

F.

Configure a policy on ISE to allow devices to connect that validate the certificate.

Full Access
Question # 18

Which three properties are used for client profiling of wireless clients? (Choose three.)

A.

HTTP user agent

B.

DHCP

C.

MAC OUI

D.

hostname

E.

OS version

F.

IP address

Full Access
Question # 19

The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?

A.

WLAN local policy

B.

RADIUS server overwrite interface

C.

AAA override

D.

custom AVC profile

Full Access
Question # 20

Which statement about the VideoStream/Multicast Direct feature is true?

A.

IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.

B.

Each VideoStream client acknowledges receiving a video IP multicast stream.

C.

It converts the unicast frame to a multicast frame over the air.

D.

It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

Full Access
Question # 21

A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates instead of 802.11n data rates. To what must the WMM policy of the WLAN be set to accomplish this task?

A.

required

B.

allowed

C.

disabled

D.

mandatory

Full Access
Question # 22

A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure. Which two technologies must they deploy? (Choose two.)

A.

FlexConnect mode

B.

monitor mode

C.

sniffer mode with no submode

D.

local mode with WIPS submode

E.

rogue detector mode

Full Access
Question # 23

Company XYZ recently migrated from AireOS to IOS XE 9800 WLCs. The Internet bandwidth must be limited to 5 Mbps for each guest client as per the global standard. In which configuration on the Cisco Catalyst 9800 WLC must the QoS requirement be added?

A.

table map

B.

policy map

C.

service policy

D.

class map

Full Access
Question # 24

A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE.

The controllers are configured using auto-anchor for the guest network.

Which three components must be implemented for the foreign WLC?(Choose three.)

A.

DHCP RADIUS profiling enabled.

B.

HTTP RADIUS profiling enabled.

C.

UDP/1812-1813 open to ISE

D.

downloadable preauth ACL on ISE

E.

local preauth ACL on WLC

F.

WLAN Layer 2 security

Full Access
Question # 25

Refer to the exhibit.

A network architect configured the Cisco Catalyst 9800 Series Controller to find out information on client types in the wireless network. RADIUS profiling is enabled so that the controller forwards the information about clients to a Cisco ISE server through vendor-specific RADIUS attributes. The ISE server is not profiling any data from the controller. Which configuration must be added in the blank in the code to accomplish the profiling on the Cisco 9800 Series controller?

A.

aaa accounting identity acct_method start-stop group rad-group

B.

aaa accounting network acct_method start-stop group rad-group

C.

aaa accounting exec acct_method start-stop group rad-group

D.

aaa accounting commands acct_method start-stop group rad-group

Full Access
Question # 26

A network engineer is deploying 8865 IP phones with wireless clients connected to them. In order to apply the appropriate QoS, the IP voice traffic needs to be distinguished from client data traffic. Which switch configuration feature must be enabled?

A.

Voice VLAN

B.

QBSS

C.

WME

D.

QoS routing

Full Access
Question # 27

Refer to the exhibit. Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)

A.

TSPEC

B.

SIFS

C.

802.11e

D.

WMM

E.

APSD

Full Access
Question # 28

Refer to the exhibit.

An engineer is configuring a Cisco wireless LAN controller and needs wireless multicast to use the 54Mbps rates. Which action meets this requirement?

A.

Change the 24 Mpbs to Supported.

B.

Set all data rates below 54 Mbps to Supported.

C.

Change the 54 Mpbs to Mandatory.

D.

Set all data rates below 54 Mbps to Disable.

Full Access
Question # 29

Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

A.

FlexConnect ACL

B.

VLAN name override

C.

CCKM/OKC

D.

AAA override

Full Access
Question # 30

Refer to the exhibit.

A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that they are unable to connect. During troubleshooting, the engineer notices that the authentication requests are being dropped. Which action will resolve the issue?

A.

Allow connectivity from the wireless controller to the IP of the RADIUS server.

B.

Provide a valid client username that has been configured on the RADIUS server.

C.

Configure the shared-secret keys on the controller and the RADIUS server.

D.

Authenticate the client using the same EAP type that has been set up on the RADIUS server.

Full Access
Question # 31

Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

A.

1800s

B.

3600e

C.

3800s

D.

4800i

Full Access
Question # 32

An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

A.

The Cisco CMX instances are installed in the same subnet.

B.

The types of the primary and secondary Cisco CMX installations differ.

C.

The delay between the primary and secondary instance is 200 ms.

D.

The sizes of the primary and secondary Cisco CMX installations differ.

E.

Both Cisco CMX installations are virtual.

Full Access