Updated May-2022 Test Engine to Practice 300-430 Test Questions [Q48-Q70]

4/5 - (1 vote)

Updated May-2022 Test Engine to Practice 300-430 Test Questions

300-430 Real Exam Questions Test Engine Dumps Training With 160 Questions

Prerequisites for Cisco 300-430 Exam

The targeted audience for this exam is those individuals who work as Network Designers, Wireless Network Engineers, and Sales Engineers. The potential candidates pursuing this certification test shouldn’t meet any requirements. However, they must be adequately prepared and possess a deep understanding of the exam topics before taking Cisco 300-430. Please note that it will be easier for you to possess a minimum of 3 years of working experience in implementing enterprise networking solutions.

Obtaining the CCNP Enterprise certification proves that the professionals have the expertise in enterprise networking solutions. To earn this certificate, the applicants are required to pass two exams. One of them covers core enterprise technologies, while the second is a concentration test (there are six exams of this category for this path) of your choice. Cisco 300-430 will evaluate your skills and knowledge of the implementation of the wireless network. Completing this test allows you to get the Cisco Certified Specialist – Enterprise Wireless Implementation certification, in addition to CCNP Enterprise.

NO.48 A customer requires that the remote site be able to utilize local servers when the AP is in WAN-down (standalone mode). Which AP mode must be configured on the wireless controller?

SE-Connect

Monitor

Local

FlexConnect

Sniffer

Rogue Detector

Explanation/Reference:
References: http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-2/configuration/guide/cg/ cg_flexconnect.html

NO.49 Refer to the exhibit.

The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?

Disable KeyWrap

Change the CoA Port

Correct the shared secret.

Use ASCII for the key input format

NO.50 An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

permit-ACL

WMM required

mark

rate-limit

NO.51 An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted. Which cause of this issue is true?

DNS query is enabled

Fallback is enabled

Fallback is disabled

DNS query is disabled

NO.52 Which three properties are used for client profiling of wireless clients? (Choose three.)

HTTP user agent

DHCP

MAC OUI

hostname

OS version

IP address

Explanation

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/NativeProfiling75.html

NO.53 Which statement about the VideoStream/Multicast Direct feature is true?

IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.

Each VideoStream client acknowledges receiving a video IP multicast stream.

It converts the unicast frame to a multicast frame over the air.

It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

NO.54 Which configured is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one controller to another?

Enable IGMPv3 on the central Layer 3 switch.

Enable multicast mode on the WLC

Create multicast groups on the central Layer 3 switch.

Enable IGMP snooping on the WLC

https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01011.html

NO.55 An engineer must achieve the highest level of location accuracy possible for a new mobile application. Which technology must be implemented for this use case?

Time Difference of Arrival

Bluetooth Low Energy

RSS lateration

ToA lateration

Explanation
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBSDG/wifich2.html

NO.56 Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?

Policy Profile

AP Join Profile

Flex Profile

RF Profile

Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/cisco- hyperlocation.html

NO.57 An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

permit-ACL

WMM required

mark

rate-limit

NO.58 #300 #301 A network administrator managing a Cisco Catalyst 9800-80 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 to distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC. Which two configurations are required? (Choose two.) KO O

Enable device classification on global wireless settings. “

Assign a policy map under global security policy settings.

Add local profiling policy under global security policy settings

Create a service template

Allow HTTP and DHCP profiling under policy map.

NO.59 An engineer must configure MSE to provide guests access using social media authentication. Which service does the engineer configure so that guests use Facebook credentials to authenticate’?

Visitor Connect

Client Connect

Social Connect

Guest Connect

NO.60 Which statement about when you configure FlexConnect APs and you want to set up Cisco Centralized Key Management fast roaming is true?

FlexConnect groups are required for Cisco Centralized Key Management fast roaming to work with FlexConnect access points.

APs that are in the same FlexConnect group but associated to different WLCs support Cisco Centralized Key Management.

Cisco Centralized Key Management fast roaming among FlexConnect and non-FlexConnect access points is supported.

The FlexConnect access point must be in standalone mode to support Cisco Centralized Key Management.

References: http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/ Enterprise_Mobility_8-1_Deployment_Guide/ch7_HREA.html

NO.61 CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available?
(Choose two.)

Allow HTTP traffic only before authentication and block all the traffic.

Allow all the traffic before authentication and intercept HTTPS only.

Allow HTTPs traffic only before authentication and block all other traffic.

Allow all the traffic before authentication and intercept HTTP only.

Allow SNMP traffic only before authentication and block all the traffic.

NO.62 An engineer is managing a wireless network for a shopping center. The network includes a Cisco WLC, a Cisco MSE, and a Cisco Prime Infrastructure. What is required to use Cisco CMX Location Analytics?

Enable tracking parameters in Cisco MSE.

Enable Context Aware and CMX Browser Engage.

Install Cisco Prime Infrastructure with floor maps.

Set history parameters in Cisco MSE.

Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-6/cmx_config/b_cg_cmx106/getting_started_with_c

NO.63 Refer to the exhibit.

An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP-PEAP cannot connect to the network. Based on the local EAP debug controller provided, why is the client unable to connect?

The client is falling to accept certificate.

The Cisco WLC is configured for the incorrect date.

The user is using invalid credentials.

The Cisco WLC local EAP profile is misconfigured

NO.64 An engineer has implemented 802.1x authentication on the wireless network utilizing the internal database of a RADIUS server. Some clients reported that they are unable to connect. After troubleshooting, it is found that PEAP authentication is failing. A debug showed the server is sending an Access-Reject message. Which action must be taken to resolve authentication?

Update the client certificate to match the user account.

Use the user password that is configured on the server.

Disable the server certificate to be validated on the client.

Replace the client certificates from the CA with the server certificate.

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_troubleshooting.html

NO.65 An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)

X, Y real location

client description

AP name

client MAC address

WLC IP address

NO.66 A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)

network analyzers

malware

lost and stolen devices

keyloggers

unauthorized users

NO.67 A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC. Which configuration should be used to accomplish this goal?

FlexConnect mode with OfficeExtend enabled

FlexConnect mode with local authentication

FlexConned mode with central switching enabled

FlexConnect mode with central authentication

Explanation

https://www.cisco.com/c/en/us/td/docs/wireless/controller/72/configuration/guide/cg/cg_flexconnect.html#wp12

NO.68 Refer to the exhibit.

An engineer tries to manage the rogues on the Cisco WLC. Based on the configuration, which AP is marked as malicious by the controller?

rogue AP with SSlD admin seen for 4000 seconds and heard at -60 dBm

rogue AP with SSID admin seen for 3000 seconds and heard at -70 dBm

rogue AP with SSlD admin seen for 4000 seconds and heard at -70 dBm

rogue AP with SSID admin seen for 3000 seconds and heard at -60 dBm

NO.69 What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?

10 seconds

15 seconds

30 seconds

60 seconds

NO.70 An engineer must track guest traffic flow using the WLAN infrastructure. Which Cisco CMX feature must be configured and used to accomplish this tracking?

analytics

connect and engage

presence

detect and locate.