300-430 Exam Questions
345 real 300-430 exam questions with expert-verified answers and explanations. Page 1 of 7.
- Question #1Device Hardening
For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change...
CPU ACLWLC securityaccess controltraffic filtering - Question #2FlexConnect
An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned...
FlexConnectVLAN-based central switchingISElocal switching - Question #3Wireless Security and Mobility
Which two events are outcomes of a successful RF jamming attack? (Choose two.)
RF jammingDoS attackWLAN disruptionwireless threats - Question #4Location Services
Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure and be able to track the location of clients/rogues on maps? (Choose two.)
MSE integrationPrime Infrastructurelocation licenseAP synchronization - Question #5Advanced Location Services
An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)
HyperlocationCMXcmxloclocation accuracy - Question #6Multicast
A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the i...
multicastunicast AP modeCPU overheadcontroller scalability - Question #7Security for Wireless Client Connectivity
Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps ar...
WGBEAP-TLScertificate authenticationISE policy - Question #8FlexConnect
On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no...
FlexConnectstandalone modelocal authSSID availability - Question #9Device Hardening
What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?
802.1xEAP-FASTCAPWAP DTLSCatalyst 9800 - Question #10QoS on a Wireless Network
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?
AutoQoSCatalyst 9800QoS policywireless QoS - Question #11Wireless Security and Mobility
An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?
rogue containmentAP containmentrogue APwireless security - Question #12Monitoring
What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?
DNA Centerissues and alarmstime rangemonitoring - Question #13FlexConnect
An engineer is implementing a FlexConnect group for access points at a remote location using local switching but central DHCP. Which client feature becomes available only if this c...
FlexConnectcentral DHCPlocal switchingstatic IP - Question #14Location Services
What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?
NMSPMSEecho intervalWLC communication - Question #15FlexConnect
An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his hom...
OfficeExtend APsplit tunnelinghome networkremote worker - Question #16Wireless Security and Mobility
When implementing self-registration for guest/BYOD devices, what happens when an employee tries to connect four devices to the network at the same time?
guest accessBYODself-registrationdevice limit - Question #17Advanced Location Services
Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?
HyperlocationAP Join ProfileCatalyst 9800location services - Question #18Monitoring and Troubleshooting
A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to t...
CleanAirinterference reportingPrime InfrastructureRF monitoring - Question #19Wireless Security and Mobility
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9. Which two ACLs for Cisco CWA must be configured when upgrading from the spec...
CWAACLAireOS upgradecentral web authentication - Question #20Location Services
Refer to the exhibit. The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the ca...
NMSPCMXpacket captureWLC-CMX communication - Question #21Location Services
CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)
CMXFacebook Wi-Ficaptive portalpre-authentication traffic - Question #22Advanced Location Services
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?
angle of arrivalAoAclient trackinglocation determination - Question #23FlexConnect
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)
OfficeExtendOEAPLayer 2 securityWPA2 - Question #24Device Hardening
Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?
CPU ACLWLC hardeningACL directiontraffic filtering - Question #25Security for Wireless Client Connectivity
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
EAP802.1Xsession keyRADIUS - Question #26FlexConnect
Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless...
FlexConnectstandalone modelocal switchinglocal authentication - Question #27WLAN Deployment
What is an important consideration when implementing a dual SSID design for BYOD?
BYODdual SSIDprovisioning SSIDnetwork access - Question #28Location Services
Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)
MSEPrime InfrastructureSOAPNMSP - Question #29Multicast
An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source. Which type of multi...
PIM Sparse Modemulticast routingvideo multicastsingle source - Question #30Location Services
Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?
DNA CenterCMXclient locationlocation integration - Question #31Device Hardening
An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary serve...
TACACS+fallbackAAAWLC management - Question #32Monitoring and Troubleshooting
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be ve...
ISERADIUSshared secretauthentication failure - Question #33WLAN Deployment
Refer to the exhibit. A network administrator deploys the DHCP profiler service in two ISE servers: 10.3.10.101 and 10.3.10.102. All BYOD devices connecting to WLAN on VLAN63 have...
DHCP profilingISEBYODDHCP proxy - Question #34Multicast
Which statement about the VideoStream/Multicast Direct feature is true?
VideoStreamMulticast Directmulticast acknowledgmentwireless multicast - Question #35FlexConnect
Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?
OEAPOfficeExtendFlex ProfileCatalyst 9800 - Question #36WLAN Deployment
A network engineer is implementing a wireless network and is considering deploying a single SSID for device onboarding. Which option is a benefit of using dual SSIDs with a captive...
dual SSIDcaptive portalBYOD onboardingclient configuration - Question #37Wireless Security and Mobility
A company wants to switch to BYOD to reduce IT support costs for the company. Which option is an impact of BYOD should be considered?
BYODsecurity impactphishingrisk assessment - Question #38WLAN Deployment
An engineer is configuring a BYOD deployment strategy and prefers a single SSID model. Which technology is required to accomplish this configuration?
BYODsingle SSIDISEidentity services - Question #39Wireless Design
An engineer is designing a high availability wireless network. What mechanism should be the focus for high availability?
high availabilitycell overlapwireless designcoverage redundancy - Question #40Multicast
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
mDNSFlexConnect restrictionIPv6UDP 5353 - Question #41Wireless Security and Mobility
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wirel...
local EAPRADIUS fallback802.1xWLC authentication - Question #42QoS on a Wireless Network
Which QoS level is recommended for guest services?
QoS levelsguest servicesbronzeWLC QoS profiles - Question #43WLAN Deployment
Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?
dynamic VLANAAA overrideVLAN mappingWLC - Question #44Advanced Location Services
Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)
HyperlocationCMXAP requirementsVM sizing - Question #45QoS on a Wireless Network
An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?
AVCapplication visibilityQoS markIP camera - Question #46QoS on a Wireless Network
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?
AVC profileWebExQoS overrideapplication policy - Question #47Wireless Security and Mobility
What two actions must be taken by an engineer configuring wireless Identity-Based Networking for a WLAN to enable VLAN tagging? (Choose two.)
identity-based networkingAAA overrideRADIUS VLAN attributesVLAN tagging - Question #48WLAN Deployment
You are configuring the social login for a guest network. Which three options are configurable social connectors in Cisco CMX Visitor Connect? (Choose three)
CMX Visitor Connectsocial loginguest accessOAuth connectors - Question #49Wireless Security and Mobility
An engineer has configured passive fallback mode for RADIUS with default timer settings. What will occur when the primary RADIUS fails then recovers?
RADIUS fallbackpassive modeinactive timerWLC RADIUS - Question #50Multicast
What is the difference between PIM sparse mode and PIM dense mode?
PIM sparse modePIM dense modemulticast distribution treesflooding