300-430 Exam Questions
345 real 300-430 exam questions with expert-verified answers and explanations. Page 2 of 7.
- Question #51QoS on a Wireless Network
Refer to the exhibit. Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)
VoWLANWMM802.11eAPSD - Question #52Security for Wireless Client Connectivity
A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has bee...
WPA2-Enterprise802.1XPEAPauthentication server policy - Question #53Monitoring and Troubleshooting
A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the co...
NMSPMSEwIPSprotocol - Question #54Wireless Security and Mobility
A company is deploying wireless PCs on forklifts within its new 10,000-square-foot (3048-square- rneter) facility. The clients are configured for PEAP-MS-CHAPv2 with WPA TKIP. User...
client roamingWPA2 AESTKIPfast roaming - Question #55Monitoring and Troubleshooting
An engineer is troubleshooting rogue access points that are showing up in Cisco Prime Infrastructure. What is maximum number of APS the engineer can use to contain an identified ro...
rogue AP containmentWLCcontainment APsrogue mitigation - Question #56Monitoring
The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose...
Cisco Prime Infrastructurereport formatsguest userCSV PDF - Question #57Location Services
Which devices can be tracked with the Cisco Context Aware Services?
Context Aware Servicesdevice trackingMSEwired wireless - Question #58Multicast
All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?
IGMP snoopingmulticastAP multicastWLC multicast - Question #59Device Hardening
An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on th...
TACACS+management accessAAAauthorization - Question #60Monitoring
Which customizable security report on Cisco Prime Infrastructure would show rogue APs detected since a point in time?
Cisco Primerogue AP eventssecurity reportreporting - Question #61Monitoring and Troubleshooting
After receiving an alert about a rogue AP, a network engineer logs into Cisco Prime Infrastructure and looks at the floor map where the AP that detected the rogue is located. The m...
rogue APcontainmentCisco Prime InfrastructureMSE - Question #62Wireless Security and Mobility
A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE. The controllers are configured using auto-anchor for the guest netw...
central web authenticationCisco ISEauto-anchorforeign WLC - Question #63Location Services
An engineer is adding APs to an existing VoWLAN to allow for location based services. Which option will the primary change be to the network?
VoWLANlocation servicesAP footprintwireless design - Question #64WLAN Deployment
A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees...
VLAN assignmentCisco ISESSID designscalability - Question #65Security for Wireless Client Connectivity
A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)
BYODmalwarelost devicessecurity risks - Question #66Security for Wireless Client Connectivity
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to...
identity-based networkingdownloadable ACLCisco ISEAireOS WLC - Question #67Evolving Technologies
Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?
Cisco DNA CenterAironet Active SensorAP model1800s - Question #68FlexConnect
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is levera...
FlexConnectSmart AP Image UpgradeFlexConnect Master APcode upgrade - Question #69Wireless Security and Mobility
Which three characteristics of a rogue AP pose a high security risk? (Choose three.)
rogue APsecurity riskopen authenticationrogue detection - Question #70Monitoring and Troubleshooting
An administrator receives reports of many interferers in the wireless network and wants to get the location of these interferers from the maps in Cisco Prime Infrastructure. When l...
Cisco Prime InfrastructureMSEinterferer trackinglocation troubleshooting - Question #71Security for Wireless Client Connectivity
You plan to implement Cisco Identity Based Networking Services on a Cisco Catalyst 3850 Series Switch. Which switch command is required when configuring downloadable ACLs?
IBNSdownloadable ACLCatalyst 3850ip device tracking - Question #72WLAN Deployment
Which CLI command do you use to shut down the 2.4 GHz radio of the Floor1_AP1 AP on a Cisco 3850 Switch?
AP radio managementCatalyst 3850CLI syntax2.4 GHz - Question #73Security for Wireless Client Connectivity
Which three properties are used for client profiling of wireless clients? (Choose three.)
client profilingDHCPMAC OUIHTTP user agent - Question #74FlexConnect
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?
Catalyst 9800local switchingFlexConnectAP switch port - Question #75Advanced Location Services
An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of...
Cisco CMXhigh availabilityCMX installation typesCMX sizing - Question #76QoS on a Wireless Network
An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set...
QoSCoSDSCPvoice traffic - Question #77Security for Wireless Client Connectivity
Refer to the exhibit. You enter the command on a Cisco Catalyst 3850 Series Switch that runs Cisco ISO XE. What does the command do?
Catalyst 3850IOS XEauthorization policyaccess level - Question #78Monitoring and Troubleshooting
A wireless engineer has performed a Wireshark capture on an 802.1x authentication process to troubleshoot a connectivity issue. Which two types of packet does the EAP contain? (Cho...
802.1xEAPWiresharkpacket capture - Question #79Wireless Security and Mobility
Which EAP method can an AP use to authenticate to the wired network?
EAP-TLSAP authentication802.1xwired network - Question #80Security for Wireless Client Connectivity
An engineer is considering an MDM integration with Cisco ISE to assist with security for lost devices. Which two functions of MDM increase security for lost devices that access dat...
MDMCisco ISElost devicesBYOD security - Question #81Security for Wireless Client Connectivity
An engineer is setting up a new unique NAD on a Cisco ISE. Which two parameters must be configured? (Choose two.)
ISENADRADIUS shared secretdevice IP - Question #82Security for Wireless Client Connectivity
An engineer has configured the wireless controller to authenticate clients on the employee SSID against Microsoft Active Directory using PEAP authentication. Which protocol does th...
PEAPRADIUS802.1XEAP authentication - Question #83Wireless Security and Mobility
Which condition introduce security risk to a BYOD policy?
BYODMDMnetwork access controlsecurity policy - Question #85FlexConnect
When configuring a Cisco WLC, which CLI command adds a VLAN with VLAN ID of 30 to a FlexConnect group named BranchA-FCG?
FlexConnect groupVLANCLIWLC configuration - Question #86Wireless Security and Mobility
An engineer must implement intrusion protection on the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes addin...
WIPSmonitor modeAP submodeintrusion protection - Question #87Monitoring and Troubleshooting
Refer to the exhibit. An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP-PEAP cannot connect to the network. Based on the local EAP debug controller...
local EAPPEAPWLC debugEAP profile - Question #88Multicast
Which two configurations are applied on the WLC to enable multicast, check multicast stream subscriptions, and stream content only to subscribed clients? (Choose two)
IGMP snoopingmulticastIGMP timeoutWLC - Question #89Multicast
Which configuration is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one con...
IGMP snoopingmulticast roamingLayer 2 floodinginter-controller - Question #90QoS on a Wireless Network
A corporation has a wireless network where all access points are configured in FlexConnect. The WLC has a Data WLAN and a VoWiFi WLAN implemented where centrally-switched is config...
DSCPQoSFlexConnectVoWiFi - Question #91FlexConnect
What is configured to use more than one port on the OEAP to extend the wired network's?
OEAPremote LANwired extensionport configuration - Question #92Device Hardening
An engineer must create an account to log in to the CLI of an access point for troubleshooting. Which configuration on the WLC will accomplish this?
AP CLI accessWLC user accessaccess credentialsmanagement - Question #93FlexConnect
A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensur...
FlexConnectlocal authenticationWAN optimizationMPLS - Question #94Location Services
An engineer must track guest traffic flow using the WLAN infrastructure. Which Cisco CMX feature must be configured and used to accomplish this tracking?
CMXpresenceguest trackingtraffic flow - Question #95Monitoring and Troubleshooting
Refer to the exhibit. An engineer tries to manage the rogues on the Cisco WLC. Based on the configuration, which AP is marked as malicious by the controller?
rogue APmalicious classificationRSSI thresholdrogue management - Question #96Advanced Location Services
An engineer must achieve the highest level of location accuracy possible for a new mobile application. Which technology must be implemented for this use case?
TDOAlocation accuracyBLElateration - Question #97WLAN Deployment
The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which f...
WLAN local policydevice classificationVLAN assignmentAndroid - Question #98Security for Wireless Client Connectivity
What must be configured on the Global Configuration page of the WLC for an AP to use 802.1x to authenticate to the wired infrastructure?
802.1XAP supplicantwired authenticationsupplicant credentials - Question #99Monitoring and Troubleshooting
Refer to the exhibit. An engineer needs to manage non-802.11 interference. What is observed in the output on PI?
RF interferenceCleanAirPrime Infrastructurespectrum analysis - Question #100Security for Wireless Client Connectivity
A customer is deploying local web authentication. Which software application must be implemented on Cisco ISE to utilize as a directory service?
local web authenticationLDAPISEdirectory service - Question #101Security for Wireless Client Connectivity
What must be configured on ISE version 2.1 BYOD when using Single SSID?
BYOD802.1xISESingle SSID