300-430 Exam Questions
345 real 300-430 exam questions with expert-verified answers and explanations. Page 3 of 7.
- Question #102Device Hardening
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created...
CPU ACLpre-authentication ACLguest portalISE - Question #103Location Services
A network engineer has been hired to perform a new MSE implementation on an existing network. The MSE must be installed in a different network than the Cisco WLC. Which configurati...
MSENMSPTCP port 16113firewall - Question #104QoS on a Wireless Network
A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow use...
AVC profileJabberQoSPlatinum class - Question #105Monitoring and Troubleshooting
The security policy mandates that only controller web management traffic is allowed from the IT subnet. In testing, an engineer is trying to connect to a WLAN with Web Authenticati...
CPU ACLweb authenticationguest WLANHTTP/HTTPS blocking - Question #107FlexConnect
Refer to the exhibit. A customer has implemented Cisco FlexConnect deployments with different WLANs around the global and is opening a new branch in a different location. The engin...
FlexConnecttrunk modeswitch portVLAN - Question #108Monitoring and Troubleshooting
After looking in the logs, an engineer notices that RRM keeps changing the channels for non- IEEE 802. 11 interferers. After surveying the area, it has been decided that RRM should...
RRMnon-802.11 interferencepersistent interferencechannel assignment - Question #109Multicast
An engineer is configuring multicast for two WLCs. The controllers are in different physical locations and each handles around 500 wireless clients. How should the CAPWAP multicast...
CAPWAP multicastmulticast group addressWLCunique group per WLC - Question #110Security for Wireless Client Connectivity
An engineer must implement a BYOD policy with these requirements: - Onboarding unknown machines - Easily scalable - Low overhead on the wireless network Which method satisfies thes...
BYODsingle SSIDonboardingscalability - Question #111Device Hardening
A wireless engineer must configure access control on a WLC using a TACACS+ server for a company that is implementing centralized authentication on network devices. Which role must...
TACACS+shell profileread-only accessWLC management - Question #112Monitoring
An engineer must provide a graphical report with summary grouped data of the total number of wireless clients on the network Which Cisco Prime Infrastructure report provides the re...
Prime InfrastructureClient Summary reportwireless clientsreporting - Question #113QoS on a Wireless Network
A network engineer wants to implement QoS across the network that supports multiple VLANs. All the APs are connected to switch ports and are configured in local mode. Which trust m...
QoSDSCP trustswitch portAP uplink - Question #114Device Hardening
Refer to the exhibit. An engineer must restrict some subnets to have access to the WLC. When the CPU ACL function is enabled. No ACLs in the drop-down list are seen. What is the ca...
CPU ACLWLC managementACL configurationaccess control - Question #115Security for Wireless Client Connectivity
An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?
ISE profilingPolicy Services Nodedistributed deploymentBYOD - Question #116FlexConnect
An organization is supporting remote workers in different locations. In order to provide wireless network connectivity and services, OfficeExtend has been implemented. The wireless...
OfficeExtendOEAP split tunnellocal switchingremote worker - Question #117Monitoring
An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN. Which output is produced when the Adaptive wIPS Top 10 AP report is run?
Adaptive wIPSPrime Infrastructuremonitor mode APwIPS reporting - Question #118Security for Wireless Client Connectivity
A wireless engineer is configuring LWA using ISE. The customer is a startup company and requested the wireless users to authenticate against a directory, but LDAP is unavailable. W...
LWAISERADIUS internal databaseguest authentication - Question #119Advanced Location Services
An engineer has successfully implemented 10 active RFID tags in an office environment The tags are not visible when the location accuracy is tested on the Cisco CMX Detect and Loca...
CMXRFID tagstracking optionsDetect and Locate - Question #120Device Hardening
An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to r a h a Web Authentication Redirect page. To which IP...
CPU ACLweb authentication redirectvirtual interfaceguest HTTPS - Question #121Multicast
An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a r...
Multicast DirectFlexConnectMediaStreamwireless multicast - Question #122Security for Wireless Client Connectivity
An engineer needs to configure an autonomous AP for 802.1x authentication. To achieve the highest security an authentication server is used for user authentication During testing,...
802.1xRADIUSautonomous APshared secret - Question #123QoS on a Wireless Network
A company is collecting the requirements for an on-premises event. During the event, a wireless client connected to a dedicated WLAN will run a video application that will need on...
QoS markingvideo streamingGold QoSbandwidth requirements - Question #124Wireless Security and Mobility
Refer to the exhibit. The security team has implemented ISE as an AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successf...
ISECoA portRADIUSAAA - Question #125Wireless Security and Mobility
An engineer set up identity-based networking with ISE and configured AAA override on the WLAN. Which two attributes must be used to change the client behavior from the default sett...
ISEAAA overrideidentity-based networkingDSCP - Question #126Multicast
A wireless network has been implemented to enable multicast video to be streamed reliably over the wireless link to the wireless users. After a client reports that the video is una...
Multicast Directvideo streammulticastdata rate - Question #127Security for Wireless Client Connectivity
Refer to the exhibit. A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that th...
RADIUSshared secret802.1xauthentication - Question #128Location Services
An engineer must configure MSE to provide guests access using social media authentication. Which service does the engineer configure so that guests use Facebook credentials to auth...
MSESocial Connectguest accesssocial authentication - Question #129QoS on a Wireless Network
An enterprise started using WebEx as a virtual meeting solution. There is a concern that the existing wireless network will not be able to support the increased amount of traffic a...
AVCapplication visibilityQoS remarkingWebEx - Question #130QoS on a Wireless Network
A network engineer is deploying 8865 IP phones with wireless clients connected to them. In order to apply the appropriate QoS, the IP voice traffic needs to be distinguished from c...
Voice VLANQoSIP phonetraffic classification - Question #131Wireless Security and Mobility
An engineer is setting up a WLAN to work with a Cisco ISE as the AAA server. The company policy requires that all users be denied access to any resources until they pass the valida...
ISEpreauthentication ACLAAAaccess control - Question #132Location Services
An engineer just added a new MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, which is located behind a firewall in a DMZ. It is noticed...
NMSPMSEWLCfirewall ports - Question #133Advanced Location Services
The Cisco Hyperlocation detection threshold is currently set to -50 dBm. After reviewing the wireless user location, discrepancies have been noticed. To improve the Cisco Hyperloca...
Hyperlocationdetection thresholdCMXlocation accuracy - Question #134Location Services
An IT department receives a report of a stolen laptop and has information on the MAC address of the laptop. Which two settings must be set on the wireless infrastructure to determi...
client location trackingMSEtracking optimizationrogue client - Question #137QoS on a Wireless Network
An enterprise has recently deployed a voice and video solution available to all employees using AireOS controllers. The employees must use this service over their laptops, but user...
AVCapplication visibilitybandwidth managementQoS - Question #138FlexConnect
An engineer is responsible for a wireless network for an enterprise. The enterprise has distributed offices around the globe, and all APs are configured in FlexConnect mode. The ne...
FlexConnect groups802.11rCCKMfast roaming - Question #139Advanced Location Services
Refer to the exhibit. An engineer needs to configure location services in an office. The requirement is to use FastLocate and achieve higher locations refresh rates. Which location...
FastLocatedata packet-basedlocation refreshlocation technique - Question #140Location Services
An engineer is managing a wireless network for a shopping center. The network includes a Cisco WLC, a Cisco MSE, and a Cisco Prime Infrastructure. What is required to use Cisco CMX...
CMXLocation AnalyticsMSEtracking parameters - Question #141Advanced Location Services
An engineer configures a deployment to support: - Cisco CMX - licenses for at least 3000 APs - 6000 wIPS licenses The Cisco vMSE appliance must be sized for this deployment. Which...
vMSE sizingCMX deploymentwIPS licensesAP capacity - Question #142Advanced Location Services
A Cisco CMX 3375 appliance on the 10.6.1 version code counts duplicate client entries, which creates wrong location analytics. The issue is primarily from iOS clients with the priv...
CMX upgradehigh availabilityprivate MACiOS clients - Question #143Advanced Location Services
An engineer has implemented advanced location services for a retail wireless deployment. The marketing department wants to collect user demographic information in exchange for gues...
CMX social connectorguest WLANFacebook integrationlocation analytics - Question #144Advanced Location Services
What are two considerations when deploying a Cisco Hyperlocation? (Choose two.)
HyperlocationCMX configurationWLC settingsVM sizing - Question #145Security for Wireless Client Connectivity
An engineer has implemented 802.1x authentication on the wireless network utilizing the internal database of a RADIUS server. Some clients reported that they are unable to connect....
802.1x authenticationPEAPRADIUSserver certificate - Question #146Security for Wireless Client Connectivity
A customer wants to allow employees to easily onboard their personal devices to the wireless network. The visitors also must be able to connect to the same network without the need...
ISE guest portalself-registrationBYOD onboardingdevice provisioning - Question #147FlexConnect
A customer has a distributed wireless deployment model where the WLCs are located in the data centers. Because the file servers are located in the data center, the traffic from the...
FlexConnect local switchingWLAN trafficsplit tunnelingdistributed deployment - Question #148Wireless Security and Mobility
A multitenant building contains known wireless networks in most of the suites. Rogues must be classified in the WLC. How are the competing wireless APs classified?
rogue AP classificationfriendly rogueWLC rogue managementmultitenant - Question #149FlexConnect
An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the management interface, it is noticed that the WLC is not responding for...
OEAPNAT configurationAP discoverynat-ip-only - Question #150Multicast
A network engineer needs to configure multicast in the network. The implementation will use multiple multicast groups and PIM routers. Which address provides automatic discovery of...
multicast RPBIDIR-PIMauto-RPmulticast addressing - Question #151Wireless Security and Mobility
A healthcare organization notices many rogue APs and is concerned about a honeypot attack. Which configuration must a wireless network engineer perform in Cisco Prime Infrastructur...
rogue containmenthoneypot attackauto containmentPrime Infrastructure - Question #152Monitoring
Which customizable security report on Cisco Prime Infrastructure will show rogue APs detected since a point in time?
rogue AP reportingPrime Infrastructuresecurity reportsrogue detection - Question #153FlexConnect
In a Cisco WLAN deployment, it is required that all APs from branch1 remain operational even if the control plane CAPWAP tunnel is down because of a WAN failure to headquarters. Wh...
FlexConnect standalone modeWAN failureCAPWAP tunnelbranch AP - Question #154FlexConnect
An engineer wants to upgrade the APs in a Cisco FlexConnect group. To accomplish this upgrade, the FlexConnect AP Upgrade setting will be used One AP of each model with the lowest...
FlexConnect AP upgrademaster APAP groupfirmware upgrade