300-430 Exam Questions
345 real 300-430 exam questions with expert-verified answers and explanations. Page 4 of 7.
- Question #156Device Hardening
A customer wants the APs in the CEO's office to have different usernames and passwords for administrative support than the other APs deployed throughout the facility. Which feature...
AP credentialsoverride global credentialslocal managementadministrative access - Question #157FlexConnect
A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location. Which Cisco FlexConnec...
FlexConnect central switchingcentral authenticationbranch trafficfirewall routing - Question #158Advanced Location Services
A customer managing a large network has implemented location services. Due to heavy load, it is needed to load balance the data coming through NMSP from the WLCs. Load must be spre...
CMX load balancingNMSPAP groupingcmxctl configuration - Question #159Monitoring
A wireless network engineer must present a list of all rogue APs with a high severity score to senior management. Which report must be created in Cisco Prime Infrastructure to prov...
rogue AP reportingseverity scorePrime Infrastructuremanagement reporting - Question #160Security for Wireless Client Connectivity
An engineer needs to provision certificates on a Cisco Catalyst 9800 Series Wireless Controller. The customer uses a third-party CA server. Which protocol must be used between the...
SCEPcertificate provisioningthird-party CACatalyst 9800 - Question #161FlexConnect
An enterprise has two WLANs configured on WLC. It is reported that when converting APs to FlexConnect mode. WLAN A works but WLAN B does not. When converting APs to local mode. WLA...
FlexConnect groupWLAN-VLAN mappinglocal switchingAireOS WLC - Question #162QoS on a Wireless Network
An engineer has configured Media Stream on the WLC and must guarantee at least 2 Mbps stream per user. Which RRC template should the engineer use?
Media StreamRRC templatebandwidth guaranteeWLC QoS - Question #163QoS on a Wireless Network
Refer to the exhibit. Which COS to DSCP map must be modified to ensure that voice traffic is tagged correctly as it traverses the network?
CoS to DSCP mappingvoice traffic markingDSCP EFQoS - Question #164Monitoring
An engineer must run a Client Traffic Stream Metrics report in Cisco Prime Infrastructure. Which task must be run before the report?
Prime InfrastructureClient Traffic Stream Metricsradio performancereporting - Question #165FlexConnect
A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the control...
OEAP 1810CAPWAP portsfirewall configurationteleworker - Question #166Wireless Security and Mobility
A network engineer is implementing BYOD on a wireless network. Based on the customer requirements, a dual SSID approach must be taken. Which two advanced WLAN configurations must b...
BYODdual SSIDAAA OverrideRADIUS NAC - Question #167WLAN Deployment
What is the Cisco recommended configuration for a Cisco switch port connected to an AP in local mode for optimal voice over WLAN performance with an 8821 wireless phone?
switch port configurationAP local modevoice WLANCisco 8821 - Question #168QoS on a Wireless Network
An IT administrator is managing a wireless network in which most devices are Apple iOS. A QoS issue must be addressed on the WLANs. Which configuration must be performed?
FastlaneiOS QoSWMMWLAN configuration - Question #169Location Services
After installing and configuring Cisco CMX, an administrator must change the NTP server on the Cisco CMX server. Which action accomplishes this task?
CMXNTP serverCLI configurationsystem setup - Question #170Location Services
A shopping center uses AireOS controllers with Cisco Wave 2 APs. A separate WLAN named Guest-012345678-WLAN is used for guest wireless clients. Management needs location analytics...
CMXprobing clientslocation analyticsassociated clients - Question #171Monitoring and Troubleshooting
Refer to the exhibit. Which area indicates the greatest impact on the wireless network when viewing the Cisco CleanAir Zone of Impact map of interferers?
CleanAirZone of ImpactinterferersRF monitoring - Question #172Security for Wireless Client Connectivity
An ACL is configured to restrict access for BYOD clients. The ACL must redirect devices to the guest portal. To which two devices on the local network must the ACL allow access oth...
BYOD ACLguest portal redirectCisco ISEDNS - Question #173Multicast
The marketing department creates a promotion video for the branch store. Only interested hosts must receive the video over wireless multicast. What allows this feature?
WMFwireless multicastvideo streamingIGMP - Question #174FlexConnect
On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoper...
FlexConnectEthernet failoverstandalone modeCatalyst 9800 - Question #175Monitoring and Troubleshooting
An engineer is concerned that a wireless attack is causing client connectivity issues. Which Cisco Prime Infrastructure report does the engineer run to determine if the user was in...
adaptive wIPSPrime Infrastructurewireless attackssecurity reporting - Question #176Wireless Security and Mobility
An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismat...
ISE certificateSAN certificateguest portalCN mismatch - Question #178Wireless Security and Mobility
A network administrator managing a Cisco Catalyst 9800 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 to d...
device profilinglocal policyVLAN assignmentiOS classification - Question #179Location Services
An engineer is deploying a virtual MSE. The network has 3000 APs and needs 7000 IPS licenses. To which size server does the engineer scale it?
MSE sizingvirtual MSEIPS licensescapacity planning - Question #180Advanced Location Services
An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?
LSSmDNSAppleTV serviceservice origin - Question #181WLAN Deployment
ALLAR A network engineer must segregate all iPads on the guest WLAN to a separate VLAN. How does the engineer accomplish this task without using Cisco ISE?
local policydevice profilingVLAN segmentationWLC - Question #182Advanced Location Services
A hospital wants to offer indoor directions to patient rooms utilizing its existing wireless infrastructure. The wireless network has been using location services specifications. W...
indoor navigationCMX AnalyticsMSElocation services - Question #183Wireless Security and Mobility
When configuring a large, high-availability wireless network which change to a mobility group creates less load on the controllers and maintains the same mobility messages?
mobility grouphigh availabilitycontroller loadmulticast messaging - Question #184Advanced Location Services
A Cisco 8540 WLC manages Cisco Aironet 4800 Series APs and sends AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual C...
HyperlocationAoACMX groupingCMX appliance - Question #185Security for Wireless Client Connectivity
A network is set up to support wired and wireless clients. Both types must authenticate using 802.1X before connecting to the network. Different types of client authentication must...
802.1XISE policy setswired wirelessauthentication separation - Question #186Monitoring and Troubleshooting
An engineer is troubleshooting a Cisco CMX high-availability deployment and notices that the primary and backup Cisco CMX servers are both considered primary. Which command must th...
CMX high availabilitycmxha commandprimary backuptroubleshooting - Question #187Monitoring
An engineer is assembling a PCI report for compliance purposes and must include missed best practices that are related to WLAN controllers. The engineer has access to all WLCs, Cis...
PCI compliancePrime InfrastructureWLC reportingbest practices - Question #188Security for Wireless Client Connectivity
An engineer is ensuring that, on the IEEE 802.1X wireless network, clients authenticate using a central repository and local credentials on the Cisco WLC. Which two configuration e...
802.1Xlocal EAPLDAPWLAN authentication - Question #189Monitoring and Troubleshooting
A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center i...
DNA CenterAP health scoreCleanAir interferenceRF metrics - Question #190Device Hardening
An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features...
WLC admin accessActive DirectoryRADIUSTACACS - Question #191Location Services
An engineer added more APs to newly renovated areas in building. The engineer is now receiving Out-of-Sync alarms on Cisco Prime Infrastructure. Which two actions resolve this issu...
Prime InfrastructureMSE syncout-of-sync alarmsAP maps - Question #192WLAN Deployment
A wireless administrator must assess the different client types connected to Cisco Catalyst 9800 Series Wireless Controller without using any external servers. Which configuration...
device classificationclient profilingCatalyst 9800no external server - Question #193Wireless Security and Mobility
A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure. Which two technologies mus...
WIPSmonitor moderogue detectionwireless security - Question #194QoS on a Wireless Network
A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates inst...
WMM policyguest WLANdata rates802.11n - Question #195Device Hardening
Refer to the exhibit. An engineer implemented the CPU ACL on your Cisco 5520 Series Wireless LAN Controller, and the controller is no longer manageable via the network. What must b...
CPU ACLWLC managementACL directionaccess control - Question #196FlexConnect
An IT administrator deployed an OEAP to the home of a remote user, but the OEAP cannot reach the WLC. Which two configuration settings must be completed before an OEAP is deployed...
OEAPFlexConnectOffice Extendprimary controller - Question #197FlexConnect
An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the mai...
FlexConnect local switchingVLAN mappingbranch APlocal LAN - Question #198QoS on a Wireless Network
An engineer is in the process of implementing Fastiane on a wireless network with a Mobility Express AP installed and Apple end-user devices. Due to a security concern, the IT depa...
FastlaneQoS profileplatinumApple devices - Question #199Location Services
Refer to the exhibit. An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogue...
NMSPlocation update intervalCMXrogue notification - Question #200Multicast
Refer to the exhibit. An engineer is configuring a Cisco wireless LAN controller and needs wireless multicast to use the 54Mbps rates. Which action meets this requirement?
multicastdata ratesmandatory rateWLC configuration - Question #202WLAN Deployment
A network administrator managing a Cisco Catalyst 9800 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 dist...
device profilinglocal policyVLAN assignmentdevice classification - Question #203WLAN Deployment
An engineer is planning an image upgrade of the WLC, and hundreds of APs are spread across remote sites with limited WAN bandwidth. The engineer must minimize the WAN utilization f...
AP image upgradeSmart AP upgradeWAN bandwidthremote sites - Question #204Multicast
Refer to the exhibit. An engineer configured a BYOD policy that allows for printing on the WLAN using Bonjour services. However, the engineer cannot get printing to work. The WLC f...
mDNSBonjourIGMP snoopingBYOD printing - Question #205Advanced Location Services
A network administrator just completed the basic implementation of Cisco CMX and tries to implement location tracking. The administrator is having trouble establishing connectivity...
NMSPCMXWLC integrationfirewall port 16113 - Question #206Location Services
Refer to the exhibit. An engineer must provide a position of rogue APs on a floor map using Cisco PI 3.0, but no rogue AP options are showing on the left-hand navigation menu under...
Cisco PIMSErogue APfloor map - Question #207Security for Wireless Client Connectivity
WPA2 Enterprise with 802.1X is being used for clients to authenticate to a wireless network through a Cisco ISE server. For security reasons, the network engineer wants to ensure t...
PEAPEAP-FASTAAA overrideISE access policy