300-430 Exam Questions
345 real 300-430 exam questions with expert-verified answers and explanations. Page 5 of 7.
- Question #208Monitoring and Troubleshooting
Refer to the exhibit. What is the reason that the wireless client cannot get the RUN state?
client RUN stateDHCPIP address assignmentclient troubleshooting - Question #209FlexConnect
A wireless engineer deployed all remote sites as FlexConnect. The client VLAN assignment on these sites is configured manually mapped by WLAN and using local switching. Dynamic VLA...
dynamic VLAN assignmentIETF attributesTunnel-Private-Group-IDRADIUS - Question #210Advanced Location Services
Refer to the exhibit. An engineer has deployed the Cisco CMX solution to track and detect the number of users who visit the office each day. The CMX dashboard is not showing any da...
CMXWLC integrationlocation analyticsdashboard - Question #211WLAN Deployment
Refer to the exhibit. A network architect configured the Cisco Catalyst 9800 Series Controller to find out information on client types in the wireless network. RADIUS profiling is...
RADIUS profilingAAA accounting networkISEdevice profiling - Question #212QoS on a Wireless Network
Company XYZ recently migrated from AireOS to IOS XE 9800 WLCs. The Internet bandwidth must be limited to 5 Mbps for each guest client as per the global standard. In which configura...
bandwidth limitingpolicy mapguest clients9800 QoS - Question #213Device Hardening
An engineer needs read/write access to rename access points and add them to the correct AP groups on a wireless controller. Using Cisco ISE TACACS, which custom attributes is the m...
TACACSISEadmin rolescustom attributes - Question #214QoS on a Wireless Network
An engineer set up a VoWLAN with QoS on the WLC and a class map on the switch, but the markings are not being preserved correctly in the end-to-end traffic flow. Which two configur...
VoWLANQoStrust boundariespolicy maps - Question #215QoS on a Wireless Network
An engineer is in the process of implementing Fastlane on a wireless network with a Mobility Express AP installed. The network must support voice and video applications for Apple d...
FastlaneApple devicesPlatinum QoS profilevoice video - Question #216Security for Wireless Client Connectivity
Refer to the exhibit. An ACL is configured to restrict access for BYOD clients. The ACL must redirect devices to the guest portal. To which two devices on the local network must th...
BYODACLguest portal redirectISE - Question #217Advanced Location Services
A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics. - IP address of the primary server -...
CMX high availabilityfailovercmxadmin passwordHA deployment - Question #218Device Hardening
Which role does an engineer configure for administrative access to the wireless infrastructure, using Cisco ISE, to allow configuration of the WLC syslog configuration?
TACACSISEWLC admin rolesMANAGEMENT role - Question #219Monitoring and Troubleshooting
Refer to the exhibit. An engineer is troubleshooting a client connectivity issue. The client is in the RUN state, and no traffic is passed after authenticating by using Cisco ISE....
client troubleshootingACLtraffic blockedRUN state - Question #220Wireless Design
An engineer must perform a Layer 2 survey for a mining facility. Which type of antenna does the engineer use in the mine shaft?
site surveyantenna selectionpatch antennamine shaft - Question #221WLAN Deployment
An engineer has many different WLANs on a WLC but does not want to broadcast them to every AP in the building. Which group must be configured on the WLC to allow different WLANs on...
AP groupsWLAN assignmentWLC configurationAP deployment - Question #222Monitoring and Troubleshooting
An engineer manages the wireless network for a government agency. The wireless network is used for access to the corporate network. The wireless network must include the latest wIP...
wIPSwIDSCisco MSEsecurity definitions - Question #223Wireless Security and Mobility
A request has come in to use dynamic VLAN assignment on an autonomous AP. After the AP is configured, which RADIUS attribute must an engineer use to pass the VLAN ID to the AP?
dynamic VLANRADIUS attributesTunnel-Private-Group-IDautonomous AP - Question #224Security for Wireless Client Connectivity
An engineer is setting up web authentication for the public Wi-Fi. The installation will take place in a retail store. The existing Facebook page to log in to the captive portal mu...
web authenticationcaptive portalFacebook WiFiACL configuration - Question #225FlexConnect
A customer must provide a secure wireless network from a Cisco Catalyst 9800 Series Wireless Controller to a Cisco AP to remote users. The corporate WLAN must be provided over the...
OEAPOffice Extend APRemote LANFlexConnect profile - Question #226WLAN Deployment
A network engineer performed a new deployment of Cisco DNA Center. The engineer discovered and provisioned all APs and converted them to fabric. The SSIDs were created, and the APs...
Cisco DNA Centerfabric APradio configurationSSID deployment - Question #227Monitoring
As part of a PCI audit, an engineer is gathering information on a Cisco Unified Wireless Network environment. The report must include any security weaknesses in the system. Where d...
PCI compliancesecurity auditWLC security tabwireless security - Question #228FlexConnect
An engineer deploys APs to a branch office. All AP control and management-related traffic must be tunneled to a centralized WLC via CAPWAP. All user traffic must utilize the local...
FlexConnectlocal switchingCAPWAPbranch office - Question #229Security for Wireless Client Connectivity
A WLAN on the WLC is configured for web authentication as the Layer 3 Security policy with the web-auth type External. Which two elements are required as part of the configuration?...
web authenticationexternal web serverpreauth ACLvirtual interface - Question #230Monitoring and Troubleshooting
An engineer manages a wireless network for an enterprise. The offices of the enterprise are in a multistory building with other companies. To avoid service loss of the wireless net...
Clean Airjamming detectionSNMP trapsrogue devices - Question #231FlexConnect
More people are working from home, so an engineer must configure OEAPs to support the users. The security team already configured NAT with a public IP address that points to the in...
OEAPNATpublic IPWLC configuration - Question #232FlexConnect
A network engineer is configuring a Cisco FlexConnect AP to allow Cisco ISE to dynamically assign the subnet of a user based on their credentials. Which controller mapping must be...
FlexConnectdynamic VLANISEWLAN VLAN mapping - Question #233Multicast
An engineer must implement Video Stream on a Cisco Wireless Network for a single SSID deployment model. Which feature must be enabled on Cisco Catalyst 9800 Series WLC?
Video StreamMulticast DirectCatalyst 9800multicast - Question #234FlexConnect
An engineer enabled Cisco Centralized Key Management (CKM) on a WLAN with local and FlexConnect mode APs. The engineer notices that Cisco CKM is not working for the FlexConnect APs...
CKMFlexConnect grouproamingkey management - Question #235Device Hardening
An engineer is trying to log in to their lightweight access point joined to a WLC that does not have AP credentials defined. Which credentials does the engineer use?
AP credentialslightweight APAP global configurationWLC - Question #236Advanced Location Services
A network engineer is configuring a Cisco AireOS 8.2 WLC, Cisco MSE, and Cisco PI with Cisco 3700 Series APs and Cisco Hyperlocation modules. The engineer configures and enables a...
HyperlocationWLC global configurationlocation moduleCisco MSE - Question #237Security for Wireless Client Connectivity
A wireless engineer must configure IEEE 802.1X authentication on a WLAN that supports new and legacy wireless devices. Which condition must be met for the legacy clients to be able...
802.1Xlegacy clientsEAP protocolauthenticator - Question #238Location Services
An engineer is configuring the maps on the Cisco Prime Infrastructure, but clients fail to show up on the maps. Which two actions are needed to complete this configuration? (Choose...
Prime InfrastructureMSE synchronizationclient mapslocation tracking - Question #239Advanced Location Services
A network engineer is configuring a Cisco AireOS 8.2 WLC, Cisco MSE, and Cisco PI with Cisco 3700 Series APs and Cisco Hyperlocation modules. The engineer configures and enables a...
HyperlocationNTP synchronizationlocation accuracyMSE - Question #240Multicast
The IT department creates a video containing instructions for employees who have just joined the company. Newcomers need to join the wireless network named NEW4501999110. The WLAN...
WMFwireless multicast forwardingvideo streamingmulticast - Question #241QoS on a Wireless Network
A municipality customer uses a Cisco 5520 Series Wireless Controller for the wireless network. The customer intends to move the depot of its stores from using legacy bespoke voice-...
AVCPlatinum QoS profilevoice over Wi-FiDSCP EF - Question #242Multicast
An engineer is configuring a wireless LAN controller and is setting these 802.11a/n data rates: 5.5 Mbps - Supported 11 Mbps - Mandatory 24 Mbps - Disabled 56 Mpbs - Supported Whic...
multicast ratemandatory data rate802.11a/ndata rate configuration - Question #243WLAN Deployment
A network engineer must configure APs on a controller for 802.1x access to a wired infrastructure as quickly as possible. The same credentials are used for all APs. Where are the c...
AP 802.1x credentialsglobal configurationwired infrastructure accessAP authentication - Question #244Location Services
An engineer must implement a wireless network to support location services. The network will include an MSE and Cisco WLC. After the deployment, the IT team must be able to locate...
location servicesMSEtrilaterationminimum AP count - Question #245FlexConnect
An engineer must send Cisco OEAPs to the homes of employees. The APs must be able to discover and join the WLC when they connect to each employee home network. Which action accompl...
OEAPWLC discoveryremote AP deploymentAP registration - Question #246Multicast
What is an indication of having multiple wireless controllers within the same CAPWAP multicast group?
CAPWAP multicast groupmultiple WLCsmulticast trafficmulticast overhead - Question #247Monitoring and Troubleshooting
Refer to the exhibit. An engineer implemented a CPU ACL on the controller, and now the Web Authentication Redirect page is not working. What must be changed for the redirect page t...
CPU ACLweb authentication redirectAireOS WLCACL troubleshooting - Question #248Multicast
Clients on access points within an AP group are not receiving multicast traffic after roaming to another AP within the AP group. Which action maintains multicast connectivity?
IGMP snoopingmulticast after roamingAP groupsmulticast connectivity - Question #249QoS on a Wireless Network
Refer to the exhibit. An engineer must preserve a QoS marking sent by the Cisco Jabber software running on PC1. Which marking value must be trusted on port Fa 0/6?
DSCP trustQoS markingCisco Jabberport trust policy - Question #250Monitoring
An engineer must enable AVC on a Cisco Catalyst 9800 WLC and send the NetFlow data to a NetFlow collector. What must be configured on the controller with the IP address and port nu...
AVCNetFlowflow exporterCatalyst 9800 - Question #251Location Services
An administrator is querying the Cisco CMX server through REST API for active client data to build an application. Cisco CMX supports the use of version 3 of REST API to query for...
CMX REST APIAPI authenticationcmxctllocation API - Question #252Device Hardening
Refer to the exhibit. An administrator configures CPU ACLs on the AireOS WLC to implement security. After configuration, administrative users cannot access the user interface. Wher...
CPU ACLAireOS WLCmanagement interfaceHTTP/HTTPS access - Question #253Security for Wireless Client Connectivity
Refer to the exhibit. The redirect ACL is configured on Cisco Catalyst 9800-40 WLC version 17.3.3. The ACL is pushed by Cisco ISE version 3 for a CWA SSID implementation. The IP ad...
CWAISE redirect ACLauthorization profileCatalyst 9800 - Question #254Monitoring
A customer must use deep-packet inspection on the Cisco Catalyst 9800 Series Wireless Controller. The details must include all wireless client use details. Where must AVC be config...
AVCdeep-packet inspectionCatalyst 9800WLAN configuration - Question #255Advanced Location Services
An engineer is configuring location services with a Cisco CMX 10.6.2 solution. The engineer must strengthen interferer filtering so that Cisco CMX is protected from bursts of short...
CMX interferer filteringduty cycle cutoffseverity cutofflocation accuracy - Question #256Security for Wireless Client Connectivity
An engineer deploys APs in autonomous mode to provide corporate and guest access in several retail locations. Remote authentication with IEEE 802.1X is configured to ensure a secur...
802.1X authenticatorautonomous mode APEAP rolesRADIUS - Question #257Wireless Security and Mobility
Refer to the exhibit. A company is implementing Cisco ISE and IBN for their WLAN. The pictured IBN profile is applied to BYOD devices that are not registered to the Mobile Device M...
ISEAAA overrideBYOD policyIBN profile