Sep 01, 2021 Step by Step Guide to Prepare for 300-430 Exam BrainDumps
CCNP Enterprise 300-430 Real Exam Questions and Answers FREE Updated on 2021
NEW QUESTION 20
A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)
- A. malware
- B. unauthorized users
- C. lost and stolen devices
- D. network analyzers
- E. keyloggers
Answer: A,C
Explanation:
Explanation
https://ccbtechnology.com/byod-5-biggest-security-risks/
https://blogs.cisco.com/security/byod-many-call-it-bring-your-own-malware-byom
NEW QUESTION 21
Which two events are outcomes of a successful RF jamming attack? (Choose two.)
- A. deauthentication broadcast
- B. physical damage to AP hardware
- C. disruption of WLAN services
- D. deauthentication multicast
- E. unauthentication association
Answer: B,C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/mse/3350/72/wIPS_Configuration/Guide/wIPS_72/msecg_appA
NEW QUESTION 22
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?
- A. triangulation
- B. angle of incidence
- C. received signal strength
- D. time distance of arrival
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS-DG/wifich2.html
NEW QUESTION 23
An IT department receives a report of a stolen laptop and has information on the MAC address of the laptop.
Which two settings must be set on the wireless infrastructure to determine its location? (Choose two.)
- A. Location History for Rogue APs & Rogue Clients must be enabled on the MSE.
- B. Client location tracking must be enabled on the MSE.
- C. Location History for Visitors must be enabled on the MSE.
- D. Location History for Clients must be enabled on the MSE.
- E. Tracking optimization must be enabled on the WLC.
Answer: C,D
NEW QUESTION 24
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?
- A. local EAP
- B. Cisco Centralized Key Management
- C. authentication caching
- D. pre-authentication
Answer: A
Explanation:
NEW QUESTION 25
A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?
- A. SOAP/XML
- B. NMSP
- C. SNMP
- D. CAPWAP
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/mse/7-6/MSE_wIPS/MSE_wIPS_7_6/MSE_wIPS_7_5_chapter
NEW QUESTION 26
An engineer must track guest traffic flow using the WLAN infrastructure. Which Cisco CMX feature must be configured and used to accomplish this tracking?
- A. presence
- B. detect and locate.
- C. connect and engage
- D. analytics
Answer: A
Explanation:
NEW QUESTION 27
Refer to the exhibit.
Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)
- A. APSD
- B. 802.11e
- C. WMM
- D. TSPEC
- E. SIFS
Answer: B,C
Explanation:
NEW QUESTION 28
What is an important consideration when implementing a dual SSID design for BYOD?
- A. One SSID is for provisioning and the other SSID is for gaining access to the network. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.
- B. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
- C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
- D. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
Answer: A
Explanation:
NEW QUESTION 29
Refer to the exhibit.
The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?
- A. The Cisco CMX server receives NetFlow data from the WLC.
- B. The Cisco CMX server receives Angle-of-Arrival data from the WLC.
- C. The Cisco CMX server receives SNMP traffic from the WLC.
- D. The Cisco CMX server receives NMSP traffic from the WLC.
Answer: B
NEW QUESTION 30
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. session key
- B. shared-secret key
- C. WPA key
- D. encryption key
Answer: A
Explanation:
NEW QUESTION 31
An engineer configures a deployment to support:
* Cisco CMX
* licenses for at least 3000 APs
* 6000 wIPS licenses
The Cisco vMSE appliance must be sized for this deployment. Which Cisco vMSE Release 8 option must the engineer deploy?
- A. High-End vMSE
- B. Low-End vMSE
- C. Large vMSE
- D. Standard vMSE
Answer: A
NEW QUESTION 32
A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments.
Which solution must the engineer choose?
- A. Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the
5.0-GHz band. - B. Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.
- C. Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.
- D. Configure a second WLC to support half of the APs in the deployment.
Answer: C
Explanation:
NEW QUESTION 33
Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?
- A. AAA override
- B. VLAN name override
- C. CCKM/OKC
- D. FlexConnect ACL
Answer: A
Explanation:
NEW QUESTION 34
Which devices can be tracked with the Cisco Context Aware Services?
- A. Cisco certified wireless devices
- B. wired devices
- C. wireless devices
- D. wired and wireless devices
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html
NEW QUESTION 35
An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?
- A. split tunneling
- B. SE-connect
- C. FlexConnect
- D. AP failover priority
Answer: A
Explanation:
NEW QUESTION 36
A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?
- A. Performance reports on Cisco Prime Infrastructure
- B. Interference Devices reports on Cisco Wireless LAN Controller
- C. Air Quality reports on Cisco Wireless LAN Controller
- D. CleanAir reports on Cisco Prime Infrastructure
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Apr2014/CVD-CampusCleanAirDesignGuide-APR1
NEW QUESTION 37
A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber. QoS is being applied only as best effort. What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?
- A. Enable Cisco Centralized Key Management on the WLAN so that the Jabber-enabled devices will connect.
- B. Configure QoS on the mobile devices that have Jabber installed.
- C. Configure an AVC profile for the Jabber traffic and apply it to the WLAN.
- D. Configure the WLAN to broadcast on 5 GHz radios only and allow Jabber users to conned.
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/81/Jabber_in_WLAN/b_Jabber_in_WLAN.
NEW QUESTION 38
Which three properties are used for client profiling of wireless clients? (Choose three.)
- A. hostname
- B. OS version
- C. HTTP user agent
- D. DHCP
- E. IP address
- F. MAC OUI
Answer: C,D,F
Explanation:
NEW QUESTION 39
Refer to the exhibit.
The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?
- A. Correct the shared secret.
- B. Disable KeyWrap
- C. Change the CoA Port
- D. Use ASCII for the key input format
Answer: C
NEW QUESTION 40
Which QoS level is recommended for guest services?
- A. bronze
- B. silver
- C. platinum
- D. gold
Answer: A
Explanation:
NEW QUESTION 41
What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?
- A. EAP-FAST with CAPWAP DTLS
- B. EAP-PEAP with 802.1x port authentication
- C. EAP-FAST with CAPWAP DTLS + port authentication
- D. EAP-TLS with 802.1x port authentication
Answer: C
Explanation:
Explanation
NEW QUESTION 42
The Cisco Hyperlocation detection threshold is currently set to -50 dBm. After reviewing the wireless user location, discrepancies have been noticed. To improve the Cisco Hyperlocation accuracy, an engineer attempts to change the detection threshold to -100 dBm However, the Cisco Catalyst 9800 Series Wireless Controller does not allow this change to be applied. What actions should be taken to resolve this issue'
- A. Disable Cisco Hyperlocation. change the Cisco Hyperlocation detection threshold and then enable it
- B. Create a new profile on Cisco CMX with the new Cisco Hyperlocation detection range, and apply it on the WL AN.
- C. Place the APs to monitor mode shutdown the radios, and then change Cisco Hyperlocation detection threshold
- D. Shutdown all radios on the controller, change the Cisco Hyperlocation detection range, and enable the radios again.
Answer: A
NEW QUESTION 43
What must be configured on ISE version 2.1 BYOD when using Single SSID?
- A. no authentication
- B. open authentication
- C. 802.1x
- D. WPA2
Answer: D
Explanation:
NEW QUESTION 44
......
Ultimate Guide to Prepare 300-430 Certification Exam for CCNP Enterprise: https://www.actualtestsquiz.com/300-430-test-torrent.html
300-430 Ultimate Study Guide: https://drive.google.com/open?id=1vftVanCR0elZn2_vnX5a5CApub_rUREE
