[Jan-2022] Dumps Brief Outline Of The 300-430 Exam - RealExamFree
300-430 Training & Certification Get Latest CCNP Enterprise
NEW QUESTION 67
Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?
- A. RF Profile
- B. AP Join Profile
- C. Flex Profile
- D. Policy Profile
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/configguide/b_wl_16_10_cg/flexconnect.html
NEW QUESTION 68
What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?
- A. 7 days
- B. 3 hours
- C. 24 hours
- D. 3 days
Answer: A
Explanation:
Explanation
(7 Days is the max, you can select)
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-c
NEW QUESTION 69
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AР has been configured. How many image transfers between the WLC and APs will occur?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION 70
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. session key
- B. WPA key
- C. encryption key
- D. shared-secret key
Answer: A
Explanation:
NEW QUESTION 71
Refer to the exhibit.
A network administrator deploys the DHCP profiler service in two ISE servers: 10.3.10.101 and 10.3.10.102. All BYOD devices connecting to WLAN on VLAN63 have been incorrectly profiled and are assigned as unknown profiled endpoints. Which action efficiently rectifies the issue according to Cisco recommendations?
- A. Disable DHCP proxy on the Cisco WLC and run the ip helper-address command under the VLAN interface to point to DHCP and the two ISE servers.
- B. Keep DHCP proxy enabled on the Cisco WLC and define helper-address under the VLAN interface to point to the two ISE servers.
- C. Disable DHCP proxy on the Cisco WLC.
- D. Nothing needed to be added on the Cisco WLC or VLAN interface. The ISE configuration must be fixed.
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/110865-dhcp-wlc.htm
NEW QUESTION 72
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?
- A. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
- B. Access to Cisco ISE must be allowed on the pre authentication ACL.
- C. Management traffic from the guest network must be configured on the ACL rules.
- D. Traffic toward the virtual interface must be permitted.
Answer: B
Explanation:
NEW QUESTION 73
A network engineer is experiencing issues enabling LAG on the WLC. Which four characteristics should be validated to ensure LAG configuration? (Choose four.)
- A. The WLC does not need to be rebooted to enable the LAG configuration.
- B. Dynamic interfaces and management are moved to port 1
- C. Multiple LAGs are permitted on the controller.
- D. Primary and secondary ports are needed for each interface.
- E. Only one functional physical port is needed to continue to pass traffic.
- F. EtherChannel must be configured for mode "on" on the switch.
- G. Аll ports participate in the LAG by default when LAG is enabled on the controller. y
- H. Multiple untagged interfaces to the same port are not allowed.
Answer: E,F,G,H
Explanation:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/ b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_0100011.html
NEW QUESTION 74
An engineer set up identity-based networking with ISE and configured AAA override on the WLAN. Which two attributes must be used to change the client behavior from the default settings? (Choose two.)
- A. multicast address
- B. IPv6 ACL
- C. DSCP value
- D. DNS server
- E. DHCP timeout
Answer: B,C
NEW QUESTION 75
An engineer must implement a BYDD policy with these requirements:
* Onboarding unknown machines
* Easily scalable
* Low overhead on the wireless network Which method satisfies these requirements?
- A. triple SSID
- B. single SSID
- C. open SSID
- D. dual SSID
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Desig
NEW QUESTION 76
A corporation has a wireless network where all access points are configured in FlexConnect. The WLC has a Data WLAN and a VoWiFi WLAN implemented where centrally-switched is configured for the APs. Which QoS configuration must be implemented for the wireless packets to maintain the marking across the wired and wireless network?
- A. Set QoS to Platinum
- B. Allow WMM
- C. Trust DSCP
- D. Enable CAC
Answer: C
Explanation:
NEW QUESTION 77
The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)
- A. plain text
- B. PDF
- C. XLS
- D. CSV
- E. DOC
Answer: B,D
Explanation:
NEW QUESTION 78
A customer is deploying local web authentication. Which software application must be implemented on Cisco ISE to utilize as a directory service?
- A. Novell eDirectory
- B. SAML
- C. Solaris Directory Service
- D. LDAP
Answer: D
Explanation:
NEW QUESTION 79
On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?
- A. Client Exclusion is enabled
- B. FlexConnect Local Auth is disabled
- C. ISE NAC is enabled
- D. 802.11r Fast Transition is enabled
Answer: B
NEW QUESTION 80
Refer to the exhibit.
An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)
- A. Configure a policy on ISE to allow devices to connect that validate the certificate.
https://mrncciew.com/2018/05/25/wgb-with-peap/ - B. Configure the certificate, WLAN, and radio interface on WGB.
- C. Configure WGB as a network device in ISE.
- D. Configure the certificate on the WLC.
- E. Configure the access point with the root certificate from ISE.
- F. Configure WLAN to authenticate using ISE.
Answer: A,B,F
NEW QUESTION 81
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing.
Which configuration within the network device configuration should be verified?
- A. shared secret
- B. SNMP RO community
- C. device ID
- D. device interface credentials
Answer: A
Explanation:
NEW QUESTION 82
A wireless engineer is configuring LWA using ISE. The customer is a starting company and requested the wireless users to authenticate against a directory, but LDAP is unavailable. Which solution be proposed in order to have the same security and user experience?
- A. Use SAML
- B. Use the internal database of the RADIUS server.
- C. Use a preshared key on the corporate WLAN
- D. Use Novell eDirectory
Answer: B
NEW QUESTION 83
Which QoS level is recommended for guest services?
- A. platinum
- B. gold
- C. silver
- D. bronze
Answer: D
Explanation:
NEW QUESTION 84
A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber. QoS is being applied only as best effort. What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?
- A. Configure an AVC profile for the Jabber traffic and apply it to the WLAN.
- B. Configure QoS on the mobile devices that have Jabber installed.
- C. Enable Cisco Centralized Key Management on the WLAN so that the Jabber-enabled devices will connect.
- D. Configure the WLAN to broadcast on 5 GHz radios only and allow Jabber users to conned.
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/81/Jabber_in_WLAN/b_Jabber_in_WLAN.html#reference_7B4539C91FBE4639ACF906F6F3931667
NEW QUESTION 85
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?
- A. received signal strength
- B. angle of incidence
- C. triangulation
- D. time distance of arrival
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS-DG/wifich2.html
NEW QUESTION 86
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. session key
- B. WPA key
- C. encryption key
- D. shared-secret key
Answer: A
Explanation:
NEW QUESTION 87
An engineer must run a Client Traffic Stream Metrics report in Cisco Prime Infrastructure. Which task must be run before the report?
- A. radio performance
- B. client status
- C. scheduled report
- D. software
Answer: A
Explanation:
Explanation
Text Description automatically generated
NEW QUESTION 88
All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?
- A. The wrong multicast address was used
- B. The multicast group is assigned the wrong VLAN
- C. Multicast IGMP snooping is not enabled
- D. The multicast group includes all APs
Answer: C
NEW QUESTION 89
......
Certification Training for 300-430 Exam Dumps Test Engine: https://www.realexamfree.com/300-430-real-exam-dumps.html
CCNP Enterprise 300-430 Real Exam Questions and Answers FREE Updated: https://drive.google.com/open?id=1Gw3FyhBgVEmvFoQ-KlEI9HV8ZhzlfkrK
