Most UptoDate Cisco 300-430 Exam Dumps PDF 2022
100% Free CCNP Enterprise 300-430 Dumps PDF Demo Cert Guide Cover
NEW QUESTION 76
An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the management interface, it is noticed that the WLC is not responding for APs that are trying to associate to the internal IP management address. Which command should be used to reconcile this?
- A. config network ap-discovery nat-ip-only disable
- B. config flexconnect office-extend nat-ip-only disable
- C. config network ap-discovery nap-ip-only enable
C config flexconnect office-extend nat-ip-only enable
Answer: A
NEW QUESTION 77
An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
NEW QUESTION 78
A corporation has a wireless network where all access points are configured in FlexConnect. The WLC has a Data WLAN and a VoWiFi WLAN implemented where centrally-switched is configured for the APs. Which QoS configuration must be implemented for the wireless packets to maintain the marking across the wired and wireless network?
- A. Set QoS to Platinum
- B. Allow WMM
- C. Trust DSCP
- D. Enable CAC
Answer: C
Explanation:
NEW QUESTION 79
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. session key
- B. WPA key
- C. encryption key
- D. shared-secret key
Answer: A
Explanation:
NEW QUESTION 80
Refer to the exhibit.
An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)
- A. Configure the certificate, WLAN, and radio interface on WGB.
- B. Configure a policy on ISE to allow devices to connect that validate the certificate.
- C. Configure WGB as a network device in ISE.
- D. Configure the certificate on the WLC.
- E. Configure the access point with the root certificate from ISE.
- F. Configure WLAN to authenticate using ISE.
Answer: A,B,F
NEW QUESTION 81
A shopping center uses AireOS controllers with Cisco Wave 2 APs. A separate WLAN named Guest-012345678-WLAN is used for guest wireless clients. Management need's location analytics to determine popular areas. CMX must track only associated clients. What must be selected on the CMX server settings?
- A. Exclude probing clients
- B. Duty Cycle Cutoff
- C. Enable Location MAC Filtering
- D. Enable Locally Administered MAC Filtering
Answer: A
Explanation:
NEW QUESTION 82
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?
- A. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
- B. Access to Cisco ISE must be allowed on the pre authentication ACL.
- C. Management traffic from the guest network must be configured on the ACL rules.
- D. Traffic toward the virtual interface must be permitted.
Answer: B
Explanation:
NEW QUESTION 83
What must be configured on the Global Configuration page of the WLC for an access point to use 802.1x to authenticate to the wired infrastructure?
- A. TACACS server IP address.
- B. local access point credentials
- C. supplicant credentials
- D. RADIUS shared secret
Answer: D
Explanation:
NEW QUESTION 84
A customer wants to allow employees to easily onboard their personal devices to the wireless network. The visitors also must be able to connect to the same network without the need to engage with anyone from the reception desk. Which process must be configured on Cisco ISE to support this requirement?
- A. native supplicant provisioning
- B. self-registration guest portal
- C. MAC authentication bypass
- D. local web auth
Answer: B
NEW QUESTION 85
An engineer must provide a graphical report with summary grouped data of the total number of wireless clients on the network Which Cisco Prime Infrastructure report provides the requited data?
- A. Posture Status Count
- B. Mobility Client Summary
- C. Client Traffic Stream Metrics
- D. Client Summary
Answer: B
NEW QUESTION 86
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
- A. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
- B. Controller software must be newer than 7.0.6+.
- C. mDNS is not supported over IPv6.
- D. mDNS cannot use UDP port 5353 as the destination port.
- E. mDNS uses only UDP port 5436 as a destination port.
Answer: A,C
Explanation:
NEW QUESTION 87
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9.
Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)
- A. Permit 0.0.0.0 0.0.0.0 UDP any DNS
- B. Permit 0.0.0.0 0.0.0.0 UDP DNS any
- C. Permit 0.0.0.0 0.0.0.0 UDP any any
- D. Permit 0.0.0.0 0.0.0.0 any DNS any
- E. Permit any any any
Answer: A,B
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
NEW QUESTION 88
Which QoS level is recommended for guest services?
- A. platinum
- B. gold
- C. silver
- D. bronze
Answer: D
Explanation:
NEW QUESTION 89
Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?
- A. RF Profile
- B. AP Join Profile
- C. Flex Profile
- D. Policy Profile
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/cisco-hyperlocation.html
NEW QUESTION 90
An engineer must configure MSE to provide guests access using social media authentication. Which service does the engineer configure so that guests use Facebook credentials to authenticate'?
- A. Social Connect
- B. Client Connect
- C. Guest Connect
- D. Visitor Connect
Answer: A
NEW QUESTION 91
A wireless engineer is configuring LWA using ISE. The customer is a starting company and requested the wireless users to authenticate against a directory, but LDAP is unavailable. Which solution be proposed in order to have the same security and user experience?
- A. Use SAML
- B. Use the internal database of the RADIUS server.
- C. Use a preshared key on the corporate WLAN
- D. Use Novell eDirectory
Answer: B
NEW QUESTION 92
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.
Which configuration is needed to complete this task?
- A. Create an ACL for WebEx
- B. Create an AVC profile for WebEx
- C. Change the WLAN reserved bandwidth for WebEx
- D. Change the AVC application WebEx-app-sharing to mark
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/AVC_dg7point5.html
NEW QUESTION 93
You have multiple mDNS profiles defined on a Cisco Wireless LAN Controller for different user roles. Which two RADIUS attributes can be used on the ISE authorization profile to assign different mDNS profile per user if it has the correct role? (Choose two.)
- A. Cisco:cisco-av-pair:role=ROLE
- B. Cisco:cisco-av-pair:userid=USER
- C. Cisco:cisco-av-pair:mDNS-profile-name=PROFILE-NAME
- D. Radius:Class:mDNS-profile-name=PROFILE-NAME
- E. Radius:Class: role=ROLE
Answer: C,D
NEW QUESTION 94
Refer to the exhibit.
An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?
- A. It must be Outbound because it is traffic that is generated from the WLC.
- B. To have the complete list of options, the CPU ACL must be created only by the CLI.
- C. Packet direction has no significance; it is always Any.
- D. It must be Inbound because traffic goes to the WLC.
Answer: D
NEW QUESTION 95
Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)
- A. After enabling Cisco Hyperlocation on Cisco CMX, the APs and the wireless LAN controller must be restarted.
- B. The Cisco Hyperlocation feature must be enabled on the wireless LAN controller and Cisco CMX.
- C. The Cisco Hyperlocation feature must be enabled only on the wireless LAN controller.
- D. NTP can be configured, but that is not recommended.
- E. If the Cisco CMX server is a VM, a high-end VM is needed for Cisco Hyperlocation deployments.
Answer: B,E
Explanation:
Explanation
https://www.cisco.com/c/en/us/products/collateral/wireless/mobility-services-engine/datasheet-c78-734648.html
NEW QUESTION 96
Which configured is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one controller to another?
- A. Create multicast groups on the central Layer 3 switch.
- B. Enable IGMPv3 on the central Layer 3 switch.
- C. Enable IGMP snooping on the WLC
- D. Enable multicast mode on the WLC
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONS
NEW QUESTION 97
......
Updated Cisco 300-430 Dumps – PDF & Online Engine: https://www.testinsides.top/300-430-dumps-review.html
PDF Exam Material 2022 Realistic 300-430 Dumps Questions: https://drive.google.com/open?id=17NNPC1ewURUvgTeDZj4JMRFYK_7RLyf6