218 Q&As in UPDATED 300-430 Exam Questions Certification Test Engine to PDF
Get The Important Preparation Guide With 300-430 Dumps
NEW QUESTION 17
An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch. Which certificate type helps resolve this issue?
- A. Public-Signed SAN
- B. Public-Signed Root
- C. Self-Signed Wildcard
- D. Self-Signed Standard
Answer: C
NEW QUESTION 18
An engineer must achieve the highest level of location accuracy possible for a new mobile application. Which technology must be implemented for this use case?
- A. Bluetooth Low Energy
- B. Time Difference of Arrival
- C. ToA lateration
- D. RSS lateration
Answer: B
NEW QUESTION 19
A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)
- A. network analyzers
- B. lost and stolen devices
- C. malware
- D. unauthorized users
- E. keyloggers
Answer: B,C
Explanation:
https://ccbtechnology.com/byod-5-biggest-security-risks/
https://blogs.cisco.com/security/byod-many-call-it-bring-your-own-malware-byom
NEW QUESTION 20
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?
- A. BASE_ACL only
- B. BASE_ACL appended with HR_ACL
- C. HR_ACL only
- D. HR_ACL appended with BASE_ACL
Answer: C
Explanation:
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98590-Per-User-ACL-WLC.html#configure-acs
NEW QUESTION 21
The network management team in a large shopping center has detected numerous roque APs from local coffee shops that are broadcasting SSIDs. All of these SSlDs have names starting with ATC (for example. ATC302.
ATC011. and ATC566). A wireless network engineer must appropriately classify these SSIDs using the Rogue Rules feature. Drag and drop the options from the left onto the categories in which they must be used on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION 22
Refer to the exhibit.
An engineer must restrict some subnets to have access to the WLC. When the CPU ACL function is enabled. No ACLs in the drop-down list are seen. What is the cause of the problem?
- A. This configuration must be performed through the CLI and not though the web GUI
- B. When the ACL is created, it must be specified that it is a CPU ACL.
- C. No ACLs have been created under the Access Control List tab.
- D. The ACL does not have a rule that is specified to the Management interface.
Answer: D
NEW QUESTION 23
What is an important consideration when implementing a dual SSID design for BYOD?
- A. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
- B. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
- C. One SSID is for provisioning and the other SSID is for gaining access to the network. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.
- D. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
Answer: C
Explanation:
NEW QUESTION 24
What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?
- A. 10 seconds
- B. 15 seconds
- C. 60 seconds
- D. 30 seconds
Answer: B
Explanation:
NEW QUESTION 25
Refer to the exhibit.
An engineer tries to manage the rogues on the Cisco WLC. Based on the configuration, which AP is marked as malicious by the controller?
- A. rogue AP with SSlD admin seen for 4000 seconds and heard at -70 dBm
- B. rogue AP with SSlD admin seen for 4000 seconds and heard at -60 dBm
- C. rogue AP with SSID admin seen for 3000 seconds and heard at -70 dBm
- D. rogue AP with SSID admin seen for 3000 seconds and heard at -60 dBm
Answer: A
Explanation:
NEW QUESTION 26
An engineer must track guest traffic flow using the WLAN infrastructure. Which Cisco CMX feature must be configured and used to accomplish this tracking?
- A. analytics
- B. detect and locate.
- C. connect and engage
- D. presence
Answer: B
Explanation:
NEW QUESTION 27
What must be configured on ISE version 2.1 BYOD when using Single SSID?
- A. WPA2
- B. no authentication
- C. open authentication
- D. 802.1x
Answer: D
Explanation:
Explanation
https://ciscocustomer.lookbookhq.com/iseguidedjourney/BYOD-configuration
NEW QUESTION 28
An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN.
Which output is produced when the Adaptive wIPS Top 10 AP report is run''
- A. last of 10 monitor mode APs with the most wIPS events
- B. last of 10 sniffer mode APs with the most wIPS events
- C. last 10 wIPS events from monitor mode APs
- D. last 10 wIPS events from sniffer mode APs
Answer: C
NEW QUESTION 29
An engineer must implement intrusion protection the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which Ap mode and submode must be implemented?
- A. Ap mode: monitor, Ap submode: WIPS
- B. Ap mode: local, Ap submode: WIPS
- C. Ap mode: local, Ap submode: none
- D. Ap mode: monitor, Ap submode: none
Answer: B
Explanation:
NEW QUESTION 30
What is the difference between PIM sparse mode and PIM dense mode?
- A. Sparse mode floods. Dense mode uses distribution trees.
- B. Sparse mode uses distribution trees. Dense mode floods.
- C. Sparse mode supports only one switch. Dense mode supports multiswitch networks.
- D. Sparse mode supports multiswitch networks. Dense mode supports only one switch.
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/xe-16/imc-pim-xe-16-book/imc-te
NEW QUESTION 31
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?
- A. Option D
- B. Option B
- C. Option C
- D. Option A
Answer: A
Explanation:
Note: To enable Local switching, you have to disable central switching
NEW QUESTION 32
Refer to the exhibit.
An engineer must restrict some subnets to have access to the WLC. When the CPU ACL function is enabled, no ACLs in the drop-down list are seen. What is the cause of the problem?
- A. No ACLs have been created under the Access Control List tab.
- B. When the ACL is created, it must be specified that it is a CPU ACL.
- C. The ACL does not have a rule that is specified to the Management interface.
- D. This configuration must be performed through the CLI and not though the web GUI.
Answer: A
NEW QUESTION 33
An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the management interface, it is noticed that the WLC is not responding for APs that are trying to associate to the internal IP management address. Which command should be used to reconcile this?
- A. config network ap-discovery nap-ip-only enable
- B. config network ap-discovery nat-ip-only disable
- C. config flexconnect office-extend nat-ip-only enable
- D. config flexconnect office-extend nat-ip-only disable
Answer: B
Explanation:
https://community.cisco.com/t5/wireless/office-extend-ap-and-external-addresses/td-p/3742395
NEW QUESTION 34
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?
- A. It allows the output policy map to put specific QoS queues into specific subgroups
- B. It matches traffic and assigns each matched packet to QoS groups
- C. It automates deployment of wired QoS and makes wireless QoS implementation easier
- D. It has a set of predefined profiles that you cannot modify further
Answer: B
Explanation:
NEW QUESTION 35
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
- A. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
- B. mDNS is not supported over IPv6.
- C. mDNS uses only UDP port 5436 as a destination port.
- D. mDNS cannot use UDP port 5353 as the destination port.
- E. Controller software must be newer than 7.0.6+.
Answer: A,B
Explanation:
NEW QUESTION 36
When implementing self-registration for guest/BYOD devices, what happens when an employee tries to connect four devices to the network at the same time?
- A. All devices are allowed on the network simultaneously.
- B. The registration is allowed, but only one device is connected at any given time.
- C. Purge time dictates how long a device is registered to the portal.
- D. The last device is removed and the newly added device is updated as active device.
Answer: B
NEW QUESTION 37
An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)
- A. client description
- B. AP name
- C. X, Y real location
- D. client MAC address
- E. WLC IP address
Answer: C,D
Explanation:
Explanation/Reference:
NEW QUESTION 38
A customer managing a large network has implemented location services. Due to heavy load, it is needed to load balance the data coming through NMSP from the WLCs. Load must be spread between multiple CMX servers to help optimize the data flow for APs. Which configuration in CMX meets this requirement?
- A. cmxctl config feature flags nmsplb.cmx-loadbalance true
- B. cmxctl config feature flags nmsplb.cmx-ap-grouping true
- C. cmxctl config feature flags nmsplb.cmx-rssi-distribute true
- D. cmxctl config feature flags nmsplb.cmxgrouping true
Answer: D
Explanation:
NEW QUESTION 39
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
- A. mDNS is not supported over IPv6.
- B. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
- C. mDNS uses only UDP port 5436 as a destination port.
- D. mDNS cannot use UDP port 5353 as the destination port.
- E. Controller software must be newer than 7.0.6+.
Answer: B,E
NEW QUESTION 40
......
Prepare With Top Rated High-quality 300-430 Dumps For Success in Exam: https://dumpstorrent.dumpsfree.com/300-430-valid-exam.html