300-430 Online Practice Questions and Answers

A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)

A. network analyzers

B. malware

C. lost and stolen devices

D. keyloggers

E. unauthorized users

An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

A. learn client IP address

B. FlexConnect local authentication

C. VLAN-based central switching

D. central DHCP processing

All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?

A. The multicast group includes all APs

B. The wrong multicast address was used

C. The multicast group is assigned the wrong VLAN

D. Multicast IGMP snooping is not enabled

A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

A. 1

B. 2

C. 5

D. 7

Refer to the exhibit.

An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP- PEAP cannot connect to the network. Based on the local EAP debug controller provided, why is the client unable to connect?

A. The client is falling to accept certificate.

B. The Cisco WLC is configured for the incorrect date.

C. The user is using invalid credentials.

D. The Cisco WLC local EAP profile is misconfigured

What are two considerations when deploying a Cisco Hyperlocation? (Choose two.)

A. NTP configuration is available, but not recommended.

B. The Cisco Hyperlocation feature must be enabled only on the wireless LAN controller.

C. After enabling Cisco Hyperlocation on Cisco CMX, the APs and the wireless LAN controller must be restarted.

D. The Cisco Hyperlocation feature must be enabled on the wireless LAN controller and Cisco CMX.

E. If the Cisco CMX server is a VM, a high-end VM is needed for Cisco Hyperlocation deployments.

Refer to the exhibit.

An engineer is troubleshooting a client connectivity issue. The client is in the RUN state, and no traffic is passed after authenticating by using Cisco ISE. Which action resolves the problem?

A. Configure a different client VLAN after authentication.

B. Disable the ACL that prevents traffic from being allowed.

C. Apply a lower WMM QoS.

D. Enable rate-limiting to the client.

An engineer just added anew MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, which is located behind a firewall in a DMZ. It is noticed that NMSP messages are failing between the two devices. Which traffic must be allowed on the firewall to ensure that the MSE and WLC can communicate using NMSP?

A. TCP 1613

B. UDP 16113

C. TCP 16113

D. UDP 1613

A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location. Which Cisco FlexConnect configuration must be used?

A. central authentication and local switching

B. central authentication and central switching

C. local authentication and local switching

D. local authentication and central switching

On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational.

Which command set prevents this connection?

A. config terminal wireless profile flex [profile name] fallback-radio-shut end

B. config terminal wireless flexconnect profile [profile name] fallback-radio-shut end

C. config terminal wireless flexconnect profile [profile name) ethernet-fallback-enable end

D. config terminal wireless profile flex [profile name] ethernet-fallback-enable end