300-430 Pre-Exam Practice Tests | (Updated 281 Questions)
Valid 300-430 Exam Q&A PDF - One Year Free Update
NEW QUESTION # 78 
Refer to the exhibit. Which are indicates the greatest impact on the wireless network when viewing the Cisco CleanAir Zone of Impact map of interferers?
- A. D
- B. C
- C. A
- D. B
Answer: A
NEW QUESTION # 79
Refer to the exhibit.
The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?
- A. Disable KeyWrap
- B. Use ASCII for the key input format
- C. Correct the shared secret.
- D. Change the CoA Port
Answer: D
NEW QUESTION # 80
An engineer is configuring multicast for two WLCs. The controllers are in deferent physical locations and each handles around 500 wire clients. How should the CAPWAP multicast group address be assigned during configuration?
- A. Each WLC must be assigned a unique multicast group address
- B. Both WLCs must be assigned the same multicast group address
- C. Each WLC management address must be in the same multicast group
- D. Each WLC management address must be in a different multicast grou
Answer: A
Explanation:
Choose Controller > General to configure AP multicast mode (multicast or unicast) & CAPWAP multicast group address(only for multicast mode). Use private multicast IP (239.0.0.0/8) for the group address, but avoid 239.0.0.x or 239.128.0.x as these overlap with the link local MAC addresses & flood out all switch ports. This group address cannot be used for any application in your network. If you have multiple controllers, configure different group address for different controllers.
https://mrncciew.com/2012/11/17/configuring-multicast-on-wlc/
NEW QUESTION # 81
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?
- A. It matches traffic and assigns each matched packet to QoS groups
- B. It automates deployment of wired QoS and makes wireless QoS implementation easier
- C. It allows the output policy map to put specific QoS queues into specific subgroups
- D. It has a set of predefined profiles that you cannot modify further
Answer: A
Explanation:
NEW QUESTION # 82
An engineer is managing a wireless network for a shopping center. The network includes a Cisco WLC, a Cisco MSE, and a Cisco Prime Infrastructure. What is required to use Cisco CMX Location Analytics?
- A. Enable tracking parameters in Cisco MSE.
- B. Enable Context Aware and CMX Browser Engage.
- C. Install Cisco Prime Infrastructure with floor maps.
- D. Set history parameters in Cisco MSE.
Answer: B
NEW QUESTION # 83
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal.
What must be configured to permit only admins to have access?
- A. Traffic toward the virtual interface must be permitted.
- B. Access to Cisco ISE must be allowed on the pre authentication ACL.
- C. Management traffic from the guest network must be configured on the ACL rules.
- D. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
Answer: B
Explanation:
NEW QUESTION # 84
An engineer needs read/write access to rename access points and add them to the correct AP groups on a wireless controller. Using Cisco ISE TACACS, which custom attributes is the minimum required?
- A. role1=WLAN role2=SECURITY
- B. role1=WIRELESS
- C. role1=WLAN
- D. role1=WLAN role2=WIRELESS
Answer: B
NEW QUESTION # 85
An IT administrator deployed an OEAP to the home of a remote user, but the OEAP cannot reach the WLC.
Which two configuration settings must be completed before an OEAP is deployed successfully?
(Choose two.)
- A. Configure the WLC with an external IP address on the virtual interface.
- B. Configure Primary Controller Name and Management IP address in the High Availability tab.
- C. Configure the AP mode to FlexConnect and check the box for Office Extend AP.
- D. Configure Secondary Controller Name and Management IP address in the High Availability tab.
- E. Configure LSC to authorize the OEAP.
Answer: B,C
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-
guide/b_cg85/configuring_officeextend_access_points.html
Step 4 and 5 show that these are two of the valid steps required to configure the OEAP.
NEW QUESTION # 86
An engineer is troubleshooting a Cisco CMX high-availability deployment and notices that the primary and backup Cisco CMX servers are both considered primary. Which command must the engineer run on the backup server?
- A. cmxha convert backup
- B. cmxha convert secondary
- C. cmxha backup convert
- D. cmxha secondary convert
Answer: D
Explanation:
cmxha secondary{ convert | info }
https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-3/cmx_command/cmxcli103.pdf
NEW QUESTION # 87
Refer to the exhibit.
The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?
- A. Disable KeyWrap
- B. Use ASCII for the key input format
- C. Correct the shared secret.
- D. Change the CoA Port
Answer: D
NEW QUESTION # 88
In a Cisco WLAN deployment, it is required that all APs from branch 1 remain operational even if the control plane CAPWAP tunnel is down because of a WAN failure to headquarters.
Which operational mode must be configured on the APs?
- A. Disconnected
- B. Lightweight
- C. Connected
- D. Standalone
Answer: D
NEW QUESTION # 89
Refer to the exhibit. An engineer has deployed the Cisco CMX solution to track and detect the number of users who visit the office each day. The CMX dashboard is not showing any data.
Which action resolves this issue?
- A. Install an evaluation license to CMX server.
- B. Configure Single Sign-On authentication.
- C. Add the WLCs to CMX.
- D. Copy the exported Maps from CMX server to PI using SCP.
Answer: C
NEW QUESTION # 90
An engineer must provide a graphical report with summary grouped data of the total number of wireless clients on the network. Which Cisco Prime Infrastructure report provides the required data?
- A. Client Traffic Stream Metrics
- B. Mobility Client Summary
- C. Client Summary
- D. Posture Status Count
Answer: B
NEW QUESTION # 91
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: C
Explanation:
There is no "wireless flexconnect" command. Use the "wireless profile Policy" command.
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-1/cmd- ref/b_wl_17_1_cr/configuration-commands-g-to-z.html#wp5169136690 There is no "Local switching" command. Use the "no central switching" command.
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-1/cmd- ref/b_wl_17_1_cr/configuration-commands-a-to-f.html#wp3034709985
NEW QUESTION # 92
An engineer must enable LSS for the Apple TV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?
- A. Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.
- B. Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss Apple TV command.
- C. Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable Apple TV command
- D. Set ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command
Answer: B
NEW QUESTION # 93
Refer to the exhibit.
An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?
- A. It must be Inbound because traffic goes to the WLC.
- B. To have the complete list of options, the CPU ACL must be created only by the CLI.
- C. Packet direction has no significance; it is always Any.
- D. It must be Outbound because it is traffic that is generated from the WLC.
Answer: A
Explanation:
NEW QUESTION # 94
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. shared-secret key
- B. WPA key
- C. encryption key
- D. session key
Answer: D
Explanation:
NEW QUESTION # 95
......
Implementing Cisco Enterprise Wireless Networks Free Update Certification Sample Questions: https://www.testpdf.com/300-430-exam-braindumps.html
Trend for Cisco 300-430 pdf dumps before actual exam: https://drive.google.com/open?id=1iR5l9hFR82gQnlqw-Zwz0IYQKq_bOvEW
