[Sep-2021] Get 100% Real 300-430 Exam Questions, Accurate & Verified TopExamCollection Dumps in the Real Exam!
Pass Your CCNP Enterprise Exams Fast. All Top 300-430 Exam Questions Are Covered.
NEW QUESTION 63
A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)
- A. malware
- B. unauthorized users
- C. lost and stolen devices
- D. network analyzers
- E. keyloggers
Answer: A,C
Explanation:
Explanation
https://ccbtechnology.com/byod-5-biggest-security-risks/
https://blogs.cisco.com/security/byod-many-call-it-bring-your-own-malware-byom
NEW QUESTION 64
What is the difference between PIM sparse mode and PIM dense mode?
- A. Sparse mode floods. Dense mode uses distribution trees.
- B. Sparse mode uses distribution trees. Dense mode floods.
- C. Sparse mode supports multiswitch networks. Dense mode supports only one switch.
- D. Sparse mode supports only one switch. Dense mode supports multiswitch networks.
Answer: B
NEW QUESTION 65
An engineer is configuring multicast for two WLCs. The controllers are in deferent physical locations and each handles around 500 wire clients. How should the CAPWAP multicast group address be assigned during configuration?
- A. Each WLC management address must be in the same multicast group
- B. Each WLC must be assigned a unique multicast group address
- C. Both WLCs must be assigned the same multicast group address
- D. Each WLC management address must be in a different multicast group
Answer: D
NEW QUESTION 66
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9.
Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)
- A. Permit 0.0.0.0 0.0.0.0 UDP DNS any
- B. Permit 0.0.0.0 0.0.0.0 UDP any any
- C. Permit 0.0.0.0 0.0.0.0 UDP any DNS
- D. Permit any any any
- E. Permit 0.0.0.0 0.0.0.0 any DNS any
Answer: A,C
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
NEW QUESTION 67
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?
- A. Access to Cisco ISE must be allowed on the pre authentication ACL.
- B. Management traffic from the guest network must be configured on the ACL rules.
- C. Traffic toward the virtual interface must be permitted.
- D. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
Answer: A
Explanation:
NEW QUESTION 68
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. session key
- B. shared-secret key
- C. WPA key
- D. encryption key
Answer: A
Explanation:
NEW QUESTION 69
An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?
- A. TACACS+
- B. LDAP
- C. network policy server
- D. RADIUS
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/lan/Denali_161/ConfigExamples_Technotes/Techzone_Articles
NEW QUESTION 70
A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC. Which configuration should be used to accomplish this goal?
- A. FlexConnect mode with OfficeExtend enabled
- B. FlexConned mode with central switching enabled
- C. FlexConnect mode with central authentication
- D. FlexConnect mode with local authentication
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/72/configuration/guide/cg/cg_flexconnect.html#wp12
NEW QUESTION 71
An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?
- A. mls qos trust dscp configured on the controller switch port
- B. WMM set to required on the WLAN
- C. mls qos trust cos configured on the controller switch port
- D. Platinum QoS configured on the WLAN
Answer: A
Explanation:
NEW QUESTION 72
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?
- A. triangulation
- B. angle of incidence
- C. received signal strength
- D. time distance of arrival
Answer: B
Explanation:
NEW QUESTION 73
Refer to the exhibit.
The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?
- A. Correct the shared secret.
- B. Disable KeyWrap
- C. Change the CoA Port
- D. Use ASCII for the key input format
Answer: C
NEW QUESTION 74
Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure and be able to track the location of clients/rogues on maps? (Choose two.)
- A. Apply a valid license for location tracking.
- B. Synchronize access points with the MSE.
- C. Apply a valid license for Wireless Intrusion Prevention System.
- D. Add the MSE to Cisco Prime Infrastructure using the CLI credentials.
- E. Add the MSE to Cisco Prime Infrastructure using the Cisco Prime Infrastructure communication credentials configured during set up.
Answer: A,E
Explanation:
https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/33/user/guide/bk_CiscoPrimeInfrastructure_3_3_0_UserGuide/bk_CiscoPrimeInfrastructure_3_3_0_UserGuide_chapter_0100110.html
NEW QUESTION 75
An engineer has implemented 802.1x authentication on the wireless network utilizing the internal database of a RADIUS server. Some clients reported that they are unable to connect. After troubleshooting, it is found that PEAP authentication is failing. A debug showed the server is sending an Access-Reject message. Which action must be taken to resolve authentication?
- A. Replace the client certificates from the CA with the server certificate.
- B. Disable the server certificate to be validated on the client.
- C. Update the client certificate to match the user account.
- D. Use the user password that is configured on the server.
Answer: C
NEW QUESTION 76
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)
- A. Static WEP + 802.1X
- B. Static WEP
- C. WPA+WPA2
- D. 802.1X
- E. CKIP
Answer: B,C
Explanation:
NEW QUESTION 77
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.
Which configuration is needed to complete this task?
- A. Create an ACL for WebEx
- B. Change the AVC application WebEx-app-sharing to mark
- C. Change the WLAN reserved bandwidth for WebEx
- D. Create an AVC profile for WebEx
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/AVC_dg7point5.html
NEW QUESTION 78
An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?
- A. permit-ACL
- B. WMM required
- C. mark
- D. rate-limit
Answer: C
Explanation:
NEW QUESTION 79
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?
- A. It matches traffic and assigns each matched packet to QoS groups
- B. It allows the output policy map to put specific QoS queues into specific subgroups
- C. It has a set of predefined profiles that you cannot modify further
- D. It automates deployment of wired QoS and makes wireless QoS implementation easier
Answer: A
Explanation:
NEW QUESTION 80
......
Penetration testers simulate 300-430 exam: https://www.topexamcollection.com/300-430-vce-collection.html
Free Test Engine For Implementing Cisco Enterprise Wireless Networks Certification Exams: https://drive.google.com/open?id=1hdMgCAJQNU5wyvpQzzXJbdAT36IybOIK
