300-430 Dumps By Pros - 1st Attempt Guaranteed Success
100% Guarantee Download 300-430 Exam Dumps PDF Q&A
NEW QUESTION # 132
What is the Cisco recommended configuration for a Cisco switch port connected to an AP in local mode for optimal voice over WLAN performance with an 8821 wireless phone?
- A. switchport mode access mls qos trust dscp
- B. switchport mode access mls qos trust cos
- C. switchport mode access
mls qos trust device cisco-phone - D. switchport encapsulation dot1q
switchport mode trunk
mls qos trust device cisco-phone
Answer: B
NEW QUESTION # 133
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)
- A. Static WEP + 802.1X
- B. CKIP
- C. 802.1X
- D. Static WEP
- E. WPA+WPA2
Answer: D,E
NEW QUESTION # 134
An engineer manages a wireless network for an enterprise. The offices of the enterprise are in a multistory building with other companies. To avoid service loss of the wireless network, jamming devices must be monitored and an alert must be raised when one enters the airspace. Which two parameters must be configured for this alarm to happen? (Choose two.)
- A. Jammer is in the "Rogue Devices to Detect"multiple select box.
- B. Air Quality Index Trap is enabled.
- C. Jammer is selected in the Rogue Policies.
- D. Set the Cisco WLC to trap this type of device.
- E. Clean Air is enabled.
Answer: D,E
Explanation:
CleanAir is required as that enables the AP chipset to detect interference. Then in 9800 you go to Configuration --> Radio Configurations --> CleanAir --> Select Trap Configuration --> Move Jammer to the Interference Types to trap box.
NEW QUESTION # 135
An engineer is integrating a new Cisco Mobility Services Engine with Cisco Prime Infrastructure to use Cisco CMX Location Analytics. Which action is required?
- A. Enable Context Aware and CMX Browser Engage
- B. Set history parameters in Cisco Mobility Service Engine
- C. Install Cisco Prime infrastructure with floor maps
- D. Enable tracking parameters in Cisco Mobility Service Engine
Answer: D
NEW QUESTION # 136
Refer to the exhibit.
A customer has implemented Cisco FlexConnect deployments with different WLANs around the global and is opening a new branch in a different location. The engineers' task is to execute all the wireless configuration and to suggest how to configure the switch ports for new Aps. Which configuration must the switching team use on the switch ports?
- A. Access mode
- B. Trunk mode
- C. Single mode
- D. Multiple VLAN
Answer: B
NEW QUESTION # 137
An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the main campus. The APs on the main campus are configured to use Local mode and the APs in the branches use FlexConnect mode. Which configuration must be applied to the APs for corporate devices on the main campus to be mapped to the local LAN switch on different VLANs according to the VLAN tag ID and WLAN?
- A. Disable FlexConnect Local Auth
- B. Enable FlexConnect Local Switching.
- C. Enable Central DHCP Processing.
- D. Disable VLAN-based Central Switching.
Answer: B
NEW QUESTION # 138
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?
- A. BASE_ACL appended with HR_ACL
- B. HR_ACL only
- C. BASE_ACL only
- D. HR_ACL appended with BASE_ACL
Answer: B
Explanation:
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98590-Per-User-ACL-WLC.html#configure-acs
NEW QUESTION # 139
Which statement about the VideoStream/Multicast Direct feature is true?
- A. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.
- B. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
- C. It converts the unicast frame to a multicast frame over the air.
- D. Each VideoStream client acknowledges receiving a video IP multicast stream.
Answer: D
Explanation:
NEW QUESTION # 140
A wireless engineer has performed a Wireshark ccapture on an 802.1x authentication process to troubleshoot a connectivity issue.
Which two types of packet does the EAP contain? (Choose two.)
- A. EAP response
- B. EAP reply
- C. EAP complete
- D. EAP failure
- E. EAP request
Answer: A,E
NEW QUESTION # 141
An engineer is configuring multicast for two WLCs. The controllers are in deferent physical locations and each handles around 500 wire clients. How should the CAPWAP multicast group address be assigned during configuration?
- A. Each WLC must be assigned a unique multicast group address
- B. Both WLCs must be assigned the same multicast group address
- C. Each WLC management address must be in the same multicast group
- D. Each WLC management address must be in a different multicast group
Answer: D
NEW QUESTION # 142
Which devices can be tracked with the Cisco Context Aware Services?
- A. wired and wireless devices
- B. wireless devices
- C. wired devices
- D. Cisco certified wireless devices
Answer: A
Explanation:
https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html
NEW QUESTION # 143
A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the issue?
- A. controller IGMP snooping
- B. multicast AP multicast mode
- C. unicast AP multicast mode
- D. broadcast forwarding
Answer: C
Explanation:
Explanation
Note: The question is about the reason behind CPU hike, it is not asking the solution for the issue
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/81671-multicast-wlc-lap.html
NEW QUESTION # 144
Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?
- A. Policy Profile
- B. RF Profile
- C. AP Join Profile
- D. Flex Profile
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/cisco- hyperlocation.html
NEW QUESTION # 145
An engineer must implement intrusion protection on the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which AP mode and submode must be implemented?
- A. AP mode: monitor, AP submode: WIPS
- B. AP mode: local, AP submode: WIPS
- C. AP mode: monitor, AP submode: none
- D. AP mode: local, AP submode: none
Answer: B
NEW QUESTION # 146
A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure. Which two technologies must they deploy? (Choose two.)
- A. monitor mode
- B. local mode with WIPS submode
- C. sniffer mode with no submode
- D. FlexConnect mode
- E. rogue detector mode
Answer: A,B
NEW QUESTION # 147
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. encryption key
- B. shared-secret key
- C. WPA key
- D. session key
Answer: D
Explanation:
NEW QUESTION # 148
Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure to track the location of clients/rogues on maps? (Choose two.)
- A. Apply a valid license for location tracking.
- B. Add the MSE to Cisco Prime Infrastructure using the CLI credentials.
- C. Add the MSE to Cisco Prime Infrastructure using the Cisco Prime Infrastructure communication credentials.
- D. Apply a valid license for Wireless Intrusion Prevention System.
- E. Synchronize access points with the MSE.
Answer: A,D
NEW QUESTION # 149
What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?
- A. 3 days
- B. 3 hours
- C. 24 hours
- D. 7 days
Answer: D
Explanation:
Explanation
(7 Days is the max, you can select
NEW QUESTION # 150
An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?
- A. TACACS+
- B. network policy server
- C. LDAP
- D. RADIUS
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/lan/Denali_161/ConfigExamples_Technotes/Techzone_Articles/Example_and_Technotes_Denali_16_1_1/Example_and_Technotes_Denali_16_1_1_chapter_010110.pdf
https://community.cisco.com/t5/wireless-mobility-documents/wlc-and-acs-5-x-tacacs-configuration-example-web-authentication/ta-p/3120681
NEW QUESTION # 151
CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available?
(Choose two.)
- A. Allow SNMP traffic only before authentication and block all the traffic.
- B. Allow HTTP traffic only before authentication and block all the traffic.
- C. Allow all the traffic before authentication and intercept HTTP only.
- D. Allow HTTPs traffic only before authentication and block all other traffic.
- E. Allow all the traffic before authentication and intercept HTTPS only.
Answer: C,D
Explanation:
NEW QUESTION # 152
An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?
- A. virtual interface IP
- B. client interface IP
- C. DNS server IP
- D. controller management IP
Answer: A
NEW QUESTION # 153
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version
7.3 to 8.9.
Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes?
(Choose two.)
- A. Permit 0.0.0.0 0.0.0.0 UDP any DNS
- B. Permit 0.0.0.0 0.0.0.0 any DNS any
- C. Permit any any any
- D. Permit 0.0.0.0 0.0.0.0 UDP any any
- E. Permit 0.0.0.0 0.0.0.0 UDP DNS any
Answer: A,E
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732- central- web-auth-00.html
NEW QUESTION # 154
......
Earn Quick And Easy Success With 300-430 Dumps: https://torrentpdf.validvce.com/300-430-exam-collection.html
