300-430 Online Practice Questions and Answers

An engineer must implement intrusion protection the WLAN. The AP coverage is adequate and on- channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which Ap mode and submode must be implemented?

A. Ap mode: local, Ap submode: WIPS

B. Ap mode: monitor, Ap submode: WIPS

C. Ap mode: monitor, Ap submode: none

D. Ap mode: local, Ap submode: none

A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber.

QoS is being applied only as best effort. What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?

A. Configure an AVC profile for the Jabber traffic and apply it to the WLAN.

B. Configure the WLAN to broadcast on 5 GHz radios only and allow Jabber users to conned.

C. Enable Cisco Centralized Key Management on the WLAN so that the Jabber-enabled devices will connect.

D. Configure QoS on the mobile devices that have Jabber installed.

An engineer configures a deployment to support:

1.

Cisco CMX

2.

licenses for at least 3000 APs

3.

6000 wIPS licenses

The Cisco vMSE appliance must be sized for this deployment. Which Cisco vMSE Release 8 option must the engineer deploy?

A. Large vMSE

B. Low-End vMSE

C. Standard vMSE

D. High-End vMSE

A multitenant building contains known wireless networks in most of the suites. Rogues must be classified in the WLC. How are the competing wireless APs classified?

A. adhoc

B. friendly

C. malicious

D. unclassified

An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?

A. controller management

B. DNS server IP

C. virtual interface IP

D. Client interface IP

A Cisco 8540 WLC manages Cisco Aironet 4800 Series APs and sends AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperiocation. No AOA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics.

How must the network administrator RESOLVE THIS ISSUE?

A. Allow port 2003 for AoA packets to flow through between the CMX appliances.

B. Enable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.

C. Use one Hyperlocation-enabled WL.C and CMX for AoA data

D. Enable the HALO module on the CMX appliance for the data collection

An engineer is troubleshooting rogue access points that are showing up in Cisco Prime Infrastructure.

What is maximum number of APS the engineer can use to contain an identified rogue access point in the WLC?

A. 3

B. 4

C. 6

D. 5

Refer to the exhibit.

An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogues?

A. config location notification interval rssi rogues 5

B. config nmsp notification interval rssi rogues 5

C. config subscription notification interval rssi rogues 5

D. config cmx notification interval rssi rogues 5

An engineer has configured passive fallback mode for RADIUS with default timer settings. What will occur when the primary RADIUS fails then recovers?

A. RADIUS requests will be sent to the secondary RADIUS server until the secondary fails to respond.

B. The controller will immediately revert back after it receives a RADIUS probe from the primary server.

C. After the inactive time expires the controller will send RADIUS to the primary.

D. Once RADIUS probe messages determine the primary controller is active the controller will revert back to the primary RADIUS.

Company XYZ recently migrated from AireOS to IOS XE 9800 WLCs. The Internet bandwidth must be limited to 5 Mbps for each guest client as per the global standard. In which configuration on the Cisco Catalyst 9800 WLC must the QoS requirement be added?

A. table map

B. policy map

C. service policy

D. class map