What Certified 300-430 Preparation Is

NEW QUESTION 1
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

• A. WPA key
• B. session key
• C. encryption key
• D. shared-secret key

Answer: B

NEW QUESTION 2
Which three properties are used for client profiling of wireless clients? (Choose three.)

• A. HTTP user agent
• B. DHCP
• C. MAC OUI
• D. hostname
• E. OS version
• F. IP address

Answer: ABC

NEW QUESTION 3
CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

• A. Allow HTTP traffic only before authentication and block all the traffic.
• B. Allow all the traffic before authentication and intercept HTTPS only.
• C. Allow HTTPs traffic only before authentication and block all other traffic.
• D. Allow all the traffic before authentication and intercept HTTP only.
• E. Allow SNMP traffic only before authentication and block all the traffic.

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/CMX_Connect_Engage_Visitor_Connect/Guide/Cisco_CMX_Connect_Engage_Config_Guide_VC/CMX_Facebook_Wi-Fi.html

NEW QUESTION 4
An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

• A. The Cisco CMX instances are installed in the same subnet.
• B. The types of the primary and secondary Cisco CMX installations differ.
• C. The delay between the primary and secondary instance is 200 ms.
• D. The sizes of the primary and secondary Cisco CMX installations differ.
• E. Both Cisco CMX installations are virtual.

Answer: BD

NEW QUESTION 5
For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to, as soon as the change is made?

• A. wireless traffic only
• B. wired traffic only
• C. VPN traffic
• D. wireless and wired traffic

Answer: A

NEW QUESTION 6
Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

• A. It must be Inbound because traffic goes to the WLC.
• B. Packet direction has no significance; it is always Any.
• C. It must be Outbound because it is traffic that is generated from the WLC.
• D. To have the complete list of options, the CPU ACL must be created only by the CLI.

Answer: A

NEW QUESTION 7
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?
A.

B.

• A.
• B.

Answer: B

NEW QUESTION 8
An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

• A. learn client IP address
• B. FlexConnect local authentication
• C. VLAN-based central switching
• D. central DHCP processing

Answer: C

NEW QUESTION 9
Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?

• A. Policy Profile
• B. AP Join Profile
• C. Flex Profile
• D. RF Profile

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/cisco-hyperlocation.html

NEW QUESTION 10
Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

• A. 1800s
• B. 3600e
• C. 3800s
• D. 4800i

Answer: A

NEW QUESTION 11
Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

• A. HTTPS
• B. Telnet
• C. SOAP
• D. SSH
• E. NMSP

Answer: AE

NEW QUESTION 12
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?

• A. received signal strength
• B. triangulation
• C. time distance of arrival
• D. angle of incidence

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS-DG/wifich2.html

NEW QUESTION 13
What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

• A. EAP-PEAP with 802.1x port authentication
• B. EAP-TLS with 802.1x port authentication
• C. EAP-FAST with CAPWAP DTLS + port authentication
• D. EAP-FAST with CAPWAP DTLS

Answer: C

NEW QUESTION 14
Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

• A. Configure the certificate, WLAN, and radio interface on WGB.
• B. Configure the certificate on the WLC.
• C. Configure WLAN to authenticate using ISE.
• D. Configure the access point with the root certificate from ISE.
• E. Configure WGB as a network device in ISE.
• F. Configure a policy on ISE to allow devices to connect that validate the certificate.

Answer: ACF

NEW QUESTION 15
An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?

• A. split tunneling
• B. SE-connect
• C. FlexConnect
• D. AP failover priority

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/aironet-602-officeextend-access-point/117540-configure-splittunneloeap-00.html

NEW QUESTION 16
An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?

• A. Platinum QoS configured on the WLAN
• B. WMM set to required on the WLAN
• C. msl qos trust dscp configured on the controller switch port
• D. msl qos trust cos configured on the controller switch port

Answer: C

NEW QUESTION 17
Which two events are outcomes of a successful RF jamming attack? (Choose two.)

• A. disruption of WLAN services
• B. unauthentication association
• C. deauthentication broadcast
• D. deauthentication multicast
• E. physical damage to AP hardware

Answer: AE

NEW QUESTION 18
On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?

• A. ISE NAC is enabled
• B. 802.11r Fast Transition is enabled
• C. Client Exclusion is enabled
• D. FlexConnect Local Auth is disabled

Answer: D

NEW QUESTION 19
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

• A. mDNS uses only UDP port 5436 as a destination port.
• B. mDNS cannot use UDP port 5353 as the destination port.
• C. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
• D. Controller software must be newer than 7.0.6+.
• E. mDNS is not supported over IPv6.

Answer: CD

NEW QUESTION 20
A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

• A. SOAP/XML
• B. NMSP
• C. CAPWAP
• D. SNMP

Answer: A

NEW QUESTION 21
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

• A. Static WEP + 802.1X
• B. WPA+WPA2
• C. Static WEP
• D. CKIP
• E. 802.1X

Answer: BC

NEW QUESTION 22
......