Summer Sale 60% Special Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: best60

Cisco 300-430 Implementing Cisco Enterprise Wireless Networks (ENWLSI) Exam Practice Test

Page: 1 / 22
Total 216 questions

Implementing Cisco Enterprise Wireless Networks (ENWLSI) Questions and Answers

Testing Engine

  • Product Type: Testing Engine
$54  $134.99

PDF Study Guide

  • Product Type: PDF Study Guide
$46  $114.99
Question 1

A wireless network has been implemented to enable multicast video to be streamed reliably over the wireless link to the wireless users. After a client reports that the video is unable to stream, the administrator determines that the client is connecting at a data rate of 12 Mbps and is trying to stream to a valid multicast address on the network. Which two actions must be applied? (Choose two.)

Options:

A.

Turn off IGMP snooping for all the configured WLANs on the controller.

B.

Implement video-stream for the multicast video on the controller.

C.

Allow multicast-direct to work correctly and multicast-direct to be enabled globally.

D.

Change the WLAN QoS value to Bronze for the WLAN that multicast will be enabled.

E.

Allow RTSP to stream the video due to wireless multicast not using acknowledgements.

Question 2

When configuring a large, high-availability wireless network, which change to a mobility group creates less load on the controllers and maintains the same mobility messages?

Options:

A.

Configure mobility group multicast messaging.

B.

Remove unnecessary controllers from the mobility group.

C.

Configure the controllers into separate RF groups from the mobility groups.

D.

Separate the controllers into different mobility groups per controller.

Question 3

Which three characteristics of a rogue AP pose a high security risk? (Choose three.)

Options:

A.

open authentication

B.

high RSSI

C.

foreign SSID

D.

accepts clients

E.

low RSSI

F.

distant location

Question 4

Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

Options:

A.

mDNS uses only UDP port 5436 as a destination port.

B.

mDNS cannot use UDP port 5353 as the destination port.

C.

mDNS is not supported on FlexConnect APs with a locally switched WLAN.

D.

Controller software must be newer than 7.0.6+.

E.

mDNS is not supported over IPv6.

Question 5

An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the main campus. The APs on the main campus are configured to use Local mode and the APs in the branches use FlexConnect mode. Which configuration must be applied to the APs for corporate devices on the main campus to be mapped to the local LAN switch on different VLANs according to the VLAN tag ID and WLAN?

Options:

A.

Enable Central DHCP Processing.

B.

Disable FlexConnect Local Auth

C.

Enable FlexConnect Local Switching.

D.

Disable VLAN-based Central Switching.

Question 6

The marketing department creates a promotion video for the branch store. Only interested hosts must receive the video over wireless multicast. What allows this feature?

Options:

A.

TPC

B.

DCA

C.

WMM

D.

WMF

Question 7

An engineer must provide a graphical report with summary grouped data of the total number of wireless clients on the network. Which Cisco Prime Infrastructure report provides the required data?

Options:

A.

Client Traffic Stream Metrics

B.

Client Summary

C.

Posture Status Count

D.

Mobility Client Summary

Question 8

An engineer is considering an MDM integration with Cisco ISE to assist with security for lost devices.

Which two functions of MDM increase security for lost devices that access data from the network? (Choose two.)

Options:

A.

PIN enforcement

B.

Jailbreak/root detection

C.

data wipe

D.

data encryption

E.

data loss prevention

Question 9

An engineer has implemented advanced location services for a retail wireless deployment. The marketing department wants to collect user demographic information in exchange for guest WLAN access and to have a customized portal per location hosted by the provider. Which social connector must be tied into Cisco CMX to provide this service?

Options:

A.

Gmail

B.

Google+

C.

Facebook

D.

MySpace

Question 10

A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE.

The controllers are configured using auto-anchor for the guest network.

Which three components must be implemented for the foreign WLC?(Choose three.)

Options:

A.

DHCP RADIUS profiling enabled.

B.

HTTP RADIUS profiling enabled.

C.

UDP/1812-1813 open to ISE

D.

downloadable preauth ACL on ISE

E.

local preauth ACL on WLC

F.

WLAN Layer 2 security

Question 11

A network engineer is deploying 8865 IP phones with wireless clients connected to them. In order to apply the appropriate QoS, the IP voice traffic needs to be distinguished from client data traffic. Which switch configuration feature must be enabled?

Options:

A.

Voice VLAN

B.

QBSS

C.

WME

D.

QoS routing

Question 12

An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN. Which output is produced when the Adaptive wIPS Top 10 AP report is run?

Options:

A.

last 10 wIPS events from monitor mode APs

B.

last 10 wIPS events from sniffer mode APs

C.

last of 10 sniffer mode APs with the most wIPS events

D.

last of 10 monitor mode APs with the most wIPS events

Question 13

A healthcare organization notices many rogue APs and is concerned about a honeypot attack. Which configuration must a wireless network engineer perform in Cisco Prime Infrastructure to prevent these attacks most efficiently upon detection?

Options:

A.

Set the auto containment level to 0 and select the Using Our SSID containment option.

B.

Set the manual containment level to 4 and select the Ad Hoc Rogue AP containment option.

C.

Set the auto containment level to 0 and select the Ad Hoc Rogue AP containment option.

D.

Set the auto containment level to 4 and select the Using Our SSID containment option.

Question 14

An engineer set up a VoWLAN with QoS on the WLC and a class map on the switch, but the markings are not being preserved correctly in the end-to- end traffic flow. Which two configurations on the wired network ensure end-to-end QoS? (Choose two.)

Options:

A.

trust boundaries

B.

access lists

C.

policy maps

D.

QoS licenses

E.

NetFlow

Question 15

A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.

IP address of the primary server

IP address of the secondary server

failover mode to be configured as automatic

root password of the secondary server

email ID for NOC notifications

Enabling high availability fails when these parameters are used. Which action resolves the issue?

Options:

A.

Insert the cmxadmin password of the secondary server.

B.

Use IP protocol 4242 for the controller to reach the CMX server.

C.

Place primary and secondary servers in different subnets.

D.

Enable the virtual IP address of the primary server.

Question 16

Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?

Options:

A.

Policy Profile

B.

AP Join Profile

C.

Flex Profile

D.

RF Profile

Question 17

A network engineer has been hired to perform a new MSE implementation on an existing network. The MSE must be installed in a different network than the Cisco WLC. Which configuration allows the devices to communicate over NMSP?

Options:

A.

Allow UDP/16113 port on the central switch.

B.

Allow TCP/16113 port on the firewall.

C.

Allow UDP/16666 port on the VPN router.

D.

Allow TCP/16666 port on the router.

Question 18

Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?

Options:

A.

RF Profile

B.

Flex Profile

C.

Policy Profile

D.

AP Join Profile

Question 19

An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?

Options:

A.

Device Admin Node

B.

Primary Admin Node

C.

Monitor Node

D.

Policy Services Node

Question 20

Which QoS level is recommended for guest services?

Options:

A.

gold

B.

bronze

C.

platinum

D.

silver

Question 21

Which two events are outcomes of a successful RF jamming attack? (Choose two.)

Options:

A.

disruption of WLAN services

B.

unauthentication association

C.

deauthentication broadcast

D.

deauthentication multicast

E.

physical damage to AP hardware

Question 22

An engineer just added a new MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, located behind a firewall in a DMZ. It is noticed that NMSP messages are failing between the two devices. Which traffic must be allowed on the firewall to ensure that the MSE and WLC are able to communicate using NMSP?

Options:

A.

TCP 1613

B.

UDP 16113

C.

UDP 1613

D.

TCP 16113

Question 23

An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the management interface, it is noticed that the WLC is not responding for APs that are trying to associate to the internal IP management address. Which command should be used to reconcile this?

Options:

A.

config flexconnect office-extend nat-ip-only disable

B.

config network ap-discovery nap-ip-only enable

C.

config flexconnect office-extend nat-ip-only enable

D.

config network ap-discovery nat-ip-only disable

Question 24

The network management team in a large shopping center has detected numerous rogue APs from local coffee shops that are broadcasting SSIDs. All of these SSIDs have names starting with ATC (for example, ATC302, ATC011, and ATC566). A wireless network engineer must appropriately classify these SSIDs using the Rogue Rules feature. Drag and drop the options from the left onto the categories in which they must be used on the right. Not all options are used.

Options:

Question 25

Refer to the exhibit.

An engineer tries to manage the rogues on the Cisco WLC. Based on the configuration, which AP is marked as malicious by the controller?

Options:

A.

rogue AP with SSID admin seen for 4000 seconds and heard at -70dBm

B.

rogue AP with SSID admin seen for 3000 seconds and heard at -60dBm

C.

rogue AP with SSID admin seen for 4000 seconds and heard at -60dBm

D.

rogue AP with SSID admin seen for 3000 seconds and heard at -70dBm

Question 26

A network engineer is implementing BYOD on a wireless network. Based on the customer requirements, a dual SSID approach must be taken. Which two advanced WLAN configurations must be performed? (Choose two.)

Options:

A.

Set NAC State to Radius NAC.

B.

Set Allow AAA Override to Enabled.

C.

Set DHCP Addr. Assignment to Required.

D.

Select DHCP Profiling.

E.

Select Enable Session Timeout.

Question 27

Refer to the exhibit.

Which area indicates the greatest impact on the wireless network when viewing the Cisco CleanAir Zone of Impact map of interferers?

Options:

A.

A

B.

B

C.

C

D.

D

Question 28

An enterprise has two WLANs configured on WLC. It is reported that when converting APs to FlexConnect mode, WLAN A works but WLAN B does not. When converting APs to local mode, WLAN B works, but WLAN A does not. Which action is needed to complete this configuration?

Options:

A.

Create a Cisco FlexConnect group with WLAN-VLAN mapping.

B.

Disable local switching on the WLANs.

C.

Map the AP group to the WLAN interface.

D.

Join the APs to a Cisco FlexConnect group.

Question 29

In a Cisco WLAN deployment, it is required that all Aps from branch1 remain operational even if the control plane CAPWAP tunnel is down because of a WAN failure to headquarters. Which operational mode must be configured on the APs?

Options:

A.

disconnected

B.

standalone

C.

lightweight

D.

connected

Question 30

What two actions must be taken by an engineer configuring wireless Identity-Based Networking for a WLAN to enable VLAN tagging? (Choose two.)

Options:

A.

enable AAA override on the WLAN

B.

create and apply the appropriate ACL to the WLAN

C.

update the RADIUS server attributes for tunnel type 64, medium type 65, and tunnel private group type 81

D.

configure RADIUS server with WLAN subnet and VLAN ID E. enable VLAN Select on the wireless LAN controller and the WLAN

Question 31

A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)

Options:

A.

The interference is less than or equal to 30% on the 2.4 GHz radio.

B.

The interference is less than or equal to 50% on the 2.4 GHz radio.

C.

Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.

D.

The interference is less than or equal to 30% on the 5 GHz radio.

E.

Cisco DNA Center does not include interference in the AP health score.

Question 32

A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

Options:

A.

SOAP/XML

B.

NMSP

C.

CAPWAP

D.

SNMP

Page: 1 / 22
Total 216 questions