Approved 300-430 Lab 2021

NEW QUESTION 1
Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?

• A. RF Profile
• B. Flex Profile
• C. Policy Profile
• D. AP Join ProfileCorrect

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/flexconnect.html

NEW QUESTION 2
For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to, as soon as the change is made?

• A. wireless traffic only
• B. wired traffic only
• C. VPN traffic
• D. wireless and wired traffic

Answer: A

NEW QUESTION 3
CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

• A. Allow HTTP traffic only before authentication and block all the traffic.
• B. Allow all the traffic before authentication and intercept HTTPS only.
• C. Allow HTTPs traffic only before authentication and block all other traffic.
• D. Allow all the traffic before authentication and intercept HTTP only.
• E. Allow SNMP traffic only before authentication and block all the traffic.

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/CMX_Connect_Engage_Visitor_Connect/Guide/Cisco_CMX_Connect_Engage_Config_Guide_VC/CMX_Facebook_Wi-Fi.html

NEW QUESTION 4
A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

• A. There is an IEEE invalid 802.1X authentication policy on the authentication server.
• B. The user Active Directory account is locked out after several failed attempts.
• C. There is an invalid 802.1X authentication policy on the authenticator.
• D. The laptop has not received a valid IP address from the wireless controller.

Answer: C

NEW QUESTION 5
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?

• A. HR_ACL appended with BASE_ACL
• B. HR_ACL only
• C. BASE_ACL appended with HR_ACL
• D. BASE_ACL only

Answer: B

NEW QUESTION 6
A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)

• A. network analyzers
• B. malware
• C. lost and stolen devices
• D. keyloggers
• E. unauthorized users

Answer: BC

NEW QUESTION 7
Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure and be able to track the location of clients/rogues on maps? (Choose two.)

• A. Synchronize access points with the MSE.
• B. Add the MSE to Cisco Prime Infrastructure using the CLI credentials.
• C. Add the MSE to Cisco Prime Infrastructure using the Cisco Prime Infrastructure communication credentials configured during set up.
• D. Apply a valid license for Wireless Intrusion Prevention System.
• E. Apply a valid license for location tracking.

Answer: DE

NEW QUESTION 8
What is the difference between PIM sparse mode and PIM dense mode?

• A. Sparse mode supports only one switc
• B. Dense mode supports multiswitch networks.
• C. Sparse mode flood
• D. Dense mode uses distribution trees.
• E. Sparse mode uses distribution tree
• F. Dense mode floods.
• G. Sparse mode supports multiswitch network
• H. Dense mode supports only one switch.

Answer: C

NEW QUESTION 9
A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments. Which solution must the engineer choose?

• A. Configure a second WLC to support half of the APs in the deployment.
• B. Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.
• C. Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.
• D. Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.

Answer: B

NEW QUESTION 10
Which statement about the VideoStream/Multicast Direct feature is true?

• A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
• B. Each VideoStream client acknowledges receiving a video IP multicast stream.
• C. It converts the unicast frame to a multicast frame over the air.
• D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/multicast_broadcast_setup.html

NEW QUESTION 11
A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

• A. CleanAir reports on Cisco Prime Infrastructure
• B. Performance reports on Cisco Prime Infrastructure
• C. Interference Devices reports on Cisco Wireless LAN Controller
• D. Air Quality reports on Cisco Wireless LAN Controller

Answer: A

NEW QUESTION 12
An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

• A. learn client IP address
• B. FlexConnect local authentication
• C. VLAN-based central switching
• D. central DHCP processing

Answer: C

NEW QUESTION 13
Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

• A. Cisco Hyperlocation Module
• B. Wireless Intrusion Prevention System
• C. Cisco Connected Mobile Experiences
• D. Cisco Mobility Services Engine

Answer: A

NEW QUESTION 14
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be verified?

• A. SNMP RO community
• B. device interface credentials
• C. device ID
• D. shared secret

Answer: D

NEW QUESTION 15
The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

• A. CSV
• B. PDF
• C. XLS
• D. DOC
• E. plain text

Answer: AB

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-2/user/guide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide_chapter_01010.html

NEW QUESTION 16
An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

• A. The Cisco CMX instances are installed in the same subnet.
• B. The types of the primary and secondary Cisco CMX installations differ.
• C. The delay between the primary and secondary instance is 200 ms.
• D. The sizes of the primary and secondary Cisco CMX installations differ.
• E. Both Cisco CMX installations are virtual.

Answer: BD

NEW QUESTION 17
Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

• A. FlexConnect ACL
• B. VLAN name override
• C. CCKM/OKC
• D. AAA override

Answer: D

NEW QUESTION 18
Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?

• A. The Cisco CMX server receives NetFlow data from the WLC.
• B. The Cisco CMX server receives NMSP traffic from the WLC.
• C. The Cisco CMX server receives SNMP traffic from the WLC.
• D. The Cisco CMX server receives Angle-of-Arrival data from the WLC.

Answer: D

NEW QUESTION 19
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?

• A. It has a set of predefined profiles that you cannot modify further
• B. It matches traffic and assigns each matched packet to QoS groups
• C. It automates deployment of wired QoS and makes wireless QoS implementation easier
• D. It allows the output policy map to put specific QoS queues into specific subgroups

Answer: B

NEW QUESTION 20
A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

• A. SOAP/XML
• B. NMSP
• C. CAPWAP
• D. SNMP

Answer: A

NEW QUESTION 21
Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

• A. authentication-local/switch-local
• B. WPA2 personal
• C. authentication-central/switch-central
• D. lightweight mode
• E. standalone mode
• F. WEB authentication

Answer: ABE

NEW QUESTION 22
Which QoS level is recommended for guest services?

• A. gold
• B. bronze
• C. platinum
• D. silver

Answer: B

NEW QUESTION 23
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?

• A. Change the WLAN reserved bandwidth for WebEx
• B. Create an AVC profile for WebEx
• C. Create an ACL for WebEx
• D. Change the AVC application WebEx-app-sharing to mark

Answer: B

NEW QUESTION 24
An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)

• A. X, Y real location
• B. client description
• C. AP name
• D. client MAC address
• E. WLC IP address

Answer: AD

NEW QUESTION 25
......