Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 1:

  Which three options are valid client profile probes in Cisco ISE? (Choose three.)

  A. DHCP
  B. 802.1X
  C. CCX
  D. NetFlow
  E. TACACS
  F. HTTP
  A. DHCP
  D. NetFlow
  F. HTTP

  ---

  Valid client probes in ISE are: NetFlow Probe DHCP Probe DHCP SPAN Probe HTTP Probe RADIUS Probe DNS Probe

  Reference: http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_prof_pol.html

• Question 2:

  Refer to the exhibit.

  

  An engineer utilizing ISE as the wireless AAA service noticed that the accounting process on the server at 10.10.2.3 has failed, but authentication process is still functional.

  Which ISE nodes receive WLC RADIUS traffic, using the CLI output and assuming the WLAN uses the servers in their indexed order?

  A. authentication to 10.10.2.4, accounting to 10.10.2.3.
  B. authentication to 10.10.2.3, accounting to 10.10.2.3.
  C. authentication to 10.10.2.4, accounting to 10.10.2.4.
  D. authentication to 10.10.2.3, accounting to 10.10.2.4.
  B. authentication to 10.10.2.3, accounting to 10.10.2.3.

• Question 3:

  Scenario

  Local Web Auth has been configured on the East-WLC-2504A, but it is not working. Determine which actions must be taken to restore the Local Web Auth service. The Local Web Auth service must operate only with the Contractors WLAN.

  Contractors WLAN ID ?10 Employees WLAN ID - 2

  Note, not all menu items, text boxes, or radio buttons are active.

  

  Virtual Terminal

  

  

  Which four changes must be made to configuration parameters to restore the Local Web Auth feature on the East-WLC-2504A? Assume the passwords are correctly entered as "ciscotest". (Choose four.)

  A. Remove the existing Local Net User Bill Smith and add a New Local Net User "Bill Smith" password "ciscotest', WLAN Profile "Contractors".
  B. Remove WLAN 10 and WLAN 2, replace WLAN 10 with Profile Name Employees and SSID Contractors; replace WLAN 2 with Profile Name Employees and SSID Employees.
  C. Remove WLAN 10 and WLAN 2, replace WLAN 10 with Profile Name Contractors and SSID Contractors, replace WLAN 2 with Profile Name Employees and SSID Employees.
  D. Change the Layer 2 security to None on the Contractors WLAN.
  E. Under Layer 3 Security, change the Layer 3 Security to Web Policy on the Contractors WLAN.
  F. Under Security Local Net Users add a New Local Net User "Bill Smith" password "Cisco", interface/Interface Group "east-wing".
  G. Change the Layer 2 Security to None + EAP Pass-through on the Contractors WLAN.
  H. Under WLANs > Edit "Contractors "change the interface/Interface group to "east-wing".
  C. Remove WLAN 10 and WLAN 2, replace WLAN 10 with Profile Name Contractors and SSID Contractors, replace WLAN 2 with Profile Name Employees and SSID Employees.
  E. Under Layer 3 Security, change the Layer 3 Security to Web Policy on the Contractors WLAN.
  F. Under Security Local Net Users add a New Local Net User "Bill Smith" password "Cisco", interface/Interface Group "east-wing".
  G. Change the Layer 2 Security to None + EAP Pass-through on the Contractors WLAN.

• Question 4:

  An engineer must ensure that the new wireless LAN deployment can support seamless roaming between access points using a standard based on an amendment to the 802.11 protocol. Which protocol must the engineer select?

  A. 802.11e
  B. 802.11r
  C. 802.11ac
  D. 802.11i
  B. 802.11r

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/Chapter-11.pdf

• Question 5:

  A company wants to switch to BYOD to reduce IT support costs for the company. Which option is an impact of BYOD that should be considered?

  A. increased VPN connections
  B. restricted device enforcement
  C. increased phishing attacks.
  D. decreased support calls
  A. increased VPN connections

• Question 6:

  A customer is concerned about denial of service attacks that impair the stable operation of the corporate wireless network. The customer wants to purchase mobile devices that will operate on the corporate wireless network.

  Which IEEE standard should the mobile devices support to address the customer concerns?

  A. 802.11w
  B. 802.11k
  C. 802.11r
  D. 802.11h
  A. 802.11w

  ---

  Explanation: The IEEE goal with 802.11w is to protect management frames in 802.11 networks. This therefore provides wireless networks within organisations the protection against numerous DoS attacks targeted at the Media Access Control (MAC) layer 2. The 802.11w standard will look to provide protection in the following ways:

  1.

  Protecting unicast management frames from forgery and disclosure attacks by encrypting the unicast management frames between an access point and the client.

  2.

  Protecting broadcast management frames from forgery attacks.

  3.

  Protecting broadcast deauthentication and disassociation frames from forgery attacks.

  Reference: https://www.sans.org/reading-room/whitepapers/wireless/80211-denial-service-attacks-mitigation-2108 (Please refer to section "802.11w to the rescue")

• Question 7:

  You are implementing Cisco Identity Based Networking Services on a Cisco Catalyst 3850 Series Switch that uses downloadable service templates. What is the default password that must be configured on the RADIUS server?

  A. cisco
  B. Cisco
  C. Cisco123
  D. cisco123
  D. cisco123

  ---

  Reference: https://www.cisco.com/en/US/docs/ios-xml/ios/san/configuration/xe-3se/3850/san-svc-temp.html

• Question 8:

  A customer has deployed PEAP authentication with a Novell eDirectory LDAP Server. Which authentication method must be configured on the client to support this deployment?

  A. PEAP(EAP-MSCHAPv2)
  B. A(EAP-TTLS)
  C. A(A-GTC)
  D. PEAP(EAP-WPA)
  C. A(A-GTC)

  ---

  Explanation: PEAP-GTC is the current authentication requirement for the majority of the K-12 schools. WLC does not support MSCHAPv2 for Local EAP Authentication. As a result, you must choose GTC for the EAP Authentication type on the client.

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112137-novell-edirectory-00.html

• Question 9:

  Regarding the guidelines for using MFP, under what circumstances will a client without Cisco Compatible Extensions v5 be able to associate to a WLAN?

  A. WPA2 is enabled with TKIP or AES.
  B. AAA override is configured for the WLAN.
  C. The DHCP Required box is unchecked.
  D. Client MFP id disabled or optional.
  A. WPA2 is enabled with TKIP or AES.

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_01010011.html

• Question 10:

  You plan to implement Cisco Identity Based Networking Services on a Cisco Catalyst 3850 Series Switch. Which switch command is required when configuring downloadable ACLs?

  A. authentication display new-style
  B. ip device tracking
  C. dot1x system-auth-control
  D. aaa session-id common
  B. ip device tracking

  ---

  Reference: https://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_8021x/configuration/15-2mt/sec-ieee-802xacl-assign.html