Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 121:

  A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE. The controllers are configured using auto-anchor for the guest network. Which three components must be implemented for the foreign WLC? (Choose three.)

  A. DHCP RADIUS profiling enabled.
  B. HTTP RADIUS profiling enabled.
  C. UDP/1812-1813 open to ISE
  D. downloadable preauth ACL on ISE
  E. local preauth ACL on WLC
  F. WLAN Layer 2 security
  C. UDP/1812-1813 open to ISE
  F. WLAN Layer 2 security

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-DesignGuide/Enterprise_Mobility_8-1_Deployment_Guide/WirelessNetwork_GuestAccessService.pdf

• Question 122:

  An engineer has configured the wireless controller to authenticate clients on the employee SSID against Microsoft Active Directory using PEAP authentication. Which protocol does the controller use to communicate with the authentication server?

  A. WPA2
  B. RADIUS
  C. 802.1X
  D. EAP
  D. EAP

  ---

  Define the Layer 2 Authentication as WPA2 so that the clients perform EAP-based authentication (PEAP-MS-CHAP v2 in this example) and use the advanced encryption standard (AES) as the encryption mechanism. Leave all other values at their defaults. https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115988- nps-wlc-config-000.html

• Question 123:

  An engineer has configured MAC filtering on an employee WLAN and wants clients that fail MAC filtering to attempt to be authenticated via the RADIUS server before denying network access. Which functionality must be enabled on the WLAN to achieve this goal?

  A. MAC authentication failover to 802.1X authentication
  B. EAP-TLS failover to 802.11r authentication
  C. WPA2 AES failover to RADIUS authentication
  D. 802.1x failover to WPA2 AES authentication
  A. MAC authentication failover to 802.1X authentication

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-8/config-guide/b_cg88/wlan_security.html

• Question 124:

  An AP receives a spoofed request from an attacker. Which description of 802.1x SA-Query timeout is true?

  A. It confirms the legitimate client source address value by sending an encrypted ARP request
  B. It triggers a re-authentication for the user.
  C. It confirms that the previous four-way handshake done with a legitimate client is still valid
  D. It confirms that the client security association has not timed out.
  B. It triggers a re-authentication for the user.

• Question 125:

  SIMULATION

  Scenario Refer to the exhibit. Configure the WLC to support WPA+WPA2 with PSK. Create a new WLAN ID 11. The SSID and Profile Name should be the same. The Controller Management interface has been preconfigured for you. The Client Laptop will automatically connect to the WLAN if your configuration is correct. Verify your configuration by using the Cisco 2504 WLC screens when you have completed the configuration.

  Note, not all menu items, text boxes, or radio buttons are active.

  

  

  A. See the explanation below
  A. See the explanation below

  ---

  Please refer to this link to configure new WLC: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/116880-config-wpa2-psk-00.html

• Question 126:

  An engineer is configuring a BYOD deployment strategy and prefers a single SSID model. Which technology is required to accomplish this configuration?

  A. mobility service engine
  B. wireless control system
  C. identity service engine
  D. Prime Infrastructure
  C. identity service engine

  ---

  Explanation: Please refer to the section "Single SSID Wireless BYOD Self Registration" of the below mentioned link.

  Reference: http://www.cisco.com/c/dam/en/us/td/docs/security/ise/how_to/HowTo-61-BYOD-Onboarding_Registering_and_Provisioning.pdf

• Question 127:

  Which two options are types of MFP that can be performed? (Choose two.)

  A. message integrity check
  B. infrastructure
  C. client
  D. AES-CCMP
  E. RSN
  B. infrastructure
  C. client

  ---

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/82196-mfp.html#climfp

• Question 128:

  Which two statements describe the requirements for EAP-TLS? (Choose two.)

  A. It requires client-side and server-side certificates.
  B. It requires a server-side digital certificate on only the RADIUS server.
  C. It must use AES for encryption and cannot use TKIP for encryption.
  D. It required PKI.
  E. It uses PAC on the client.
  A. It requires client-side and server-side certificates.
  D. It required PKI.

  ---

  Reference: https://www.cisco.com/en/US/tech/tk722/tk809/technologies_white_paper09186a008009256b.shtml

• Question 129:

  Which troubleshooting tool helps diagnose and solve issues experienced with wired and wireless clients?

  A. WLC log analyzer tool
  B. Client Troubleshooting Tool on Cisco Prime Infrastructure
  C. WLC configuration tool
  D. MSE
  B. Client Troubleshooting Tool on Cisco Prime Infrastructure

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-0/user/guide/pi_ug/clientmgmt.html

• Question 130:

  A customer wants to allow employees to easily onboard their devices to the wireless network.

  Which process can be configured on Cisco ISE to support this requirement?

  A. self-registration guest portal
  B. mac authentication bypass
  C. native supplicant provisioning
  D. local web auth
  B. mac authentication bypass