Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 131:

  Which two PCI DSS requirements must a company meet to be PCI compliant? (Choose two.)

  A. EAP authentication
  B. customer data protection
  C. the firewall configuration
  D. the network segmentation
  E. the ACL configuration
  B. customer data protection
  D. the network segmentation

• Question 132:

  Refer to the exhibit.

  

  The security team has configured an IBN profile on ISE for the quest wireless network to provide captive portal service.

  Where must the network engineer configure the ACL and portal for the Cisco AireOS controller?

  A. GuestPreLogin downloadable ACL on ISE, login portal on ISE
  B. GuestPreLogin local ACL on WLC, login portal on ISE
  C. GuestPreLogin downloadable ACL on ISE, login portal on WLC
  D. GuestPreLogin local ACL on WLC, login portal on WLC
  B. GuestPreLogin local ACL on WLC, login portal on ISE

  ---

  The flow would be the following: -User associate to the Web Auth SSID -User starts its browser -The WLC Redirect to the guest portal (ISE/NGS) -The user authenticate on the portal -The Guest Portal redirect back to the WLC with the credentials entered -The WLC Authenticate the guest user via Radius -The WLC Redirects back to the original URL. https://supportforums.cisco.com/t5/wireless-mobility-documents/central-web-authentication-cwa- for-guests-with-ise/ta-p/3121101

• Question 133:

  A corporation has recently implemented a BYOD policy at their HQ. Which three risks should the security director be concerned about? (Choose three.)

  A. unauthorized users
  B. network analyzers
  C. lost and stolen devices
  D. malware
  E. keyloggers
  A. unauthorized users
  B. network analyzers
  D. malware

• Question 134:

  Scenario

  Refer to the exhibit. The East-WLC-2504A controller has been configured for WPA2 + PSK, although it isn't working properly. Refer to the exhibit to resolve the configuration issues.

  WLAN ID: 11

  Profile Name: Contractors

  SSID: Contractors

  VLAN: 2

  Note, not all menu items, text boxes, or radio buttons are active.

  Topology

  

  Virtual Terminal

  

  

  Which configuration changes need to be made to allow WPA2 + PSK to operate properly on the East-WLC-2504A controller? (Choose four.)

  A. Disable Dynamic AP Management.
  B. Click on the Status Enabled radio button.
  C. Change the Layer 3 Security to Web Policy.
  D. Change the WPA + WPA2 Parameters to WPA2 Policy-AES.
  E. Change the PSK Format to HEX.
  F. Change the WLAN ID.
  G. Change the VLAN Identifier.
  H. Change the IP Address of the Virtual interface.
  I. Change the IP Address of the Virtual interface.
  J. Change the SSID name of the WLAN.
  B. Click on the Status Enabled radio button.
  F. Change the WLAN ID.
  J. Change the SSID name of the WLAN.

• Question 135:

  When a supplicant and AAA server are configured to use PEAP, which mechanism is used by the client to authenticate the AAA server in Phase One?

  A. PMK
  B. shared secret keys
  C. digital certificate
  D. PAC
  C. digital certificate

• Question 136:

  

  Refer to the exhibit. You enter the command on a Cisco Catalyst 3850 Series Switch that runs Cisco IOS XE. What does the command do?

  A. It defines the user identity or the device identity to be validated by the RADIUS server.
  B. It captures information on the length of the authorized session, as well as the bandwidth usage of the client.
  C. It defines the RADIUS server used to track which sessions are still active.
  D. It defines the level of access of the user or the device.
  D. It defines the level of access of the user or the device.

• Question 137:

  An administrator receives reports of many interferers in the wireless network and wants to get the location of these interferers from the maps in Cisco Prime Infrastructure. When looking at the floor plans/maps, the administrator does not see any interferers, but can see all wireless clients located successfully. Which two statements define the cause of the issue? (Choose two.)

  A. MSE is not added to Cisco Prime Infrastructure and synchronized.
  B. Interferer tracking is not enabled on the MSE.
  C. SNMP between Cisco Prime Infrastructure and the WLC is failing.
  D. Context Aware Service tracking limit has already been reached with tracking other elements.
  E. NMSP communication is inactive with the WLC.
  A. MSE is not added to Cisco Prime Infrastructure and synchronized.
  B. Interferer tracking is not enabled on the MSE.

  ---

  Reference: https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/112139-cleanair-uwn-guide-00.html

• Question 138:

  What are two of the benefits that the Cisco AnyConnect v3.0 provides to the administrator for client WLAN security configuration? (Choose two.)

  A. Provides a reporting mechanism for rouge APs
  B. Prevents a user from adding any WLANs
  C. Hides the complexity of 802.1X and EAP configuration Supports centralized or distributed client architectures
  D. Provides concurrent wired and wireless connectivity
  E. Allows users to modify but not delete admin-created profiles
  C. Hides the complexity of 802.1X and EAP configuration Supports centralized or distributed client architectures
  D. Provides concurrent wired and wireless connectivity

• Question 139:

  A wireless engineer must enable interference detection for jammers in the 2.4-GHz band on an AireOS controller. Which menu sequence must the engineer navigate to on the web interface?

  A. Wireless >802.11a/n/ac > RRM > Coverage
  B. Wireless >802.11b/g/n > RRM > Coverage
  C. Wireless >802.11b/g/n > CleanAir
  D. Wireless > 802.11a/n/ac > CleanAir
  C. Wireless >802.11b/g/n > CleanAir

• Question 140:

  An engineer configures 802.1X authentication for the access points using the config ap 802.1Xuser add username admin password secret ap_01 command. Which EAP method does the access point use to authenticate?

  A. LEAP
  B. EAP-TLS
  C. MS-CHAPv2 PEAP
  D. EAP-FAST
  D. EAP-FAST

  ---

  Enables or disables Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST) authentication. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_01101111.html