Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 141:

  An engineer must enable EAP on a new WLAN and is ensuing that the necessary components are available. Which component uses E and 802.1x to pass user authentication to the authenticator?

  A. AP
  B. AAA server
  C. supplicant
  D. controller
  D. controller

• Question 142:

  An engineer is configuring a new mobility anchor for a WLAN on the CLI with the config wlan mobility anchor add 3 10.10.10.10 command, but the command is failing. Which two conditions must be met to be able to enter this command? (Choose two.)

  A. The anchor controller IP address must be within the management interface subnet.
  B. The anchor controller must be in the same mobility group.
  C. The WLAN ID must be enabled.
  D. The mobility group keepalive must be configured.
  E. The indicated WLAN ID must be present on the controller.
  A. The anchor controller IP address must be within the management interface subnet.
  B. The anchor controller must be in the same mobility group.

• Question 143:

  An engineer is implementing SNMP v3 on a Cisco 5700 Series WLC. Which three commands are the minimum needed to configure SNMP v3? (Choose three.)

  A. snmp-server enable traps
  B. snmp-server group
  C. snmp-server user
  D. snmp-server community
  E. snmp-server context
  F. snmp-server engineID
  B. snmp-server group
  C. snmp-server user
  F. snmp-server engineID

• Question 144:

  Which three configuration steps are necessary on the WLC when implementing central web authentication in conjunction with Cisco ISE. (Choose three.)

  A. Set P2P Blocking Action to Drop.
  B. Enable Security Layer 3 Web Policy.
  C. Set NAC state to SNMP NAC.
  D. Enable Allow AAA override.
  E. Enable Security Layer 2 Mac Filtering.
  F. Set NAC state to RADIUS NAC.
  D. Enable Allow AAA override.
  E. Enable Security Layer 2 Mac Filtering.
  F. Set NAC state to RADIUS NAC.

  ---

  

  

  

  Reference: https://supportforums.cisco.com/document/110031/central-web-authentication-cwa-guests-ise

• Question 145:

  Which two events are possible outcomes of a successful RF jamming attack? (Choose two.)

  A. unauthentication association
  B. deauthentication multicast
  C. deauthentication broadcast
  D. disruption of WLAN services
  E. physical damage to AP hardware
  D. disruption of WLAN services
  E. physical damage to AP hardware

  ---

  WLAN reliability and efficiency depend on the quality of the radio frequency (RF) media. Each RF is susceptible to RF noise impact. An attacker using this WLAN vulnerability can perform two types of DoS attacks:

  Disrupt WLAN service -- At the 2.4 GHz unlicensed spectrum, the attack may be unintentional. A cordless phone, Bluetooth devices, microwave, wireless surveillance video camera, or baby monitor can all emit RF energy to disrupt WLAN

  service. Malicious attacks can manipulate the RF power at 2.4 GHz or 5 GHz spectrum with a high-gain directional antenna to amplify the attack impact from a distance. With free-space and indoor attenuation, a 1-kW jammer 300 feet away

  from a building can jam 50 to 100 feet into the office area. The same 1-kW jammer located inside a building can jam 180 feet into the office area. During the attack, WLAN devices in the target area are out of wireless service.

  Physically damage AP hardware -- An attacker using a high-output transmitter with directional high gain antenna 30 yards away from an access point can pulse enough RF power to damage electronics in the access point putting it being

  permanently out of service. Such High Energy RF (HERF) guns are effective and are inexpensive to build.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/mse/3350/5-2/wIPS/configuration/guide/msecg_wIPS/msecg_appA_wIPS.html

• Question 146:

  Which mobility mode must a Cisco 5508 Wireless Controller be in to use the MA functionality on a Cisco Catalyst 3850 Series Switch with a Cisco 5508 Wireless Controller as an MC?

  A. classic mobility
  B. new mobility
  C. converged access mobility
  D. auto-anchor mobility
  C. converged access mobility

  ---

  Reference: http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3850-series-switches/product_bulletin_c25-720777.html

• Question 147:

  An engineer is configuring a wireless network for local FlexConnect authentication. What three configurations are required for the WLC with WLAN 1 and AP Cisco? (Choose three.)

  A. config wlan flexconnect ap-auth 1 enable
  B. config ap flexconnect vlan enable Cisco
  C. config wlan flexconnect local-switching 1 enable
  D. config ap flexconnect vlan wlan 1 Cisco
  E. confog wlan flexconnect vlan-central-switching 1 enable
  F. config ap mode flexconnect Cisco
  C. config wlan flexconnect local-switching 1 enable
  D. config ap flexconnect vlan wlan 1 Cisco
  F. config ap mode flexconnect Cisco

• Question 148:

  Which EAP types are supported by MAC 10.7 for authentication to a Cisco Unified Wireless Network?

  A. LEAP and EAP-Fast only
  B. EAP-TLS and PEAP only
  C. LEAP, EAP-TLS, and PEAP only
  D. LEAP, EAP-FAST, EAP-TLS, and PEAP
  D. LEAP, EAP-FAST, EAP-TLS, and PEAP

• Question 149:

  A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers.

  What protocol must be allowed to reach the MSE from the controllers?

  A. NMSP
  B. SOAP/XML
  C. SNMP
  D. CAPWAP
  B. SOAP/XML

• Question 150:

  Which option describes the purpose of configuring switch peer groups?

  A. enforces RF profiles
  B. enables location services
  C. restricts roaming traffic to certain switches
  D. allows template based configuration changes
  C. restricts roaming traffic to certain switches

  ---

  Reference: https://supportforums.cisco.com/blog/11939206/converged-access-mobilitynew-mobility-architecture-wlc-5500-and-ngwc-5760-and-3850