Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 31:

  

  Refer to the exhibit. You enter the command on a Cisco Catalyst 3850 Series Switch that runs Cisco ISO XE. What does the command do?

  A. It defines the user identity or the device identity to be validated by the RADIUS server.
  B. It captures information on the length of the authorized session, as well as the bandwidth usage of The client.
  C. It defines the RADIUS server used to track which sessions are still active.
  D. It defines the level of access of the user or the device.
  D. It defines the level of access of the user or the device.

• Question 32:

  Which encryption method makes use of the Michael algorithm?

  A. TKIP
  B. 40-bit WEP
  C. 128-bit WEP
  D. AES
  A. TKIP

• Question 33:

  An engineer is configuring a BYOD provisioning WLAN. Which two advanced WLAN settings are required? (Choose two)

  A. DHCP profiling
  B. DHCP address assignment
  C. passive client
  D. RADIUS NAC
  E. AAA override
  D. RADIUS NAC
  E. AAA override

  ---

  Allow AAA Override: Enabled NAC State: Radius NAC (selected) https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113476- wireless-byod-ise-00.html

• Question 34:

  

  Refer to the exhibit. Which level message does the WLC send to the syslog server?

  A. syslog level errors and less severity messages
  B. syslog level errors messages
  C. all syslog levels messages
  D. syslog level errors and greater severity messages
  D. syslog level errors and greater severity messages

• Question 35:

  When a network engineer plans to implement the client MFP, which three settings should be supported by the client? (Choose three.)

  A. Cisco Compatible Extensions v5
  B. Short Preamble check box
  C. WEP
  D. WPA2 with TKIP
  E. WPA with TKIP
  F. WPA2 with AES
  A. Cisco Compatible Extensions v5
  D. WPA2 with TKIP
  F. WPA2 with AES

• Question 36:

  When a wireless client uses WPA2 AES, which keys are created at the end of the four-way handshake process between the client and the access point?

  A. AES key, TKIP key, WEP key
  B. AES key, WPA2 key, PMK
  C. KCK, KEK, TK
  D. KCK, KEK, MIC key
  A. AES key, TKIP key, WEP key

  ---

  Explanation: When WPA-PSK or WPA2-PSK is performed via Temporal Key Integrity Protocol (TKIP) or Advanced Encryption Standard (AES) for the encryption, the client must go through the process known as the WPA 4-Way handshake for both the initial association and also when roaming. As previously explained, this is basically the key management process used in order for WPA/WPA2 to derive the encryption keys. However, when PSK is performed, it is also used in order to verify that the client has a valid Pre-Shared Key to join the WLAN.

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/116493-technote-technology-00.html#anc6

• Question 37:

  A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE. The controllers are configured using auto-anchor for the guest network. Which three components must be implemented for the foreign WLC? (Choose three.)

  A. DHCP RADIUS profiling enabled.
  B. HTTP RADIUS profiling enabled.
  C. UDP/1812-1813 open to ISE
  D. downloadable preauth ACL on ISE
  E. local preauth ACL on WLC
  F. WLAN Layer 2 security
  A. DHCP RADIUS profiling enabled.
  C. UDP/1812-1813 open to ISE
  F. WLAN Layer 2 security

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/WirelessNetwork_GuestAccessService.pdf

• Question 38:

  WPA2 Enterprise with 802.1x is being used for clients to authenticate to a wireless network through an ACS server. For security reasons, the network engineer wants to ensure only PEAP authentication can be used. The engineer sent instructions to clients on how to configure their supplicants, but users are still in the ACS logs authenticating using E-FAST.

  Which option describes the most efficient way the engineer can ensure these users cannot access the network unless the correct authentication mechanism is configured?

  A. Enable AAA override on the SSID, gather the usernames of these users, and disable their RADIUS accounts until they make sure they correctly configured their devices.
  B. Enable AAA override on the SSID and configure an access policy in ACS that denies access to the list of MACs that have used EAP-FAST.
  C. Enable A override on the SSID and configure an access policy in ACS that allows access only when the EAP authentication method is PEAP.
  D. Enable AAA override on the SSID and configure an access policy in ACS that puts clients that authenticated using E-FAST into a quarantine VLAN.
  D. Enable AAA override on the SSID and configure an access policy in ACS that puts clients that authenticated using E-FAST into a quarantine VLAN.

• Question 39:

  An engineer must change the wireless authentication from WPA2-Personal to WPA2-Enterprise. Which three requirements are necessary? (Choose three.)

  A. EAP
  B. 802.1X
  C. RADIUS
  D. pre-shared key
  E. 802.11u
  F. fast secure roaming
  G. 802.11i
  A. EAP
  C. RADIUS
  G. 802.11i

  ---

  Difference between WPA called Personal and Enterprise is the authentication method:

  Personal WPA relies on a PSK secret (Pre-Shared Key), and you don't need an external server to perform authentication

  Enterprise WPA (as defined in the 802.11i standard) uses WPA2 with AES-CCM encryption, and authentication is based on 802.1x/EAP using the RADIUS protocol.

• Question 40:

  Which security method does a Cisco guest wireless deployment that relies on Cisco ISE guest portal for user authentication and to an Anchor WLC for DHCP use?

  A. Layer 2 and Layer 3
  B. Layer 2 only
  C. No security methods are needed to deploy CWA
  D. Layer 3 only
  B. Layer 2 only