In this IBN topology, which device acts as the RADIUS server?
A. Cisco UCS B. Casco Catalyst 3850 Series Switch C. Cisco ISE D. directory server
C. Cisco ISE
Question 43:
Refer to the exhibit. You are configuring an autonomous AP for 802.1x access to a wired infrastructure. What does the command do?
A. It enables the AP to override the authentication timeout on the RADIUS server. B. It configures how long the AP must wait for a client to reply to an EAP/dot1x message before the authentication fails. C. It enables the supplicant to override the authentication timeout on the client D. It configures how long the RADIUS server must wait for supplicant to reply to an EAP/dot1x message before the authentication fails.
C. It enables the supplicant to override the authentication timeout on the client
Question 44:
When using the Standalone Profile Editor in the Cisco AnyConnect v3.0 to create a new NAM profile, which two statements describe the profile becoming active? (Choose two.)
A. selects the new profile from NAM B. selects "Network Repair" from NAM C. becomes active after a save of the profile name D. ensures use of "configuration.xml" as the profile name ensures use of "config.xml" as the profile name E. ensures use of "nam.xml" as the profile name
B. selects "Network Repair" from NAM D. ensures use of "configuration.xml" as the profile name ensures use of "config.xml" as the profile name
Question 45:
An engineer is changing the authentication method of a wireless network from EAP-FAST to EAP-TLS. Which two changes are necessary? (Choose two.)
A. Cisco Secure ACS is required. B. A Cisco NAC server is required. C. All authenticating clients require their own certificates. D. The authentication server now requires a certificate. E. The users require the Cisco AnyConnect client.
C. All authenticating clients require their own certificates. D. The authentication server now requires a certificate.
Which two requirements must be met to ensure that Cisco ISE can join the Active Directory domain of the company. (Choose two.)
A. If a firewall exists between Cisco ISE and Active Directory domain server, these ports are allowed through UDP 69, 123, and 389; and TCP 88, 389, 445, 464, 636, 3268, and 3269. B. The hostname of Cisco ISE is less than 20 characters in length. C. An account has been created in Active Directory for Cisco ISE that has the necessary permissions. D. The DNS name is configured on Cisco ISE and resolved on the Active Directory domain server E. Time synchronization between Cisco ISE and Active Directory must be within 10 minutes.
C. An account has been created in Active Directory for Cisco ISE that has the necessary permissions. D. The DNS name is configured on Cisco ISE and resolved on the Active Directory domain server
Question 47:
Which security method does a Cisco guest wireless deployment that relies on Cisco ISE guest portal for user authentication use?
A. Layer 2 and Layer 3 B. Layer 2 only C. No security methods are needed to deploy CWA D. Layer 3 only
An engineer is designing a high availability wireless network. What mechanism should be the focus for high availability?
A. SNR B. channel reuse C. RSSI D. cell overlap
B. channel reuse
Describe basic RF deployment considerations related to site survey design of data or VoWLAN applications, common RF interference sources such as devices, building material, AP location, and basic RF site survey design related to channel reuse, signal strength, and cell overlap
Question 49:
What two actions must be taken by an engineer configuring wireless Identity-Based Networking for a WLAN to enable VLAN tagging? (Choose two.)
A. enable AAA override on the WLAN B. create and apply the appropriate ACL to the WLAN C. update the RADIUS server attributes for tunnel type 64, medium type 65, and tunnel private group type 81 D. configure RADIUS server with WLAN subnet and VLAN ID E. enable VLAN Select on the wireless LAN controller and the WLAN
A. enable AAA override on the WLAN C. update the RADIUS server attributes for tunnel type 64, medium type 65, and tunnel private group type 81
Question 50:
You have run some reports on Cisco Prime Infrastructure and want to download them. In which format must you download the reports?
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Cisco exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your 300-375 exam preparations
and Cisco certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.