Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 51:

  AN engineer is preparing to implement a BYOD SSID at remote offices using local switching and wants to ensure that Wi-Fi Direct clients can communicate after the SSID is deployed. The engineer is planning on implementing the config wlan wifidirect allow 1 command.

  Which Wi-Fi Direct Client Policy consideration is applicable?

  A. Policy is applicable only when P2P is set to disabled.
  B. Policy is applicable only on WLANs that have APs in local mode only.
  C. Policy is applicable only to APs in FlexConnect mode only.
  D. Policy is applicable only with central switched WLANs on FlexConnect APs.
  B. Policy is applicable only on WLANs that have APs in local mode only.

• Question 52:

  An engineer is checking the authentication logs on Cisco ISE and notices that the source NAD address on all sessions is the same. What can the engineer determine from this result?

  A. The NAD address is configured on the WLAN.
  B. The connections are firewalled.
  C. The network uses auto-anchoring.
  D. The mobility service is misconfigured.
  B. The connections are firewalled.

• Question 53:

  Which of the following user roles can access CMX Visitor Connect?

  A. Administrator
  B. Power User
  C. Guest User
  D. Super Administrator
  D. Super Administrator

• Question 54:

  Which three items must be configured on a Cisco WLC v7.0 to allow implementation of isolated bonding network? (Choose three.)

  A. RADIUS server IP address
  B. DHCP IP address
  C. SNMP trap receiver IP address
  D. interface name
  E. SNMP community name
  F. ACL name
  A. RADIUS server IP address
  D. interface name
  F. ACL name

• Question 55:

  An engineer is deploying EAP-TLS as the authentication mechanism for an 802.1X-enabled wireless network. Which network device is responsible for applying the digital signature to a certificate to ensure that the certificate is trusted and valid?

  A. supplicant
  B. CA server
  C. wireless controller
  D. authentication server
  B. CA server

  ---

  In cryptography, a certificate authority or certification authority (CA) is an entity that issues digital certificates. A digital certificate certifies the ownership of a public key by the named subject of the certificate. This allows others (relying parties) to rely upon signatures or on assertions made about the private key that corresponds to the certified public key. In this model of trust relationships, a CA is a trusted third party--trusted both by the subject (owner) of the certificate and by the party relying upon the certificate.

• Question 56:

  An engineer is setting up a new unique NAD on a Cisco ISE. Which two parameters must be configured? (Choose two.)

  A. device hostname
  B. device password
  C. RADIUS fallback
  D. device IP address
  E. RADIUS shared secret
  A. device hostname
  D. device IP address

• Question 57:

  Refer to the exhibit. What do the red circles represent in the exhibit?

  

  A. detected interferers
  B. wIPs attacker
  C. RSSI cutoff
  D. zones of impact
  B. wIPs attacker

• Question 58:

  Which CLI command do you use to shut down the 2.4 GHz radio of the Floor1_AP1 AP on a Cisco 3850 Switch?

  A. ap name Floor1_AP1 dot11 shutdown 24ghz
  B. ap name Floor1_AP1 dot11 5ghz shutdown
  C. ap name Floor1_AP1 dot11 24ghz shutdown
  D. ap name Floor1_AP1 shutdown dot11 24ghz
  C. ap name Floor1_AP1 dot11 24ghz shutdown

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/lwap/command_reference/b_ap_3se_3850_cr/b_ap_320_3850_crg_chapter_010.html

• Question 59:

  A customer wants to allow employees to easily onboard their devices to the wireless network. Which process can be configured on Cisco ISE to support this requirement?

  A. self-registration guest portal
  B. client provisioning
  C. native supplicant provisioning
  D. local web auth
  B. client provisioning

• Question 60:

  Which customizable security report on Cisco Prime Infrastructure would show rogue APs detected since a point in time?

  A. New Rogue APs
  B. Rogue AP Events
  C. Rogue APs
  D. Rogue AP Count Summary
  C. Rogue APs

  ---

  Prime Infrastructure gets updates about rogues from controllers by using traps or by polling. The Last Seen Time is updated any time a trap for the rogue is received or rogue is seen during the last Prime Infrastructure polling cycles.

  This report displays all rogues detected by the access points in your network based on the Last Seen Time of the rogue access points and the selected filtering criteria. The report lists rogue access points based on the time they were last

  seen.

  Note: The report includes rogue access point alarms with clear severity.

  Reference: http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-0/user/guide/prime_infra_ug/reps.html