Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 71:

  Which two PCI DSS requirements must a company meet to be PCI compliant? (Choose two.)

  A. EAP authentication
  B. customer data protection
  C. the firewall configuration
  D. the network segmentation
  E. the ACL configuration
  B. customer data protection
  D. the network segmentation

• Question 72:

  While deploying PEAP authentication on a customer laptop with the native Windows supplicant, the PEAP security options do not appear. Which option describes what must be done?

  A. Enable automatic connection to the WLAN.
  B. Enable static DNS on the WLAN.
  C. Enable AES on the WLAN settings.
  D. Enable WLAN autoconfig services on the PC.
  C. Enable AES on the WLAN settings.

• Question 73:

  An engineer has configured central web authentication on the wireless network, but clients are receiving untrusted certificate errors on their internet browsers when directed to the guest splash page.

  Which file must be provided to an approved trusted certificate authority to fix this issue?

  A. CSR generated by the WLC.
  B. EAP-TLS certificate generated by the access point
  C. CSR generated by Identity Service Engine
  D. EAP-TLS certificate generated by WLC
  A. CSR generated by the WLC.

• Question 74:

  An engineer must automatically change the class type of a detected rogue AP on the WLC. Which class type can be assigned automatically with a severity score of 50 by a rogue policy rule?

  A. custom
  B. unclassified
  C. malicious
  D. friendly
  A. custom

• Question 75:

  Which condition introduce security risk to a BYOD policy?

  A. enterprise-managed MDM platform used for personal devices
  B. access to LAN without implementing MDM solution
  C. enforcement of BYOD access to internet only network
  D. enterprise life-cycle enforcement of personal device refresh
  B. access to LAN without implementing MDM solution

• Question 76:

  You are implementing Cisco Identity Based Networking Services on a Cisco Catalyst 3850 Series Switch that uses downloadable service templates. What is the default password that must be configured on the RADIUS server?

  A. cisco
  B. Cisco
  C. Cisco123
  D. cisco123
  D. cisco123

  ---

  Reference: https://www.cisco.com/en/US/docs/ios-xml/ios/san/configuration/xe-3se/3850/san-svc-temp.html

• Question 77:

  An engineer is configuring client MFP. What WLAN Layer 2 security must be selected to use client MFP?

  A. Static WEP
  B. CKIP
  C. WPA + WPA2 D. 802.1x
  C. WPA + WPA2 D. 802.1x

  ---

  Explanation: In 802.11, management frames such as (de)authentication, (dis)association, beacons, and probes are always unauthenticated and unencrypted. In other words, 802.11 management frames are always sent in an unsecured manner, unlike the data traffic, which are encrypted with protocols such as WPA, WPA2, or, at least, WEP, and so forth.

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/82196-mfp.html#climfp

• Question 78:

  An engineer is working on a remote site that is configured using FlexConnect. They are worried that the access points will not send RADIUS requests directly to the authentication server is standalone mode. Which command ensures direct authentication using the default ports as defined on the WLC?

  A. config flexconnect group Remote radius server acct add primary 10.10.10.10 1813 Cisco123
  B. config flexconnect group Remote radius server auth add primary 10.10.10.10 1813 Cisco123
  C. config flexconnect group Remote radius server acct add primary 10.10.10.10 1812 Cisco123
  D. config flexconnect group Remote radius server auth add primary 10.10.10.10 1812 Cisco123
  C. config flexconnect group Remote radius server acct add primary 10.10.10.10 1812 Cisco123

• Question 79:

  

  Refer to the exhibit. An engineer is designing a guest portal on Cisco ISE using the default configuration. During the testing phase, the engineer receives a warning when displaying the guest portal. Which issue is occurring?

  A. The server that is providing the portal has an expired certificate
  B. The server that is providing the portal has a self-signed certificate
  C. The connection is using an unsupported protocol
  D. The connection is using an unsupported browser
  A. The server that is providing the portal has an expired certificate

• Question 80:

  Which two fast roaming algorithms will allow a WLAN client to roam to a new AP and re-establish a new session key without a full reauthentication of the WLAN client? (Choose two.)

  A. PKC
  B. GTK
  C. PMK
  D. PTK
  E. CKM
  A. PKC
  E. CKM