Cisco 300-375 Online Practice Questions and Exam Preparation

Cisco 300-375 Online Questions & Answers

• Question 81:

  Which CLI command do you use to shut down the 2.4 GHz radio of the Floor1_AP1 AP on a Cisco Switch?

  A. ap name Floor1_AP1 dot11 shutdown 24ghz
  B. ap name Floor1_AP1 dot11 5ghz shutdown
  C. ap name Floor1_AP1 dot11 24ghz shutdown
  D. ap name Floor1_AP1 shutdown dot11 24ghz
  C. ap name Floor1_AP1 dot11 24ghz shutdown

• Question 82:

  The IT team from Customer ABC is growing quickly and its manager is asking you for a solution for management device access that will authenticate users from an external repository instead of the current local on the WLC, but also wants to identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

  A. TACACS+
  B. LDAP
  C. network policy server
  D. RADIUS
  A. TACACS+

• Question 83:

  Which protocol helps to find a rogue access point within the WLAN?

  A. RLDP
  B. PI
  C. MSE
  D. CCX
  A. RLDP

• Question 84:

  The IT team from Customer ABC is growing quickly and its manager is asking you for a solution for management device access that will authenticate users from an external repository instead of the current local on the WLC, but also wants to identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

  A. TACACS+
  B. LDAP
  C. network policy server
  D. RADIUS
  A. TACACS+

• Question 85:

  After receiving an alert regarding a rogue AP, a network engineer logs into Cisco Prime and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines the rogue device is actually inside the campus. The engineer determines the rogue to be a security threat and decides to stop it from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?

  A. Go to the location the rogue device is indicated to be and disable the power.
  B. Create an SSID on the WLAN controller resembling the SSID of the rogue to spoof it and disable clients from connecting to it.
  C. Classify the rogue as malicious in Cisco Prime.
  D. Update the status of the rogue in Cisco Prime to contained.
  C. Classify the rogue as malicious in Cisco Prime.

  ---

  Explanation: Please refer to the step 10 of the topic "Configuring Rouge Detection" of the reference link.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_0111101.pdf

• Question 86:

  A WLAN on the WLC is configured for web authentication as the Layer 3 Security policy with the web-auth type Internal. When a client connects to this WLAN, which two protocols are allowed by default before the client reaches the RUN state? (Choose two.)

  A. DHCP
  B. DNS
  C. ARP
  D. TFTP
  E. SNMP
  A. DHCP
  B. DNS

• Question 87:

  

  Refer to the exhibit. Which method list do you use to enable the Dot1x System Auth Control?

  A. Authentication
  B. Accounting
  C. Authorization
  D. General
  A. Authentication

• Question 88:

  An engineer is troubleshooting rogue access points that are showing up in Cisco Prime Infrastructure.

  What is the maximum number of APs the engineer can use to contain an identified rogue access point in the WLC?

  A. 6
  B. 3
  C. 4
  D. 5
  C. 4

  ---

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7- 4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010 111001.html

• Question 89:

  A network engineer must segregate all iPads on the quest WLAN to a separate VLAN. How does the engineer accomplish this task without using ISE?

  A. Use 802.1x authentication to profile the devices.
  B. Enable RADUIS DHCP profiling on the WLAN.
  C. Use an mDNS profile for the iPad device.
  D. Create a local policy on the WLC.
  A. Use 802.1x authentication to profile the devices.

• Question 90:

  Which EAP type requires the use of device certificates?

  A. EAP-TLS
  B. EAP-FAST
  C. EAP-SSL
  D. PEAP
  E. LEAP
  A. EAP-TLS

  ---

  With either EAP-TLS or PEAP with EAP-TLS, the server accepts the client's authentication when the certificate meets the following requirements:

  The client certificate is issued by an enterprise certification authority (CA), or it maps to a user account or to a computer account in the Active Directory directory service.

  The user or the computer certificate on the client chains to a trusted root CA.

  The user or the computer certificate on the client includes the Client Authentication purpose.

  The user or the computer certificate does not fail any one of the checks that are performed by the CryptoAPI certificate store, and the certificate passes requirements in the remote access policy.

  The user or the computer certificate does not fail any one of the certificate object identifier checks that are specified in the Internet Authentication Service (IAS) remote access policy.

  The 802.1x client does not use registry-based certificates that are either smart-card certificates or certificates that are protected with a password.

  The Subject Alternative Name (SubjectAltName) extension in the certificate contains the user principal name (UPN) of the user.

  When clients use EAP-TLS or PEAP with EAP-TLS authentication, a list of all the installed certificates is displayed in the Certificates snap-in, with the following exceptions:

  Wireless clients do not display registry-based certificates and smart card logon certificates.

  Wireless clients and virtual private network (VPN) clients do not display certificates that are protected with a password.

  Certificates that do not contain the Client Authentication purpose in EKU extensions are not displayed.

  Reference: https://support.microsoft.com/en-in/kb/814394