Cisco 300-430 Online Practice Questions and Exam Preparation

Cisco 300-430 Online Questions & Answers

• Question 1:

  What is an important consideration when implementing a dual SSID design for BYOD?

  A. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
  B. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
  C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
  D. One SSID is for provisioning and the other SSID is for gaining access to the network. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.
  D. One SSID is for provisioning and the other SSID is for gaining access to the network. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.

• Question 2:

  Which statement about the VideoStream/Multicast Direct feature is true?

  A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
  B. Each VideoStream client acknowledges receiving a video IP multicast stream.
  C. It converts the unicast frame to a multicast frame over the air.
  D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.
  B. Each VideoStream client acknowledges receiving a video IP multicast stream.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/multicast_broadcast_setup.html

• Question 3:

  A wireless administrator must assess the different client types connected to Cisco Catalyst 9800 Series Wireless Controller without using any external servers. Which configuration must be added to the controller to achieve this assessment?

  A. native profile
  B. MAC classification
  C. local profile
  D. device classification
  D. device classification

  ---

  Source: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215661-in-depth-look-into-client-profiling-on-9.html and logging into my own 9800.

• Question 4:

  Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?

  A. RF Profile
  B. Flex Profile
  C. Policy Profile
  D. AP Join Profile
  B. Flex Profile

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/configguide/b_wl_16_10_cg/flex connect.html

• Question 5:

  The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

  A. CSV
  B. PDF
  C. XLS
  D. DOC
  E. plain text
  A. CSV
  B. PDF

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3- 2/user/guide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide_chapter_01010.html

• Question 6:

  A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)

  A. The interference is less than or equal to 30% on the 2.4 GHz radio.
  B. The interference is less than or equal to 50% on the 2.4 GHz radio.
  C. Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.
  D. The interference is less than or equal to 30% on the 5 GHz radio.
  E. Cisco DNA Center does not include interference in the AP health score.
  B. The interference is less than or equal to 50% on the 2.4 GHz radio.
  D. The interference is less than or equal to 30% on the 5 GHz radio.

  ---

  Explanation Explanation/Reference:For 2.4-GHz radio: If interference is less than or equal to 50 percent, the score is 10. If interference is more than 50 percent, the score is 0. For 5-GHz radio: If interference is less than or equal to 20 percent, the score 10. If interference is more than 20 percent, the score is 0. https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-2-2/b_cisco_dna_assurance_2_2_2_ug/b_cisco_dna_assurance_2_2_2_ug_chapter_0110.html

• Question 7:

  An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?

  A. HR_ACL appended with BASE_ACL
  B. HR_ACL only
  C. BASE_ACL appended with HR_ACL
  D. BASE_ACL only
  B. HR_ACL only

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98590-Per-User- ACL-WLC.html#configure-acs

• Question 8:

  An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

  A. Static WEP + 802.1X
  B. WPA+WPA2
  C. Static WEP
  D. CKIP
  E. 802.1X
  B. WPA+WPA2
  E. 802.1X

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/support/docs/wireless/aironet-600-series-officeextend-access-point/113003-office-extend-config-00.html#wlan-settings

• Question 9:

  Refer to the exhibit.

  

  The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?

  A. Disable KeyWrap
  B. Change the CoA Port
  C. Correct the shared secret.
  D. Use ASCII for the key input format
  B. Change the CoA Port

• Question 10:

  A wireless engineer has performed a Wireshark ccapture on an 802.1x authentication process to troubleshoot a connectivity issue.

  Which two types of packet does the EAP contain? (Choose two.)

  A. EAP complete
  B. EAP response
  C. EAP failure
  D. EAP request
  E. EAP reply
  B. EAP response
  D. EAP request