Cisco 300-430 Online Practice Questions and Exam Preparation

Cisco 300-430 Online Questions & Answers

• Question 121:

  A wireless engineer is configuring LWA using ISE. The customer is a starting company and requested the wireless users to authenticate against a directory, but LDAP is unavailable. Which solution be proposed in order to have the same security and user experience?

  A. Use a preshared key on the corporate WLAN
  B. Use Novell eDirectory
  C. Use SAML
  D. Use the internal database of the RADIUS server.
  D. Use the internal database of the RADIUS server.

• Question 122:

  A network engineer has been hired to perform a new MSE implementation on an existing network. The MSE must be installed in a different network than the Cisco WLC. Which configuration allows the devices to communicate over NMSP?

  A. Allow UDP/16113portonthe central switch.
  B. Allow TCP/16666 port on the router.
  C. Allow TCP/16113 port on the firewall.
  D. Allow UDP/16666 port on the VPN router.
  C. Allow TCP/16113 port on the firewall.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/en/US/docs/wireless/mse/3350/6.0/CAS/configuration/guide/msecg_ch4_C AS.html

• Question 123:

  Split Tunneling must be configured for traffic sent by the client to be classified based on packet content, using an ACL. To accomplish this, the packets must be either locally switched from Cisco FlexConnect AP or centrally-switched over CAPWAP. Which type of ACL must be configured to accomplish this switching?

  A. Interface
  B. CPU
  C. FlexConnect
  D. WLAN
  C. FlexConnect

  ---

  In a Cisco FlexConnect deployment, split tunneling allows the traffic sent by the client to be classified based on packet content using an Access Control List (ACL). In this context, the ACL is associated with the WLAN (Wireless LAN) configuration. The ACL defines which traffic should be locally switched at the FlexConnect Access Point (AP) or centrally switched over CAPWAP (Control and Provisioning of Wireless Access Points) to the Wireless LAN Controller (WLC).

• Question 124:

  Which CLI command do you use to shut down the 2.4 GHz radio of the Floor1_AP1 AP on a Cisco 3850 Switch?

  A. ap name Floor1_AP1 dot11 shutdown 24ghz
  B. ap name Floor1_AP1 dot11 5ghz shutdown
  C. ap name Floor1 AP1 dot11 24ghz shutdown
  D. ap name Floor1_AP1 shutdown dot11 24ghz
  C. ap name Floor1 AP1 dot11 24ghz shutdown

• Question 125:

  A company is deploying wireless PCs on forklifts within its new 10,000-square-foot(3048- square-rneter) facility.

  The clients are configured for PEAP-MS-CHAPv2 with WPA TKIP. Users report that applications frequently drop when the clients roam between access points on the floor. A professional site survey was completed.

  Which configuration change is recommended to improve the speed of client roaming?

  A. EAP-FAST
  B. EAP-TLS
  C. WPAAES
  D. WPA2AES
  D. WPA2AES

• Question 126:

  A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber.

  QoS is being applied only as best effort. What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?

  A. Configure an AVC profile for the Jabber traffic and apply it to the WLAN.
  B. Configure the WLAN to broadcast on 5 GHz radios only and allow Jabber users to conned.
  C. Enable Cisco Centralized Key Management on the WLAN so that the Jabber-enabled devices will connect.
  D. Configure QoS on the mobile devices that have Jabber installed.
  A. Configure an AVC profile for the Jabber traffic and apply it to the WLAN.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/81/Jabber_in_WLAN/b_Jabb er_in_WLAN.html#reference_7B4539C91FBE4639ACF906F6F3931667

• Question 127:

  When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?

  A. It has a set of predefined profiles that you cannot modify further
  B. It matches traffic and assigns each matched packet to QoS groups
  C. It automates deployment of wired QoS and makes wireless QoS implementation easier
  D. It allows the output policy map to put specific QoS queues into specific subgroups
  B. It matches traffic and assigns each matched packet to QoS groups

• Question 128:

  As part of a PCI audit, an engineer is gathering information on a Cisco Unified Wireless Network environment. The report must include any security weaknesses in the system. Where does the engineer find the related information?

  A. security team network scan results from last year
  B. Security tab on Cisco wireless LAN controllers
  C. security interference results on Cisco Prime Infrastructure
  D. security index results on Cisco Prime Infrastructure
  D. security index results on Cisco Prime Infrastructure

• Question 129:

  An engineer must define credentials for an autonomous access point that is configured to use 802.1X authentication against the switch port is attached to.

  Where are the credentials defined?

  A. RADIUS server
  B. Cisco Prime Infrastructure
  C. wireless LAN controller
  D. TACACS server
  A. RADIUS server

• Question 130:

  An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?

  A. Policy Services Node
  B. Device Admin Node
  C. Monitor Node
  D. Primary Admin Node
  A. Policy Services Node