Cisco 300-430 Online Practice Questions and Exam Preparation

Cisco 300-430 Online Questions & Answers

• Question 151:

  Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?

  A. Policy Profile
  B. AP Join Profile
  C. Flex Profile
  D. RF Profile
  B. AP Join Profile

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/cisco-hyperlocation.html

• Question 152:

  An engineer is considering an MDM integration with Cisco ISE to assist with security for lost devices.

  Which two functions of MDM increase security for lost devices that access data from the network? (Choose two.)

  A. PIN enforcement
  B. Jailbreak/root detection
  C. data wipe
  D. data encryption
  E. data loss prevention
  A. PIN enforcement
  C. data wipe

• Question 153:

  Refer to the exhibit.

  

  An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

  A. Configure the certificate, WLAN, and radio interface on WGB.
  B. Configure the certificate on the WLC.
  C. Configure WLAN to authenticate using ISE.
  D. Configure the access point with the root certificate from ISE.
  E. Configure WGB as a network device in ISE.
  F. Configure a policy on ISE to allow devices to connect that validate the certificate.
  A. Configure the certificate, WLAN, and radio interface on WGB.
  C. Configure WLAN to authenticate using ISE.
  F. Configure a policy on ISE to allow devices to connect that validate the certificate.

  ---

  A. Configure the certificate, WLAN, and radio interface on WGB. --> That's true B. Configure the certificate on the WLC. --> Nope, the WLC is the authenticator, it is neither authenticated or needs to authenticate anything C. Configure WLAN to authenticate using ISE. --> True, on the controller the SSID to which the WGB will connect must be configured, and broadcasted by the LAP D. Configure the access point with the root certificate from ISE. --> If they are talking about the WGB access point, then that's true, the root certificate that signed ISE certificate needs to be installed in the WGB AP E. Configure WGB as a network device in ISE. --> That's surely wrong. The WGB is not the authenticator in the dot1x process. It is the client. The controller is the authenticator. F. Configure a policy on ISE to allow devices to connect that validate the certificate. --> As I understand it, in some ways, that's true. We need to create an authentication/authorization policy on ISE so that the WGB AP will be authenticated by ISE based on the its certificate.

• Question 154:

  Refer to the exhibit.

  

  An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogues?

  A. config location notification interval rssi rogues 5
  B. config nmsp notification interval rssi rogues 5
  C. config subscription notification interval rssi rogues 5
  D. config cmx notification interval rssi rogues 5
  B. config nmsp notification interval rssi rogues 5

  ---

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-6/config-guide/b_wl_17_6_cg/m_ewlc_nmsp.html#task_C2454AC7B1B14E19899B48489EF24304:~:text=Example%3A-,Device(config)%23%20nmsp%20notification% 20interval%20rssi%20rfid%2050,-Sets%20the%20NMSP

• Question 155:

  Which protocol enables multicast traffic only on a specific WLAN named MULTI123456789 instead of the whole network?

  A. WMM
  B. TPC
  C. DCA
  D. WMF
  D. WMF

  ---

  Wireless Multicast Forwarding (WMF) is a feature that enables multicast traffic forwarding only on specific WLANs (Wireless LANs). It allows multicast traffic to be forwarded only to the associated clients of the specified WLAN, rather than being broadcasted to the entire network. Therefore, WMF provides a more efficient way of handling multicast traffic in wireless networks.

• Question 156:

  A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the issue?

  A. controller IGMP snooping
  B. multicast AP multicast mode
  C. broadcast forwarding
  D. unicast AP multicast mode
  B. multicast AP multicast mode

  ---

  Note: The question is about the reason behind CPU hike, it is not asking the solution for the issue https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/81671-multicast-wlc-lap.html

• Question 157:

  An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features does the engineer configure to accomplish this task? (Choose two.)

  A. Device Admin Policy Set
  B. User Access Mode: ReadWrite
  C. ACL
  D. RADIUS server
  E. TACACS server
  A. Device Admin Policy Set
  E. TACACS server

• Question 158:

  Which of following feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

  A. AAA override
  B. CCKM/OKC
  C. FlexConnect ACL
  D. VLAN name override
  A. AAA override

• Question 159:

  A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)

  A. network analyzers
  B. malware
  C. lost and stolen devices
  D. keyloggers
  E. unauthorized users
  B. malware
  C. lost and stolen devices

  ---

  Explanation Explanation/Reference:

• Question 160:

  Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

  A. 1800s
  B. 3600e
  C. 3800s
  D. 4800i
  A. 1800s

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-active-sensor/guide-c07-743929.html