Cisco 300-430 Online Practice Questions and Exam Preparation

Cisco 300-430 Online Questions & Answers

• Question 221:

  A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure. Which two technologies must they deploy? (Choose two.)

  A. FlexConnect mode
  B. monitor mode
  C. sniffer mode with no submode
  D. local mode with WIPS submode
  E. rogue detector mode
  D. local mode with WIPS submode
  E. rogue detector mode

  ---

  Monitor mode would be the best option but then you would need to enable the WIPS submode (and that is not specified here). So the 2nd best option defined here would be "local mode with WIPS submode" In Monitor mode with WIPS, the AP is fully dedicated to attack detection and miti-gation. This is, of course, the most efficient mode, but the AP does not provide cli-ent data service anymore. Note that your AP can be in regular Monitor mode (with"None" as submode) and then only perform RRM-focused monitoring. You need to set the monitor AP to WIPS submode in order to make it a full-time WIPS AP.

• Question 222:

  Refer to the exhibit.

  

  Which area indicates the greatest impact on the wireless network when viewing the Cisco CleanAir Zone of Impact map of interferers?

  A. A
  B. B
  C. C
  D. D
  D. D

• Question 223:

  An engineer can log in to a WLC but cannot log in to the AP. Which configuration change allows the engineer to log in to the AP without changing the global login policy?

  A. Change the WLC password.
  B. Set up AAA override.
  C. Override the credentials.
  D. Reload the WLC.
  C. Override the credentials.

• Question 224:

  What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

  A. 3 hours
  B. 24 hours
  C. 3 days
  D. 7 days
  D. 7 days

• Question 225:

  Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

  A. Cisco Hyperlocation Module
  B. Wireless Intrusion Prevention System
  C. Cisco Connected Mobile Experiences
  D. Cisco Mobility Services Engine
  C. Cisco Connected Mobile Experiences

• Question 226:

  A wireless network has two RF groups where Cisco WLCs are joined. APs are associated with different controllers using the round-robin approach. Rogue containment must be deployed in all controllers, but the network must not be affected by any RRM neighbor packets sent by friendly APs. Which AP authentication protection type must be enabled?

  A. AP Authentication
  B. AP Wireless Protection Rules
  C. AP Security
  D. AP Access Control
  A. AP Authentication

• Question 227:

  Refer to the exhibit.

  

  An engineer receives a report that a client cannot authenticate via phone in a secure WLAN. The phone uses Layer 2 Security WPA2, and other clients can authenticate successfully. The engineer issues the (CONTROLLER) >debug client 64:89:9a:31:7f:a1 and (CONTROLLER) >debug aaa all enable commands in the controller and sees this output. What are two sources of this issue? (Choose two.)

  A. An invalid user account or password was used.
  B. RADIUS is incorrectly configured
  C. The server certificate is expired or not in use
  D. Certificate services are not working properly.
  E. The incorrect EAP method was configured on the client device.
  A. An invalid user account or password was used.
  B. RADIUS is incorrectly configured

• Question 228:

  A Cisco CMX 3375 appliance on the 10.6.1 version code counts duplicate client entries, which creates wrong location analytics. The issue is primarily from iOS clients with the private MAC address feature enabled. Enabling this feature requires an upgrade of the Cisco CMX 3375 appliance in a high availability pair to version 10.6.3. SCP transfers the Cisco CMX image, but the upgrade script run fails. Which configuration change resolves this issue?

  A. Upgrade the high availability pair to version 10.6.2 image first and then upgrade to version 10.6.3.
  B. Save configuration and use the upgrade script to upgrade the high availability pair without breaking the high availability.
  C. Break the high availability using the cmxha config disable command and upgrade the primary and secondary individuality.
  D. Run root patch to first upgrade to version 10.6.2 and then migrate to version 10.6.3.
  C. Break the high availability using the cmxha config disable command and upgrade the primary and secondary individuality.

  ---

  https://www.cisco.com/c/en/us/support/docs/availability/high- availability/213664-configure-cmx-high-availability.html

• Question 229:

  Refer to the exhibit.

  

  An engineer must preserve a QoS marking sent by the Cisco Jabber software running on PC1. Which marking value must be trusted on port Fa 0/6?

  A. DSCP
  B. 802.1p
  C. CoS
  D. IP precedence
  A. DSCP

• Question 230:

  An engineer configures a deployment to support:

  1.

  Cisco CMX

  2.

  licenses for at least 3000 APs

  3.

  6000 wIPS licenses

  The Cisco vMSE appliance must be sized for this deployment. Which Cisco vMSE Release 8 option must the engineer deploy?

  A. Large vMSE
  B. Low-End vMSE
  C. Standard vMSE
  D. High-End vMSE
  D. High-End vMSE

  ---

  Explanation Explanation/Reference: Refer to: https://www.cisco.com/c/en/us/products/collateral/wireless/mobility-services-engine/data_sheet_c07-473865.html