Cisco 300-430 Online Practice Questions and Exam Preparation

Cisco 300-430 Online Questions & Answers

• Question 71:

  You are seeing an excessive number of rogue AP alarms in Cisco Prime Infrastructure. All these alarms have a severity level of Minor. Which two actions must be taken to make more efficient use of rogue AP alarms? (Choose two.)

  A. Create and install configuration templates to establish rogue rules that use specific criteria to declare rogue APs as Friendly rogues.
  B. Disable rogue detection on the infrastructure APs that are detecting the rogue APs.
  C. Create and install a configuration template that modifies the minimum rogue detection RSSI of the controller to a stronger value
  D. Delete the alarms. They do not return even if the same rogue AP is detected again.
  E. Clear the alarms. They do not return even if the same rogue AP is detected again.
  A. Create and install configuration templates to establish rogue rules that use specific criteria to declare rogue APs as Friendly rogues.
  C. Create and install a configuration template that modifies the minimum rogue detection RSSI of the controller to a stronger value

• Question 72:

  An engineer is setting up a WLAN to work with a Cisco ISE as the AAA server. The company policy requires that all users be denied access to any resources until they pass the validation. Which component must be configured to achieve this stipulation?

  A. AAA override
  B. preauthentication ACL
  C. WPA2 passkey
  D. CPU ACL
  B. preauthentication ACL

• Question 73:

  A wireless engineer deployed all remote sites as FlexConnect. The client VLAN assignment on these sites is configured manually mapped by WLAN and using local switching. Dynamic VLAN assignment is provided by the newly deployed Cisco ISE. Which IETF attribute must be configured on the AAA server to send that VLAN ID?

  A. Tunnel-Medium-Type
  B. Tunnel-Client-Endpoint
  C. Tunnel-Assignment-ID
  D. Tunnel-Private-Group-ID
  D. Tunnel-Private-Group-ID

• Question 74:

  A customer must provide a secure wireless network from a Cisco Catalyst 9800 Series Wireless Controller to a Cisco AP to remote users. The corporate WLAN must be provided over the Internet to specific locations and support a locally-installed IP phone. Which two actions accomplish this configuration? (Choose two.)

  A. Enable Local Switching under the WLAN.
  B. Configure Remote LAN under the Remote LAN.
  C. Create a Flex Group and add the AR
  D. Enable Office Extend AP on the Flex Profile.
  E. Configure NAT on the physical interface.
  B. Configure Remote LAN under the Remote LAN.
  D. Enable Office Extend AP on the Flex Profile.

• Question 75:

  The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?

  A. RADIUS server overwrite interface
  B. AAA override
  C. WLAN local policy
  D. custom AVC profile
  C. WLAN local policy

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/NativeProfiling75.html

• Question 76:

  DRAG DROP

  A network engineer must get an autonomous AP to authenticate to the upstream switch via IEEE 802.1 X. Drag and drop the commands from the left onto the right to complete the configuration.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 77:

  An engineer needs to configure an autonomous AP for 802.Ix authentication. To achieve the highest security an authentication server is used for user authentication During testing, the AP fails to pass the user authentication request to the authentication server. Which two details need to be configured on the AP to allow communicator! between the server and the AP? (Choose two.)

  A. RADIUS IP address
  B. Username and password
  C. Group name
  D. Shared secret
  E. PAC encryption key
  A. RADIUS IP address
  D. Shared secret

• Question 78:

  A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?

  A. received signal strength
  B. triangulation
  C. time distance of arrival
  D. angle of incidence
  D. angle of incidence

  ---

  Explanation Explanation/Reference:The Angle of Arrival (AoA) technique, sometimes referred to as Direction of Arrival (DoA), locates the mobile station by determining the angle of incidence at which signals arrive at the receiving sensor. Geometric relationships can then be used to estimate location from the intersection of two lines of bearing (LoBs) formed by a radial line to each receiving sensor, as illustrated in Figure 2-5. In a two-dimensional plane, at least two receiving sensors are required for location estimation with improved accuracy coming from at least three or more receiving sensors (triangulation). https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS- DG/wifich2.html

• Question 79:

  What must be configured on ISE version 2.1 BYOD when using Single SSID?

  A. no authentication
  B. WPA2
  C. open authentication
  D. 802.1x
  C. open authentication

  ---

  Explanation Explanation/Reference:

• Question 80:

  A multitenant building contains known wireless networks in most of the suites. Rogues must be classified in the WLC. How are the competing wireless APs classified?

  A. adhoc
  B. friendly
  C. malicious
  D. unclassified
  B. friendly