Cisco 300-430 Online Practice Questions and Exam Preparation

Cisco 300-430 Online Questions & Answers

• Question 81:

  A network is set up to support wired and wireless clients. Both types must authenticate using 802.1X before connecting to the network. Different types of client authentication must be separated on a Cisco ISE deployment. Which two configuration items achieve this task? (Choose two.)

  A. device profiles
  B. policy sets
  C. separate networks
  D. policy groups
  E. policy results
  B. policy sets
  E. policy results

  ---

  Explanation Explanation/Reference:The overall policy for wired and wireless will be different, as will the authorization result within each policy.

• Question 82:

  A company has a Cisco wireless network with Cisco ISE. The company wants to allow employees to use their personal mobile devices on the wireless network. The company wants to allow access to the network only if the devices meet certain criteria. To meet the requirement, the company asked a network engineer to create a native supplicant profile. Which two fields must be configured when the profile is created? (Choose two.)

  A. Allowed Protocol (PEAP/TLS)
  B. Allowed Protocol (Ms-CHAPv2/ EAP-FAST)
  C. SSID Name
  D. WLC Name
  E. Allowed Protocol (LEAP/ EAP-TTLS)
  A. Allowed Protocol (PEAP/TLS)
  C. SSID Name

• Question 83:

  Refer to the exhibit.

  

  An engineer must provide a position of rogue APs on a floor map using Cisco PI 3.0, but no rogue AP options are showing on the left-hand navigation menu under Maps. What is the reason for this omission?

  A. An assurance license is not installed.
  B. The controller operational status background task is disabled.
  C. The Show Detected Interferers feature under the AP option is disabled.
  D. Cisco MSE has not been added to Cisco PI.
  D. Cisco MSE has not been added to Cisco PI.

  ---

  Note Depending on whether or not a mobility services engine is present in NCS, some of the floor settings may not display. Clients, 802.11 Tags, Rogue APs, Adhoc Rogues, Rouge Clients and Interferers are visible only if a MSE is present in NCS.

• Question 84:

  A customer must use deep-packet inspection on the Cisco Catalyst 9800 Series Wireless Controller. The details must include all wireless client use details. Where must AVC be configured to meet this requirement?

  A. AP join tag
  B. policy profile
  C. RF tag
  D. WLAN
  B. policy profile

• Question 85:

  Refer to the exhibit.

  

  An engineer configured a BYOD policy that allows for printing on the WLAN using Bonjour services. However, the engineer cannot get printing to work. The WLC firmware is 8.x. What must be implemented on the controller?

  A. Enable mDNS and IGMP snooping.
  B. Activate location-specific services.
  C. Configure Secure Web Mode Cipher-Option SSLv2.
  D. Increase the IGMP Query Interval value
  A. Enable mDNS and IGMP snooping.

  ---

  To apply mDNS policy, mDNS snooping is required. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/multicast_broadcast_setup.html#concept_D4C479155D1A4024804CA7230E939D87

• Question 86:

  Refer to the exhibit.

  

  An engineer must maintain consistent parity between incoming and outgoing voice traffic for the trunk switch ports on a wireless controller. Which QoS value must be trusted?

  A. DSCP
  B. CoS
  C. IP precedence
  D. 802.1p
  B. CoS

• Question 87:

  During discovery, one out of five fabric-enabled WLAN controllers is not being properly discovered. The firewall rules are the same for all the controllers. Which element is missing?

  A. YANG
  B. SNMP management
  C. SNMP trap
  D. NETCONF
  D. NETCONF

• Question 88:

  Refer to the exhibit.

  

  Which COS to DSCP map must be modified to ensure that voice traffic is tagged correctly as it traverses the network?

  A. COS of 6 to DSCP 46
  B. COS of 3 to DSCP 26
  C. COS of 7 to DSCP 48
  D. COS of 5 to DSCP 46
  D. COS of 5 to DSCP 46

• Question 89:

  An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

  A. permit-ACL
  B. WMM required
  C. mark
  D. rate-limit
  C. mark

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8- 8/AVC_8point8_dg.html

• Question 90:

  What is the Cisco recommended configuration for a Cisco switch port connected to an AP in local mode for optimal voice over WLAN performance with an 8821 wireless phone?

  A. switchport encapsulation dot1q switchport mode trunk mls qos trust device cisco-phone
  B. switchport mode access mls qos trust device cisco-phone
  C. switchport mode access mls qos trust cos
  D. switchport mode access mls qos trust dscp
  D. switchport mode access mls qos trust dscp