A Review Of Printable 300-430 Free Draindumps

NEW QUESTION 1
An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

• A. learn client IP address
• B. FlexConnect local authentication
• C. VLAN-based central switching
• D. central DHCP processing

Answer: C

NEW QUESTION 2
An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

• A. The Cisco CMX instances are installed in the same subnet.
• B. The types of the primary and secondary Cisco CMX installations differ.
• C. The delay between the primary and secondary instance is 200 ms.
• D. The sizes of the primary and secondary Cisco CMX installations differ.
• E. Both Cisco CMX installations are virtual.

Answer: BD

NEW QUESTION 3
Which three characteristics of a rogue AP pose a high security risk? (Choose three.)

• A. open authentication
• B. high RSSI
• C. foreign SSID
• D. accepts clients
• E. low RSSI
• F. distant location

Answer: ACD

NEW QUESTION 4
For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to, as soon as the change is made?

• A. wireless traffic only
• B. wired traffic only
• C. VPN traffic
• D. wireless and wired traffic

Answer: A

NEW QUESTION 5
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?

• A. It has a set of predefined profiles that you cannot modify further
• B. It matches traffic and assigns each matched packet to QoS groups
• C. It automates deployment of wired QoS and makes wireless QoS implementation easier
• D. It allows the output policy map to put specific QoS queues into specific subgroups

Answer: B

NEW QUESTION 6
Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

• A. HTTPS
• B. Telnet
• C. SOAP
• D. SSH
• E. NMSP

Answer: AE

NEW QUESTION 7
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be verified?

• A. SNMP RO community
• B. device interface credentials
• C. device ID
• D. shared secret

Answer: D

NEW QUESTION 8
A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the issue?

• A. controller IGMP snooping
• B. multicast AP multicast mode
• C. broadcast forwarding
• D. unicast AP multicast mode

Answer: B

NEW QUESTION 9
Which three properties are used for client profiling of wireless clients? (Choose three.)

• A. HTTP user agent
• B. DHCP
• C. MAC OUI
• D. hostname
• E. OS version
• F. IP address

Answer: ABC

NEW QUESTION 10
Which devices can be tracked with the Cisco Context Aware Services?

• A. wired and wireless devices
• B. wireless devices
• C. wired devices
• D. Cisco certified wireless devices

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html

NEW QUESTION 11
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

• A. mDNS uses only UDP port 5436 as a destination port.
• B. mDNS cannot use UDP port 5353 as the destination port.
• C. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
• D. Controller software must be newer than 7.0.6+.
• E. mDNS is not supported over IPv6.

Answer: CD

NEW QUESTION 12
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

• A. Static WEP + 802.1X
• B. WPA+WPA2
• C. Static WEP
• D. CKIP
• E. 802.1X

Answer: BC

NEW QUESTION 13
An engineer is implementing a FlexConnect group for access points at a remote location using local switching but central DHCP. Which client feature becomes available only if this configuration is changed?

• A. multicast
• B. static IP
• C. fast roaming
• D. mDNS

Answer: B

NEW QUESTION 14
Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?

• A. RF Profile
• B. Flex Profile
• C. Policy Profile
• D. AP Join ProfileCorrect

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/flexconnect.html

NEW QUESTION 15
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

• A. 1
• B. 2
• C. 5
• D. 7

Answer: B

NEW QUESTION 16
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

• A. pre-authentication
• B. local EAP
• C. authentication caching
• D. Cisco Centralized Key Management

Answer: B

NEW QUESTION 17
What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

• A. EAP-PEAP with 802.1x port authentication
• B. EAP-TLS with 802.1x port authentication
• C. EAP-FAST with CAPWAP DTLS + port authentication
• D. EAP-FAST with CAPWAP DTLS

Answer: C

NEW QUESTION 18
What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

• A. 3 hours
• B. 24 hours
• C. 3 days
• D. 7 days

Answer: B

NEW QUESTION 19
Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

• A. It must be Inbound because traffic goes to the WLC.
• B. Packet direction has no significance; it is always Any.
• C. It must be Outbound because it is traffic that is generated from the WLC.
• D. To have the complete list of options, the CPU ACL must be created only by the CLI.

Answer: A

NEW QUESTION 20
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

• A. WPA key
• B. session key
• C. encryption key
• D. shared-secret key

Answer: B

NEW QUESTION 21
An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?

• A. split tunneling
• B. SE-connect
• C. FlexConnect
• D. AP failover priority

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/aironet-602-officeextend-access-point/117540-configure-splittunneloeap-00.html

NEW QUESTION 22
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?

• A. HR_ACL appended with BASE_ACL
• B. HR_ACL only
• C. BASE_ACL appended with HR_ACL
• D. BASE_ACL only

Answer: B

NEW QUESTION 23
Which two events are outcomes of a successful RF jamming attack? (Choose two.)

• A. disruption of WLAN services
• B. unauthentication association
• C. deauthentication broadcast
• D. deauthentication multicast
• E. physical damage to AP hardware

Answer: AE

NEW QUESTION 24
The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

• A. CSV
• B. PDF
• C. XLS
• D. DOC
• E. plain text

Answer: AB

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-2/user/guide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide_chapter_01010.html

NEW QUESTION 25
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9. Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)

• A. Permit 0.0.0.0 0.0.0.0 UDP any any
• B. Permit 0.0.0.0 0.0.0.0 any DNS any
• C. Permit 0.0.0.0 0.0.0.0 UDP DNS any
• D. Permit 0.0.0.0 0.0.0.0 UDP any DNS
• E. Permit any any any

Answer: AD

NEW QUESTION 26
......