Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 1:

  DRAG DROP

  A wireless engineer wants to schedule monthly security reports in Cisco Prime infrastructure. Drag and drop the report the from the left onto the expected results when the report is generated on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 2:

  DRAG DROP

  A network engineer must get an autonomous AP to authenticate to the upstream switch via IEEE 802.1 X. Drag and drop the commands from the left onto the right to complete the configuration.

  Select and Place:

  

  Correct Answer:

  

• Question 3:

  A WLAN on the WLC is configured for web authentication as the Layer 3 Security policy with the web-auth type External. Which two elements are required as part of the configuration? (Choose two.)

  A. WLAN being not present in the default AP group

  B. HTTPS redirection enabled

  C. nonroutable IP address assigned to the virtual interface

  D. web-auth secure web option enabled

  E. preauth ACL to allow access to the external web server

  Correct Answer: BD

• Question 4:

  An engineer is trying to log in to their lightweight access point joined to a WLC that does not have AP credentials defined. Which credentials does the engineer use?

  A. admin/Cisco123

  B. Cisco/Cisco

  C. TACACS credentials

  D. AP Global Configuration configured credentials

  Correct Answer: B

• Question 5:

  A network engineer is implementing a wireless network and is considering deploying a single SSID for device onboarding.

  Which option is a benefit of using dual SSIDs with a captive portal on the onboard SSID compared to a single SSID solution?

  A. limit of a single device per user

  B. restrict allowed devices types

  C. allow multiple devices per user

  D. minimize client configuration errors

  Correct Answer: B

  https://community.cisco.com/t5/security-documents/ise-byod-dual-vs-single-ssid-onboarding/ta-p/3641422

• Question 6:

  An engineer needs read/write access to rename access points and add them to the correct AP groups on a wireless controller. Using Cisco ISE TACACS, which custom attributes is the minimum required?

  A. role1=WLAN

  B. role1=WLAN role2=SECURITY

  C. role1=WLAN role2=WIRELESS

  D. role1=WIRELESS

  Correct Answer: D

• Question 7:

  An engineer has configured the wireless controller to authenticate clients on the employee SSID against Microsoft Active Directory using PEAP authentication. Which protocol does the controller use to communicate with the authentication server?

  A. EAP

  B. 802.1X

  C. RADIUS

  D. WPA2

  Correct Answer: C

• Question 8:

  An engineer is adding APs to an existing VolMLAN to allow for location based services. Which option will the primary change be to the network?

  A. increased transmit power on all APs

  B. moving to a bridging model

  C. AP footprint

  D. cell overlap would decrease

  E. triangulation of devices

  Correct Answer: C

• Question 9:

  A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.

  1.

  IP address of the primary server

  2.

  IP address of the secondary server

  3.

  failover mode to be configured as automatic

  4.

  root password of the secondary server

  5.

  email ID for NOC notifications

  6.

  Enabling high availability fails when these parameters are used. Which action resolves the issue?

  A. Insert the cmxadmin password of the secondary server.

  B. Use IP protocol 4242 for the controller to reach the CMX server.

  C. Place primary and secondary servers in different subnets.

  D. Enable the virtual IP address of the primary server.

  Correct Answer: A

• Question 10:

  A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)

  A. The interference is less than or equal to 30% on the 2.4 GHz radio.

  B. The interference is less than or equal to 50% on the 2.4 GHz radio.

  C. Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.

  D. The interference is less than or equal to 30% on the 5 GHz radio.

  E. Cisco DNA Center does not include interference in the AP health score.

  Correct Answer: BD

  For 2.4-GHz radio:

  If interference is less than or equal to 50 percent, the score is 10.

  If interference is more than 50 percent, the score is 0.

  For 5-GHz radio:

  If interference is less than or equal to 20 percent, the score 10.

  If interference is more than 20 percent, the score is 0.

  https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-2-2/b_cisco_dna_assurance_2_2_2_ug/b_cisco_dna_assurance_2_2_2_ug_chapter_0110.html