Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 101:

  Which of following feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

  A. AAA override

  B. CCKM/OKC

  C. FlexConnect ACL

  D. VLAN name override

  Correct Answer: A

• Question 102:

  A network engineer needs to configure multicast in the network. The implementation will use multiple multicast groups and PIM routers. Which address provides automatic discovery of the best RP for each multicast group?

  A. 224.0.0.13

  B. 224.0.0.14

  C. 224.0.1.39

  D. 224.0.1.40

  Correct Answer: D

• Question 103:

  The Cisco Hyperlocation detection threshold is currently set to -50 dBm. After reviewing the wireless user location, discrepancies have been noticed. To improve the Cisco Hyperlocation accuracy, an engineer attempts to change the detection threshold to -100 dBm However, the Cisco Catalyst 9800 Series Wireless Controller does not allow this change to be applied. What actions should be taken to resolve this issue?

  A. Place the APs to monitor mode shutdown the radios, and then change Cisco Hyperlocation detection threshold

  B. Shutdown all radios on the controller, change the Cisco Hyperlocation detection range, and enable the radios again.

  C. Disable Cisco Hyperlocation. change the Cisco Hyperlocation detection threshold and then enable it

  D. Create a new profile on Cisco CMX with the new Cisco Hyperlocation detection range, and apply it on the WL AN.

  Correct Answer: C

• Question 104:

  An engineer just added anew MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, which is located behind a firewall in a DMZ. It is noticed that NMSP messages are failing between the two devices. Which traffic must be allowed on the firewall to ensure that the MSE and WLC can communicate using NMSP?

  A. TCP 1613

  B. UDP 16113

  C. TCP 16113

  D. UDP 1613

  Correct Answer: C

• Question 105:

  A network engineer is deploying 8865 IP phones with wireless clients connected to them. In order to apply the appropriate QoS, the IP voice traffic needs to be distinguished from client data traffic. Which switch configuration feature must be enabled?

  A. WME

  B. QBSS

  C. Voice VLAN

  D. QoS routing

  Correct Answer: C

• Question 106:

  An engineer is setting up a WLAN to work with a Cisco ISE as the AAA server. The company policy requires that all users be denied access to any resources until they pass the validation. Which component must be configured to achieve this stipulation?

  A. AAA override

  B. preauthentication ACL

  C. WPA2 passkey

  D. CPU ACL

  Correct Answer: A

  http://mvwxiscoxom'c/en/us/support/docs/wjreless-rnobility/wlan-security/71978-acl-wic.pdf

• Question 107:

  An enterprise started using WebEx as a virtual meeting solution. There is a concern that the existing wireless network will not be able to support the increased amount of traffic as a result of using WebEx. An engineering needs to remark the QoS value for this application to ensure high quality in meetings. Which must be implemented to accomplish this task?

  A. WLAN quality of service profile

  B. QoS preferred call index

  C. AVC profiles

  D. UP to DSCP map

  Correct Answer: C

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/apjc/docs/2018/pdf/BRKEWN-3003.pdf

• Question 108:

  An engineer must configure MSE to provide guests access using social media authentication. Which service does the engineer configure so that guests use Facebook credentials to authenticate'?

  A. Visitor Connect

  B. Client Connect

  C. Social Connect

  D. Guest Connect

  Correct Answer: A

• Question 109:

  Refer to the exhibit.

  

  A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that they are unable to connect. During troubleshooting, the engineer notices that the authentication requests are being dropped. Which action will resolve the issue?

  A. Provide a valid client username that has been configured on the RADIUS server.

  B. Authenticate the client using the same EAP type that has been set up on the RADIUS server.

  C. Allow connectivity from the wireless controller to the IP of the RADIUS server.

  D. Configure the shared-secret keys on the controller and the RADIUS server.

  Correct Answer: B

  https://community.cisco.com/t5/network-access-control/cisco-acs-11036-the-message-authenticator-radius-attribute-is/td-p/2054255

• Question 110:

  A company is collecting the requirements for an on-premises event. During the event, a wireless client connected to a dedicated WLAN will run a video application that will need to average 300000000 bits per second to function properly. What is the QoS marketing that needs to be applied to that WLAN?

  A. Bronze

  B. Platinum

  C. Silver

  D. Gold

  Correct Answer: D