Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 111:

  Refer to the exhibit.

  

  The security team has implemented ISE as a AAA solution for the wireless network. The wireless engineer notices that though clients can authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working. Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?

  A. Disable KeyWrap

  B. Change the CoA Port

  C. Correct the shared secret.

  D. Use ASCII for the key input format

  Correct Answer: B

• Question 112:

  An engineer set up identity-based networking with ISE and configured AAA override on the WLAN. Which two attributes must be used to change the client behavior from the default settings? (Choose two.)

  A. DHCP timeout

  B. IPv6 ACL

  C. multicast address

  D. DNS server

  E. DSCP value

  Correct Answer: BE

• Question 113:

  A wireless network has been implemented to enable multicast video to be streamed reliably over the wireless link to the wireless to the wireless users. After a client reports that the video is unable to stream the administrator determines that the client is connecting a data rate of 12 Mbps and is trying to stream to a void multicast address on the network. Which two actions must be applied? (Choose two.)

  A. Allow RTSP stream the video due to wireless multicast not using acknowledgments.

  B. Allow multicast direct to work correctly and multicast-direct to be enabled globally.

  C. Change the WLAN QoS value to Bronze for the WLANs on the controller.

  D. Turn off IGMP snooping for all the configured WLANS on the controller.

  E. Implement video stream for the multicast video on the controller

  Correct Answer: BE

• Question 114:

  An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?

  A. controller management

  B. DNS server IP

  C. virtual interface IP

  D. Client interface IP

  Correct Answer: C

• Question 115:

  An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a reliable way for a Media Stream to work between Cisco FlexConnect APs. Which feature must be enabled to guarantee delivery?

  A. Multicast-Unicast Direct

  B. Multicast Direct

  C. Unicast Direct

  D. IGMP Direct

  Correct Answer: B

• Question 116:

  An engineer needs to configure an autonomous AP for 802.Ix authentication. To achieve the highest security an authentication server is used for user authentication During testing, the AP fails to pass the user authentication request to the authentication server. Which two details need to be configured on the AP to allow communicator! between the server and the AP? (Choose two.)

  A. RADIUS IP address

  B. Username and password

  C. Group name

  D. Shared secret

  E. PAC encryption key

  Correct Answer: AB

• Question 117:

  An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?

  A. Policy Services Node

  B. Device Admin Node

  C. Monitor Node

  D. Primary Admin Node

  Correct Answer: A

• Question 118:

  An organization is supporting remote workers in different locations. In order to provide wireless network connectivity and services, OfficeExtend has been implement. The wireless connectivity is working, but users report losing connectivity to their local network printers. Which solution must be used to address this issue?

  A. WLAN static IP tunneling

  B. FlexConnect local switching

  C. OEAP split tunnel

  D. OEAP gateway override

  Correct Answer: C

• Question 119:

  An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN. Which output is produced when the Adaptive wIPS Top 10 AP report is run'?

  A. last 10 wIPS events from sniffer mode APs

  B. last 10 wIPS events from monitor mode APs

  C. last of 10 sniffer mode APs with the most wIPS events

  D. last of 10 monitor mode APs with the most wIPS events

  Correct Answer: B

• Question 120:

  A wireless engineer is configuring LWA using ISE. The customer is a starting company and requested the wireless users to authenticate against a directory, but LDAP is unavailable. Which solution be proposed in order to have the same security and user experience?

  A. Use a preshared key on the corporate WLAN

  B. Use Novell eDirectory

  C. Use SAML

  D. Use the internal database of the RADIUS server.

  Correct Answer: B