Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 131:

  A customer wants the APs in the CEO's office to have different usernames and passwords for administrative support than the other APs deployed throughout the facility. Which feature must be enabled on the WLC and APs to achieve this goal?

  A. local management users

  B. HTTPS access

  C. 802.1X supplicant credentials

  D. override global credentials

  Correct Answer: D

  You can set a global username, password, and enable password that all access points that are currently joined to the controller and any that join in the future inherit as they join the controller. If desired, you can override the global credentials and assign a unique username, password, and enable password for a specific access point.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_ chapter_01101011.html

• Question 132:

  After receiving an alert about a rogue AP, a network engineer logs into Cisco Prime Infrastructure and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines that the rogue device is actually inside the campus. The engineer determines that the rogue is a security threat and decides to stop if from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?

  A. Go to the location where the rogue device is indicated to be and disable the power.

  B. Create an SSID similar to the rogue to disable clients from connecting to it.

  C. Update the status of the rogue in Cisco Prime Infrastructure to contained.

  D. Classify the rogue as malicious in Cisco Prime Infrastructure.

  Correct Answer: C

• Question 133:

  Which customizable security report on Cisco Prime Infrastructure will show rogue APs detected since a point in time?

  A. Network Summary

  B. Rogue APs Events

  C. New Rogue APs

  D. Rogue APs Count Summary

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-0/user/guide/prime_infra_ug/reps.html#:~:text=This%20report%20displays%20all%20rogues%20detected%20for%20the%20first

• Question 134:

  An enterprise has recently deployed a voice and video solution available to all employees using AireOS controllers. The employees must use this service over their laptops, but users report poor service when connected to the wireless network. The programs that consume bandwidth must be identified and restricted. Which configuration on the WLAN aids in recognizing the traffic?

  A. NetFlow Monitor

  B. AVC Profile

  C. QoS Profile

  D. Application Visibility

  Correct Answer: D

• Question 135:

  A multitenant building contains known wireless networks in most of the suites. Rogues must be classified in the WLC. How are the competing wireless APs classified?

  A. adhoc

  B. friendly

  C. malicious

  D. unclassified

  Correct Answer: B

• Question 136:

  A customer wants to allow employees to easily onboard their personal devices to the wireless network. The visitors also must be able to connect to the same network without the need to engage with anyone from the reception desk. Which process must be configured on Cisco ISE to support this requirement?

  A. MAC authentication bypass

  B. native supplicant provisioning

  C. local web auth

  D. self-registration guest portal

  Correct Answer: D

  https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216330-ise-self-registered-guest-portal-configu.html

• Question 137:

  A customer has a distributed wireless deployment model where the WLCs are located in the data centers. Because the file servers are located in the data center, the traffic from the corporate WLAN "Corp-401266017" must go through the controllers, where the guest WLAN "Guest-19283746" traffic must use the local Internet line installed in each office. Which configuration will accomplish this task?

  A. Disable Local Switching for the corporate and guest WLAN.

  B. Disable Local Switching for the corporate WLAN and enable it for the guest WLAN.

  C. Enable Local Switching for the corporate and guest WLAN.

  D. Enable Local Switching for the corporate WLAN and disable it for the guest WLAN.

  Correct Answer: B

• Question 138:

  An engineer has implemented 802.1x authentication on the wireless network utilizing the internal database of a RADIUS server. Some clients reported that they are unable to connect. After troubleshooting, it is found that PEAP authentication is failing. A debug showed the server is sending an Access-Reject message. Which action must be taken to resolve authentication?

  A. Use the user password that is configured on the server.

  B. Disable the server certificate to be validated on the client.

  C. Update the client certificate to match the user account.

  D. Replace the client certificates from the CA with the server certificate.

  Correct Answer: B

  https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_troubleshooting.html

• Question 139:

  What are two considerations when deploying a Cisco Hyperlocation? (Choose two.)

  A. NTP configuration is available, but not recommended.

  B. The Cisco Hyperlocation feature must be enabled only on the wireless LAN controller.

  C. After enabling Cisco Hyperlocation on Cisco CMX, the APs and the wireless LAN controller must be restarted.

  D. The Cisco Hyperlocation feature must be enabled on the wireless LAN controller and Cisco CMX.

  E. If the Cisco CMX server is a VM, a high-end VM is needed for Cisco Hyperlocation deployments.

  Correct Answer: DE

• Question 140:

  An engineer has implemented advanced location services for a retail wireless deployment. The marketing department wants to collect user demographic information in exchange for guest WLAN access and to have a customized portal per location hosted by the provider. Which social connector must be tied into Cisco CMX to provide this service?

  A. Gmail

  B. Google+

  C. Facebook

  D. MySpace

  Correct Answer: C