Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 141:

  A Cisco CMX 3375 appliance on the 10.6.1 version code counts duplicate client entries, which creates wrong location analytics. The issue is primarily from iOS clients with the private MAC address feature enabled. Enabling this feature requires an upgrade of the Cisco CMX 3375 appliance in a high availability pair to version 10.6.3. SCP transfers the Cisco CMX image, but the upgrade script run fails. Which configuration change resolves this issue?

  A. Upgrade the high availability pair to version 10.6.2 image first and then upgrade to version 10.6.3.

  B. Save configuration and use the upgrade script to upgrade the high availability pair without breaking the high availability.

  C. Break the high availability using the cmxha config disable command and upgrade the primary and secondary individuality.

  D. Run root patch to first upgrade to version 10.6.2 and then migrate to version 10.6.3.

  Correct Answer: C

  https://www.cisco.com/c/en/us/support/docs/availability/high- availability/213664-configure-cmx-high-availability.html

• Question 142:

  A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC.

  Which configuration should be used to accomplish this goal?

  A. FlexConnect mode with OfficeExtend enabled

  B. FlexConnect mode with local authentication

  C. FlexConned mode with central switching enabled

  D. FlexConnect mode with central authentication

  Correct Answer: B

• Question 143:

  An engineer configures a deployment to support:

  1.

  Cisco CMX

  2.

  licenses for at least 3000 APs

  3.

  6000 wIPS licenses

  The Cisco vMSE appliance must be sized for this deployment. Which Cisco vMSE Release 8 option must the engineer deploy?

  A. Large vMSE

  B. Low-End vMSE

  C. Standard vMSE

  D. High-End vMSE

  Correct Answer: D

  

  Refer to: https://www.cisco.com/c/en/us/products/collateral/wireless/mobility-services-engine/data_sheet_c07-473865.html

• Question 144:

  Refer to the exhibit.

  

  An engineer needs to manage non-802.11 interference. What is observed in the output on PI?

  A. Several light interferers are collectively impacting connectivity at this site.

  B. The three Individual clusters shown Indicate poor AP placement.

  C. At least one strong interferer is impacting connectivity at this site.

  D. RF at this site is unable to provide adequate wireless performance.

  Correct Answer: B

• Question 145:

  An engineer must achieve the highest level of location accuracy possible for a new mobile application. Which technology must be implemented for this use case?

  A. Time Difference of Arrival

  B. Bluetooth Low Energy

  C. RSS lateration

  D. ToA lateration

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBSDG/wifich2.html

• Question 146:

  An engineer must create an account to log in to the CLI of an access point for troubleshooting. Which configuration on the WLC will accomplish this?

  A. ReadWrite User Access Mode

  B. Global Configuration Enable Password

  C. SNMP V3 User

  D. Allow New Telnet Sessions

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/ b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_011 01011.html

• Question 147:

  Refer to the exhibit.

  

  An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP- PEAP cannot connect to the network. Based on the local EAP debug controller provided, why is the client unable to connect?

  A. The client is falling to accept certificate.

  B. The Cisco WLC is configured for the incorrect date.

  C. The user is using invalid credentials.

  D. The Cisco WLC local EAP profile is misconfigured

  Correct Answer: A

• Question 148:

  The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?

  A. RADIUS server overwrite interface

  B. AAA override

  C. WLAN local policy

  D. custom AVC profile

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/NativeProfiling75.html

• Question 149:

  The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?

  A. The guest portal must be configured on the CPU ACLs on the Cisco WLC.

  B. Access to Cisco ISE must be allowed on the pre authentication ACL.

  C. Management traffic from the guest network must be configured on the ACL rules.

  D. Traffic toward the virtual interface must be permitted.

  Correct Answer: B

  https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html

• Question 150:

  A customer is deploying local web authentication. Which software application must be implemented on Cisco ISE to utilize as a directory service?

  A. Solaris Directory Service

  B. LDAP

  C. SAML

  D. Novell eDirectory

  Correct Answer: B