Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 161:

  What must be configured on ISE version 2.1 BYOD when using Single SSID?

  A. no authentication

  B. WPA2

  C. open authentication

  D. 802.1x

  Correct Answer: D

  https://ciscocustomer.lookbookhq.com/iseguidedjourney/BYOD-configuration

• Question 162:

  What must be configured on the Global Configuration page of the WLC for an access point to use 802.1x to authenticate to the wired infrastructure?

  A. supplicant credentials

  B. RADIUS shared secret

  C. local access point credentials

  D. TACACS server IP address.

  Correct Answer: A

  they ask "use 802.1x to authenticate to the wired infrastructure" so you need to specify the user and password credential for autenticate to the wired port where 802.1x is enable. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-fixed/107946-LAP-802-1x.html

• Question 163:

  Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?

  A. RF Profile

  B. Flex Profile

  C. Policy Profile

  D. AP Join Profile

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/configguide/b_wl_16_10_cg/flex connect.html

• Question 164:

  Which statement about the VideoStream/Multicast Direct feature is true?

  A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.

  B. Each VideoStream client acknowledges receiving a video IP multicast stream.

  C. It converts the unicast frame to a multicast frame over the air.

  D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/multicast_broadcast_setup.html

• Question 165:

  A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be verified?

  A. SNMP RO community

  B. device interface credentials

  C. device ID

  D. shared secret

  Correct Answer: D

• Question 166:

  Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

  A. Cisco Hyperlocation Module

  B. Wireless Intrusion Prevention System

  C. Cisco Connected Mobile Experiences

  D. Cisco Mobility Services Engine

  Correct Answer: A

• Question 167:

  An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary

  server again until the secondary server fails or the controller is rebooted.

  Which cause of this issue is true?

  A. Fallback is enabled

  B. Fallback is disabled

  C. DNS query is disabled

  D. DNS query is enabled

  Correct Answer: B

• Question 168:

  Refer to the exhibit.

  

  A network administrator deploys the DHCP profiler service in two ISE servers: 10.3.10.101 and 10.3.10.102. All BYOD devices connecting to WLAN on VLAN63 have been incorrectly profiled and are assigned as unknown profiled endpoints. Which action efficiently rectifies the issue according to Cisco recommendations?

  A. Nothing needed to be added on the Cisco WLC or VLAN interface. The ISE configuration must be fixed.

  B. Disable DHCP proxy on the Cisco WLC.

  C. Disable DHCP proxy on the Cisco WLC and run the ip helper-address command under the VLAN interface to point to DHCP and the two ISE servers.

  D. Keep DHCP proxy enabled on the Cisco WLC and define helper-address under the VLAN interface to point to the two ISE servers.

  Correct Answer: C

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan- controllers/110865-dhcp- wlc.html

• Question 169:

  An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source. Which type of multicast routing should be implemented?

  A. Protocol Independent Multicast Dense Mode

  B. Source Specific Multicast

  C. Multicast Source Discovery Protocol

  D. Protocol Independent Multicast Sparse Mode

  Correct Answer: D

  Pim Sparse uses a distributed way to deliver multicast to the devices that asked for this traffic.

  In Dense mode the multicast traffic will be flooded out to all devices in periodic time, causing lot of traffic overhead.

• Question 170:

  Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

  A. HTTPS

  B. Telnet

  C. SOAP

  D. SSH

  E. NMSP

  Correct Answer: AC

  https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/33/user/guide/bk_CiscoPrimeInfrastructure_3_3_0_UserGuide/bk_CiscoPrimeInfrastructure_3_3_0_UserGuide_chapter_0100110.html