Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 171:

  What is an important consideration when implementing a dual SSID design for BYOD?

  A. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.

  B. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.

  C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.

  D. One SSID is for provisioning and the other SSID is for gaining access to the network. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.

  Correct Answer: D

• Question 172:

  Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

  A. authentication-local/switch-local

  B. WPA2 personal

  C. authentication-central/switch-central

  D. lightweight mode

  E. standalone mode

  F. WEB authentication

  Correct Answer: ABE

• Question 173:

  During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

  A. WPA key

  B. session key

  C. encryption key

  D. shared-secret key

  Correct Answer: B

• Question 174:

  Refer to the exhibit.

  

  An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

  A. It must be Inbound because traffic goes to the WLC.

  B. Packet direction has no significance; it is always Any.

  C. It must be Outbound because it is traffic that is generated from the WLC.

  D. To have the complete list of options, the CPU ACL must be created only by the CLI.

  Correct Answer: A

• Question 175:

  An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

  A. Static WEP + 802.1X

  B. WPA+WPA2

  C. Static WEP

  D. CKIP

  E. 802.1X

  Correct Answer: BC

  "When setting the security setting in the WLAN, there are specific elements that are not supported on the 600 series. For Layer 2 Security, only these options are supported for the Cisco Aironet 600 Series OEAP: None WPA+WPA2 Static WEP can also be used but not for .11n data rates."

  https://www.cisco.com/c/en/us/support/docs/wireless/aironet-600-series-officeextend-access-point/113003-office-extend-config-00.html#wlan-settings

• Question 176:

  A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

  A. 1

  B. 2

  C. 5

  D. 7

  Correct Answer: B

  "A FlexConnect group can have one primary AP per AP model. If a primary AP is not selected manually, the AP that has the least MAC address value is automatically chosen as the primary AP for that model."

• Question 177:

  Which three characteristics of a rogue AP pose a high security risk? (Choose three.)

  A. open authentication

  B. high RSSI

  C. foreign SSID

  D. accepts clients

  E. low RSSI

  F. distant location

  Correct Answer: ACD

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/74/configuration/guides/consolidated/ b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010111001.html

• Question 178:

  Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

  A. 1800s

  B. 3600e

  C. 3800s

  D. 4800i

  Correct Answer: A

  https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-active-sensor/guide-c07-743929.html

• Question 179:

  An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?

  A. HR_ACL appended with BASE_ACL

  B. HR_ACL only

  C. BASE_ACL appended with HR_ACL

  D. BASE_ACL only

  Correct Answer: B

  https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98590-Per-User- ACL-WLC.html#configure-acs

• Question 180:

  A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?

  A. received signal strength

  B. triangulation

  C. time distance of arrival

  D. angle of incidence

  Correct Answer: D

  The Angle of Arrival (AoA) technique, sometimes referred to as Direction of Arrival (DoA), locates the mobile station by determining the angle of incidence at which signals arrive at the receiving sensor. Geometric relationships can then be used to estimate location from the intersection of two lines of bearing (LoBs) formed by a radial line to each receiving sensor, as illustrated in Figure 2-5. In a two-dimensional plane, at least two receiving sensors are required for location estimation with improved accuracy coming from at least three or more receiving sensors (triangulation).

  Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS- DG/wifich2.html