Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 11:

  DRAG DROP

  The network management team in a large shopping center has detected numerous rogue APs from local coffee shops that are broadcasting SSIDs. All of these SSIDs have names starting with ATC (for example, ATC302, ATC011, and ATC566). A wireless network engineer must appropriately classify these SSIDs using the Rogue Rules feature. Drag and drop the options from the left onto the categories in which they must be used on the right. Not all options are used.

  Select and Place:

  

  Correct Answer:

  

• Question 12:

  An engineer added more APs to newly renovated areas in building. The engineer is now receiving Out-of-Sync alarms on Cisco Prime Infrastructure. Which two actions resolve this issue? (Choose two.)

  A. Manually synchronize from Cisco Prime Infrastructure.

  B. Manually synchronize from MSE.

  C. Enable automatic synchronization on Cisco Prime Infrastructure.

  D. Enable automatic synchronization on MSE.

  E. Add new APs to maps on Cisco Prime Infrastructure.

  Correct Answer: BD

  ref: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-5/user/guide/bk_CiscoPrimeInfrastructure_3_5_0_UserGuide/bk_CiscoPrimeInfrastructure_3_5_0_UserGuide_chapter_0100110.html#con_1301578:~:text=NEs% 20with%20MSE-,Set%20Up%20Synchronization%20Between%20MSE%20Databases%20and%20Product%20Database,-Manual%20synchronization%20of

• Question 13:

  Which condition introduce security risk to a BYOD policy?

  A. enterprise-managed MDM platform used for personal devices

  B. access to LAN without implementing MDM solution

  C. enforcement of BYOD access to internet only network

  D. enterprise life-cycle enforcement of personal device refresh

  Correct Answer: B

• Question 14:

  A network is set up to support wired and wireless clients. Both types must authenticate using 802.1X before connecting to the network. Different types of client authentication must be separated on a Cisco ISE deployment. Which two configuration items achieve this task? (Choose two.)

  A. device profiles

  B. policy sets

  C. separate networks

  D. policy groups

  E. policy results

  Correct Answer: BE

  The overall policy for wired and wireless will be different, as will the authorization result within each policy.

• Question 15:

  An engineer has many different WLANs on a WLC but does not want to broadcast them to every AP in the building. Which group must be configured on the WLC to allow different WLANs on the different APs without creating new interfaces?

  A. ACL

  B. interface group

  C. mobility group

  D. AP group

  Correct Answer: D

• Question 16:

  An engineer is in the process of implementing Fastlane on a wireless network with a Mobility Express AP installed. The network must support voice and video applications for Apple devices. Due to a security concern, all iPhones are updated to version 14.5.432302546. Which QoS profile must the engineer configure on the user WLAN?

  A. Bronze

  B. Best Effort

  C. Silver

  D. Platinum

  Correct Answer: D

  Ref: https://www.cisco.com/c/dam/en/us/td/docs/wireless/controller/technotes/8-3/Optimizing_WiFi_Connectivity_and_Prioritizing_Business_Apps.pdf

• Question 17:

  An engineer is in the process of implementing Fastiane on a wireless network with a Mobility Express AP installed and Apple end-user devices. Due to a security concern, the IT department has updated all the iPads to version 14.5.423551943. Which QoS profile must the engineer configure on the user WLAN?

  A. Platinum

  B. Best Effort

  C. Bronze

  D. Silver

  Correct Answer: A

• Question 18:

  An engineer is planning an image upgrade of the WLC, and hundreds of APs are spread across remote sites with limited WAN bandwidth. The engineer must minimize the WAN utilization for this upgrade. Which approach must be used for the AP image upgrade?

  A. Predownload the new code to the APs.

  B. Use the Smart AP image upgrade feature.

  C. Allow the APs to download their code after WLC reboot.

  D. Execute parallel TFTP code upgrade on the APs via SSH.

  Correct Answer: B

• Question 19:

  Refer to the exhibit.

  

  An engineer is troubleshooting a client connectivity issue. The client is in the RUN state, and no traffic is passed after authenticating by using Cisco ISE. Which action resolves the problem?

  A. Configure a different client VLAN after authentication.

  B. Disable the ACL that prevents traffic from being allowed.

  C. Apply a lower WMM QoS.

  D. Enable rate-limiting to the client.

  Correct Answer: A

• Question 20:

  A network engineer is configuring a Cisco AireOS WLC environment for central web authentication using Cisco ISE.

  The controllers are configured using auto-anchor for the guest network.

  Which three components must be implemented for the foreign WLC?(Choose three.)

  A. DHCP RADIUS profiling enabled.

  B. HTTP RADIUS profiling enabled.

  C. UDP/1812-1813 open to ISE

  D. downloadable preauth ACL on ISE

  E. local preauth ACL on WLC

  F. WLAN Layer 2 security

  Correct Answer: ACF