Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 201:

  Which devices can be tracked with the Cisco Context Aware Services?

  A. wired and wireless devices

  B. wireless devices

  C. wired devices

  D. Cisco certified wireless devices

  Correct Answer: A

  https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html

• Question 202:

  All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?

  A. The multicast group includes all APs

  B. The wrong multicast address was used

  C. The multicast group is assigned the wrong VLAN

  D. Multicast IGMP snooping is not enabled

  Correct Answer: D

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/74/configuration/guides/consolidated/ b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01011.html

• Question 203:

  The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

  A. CSV

  B. PDF

  C. XLS

  D. DOC

  E. plain text

  Correct Answer: AB

  Reference: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3- 2/user/guide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide_chapter_01010.html

• Question 204:

  An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

  A. learn client IP address

  B. FlexConnect local authentication

  C. VLAN-based central switching

  D. central DHCP processing

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/Enterprise-Mobility-8-5-Design- Guide/ Enterprise_Mobility_8-5_Deployment_Guide/ch7_HREA.html

• Question 205:

  For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to, as soon as the change is made?

  A. wireless traffic only

  B. wired traffic only

  C. VPN traffic

  D. wireless and wired traffic

  Correct Answer: D

  When CPU ACL is enabled, it is applicable to both wireless and wired traffic. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/access_control_lists.html

• Question 206:

  An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?

  A. Platinum QoS configured on the WLAN

  B. WMM set to required on the WLAN

  C. mls qos trust dscp configured on the controller switch port

  D. mls qos trust cos configured on the controller switch port

  Correct Answer: D

  "When you enter the mls qos trust cos command on a port, the switch uses the CoS marking on incoming packets in order to put the packet in the right queue. When the packet is resent, the switch makes the DSCP value correspond to the CoS." See: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/voice-over-wireless-lan-vowlan/116056-technote-qos-00.html#anc3

• Question 207:

  A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

  A. SOAP/XML

  B. NMSP

  C. CAPWAP

  D. SNMP

  Correct Answer: B

  NMSP (Network Mobility Services Protocol) ?The protocol used for communication between Wireless LAN Controllers and the Mobility Services Engine. In the case of a wIPS Deployment, this protocol provides a pathway for alarm information to be aggregated from controllers to the MSE and for wIPS configuration information to be pushed to the controller. This protocol is encrypted.

  https://www.cisco.com/c/en/us/td/docs/wireless/mse/7-6/MSE_wIPS/MSE_wIPS_7_6/MSE_wIPS_7_5_chapter_01000.html https://www.cisco.com/c/en/us/td/docs/wireless/technology/wips/deployment/guide/WiPS_deployment_guide.html#pgfId-80073

• Question 208:

  An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

  A. The Cisco CMX instances are installed in the same subnet.

  B. The types of the primary and secondary Cisco CMX installations differ.

  C. The delay between the primary and secondary instance is 200 ms.

  D. The sizes of the primary and secondary Cisco CMX installations differ.

  E. Both Cisco CMX installations are virtual.

  Correct Answer: BD

  Pre-requisites for HA

  Both the primary and the secondary server should be of the same size and the same type (VM or physical appliance).

  Both the primary and the secondary server should have the same Cisco CMX version.

  Both the primary and the secondary server should be connected on the same subnet.

  Both the primary and the secondary server should be connected on the same subnet if Layer 2 HA is required.

  Both the primary and the secondary server should be IP connected with delay of less then 250ms if Layer 3 HA is used.

  From Cisco CMX release 10.6.2, NTP server settings must be configured on both Primary and Secondary server instance before HA pairing starts. We recommend that you use the same NTP server on both Primary and Secondary. As a

  Cisco CMX admin you can also use a dedicated NTP for Primary and Secondary.

  https://www.cisco.com/c/en/us/td/docs/wireless/mse/106/cmx_config/b_cg_cmx106/managing_cisco_cmx_system_settings.html

• Question 209:

  A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the

  Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

  A. There is an IEEE invalid 802.1X authentication policy on the authentication server.

  B. The user Active Directory account is locked out after several failed attempts.

  C. There is an invalid 802.1X authentication policy on the authenticator.

  D. The laptop has not received a valid IP address from the wireless controller.

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_199/Dot1X_Deploy ment/ Dot1x_Dep_Guide.html

• Question 210:

  Refer to the exhibit.

  

  Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)

  A. TSPEC

  B. SIFS

  C. 802.11e

  D. WMM

  E. APSD

  Correct Answer: CD

  The 802.11e, WMM, and Cisco Compatible Extension specifications help balance and prevent the overloading of a cell with audio streams. CAC determines whether there is enough channel capacity to start a call; if not, the phone can scan for another channel https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/Chapter-9.html