Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 221:

  Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

  A. mDNS uses only UDP port 5436 as a destination port.

  B. mDNS cannot use UDP port 5353 as the destination port.

  C. mDNS is not supported on FlexConnect APs with a locally switched WLAN.

  D. Controller software must be newer than 7.0.6+.

  E. mDNS is not supported over IPv6.

  Correct Answer: CE

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/multicast_broadcast_setup.html Restrictions for Configuring Multicast DNS mDNS over IPv6 is not supported.

  mDNS snooping is not supported on access points in FlexConnect mode in a locally switched WLAN and mesh access points. For locally switched WLANs, all multicast traffic including mDNS is simply bridged between the local VLAN and the SSID.

• Question 222:

  A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)

  A. network analyzers

  B. malware

  C. lost and stolen devices

  D. keyloggers

  E. unauthorized users

  Correct Answer: BC

  https://ccbtechnology.com/byod-5-biggest-security-risks/ https://blogs.cisco.com/security/byod-many-call-it-bring-your-own-malware-byom

• Question 223:

  A wireless engineer must configure IEEE 802.1X authentication on a WLAN that supports new and legacy wireless devices. Which condition must be met for the legacy clients to be able to associate and authenticate without issues?

  A. The authenticator and the authentication server must support the same authentication protocol.

  B. The client and the authenticator must support the same authentication protocol.

  C. The client and the controller must support the same authentication protocol.

  D. The client and the authentication server must support the same authentication protocol.

  Correct Answer: B

• Question 224:

  Refer to the exhibit.

  

  An engineer implemented a CPU ACL on the controller, and now the Web Authentication Redirect page is not working. What must be changed for the redirect page to work?

  A. The permit statement must be directed to the controller management address.

  B. The permit statement for 192.0.2.100 must be in both directions.

  C. The Web Authentication Redirect must be configured on the CPU ACLs.

  D. The Web Authentication Redirect must be HTTP.

  Correct Answer: C

• Question 225:

  Refer to the exhibit.

  

  An administrator configures CPU ACLs on the AireOS WLC to implement security. After configuration, administrative users cannot access the user interface. Where must HTTP and HTTPS traffic be allowed on the ACLs, based on the configuration?

  A. on the dynamic interface

  B. on the service port of management traffic

  C. on the management interface

  D. on the virtual interface

  Correct Answer: C

• Question 226:

  The IT department creates a video containing instructions for employees who have just joined the company. Newcomers need to join the wireless network named NEW0123456789. The WLAN name will be changed daily by IT support. Only new employees must receive the video over wireless multicast. What allows this feature?

  A. WMF

  B. WMM

  C. TPC

  D. DCA

  Correct Answer: D

• Question 227:

  A customer must use deep-packet inspection on the Cisco Catalyst 9800 Series Wireless Controller. The details must include all wireless client use details. Where must AVC be configured to meet this requirement?

  A. AP join tag

  B. policy profile

  C. RF tag

  D. WLAN

  Correct Answer: D

• Question 228:

  An engineer is configuring location services with a Cisco CMX 10.6.2 solution. The engineer must strengthen interferer filtering so that Cisco CMX is protected from bursts of short-lived interferes. Which two interferer-filtering parameters must be configured to meet the requirement? (Choose two.)

  A. Intensity Cutoff

  B. Severity Cutoff

  C. Duty Cycle Cutoff

  D. RSSI Maximum

  E. Utilization Maximum

  Correct Answer: BC

• Question 229:

  An engineer deploys APs in autonomous mode to provide corporate and guest access in several retail locations. Remote authentication with IEEE 802.1X is configured to ensure a secure wireless connection for corporate users. Which component must be configured as the authenticator?

  A. RADIUS server

  B. authentication server

  C. APs

  D. supplicant

  Correct Answer: C

• Question 230:

  Refer to the exhibit.

  

  A company is implementing Cisco ISE and IBN for their WLAN. The pictured IBN profile is applied to BYOD devices that are not registered to the Mobile Device Manager. Which advanced setting must be enabled on the WLAN to allow the policy to work correctly?

  A. static IP tunneling

  B. allow AAA override

  C. RADIUS profiling

  D. Aironet IE

  Correct Answer: B