Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 251:

  A wireless network has two RF groups where Cisco WLCs are joined. APs are associated with different controllers using the round-robin approach. Rogue containment must be deployed in all controllers, but the network must not be affected by any RRM neighbor packets sent by friendly APs. Which AP authentication protection type must be enabled?

  A. AP Authentication

  B. AP Wireless Protection Rules

  C. AP Security

  D. AP Access Control

  Correct Answer: A

• Question 252:

  An engineer set up a local authenticated Cisco FlexConnect AP with a guest LAN. Guests report not being able to authenticate. Which configuration must be changed on the WLAN for guests to be able to authenticate?

  A. AAA override

  B. RADIUS NAC

  C. central authentication

  D. backup RADIUS server

  Correct Answer: C

• Question 253:

  An engineer configures Cisco CMX. which uses Layer 2 high availability on primary and secondary CMX instances, according to these specifications:

  1.

  Primary CMX IP address: 192.168.1.4/24

  2.

  Secondary CMX IP address: 192.168.4.4/24

  3.

  Virtual IP address: 192.168.4.1/24

  During testing, the engineer discovers that the failover fails. Which action resolves the issue?

  A. Place the primary CMX IP address and the virtual IP address in the same subnet.

  B. Place the secondary CMX IP address and the virtual IP address in different subnets.

  C. Use a virtual IP address with CMX Layer 3 high availability.

  D. Place the primary CMX IP address and the secondary CMX IP address in the same subnet.

  Correct Answer: B

• Question 254:

  The marketing department in a retail company has created a promotional video for the opening of a new branch store shp-GA4B6C860927AB. The video must be received by interested hosts only, over wireless multicast. What allows this feature?

  A. WMM

  B. TPC

  C. WMF

  D. DCA

  Correct Answer: C

• Question 255:

  A WLC must be configured to allow multiple mDNS profiles based on a user authentication profile configured in Cisco ISE. Which WLAN setting must be configured?

  A. AAA Override

  B. service advertisement

  C. mDNS policy

  D. mDNS Snooping

  Correct Answer: A

• Question 256:

  An engineer must collect all Cisco CleanAir alarms in a central location for archival purposes. Which device is configured for collection?

  A. wIPS AP

  B. Cisco Prime Infrastructure

  C. MSE

  D. WLC

  Correct Answer: B

• Question 257:

  A request has come in to use dynamic VLAN assignment on an autonomous AP. After the AP is configured, which RADIUS attribute must an engineer use to pass the VLAN ID to the AP?

  A. Tunnel-Medium-Type

  B. Tunnel-Private-Group-ID

  C. Tunnel-Assignment-ID

  D. Tunnel-Type

  Correct Answer: B

• Question 258:

  A customer must provide a secure wireless network from a Cisco Catalyst 9800 Series Wireless Controller to a Cisco AP to remote users. The corporate WLAN must be provided over the Internet to specific locations and support a locally-installed IP phone. Which two actions accomplish this configuration? (Choose two.)

  A. Enable Local Switching under the WLAN.

  B. Configure Remote LAN under the Remote LAN.

  C. Create a Flex Group and add the AR

  D. Enable Office Extend AP on the Flex Profile.

  E. Configure NAT on the physical interface.

  Correct Answer: AD

• Question 259:

  An engineer deploys APs to a branch office. All AP control and management-related traffic must be tunneled to a centralized WLC via CAPWAP. All user traffic must utilize the local Internet line. What should be configured?

  A. wireless mesh network

  B. centrally switched FlexConnect

  C. locally switched FlexConnect

  D. a WLC in local mode

  Correct Answer: B

• Question 260:

  A network engineer is configuring a Cisco FlexConnect AP to allow Cisco ISE to dynamically assign the subnet of a user based on their credentials. Which controller mapping must be modified for this feature?

  A. WLAN VLAN

  B. VLAN ACL

  C. RF group

  D. AP group

  Correct Answer: D

  The AP group configuration includes various parameters that define the behavior and settings of the access points within the group. By modifying the AP group, the network engineer can configure the FlexConnect APs to communicate with Cisco ISE for dynamic VLAN assignment based on user credentials.