Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 21:

  You plan to implement Cisco Identity Based Networking Services on a Cisco Catalyst 3850 Series Switch. Which switch command is required when configuring downloadable ACLs?

  A. authentication display new-style

  B. ip device tracking

  C. dot1x system-auth-control

  D. aaa session-id common

  Correct Answer: B

• Question 22:

  An engineer is configuring a BYOD deploymernt strategy and prefers a single SSID model.

  Which technology is required to accomplish this configuration?

  A. mobility service engine

  B. wireless control system

  C. identify service engine

  D. Prime Infrastructure

  Correct Answer: C

• Question 23:

  An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?

  A. Platinum QoS configured on the WLAN

  B. WMM set to required on the WLAN

  C. msl qos trust dscp configured on the controller switch port

  D. msl qos trust cos configured on the controller switch port

  Correct Answer: D

• Question 24:

  Company XYZ recently migrated from AireOS to IOS XE 9800 WLCs. The Internet bandwidth must be limited to 5 Mbps for each guest client as per the global standard. In which configuration on the Cisco Catalyst 9800 WLC must the QoS requirement be added?

  A. table map

  B. policy map

  C. service policy

  D. class map

  Correct Answer: B

• Question 25:

  An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the main campus. The APs on the main campus are configured to use Local mode and the APs in the branches use FlexConnect mode. Which configuration must be applied to the APs for corporate devices on the main campus to be mapped to the local LAN switch on different VLANs according to the VLAN tag ID and WLAN?

  A. Enable Central DHCP Processing.

  B. Disable FlexConnect Local Auth

  C. Enable FlexConnect Local Switching.

  D. Disable VLAN-based Central Switching.

  Correct Answer: A

• Question 26:

  A network administrator just completed the basic implementation of Cisco CMX and tries to implement location tracking. The administrator is having trouble establishing connectivity between one of the WLCs through NMSP. What must be configured to establish this connectivity? (Choose two.)

  A. Add permanent licenses on the Cisco CMX server.

  B. Allow on the firewall port 16113 between Cisco CMX and the WLC.

  C. Enable NMSP on the WLC.

  D. Reboot Cisco CMX after adding the WLC for the first time.

  E. Add to the WLC the MAC address and SSC key for the Cisco CMX server.

  Correct Answer: BC

• Question 27:

  An engineer has configured passive fallback mode for RADIUS with default timer settings. What will occur when the primary RADIUS fails then recovers?

  A. RADIUS requests will be sent to the secondary RADIUS server until the secondary fails to respond.

  B. The controller will immediately revert back after it receives a RADIUS probe from the primary server.

  C. After the inactive time expires the controller will send RADIUS to the primary.

  D. Once RADIUS probe messages determine the primary controller is active the controller will revert back to the primary RADIUS.

  Correct Answer: C

• Question 28:

  Refer to the exhibit.

  

  An engineer has deployed the Cisco CMX solution to track and detect the number of users who visit the office each day. The CMX dashboard is not showing any data. Which action resolves this issue?

  A. Configure Single Sign-On authentication.

  B. Add the WLCs to CMX.

  C. Copy the exported Maps from CMX server to PI using SCP.

  D. Install an evaluation license to CMX server.

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-4/cmx_config/b_cg_cmx104/the_cisco_cmx_detect_and_locate_service.html#:~:text=Wireless%20Controllers.-,Add%20controllers,-%E2%80%94For%20information%20about

• Question 29:

  An IT administrator deployed an OEAP to the home of a remote user, but the OEAP cannot reach the WLC. Which two configuration settings must be completed before an OEAP is deployed successfully? (Choose two.)

  A. Configure Secondary Controller Name and Management IP address in the High Availability tab.

  B. Configure LSC to authorize the OEAP.

  C. Configure the AP mode to FlexConnect and check the box for Office Extend AP.

  D. Configure the WLC with an external IP address on the virtual interface.

  E. Configure Primary Controller Name and Management IP address in the High Availability tab.

  Correct Answer: CE

  Step 4 and 5: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/b_cg81_chapter_0101111.pdf

• Question 30:

  An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated. Which two features does the engineer configure to accomplish this task? (Choose two.)

  A. Device Admin Policy Set

  B. User Access Mode: ReadWrite

  C. ACL

  D. RADIUS server

  E. TACACS server

  Correct Answer: AE

  A and E seem to be the best answers when meeting the requirement for 2 valid choices. B is incorrect as that is for local users and the question states that we're not using local auth on the WLC. C doesn't meet any of the stated requirements either. D is a valid response and RADIUS inherently does not offer RBAC as it only provides Authentication. However since two answers are required only A and E can be combined to provide two steps that will provide admin access. Although RBAC is not required TACACS can define an admin policy set that sets all admin users to have full read/write access without defining any other more granular access.