Cisco CCNP Enterprise 300-430 Questions & Answers

• Question 31:

  An engineer is considering an MDM integration with Cisco ISE to assist with security for lost devices.

  Which two functions of MDM increase security for lost devices that access data from the network? (Choose two.)

  A. PIN enforcement

  B. Jailbreak/root detection

  C. data wipe

  D. data encryption

  E. data loss prevention

  Correct Answer: AC

• Question 32:

  A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates instead of 802.11n data rates. To what must the WMM policy of the WLAN be set to accomplish this task?

  A. required

  B. allowed

  C. disabled

  D. mandatory

  Correct Answer: B

• Question 33:

  Refer to the exhibit.

  

  An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogues?

  A. config location notification interval rssi rogues 5

  B. config nmsp notification interval rssi rogues 5

  C. config subscription notification interval rssi rogues 5

  D. config cmx notification interval rssi rogues 5

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-6/config-guide/b_wl_17_6_cg/m_ewlc_nmsp.html#task_C2454AC7B1B14E19899B48489EF24304:~:text=Example%3A-,Device(config)%23%20nmsp%20notification% 20interval%20rssi%20rfid%2050,-Sets%20the%20NMSP

• Question 34:

  An administrator receives reports of many interferers in the wireless network and wants to get the location of these interferers from the maps in Cisco Prime Infrastructure.

  When looking at the floor plans/maps, the administrator does not see any interferers, but can see all wireless clients located successfully.

  Which two statements define the cause of the issue? (Choose two.)

  A. MSE is not added to Cisco Prime infrastructure and synchronized.

  B. Interferer tracking is not enabled on the MSE.

  C. SNMP between Cisco Prime Infrastructure and the WLC is failing.

  D. Context Aware Service tracking limit has already been reached with tracking other elements.

  E. NSMP communication is inactive with the WLC.

  Correct Answer: AB

• Question 35:

  Which role does an engineer configure for administrative access to the wireless infrastructure, using Cisco ISE, to allow configuration of the WLC syslog configuration?

  A. MANAGEMENT

  B. SECURITY

  C. CONTROLLER

  D. WIRELESS

  Correct Answer: A

  https://www.ibm.com/docs/en/dsm?topic=controllers-configuring-syslog-cisco-wireless-lan-controller https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/91631-uwn-tacacs-config.html#:~:text=should%20be%20referred.-,Authorization,-Authorization%20is%20task

• Question 36:

  A wireless engineer has performed a Wireshark ccapture on an 802.1x authentication process to troubleshoot a connectivity issue.

  Which two types of packet does the EAP contain? (Choose two.)

  A. EAP complete

  B. EAP response

  C. EAP failure

  D. EAP request

  E. EAP reply

  Correct Answer: BD

• Question 37:

  Refer to the exhibit.

  

  An engineer is configuring a Cisco wireless LAN controller and needs wireless multicast to use the 54Mbps rates. Which action meets this requirement?

  A. Change the 24 Mpbs to Supported.

  B. Set all data rates below 54 Mbps to Supported.

  C. Change the 54 Mpbs to Mandatory.

  D. Set all data rates below 54 Mbps to Disable.

  Correct Answer: C

  https://community.cisco.com/t5/wireless/wlc-settings-for-high-performance-cells/td-p/2298996#:~:text=The%20highest%20mandatory%20rate%20is,of%2018%20or%2024%20Mbps.

• Question 38:

  A wireless engineer deployed all remote sites as FlexConnect. The client VLAN assignment on these sites is configured manually mapped by WLAN and using local switching. Dynamic VLAN assignment is provided by the newly deployed Cisco ISE. Which IETF attribute must be configured on the AAA server to send that VLAN ID?

  A. Tunnel-Medium-Type

  B. Tunnel-Client-Endpoint

  C. Tunnel-Assignment-ID

  D. Tunnel-Private-Group-ID

  Correct Answer: D

• Question 39:

  Which CLI command do you use to shut down the 2.4 GHz radio of the Floor1_AP1 AP on a Cisco 3850 Switch?

  A. ap name Floor1_AP1 dot11 shutdown 24ghz

  B. ap name Floor1_AP1 dot11 5ghz shutdown

  C. ap name Floor1 AP1 dot11 24ghz shutdown

  D. ap name Floor1_AP1 shutdown dot11 24ghz

  Correct Answer: C

• Question 40:

  An engineer is setting up a new unique NAD on a Cisco ISE.

  Which two parameters must be configured? (Choose two.)

  A. device host name

  B. device password

  C. RADIUS fallback

  D. device IP address

  E. RADIUS shared secret

  Correct Answer: AD