Get Prepared for the 300-430 ENWLSI Exam with Quality Study Materials

Question #1

A wireless engineer must configure access control on a WLC using a TACAS+ server for a company that is implementing centralized authentication on network devices. Which role must be configured under the shell profile on the TACAS+ server for a user with ready-only permissions?

A. ANAGEMENT

B. ONITOR

C. DMIN

D. EAD

View answer

Correct Answer: B

Question #2

Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)

A. ermit-ACL

B. MM required

C. ark

D. ate-limit

View answer

Correct Answer: CE

Question #3

Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?

A. parse mode supports only one switch

B. parse mode floods

C. parse mode uses distribution trees

D. parse mode supports multiswitch networks

View answer

Correct Answer: D

Question #4

A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments. Which solution must the engineer choose?

A. onfigure a second WLC to support half of the APs in the deployment

B. onfigure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles

C. onfigure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios

D. onfigure 16 WLANs to be broadcast on the 2

View answer

Correct Answer: B

Question #5

What must be configured on the Global Configuration page of the WLC for an access point to use 802.1x to authenticate to the wired infrastructure?

A. upplicant credentials

B. ADIUS shared secret

C. ocal access point credentials

D. ACACS server IP address

View answer

Correct Answer: B

Question #6

After looking in the logs, an engineer notices that RRM keeps changing the channels for non-IEEE 802. 11 interferers. After surveying the area, it has been decided that RRM should not change the channel. Which feature must be enabled to ignore non-802.11 interference?

A. void Cisco AP Load

B. void Persistent Non-WIFI Interference

C. void Foreign AP Interference

D. void Non-802

View answer

Correct Answer: D

Question #7

Refer to the exhibit. An engineer needs to manage non-802.11 interference. What is observed in the output on PI?

A. everal light interferers are collectively impacting connectivity at this site

B. he three Individual clusters shown Indicate poor AP placement

C. t least one strong interferer is impacting connectivity at this site

View answer

Correct Answer: B

Question #8

An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?

A. latinum QoS configured on the WLAN

B. MM set to required on the WLAN

C. ls qos trust dscp configured on the controller switch port

D. ls qos trust cos configured on the controller switch port

View answer

Correct Answer: C

Question #9

Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

A. lexConnect ACL

B. LAN name override

C. CKM/OKC

D. AA override

View answer

Correct Answer: D

Question #10

A customer is deploying local web authentication. Which software application must be implemented on Cisco ISE to utilize as a directory service?

A. olaris Directory Service

B. DAP

C. AML

D. ovell eDirectory

View answer

Correct Answer: B

Question #11

An engineer must create an account to log in to the CLI of an access point for troubleshooting. Which configuration on the WLC will accomplish this?

A. eadWrite User Access Mode

B. lobal Configuration Enable Password

C. NMP V3 User

D. llow New Telnet Sessions

View answer

Correct Answer: B

Question #12

Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?

A. olicy Profile

B. P Join Profile

C. lex Profile

D. F Profile

View answer

Correct Answer: B

Question #13

What must be configured on ISE version 2.1 BYOD when using Single SSID?

A. o authentication

B. PA2

C. pen authentication

D. 02

View answer

Correct Answer: D

Question #14

An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?

A.

B.

C.

D.

View answer

Correct Answer: D

Question #15

Refer to the exhibit. An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP-PEAP cannot connect to the network. Based on the local EAP debug controller provided, why is the client unable to connect?

A. he client is falling to accept certificate

B. he Cisco WLC is configured for the incorrect date

C. he user is using invalid credentials

D. he Cisco WLC local EAP profile is misconfigured

View answer

Correct Answer: A

Question #16

An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?

A. olicy Services Node

B. evice Admin Node

C. onitor Node

D. rimary Admin Node

View answer

Correct Answer: A

Question #17

All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?

A. he multicast group includes all APs

B. he wrong multicast address was used

C. he multicast group is assigned the wrong VLAN

D. ulticast IGMP snooping is not enabled

View answer

Correct Answer: D

Question #18

Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

A. t must be Inbound because traffic goes to the WLC

B. acket direction has no significance; it is always Any

C. t must be Outbound because it is traffic that is generated from the WL

D. o have the complete list of options, the CPU ACL must be created only by the CLI

View answer

Correct Answer: A

Question #19

An engineer must achieve the highest level of location accuracy possible for a new mobile application. Which technology must be implemented for this use case?

A. ime Difference of Arrival

B. luetooth Low Energy

C. SS lateration

D. oA lateration

View answer

Correct Answer: A

Question #20

A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

A. leanAir reports on Cisco Prime Infrastructure

B. erformance reports on Cisco Prime Infrastructure

C. nterference Devices reports on Cisco Wireless LAN Controller

D. ir Quality reports on Cisco Wireless LAN Controller

View answer

Correct Answer: A

Question #21

A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be verified?

A. NMP RO community

B. evice interface credentials

C. evice ID

D. hared secret

View answer

Correct Answer: D

Question #22

An engineer must implement a BYDD policy with these requirements:•Onboarding unknown machines•Easily scalable•Low overhead on the wireless networkWhich method satisfies these requirements?

A. riple SSID

B. pen SSID

C. ual SSID

D. ingle SSID

View answer

Correct Answer: D

Question #23

Refer to the exhibit. A network administrator deploys the DHCP profiler service in two ISE servers: 10.3.10.101 and 10.3.10.102. All BYOD devices connecting to WLAN on VLAN63 have been incorrectly profiled and are assigned as unknown profiled endpoints. Which action efficiently rectifies the issue according to Cisco recommendations?

A. othing needed to be added on the Cisco WLC or VLAN interface

B. isable DHCP proxy on the Cisco WLC

C. isable DHCP proxy on the Cisco WLC and run the ip helper-address command under the VLAN interface to point to DHCP and the two ISE servers

D. eep DHCP proxy enabled on the Cisco WLC and define helper-address under the VLAN interface to point to the two ISE servers

View answer

Correct Answer: C

Question #24

An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?

A. hange the WLAN reserved bandwidth for WebEx

B. reate an AVC profile for WebEx

C. reate an ACL for WebEx

D. hange the AVC application WebEx-app-sharing to mark

View answer

Correct Answer: D

Question #25

What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

A. hours

B. 4 hours

C. days

D. days

View answer

Correct Answer: D

Question #26

A network engineer has been hired to perform a new MSE implementation on an existing network. The MSE must be installed in a different network than the Cisco WLC. Which configuration allows the devices to communicate over NMSP?

A. llow UDP/16113portonthe central switch

B. llow TCP/16666 port on the router

C. llow TCP/16113 port on the firewall

D. llow UDP/16666 port on the VPN router

View answer

Correct Answer: C

Question #27

Which devices can be tracked with the Cisco Context Aware Services?

A. ired and wireless devices

B. ireless devices

C. ired devices

D. isco certified wireless devices

View answer

Correct Answer: A

Question #28

When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?

A. t has a set of predefined profiles that you cannot modify further

B. t matches traffic and assigns each matched packet to QoS groups

C. t automates deployment of wired QoS and makes wireless QoS implementation easier

D. t allows the output policy map to put specific QoS queues into specific subgroups

View answer

Correct Answer: B

Question #29

Which two configurations are applied on the WLC to enable multicast, check multicast stream subscriptions, and stream content only to subscribed clients? (Choose two)

A. AA override

B. lient load balancing

C. emote LAN ACL

D. emote LAN

View answer

Correct Answer: AC

Question #30

Refer to the exhibit. The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?

A. he Cisco CMX server receives NetFlow data from the WLC

B. he Cisco CMX server receives NMSP traffic from the WLC

C. he Cisco CMX server receives SNMP traffic from the WL

D. he Cisco CMX server receives Angle-of-Arrival data from the WLC

View answer

Correct Answer: D

Question #31

When implementing self-registration for guest/BYOD devices, what happens when an employee tries to connect four devices to the network at the same time?

A. he last device is removed and the newly added device is updated as active device

B. he registration is allowed, but only one device is connected at any given time

C. ll devices are allowed on the network simultaneously

D. urge time dictates how long a device is registered to the portal

View answer

Correct Answer: C

Question #32

Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

A. rotocol Independent Multicast Dense Mode

B. ource Specific Multicast

C. ulticast Source Discovery Protocol

D. rotocol Independent Multicast Sparse Mode

View answer

Correct Answer: AC

Question #33

Which configured is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one controller to another?

A. nable CAC

B. rust DSCP

C. et QoS to Platinum

D. llow WMM

View answer

Correct Answer: B

Question #34

Refer to the exhibit. Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)

A. here is an IEEE invalid 802

B. he user Active Directory account is locked out after several failed attempts

C. here is an invalid 802

D. he laptop has not received a valid IP address from the wireless controller

View answer

Correct Answer: CD

Question #35

Which QoS level is recommended for guest services?

A. old

B. ronze

C. latinum

D. ilver

View answer

Correct Answer: B

Question #36

An engineer is implementing a FlexConnect group for access points at a remote location using local switching but central DHCP. Which client feature becomes available only if this configuration is changed?

A. ulticast

B. tatic IP

C. ast roaming

D. DNS

View answer

Correct Answer: C

Question #37

Refer to the exhibit. An engineer tries to manage the rogues on the Cisco WLC. Based on the configuration, which AP is marked as malicious by the controller?

A. ogue AP with SSlD admin seen for 4000 seconds and heard at -60 dBm

B. ogue AP with SSID admin seen for 3000 seconds and heard at -70 dBm

C. ogue AP with SSlD admin seen for 4000 seconds and heard at -70 dBm

D. ogue AP with SSID admin seen for 3000 seconds and heard at -60 dBm

View answer

Correct Answer: C

Question #38

A network engineer wants to implement QoS across the network that support multiple VLANs. All the Aps are connected to switch ports and are configured in local mode. Which trust model must be configured on the switch ports to which the Aps are connected?

A. oS

B. PP

C. MM UP

D. SCP

View answer

Correct Answer: D

Question #39

On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?

A. SE NAC is enabled

B. 02

C. lient Exclusion is enabled

D. lexConnect Local Auth is disabled

View answer

Correct Answer: D

Question #40

For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to, as soon as the change is made?

A. ireless traffic only

B. ired traffic only

C. PN traffic

D. ireless and wired traffic

View answer

Correct Answer: D

Question #41

During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

A. PA key

B. ession key

C. ncryption key

D. hared-secret key

View answer

Correct Answer: B

Question #42

An engineer must provide a graphical report with summary grouped data of the total number of wireless clients on the network Which Cisco Prime Infrastructure report provides the requited data?

A. lient Summary

B. osture Status Count

C. obility Client Summary

D. lient Traffic Stream Metrics

View answer

Correct Answer: C

Question #43

Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?

A. F Profile

B. lex Profile

C. olicy Profile

D. P Join Profile

View answer

Correct Answer: B

Question #44

A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC. Which configuration should be used to accomplish this goal?

A. lexConnect mode with OfficeExtend enabled

B. lexConnect mode with local authentication

C. lexConned mode with central switching enabled

D. lexConnect mode with central authentication

View answer

Correct Answer: A

Question #45

Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

A. allback is enabled

B. allback is disabled

C. NS query is disabled

D. NS query is enabled

View answer

Correct Answer: C

Question #46

Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

A. 800s

B. 600e

C. 800s

D. 800i

View answer

Correct Answer: A

Question #47

Refer to the exhibit. A customer has implemented Cisco FlexConnect deployments with different WLANs around the global and is opening a new branch in a different location. The engineers’ task is to execute all the wireless configuration and to suggest how to configure the switch ports for new Aps. Which configuration must the switching team use on the switch ports?

A. ultiple VLAN

B. ccess mode

C. runk mode

D. ingle mode

View answer

Correct Answer: B

Question #48

What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

A. AP-PEAP with 802

B. AP-TLS with 802

C. AP-FAST with CAPWAP DTLS + port authentication

D. AP-FAST with CAPWAP DTLS

View answer

Correct Answer: C

Question #49

CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

A. eceived signal strength

B. riangulation

C. ime distance of arrival

D. ngle of incidence

View answer

Correct Answer: CD

Question #50

An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

A. earn client IP address

B. lexConnect local authentication

C. LAN-based central switching

D. entral DHCP processing

View answer

Correct Answer: C

Question #51

Which statement about the VideoStream/Multicast Direct feature is true?

A. P multicast traffic is reliable over WLAN by default as defined by the IEEE 802

B. ach VideoStream client acknowledges receiving a video IP multicast stream

C. t converts the unicast frame to a multicast frame over the air

D. t makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet

View answer

Correct Answer: B

Question #52

An engineer must track guest traffic flow using the WLAN infrastructure. Which Cisco CMX feature must be configured and used to accomplish this tracking?

A. nalytics

B. onnect and engage

C. resence

D. etect and locate

View answer

Correct Answer: C

Question #53

An engineer is configuring multicast for two WLCs. The controllers are in deferent physical locations and each handles around 500 wire clients. How should the CAPWAP multicast group address be assigned during configuration?

A. ach WLC must be assigned a unique multicast group address

B. ach WLC management address must be in the same multicast group

C. ach WLC management address must be in a different multicast group

D. oth WLCs must be assigned the same multicast group address

View answer

Correct Answer: C

Question #54

A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

A. OAP/XML

B. MSP

C. APWAP

D. NMP

View answer

Correct Answer: A

Question #55

Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure and be able to track the location of clients/rogues on maps? (Choose two.)

A. ontroller IGMP snooping

B. ulticast AP multicast mode

C. roadcast forwarding

D. nicast AP multicast mode

View answer

Correct Answer: CE

Question #56

An engineer must implement intrusion protection the WLAN. The AP coverage is adequate and on- channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which Ap mode and submode must be implemented?

A. p mode: local, Ap submode: WIPS

B. p mode: monitor, Ap submode: WIPS

C. p mode: monitor, Ap submode: none

D. p mode: local, Ap submode: none

View answer

Correct Answer: A

Question #57

The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?

A. ADIUS server overwrite interface

B. AA override

C. LAN local policy

D. ustom AVC profile

View answer

Correct Answer: C

Question #58

The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?

A. he guest portal must be configured on the CPU ACLs on the Cisco WLC

B. ccess to Cisco ISE must be allowed on the pre authentication ACL

C. anagement traffic from the guest network must be configured on the ACL rules

D. raffic toward the virtual interface must be permitted

View answer

Correct Answer: B

Question #59

A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?

A. R_ACL appended with BASE_ACL

B. R_ACL only

C. ASE_ACL appended with HR_ACL

D. ASE_ACL only

View answer

Correct Answer: D

Question #60

What is configured to use more than one port on the OEAP to extend the wired network's?

A. nable IGMPv3 on the central Layer 3 switch

B. nable IGMP snooping on the WLC

C. nable multicast mode on the WLC

D. reate multicast groups on the central Layer 3 switch

View answer

Correct Answer: D

Question #61

An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

A. etwork policy server

B. ADIUS

C. ACACS+

D. DAP

View answer

Correct Answer: C

Question #62

A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber. QoS is being applied only as best effort. What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?

A. onfigure an AVC profile for the Jabber traffic and apply it to the WLAN

B. onfigure the WLAN to broadcast on 5 GHz radios only and allow Jabber users to conned

C. nable Cisco Centralized Key Management on the WLAN so that the Jabber-enabled devices will connect

D. onfigure QoS on the mobile devices that have Jabber installed

View answer

Correct Answer: A

Question #63

An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?

A. plit tunneling

B. E-connect

C. lexConnect

D. P failover priority

View answer

Correct Answer: A

Question #64

What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?

A. 0 seconds

B. 5 seconds

C. 0 seconds

D. 0 seconds

View answer

Correct Answer: B

Question #65

A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

A.

B.

C.

D.

View answer

Correct Answer: B

Question #66

An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source. Which type of multicast routing should be implemented?

A. isco Hyperlocation Module

B. ireless Intrusion Prevention System

C. isco Connected Mobile Experiences

D. isco Mobility Services Engine

View answer

Correct Answer: B

Question #67

Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

A. fter using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering

B. f multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly

C. SIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client

D. ne SSID is for provisioning and the other SSID is for gaining access to the network

View answer

Correct Answer: ABE

Question #68

When configuring a Cisco WLC, which CLI command adds a VLAN with VLAN ID of 30 to a FlexConnect group named BranchA-FCG?

A. onfig flexconnect BranchA-FCG vlan 30 add

B. onfig flexconnect group BranchA-FCG vlan add 30

C. onfig flexconnect group BranchA-FCG vlan 30 add

D. onfig flexconnect BranchA-FCG vlan add 30

View answer

Correct Answer: B

Question #69

A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)

A. re-authentication

B. ocal EAP

C. uthentication caching

D. isco Centralized Key Management

View answer

Correct Answer: BC

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Get Prepared for the 300-430 ENWLSI Exam with Quality Study Materials

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Get Prepared for the 300-430 ENWLSI Exam with Quality Study Materials

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now