300-430 Online Practice Questions and Answers

The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?

A. The guest portal must be configured on the CPU ACLs on the Cisco WLC.

B. Access to Cisco ISE must be allowed on the pre authentication ACL.

C. Management traffic from the guest network must be configured on the ACL rules.

D. Traffic toward the virtual interface must be permitted.

An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a reliable way for a Media Stream to work between Cisco FlexConnect APs. Which feature must be enabled to guarantee delivery?

A. Multicast-Unicast Direct

B. Multicast Direct

C. Unicast Direct

D. IGMP Direct

A network engineer needs to configure multicast in the network. The implementation will use multiple multicast groups and PIM routers. Which address provides automatic discovery of the best RP for each multicast group?

A. 224.0.0.13

B. 224.0.0.14

C. 224.0.1.39

D. 224.0.1.40

A Cisco 8540 WLC manages Cisco Aironet 4800 Series APs and sends AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperiocation. No AOA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics.

How must the network administrator RESOLVE THIS ISSUE?

A. Allow port 2003 for AoA packets to flow through between the CMX appliances.

B. Enable Wireless > Access Points > Global configuration > Enable Hyperlocation on the WLC.

C. Use one Hyperlocation-enabled WL.C and CMX for AoA data

D. Enable the HALO module on the CMX appliance for the data collection

An engineer completes the setup of a wo-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch.

Which certificate type helps resolve this issue?

A. Public-Signed Root

B. Self-Signed Standard

C. Public-Signed SAN

D. Self-Signed Wildcard

An engineer is considering an MDM integration with Cisco ISE to assist with security for lost devices.

Which two functions of MDM increase security for lost devices that access data from the network? (Choose two.)

A. PIN enforcement

B. Jailbreak/root detection

C. data wipe

D. data encryption

E. data loss prevention

A customer must use deep-packet inspection on the Cisco Catalyst 9800 Series Wireless Controller. The details must include all wireless client use details. Where must AVC be configured to meet this requirement?

A. AP join tag

B. policy profile

C. RF tag

D. WLAN

A wireless network has two RF groups where Cisco WLCs are joined. APs are associated with different controllers using the round-robin approach. Rogue containment must be deployed in all controllers, but the network must not be affected by any RRM neighbor packets sent by friendly APs. Which AP authentication protection type must be enabled?

A. AP Authentication

B. AP Wireless Protection Rules

C. AP Security

D. AP Access Control

An engineer configures Cisco CMX. which uses Layer 2 high availability on primary and secondary CMX instances, according to these specifications:

1.

Primary CMX IP address: 192.168.1.4/24

2.

Secondary CMX IP address: 192.168.4.4/24

3.

Virtual IP address: 192.168.4.1/24

During testing, the engineer discovers that the failover fails. Which action resolves the issue?

A. Place the primary CMX IP address and the virtual IP address in the same subnet.

B. Place the secondary CMX IP address and the virtual IP address in different subnets.

C. Use a virtual IP address with CMX Layer 3 high availability.

D. Place the primary CMX IP address and the secondary CMX IP address in the same subnet.

The marketing department in a retail company has created a promotional video for the opening of a new branch store shp-GA4B6C860927AB. The video must be received by interested hosts only, over wireless multicast. What allows this feature?

A. WMM

B. TPC

C. WMF

D. DCA