300-375 Premium Bundle

300-375 Premium Bundle

Securing Cisco Wireless Enterprise Networks Certification Exam

4.5 
(46710 ratings)
0 QuestionsPractice Tests
0 PDFPrint version
November 23, 2024Last update

Cisco 300-375 Free Practice Questions

It is more faster and easier to pass the by using . Immediate access to the and find the same core area with professionally verified answers, then PASS your exam with a high score now.

Online Cisco 300-375 free dumps demo Below:

NEW QUESTION 1
An engineer requires authentication for WPA2 that will use fast rekeying to enable clients to roam from one access point to another without going through the controller. Which security option should be configured?

  • A. PSK
  • B. AES
  • C. Cisco Centralized key Management
  • D. 802.1x

Answer: C

Explanation:  

NEW QUESTION 2
On which two ports does the RADIUS server maintain a database and listen for incoming authentication and accounting requests? (Choose two.)

  • A. UDP 1900
  • B. UDP port 1812
  • C. TCP port 1812
  • D. TCP port 1813
  • E. UDP port 1813

Answer: BE

Explanation:  

NEW QUESTION 3
An engineer is securing the wireless network from vulnerabilities. Which four strategies are recommended for mitigation? (Choose four.)

  • A. MFP
  • B. identity-based networking
  • C. rogue location
  • D. EAP-TLS
  • E. guest monitoring
  • F. RF profiles
  • G. rogue detection
  • H. password policies

Answer: ACEG

Explanation:  

NEW QUESTION 4
An engineer must enable EAP on a new WLAN and is ensuring that the necessary components are available. Which component uses EAP and 802.1x to pass user authentication to the authenticator?

  • A. AP
  • B. AAA server
  • C. supplicant
  • D. controller

Answer: D

Explanation:  

NEW QUESTION 5
A network engineer must segregate all iPads on the guest WLAN to a separate VLAN. How does the engineer accomplish this task without using ISE?

  • A. Use 802.1x authentication to profile the devices.
  • B. Create a local policy on the WLC.
  • C. Use an mDNS profile for the iPad device.
  • D. Enable RADIUS DHCP profiling on the WLAN.

Answer: B

Explanation:  

NEW QUESTION 6
You are configuring a Cisco WLC version 8.0. Which two options do you find on the Layer 3 Security tab? (Choose two.)

  • A. 802.1x
  • B. Authentication
  • C. Passthrough
  • D. CKIP
  • E. WPA+WPA2

Answer: BC

Explanation:
From the Layer 3 Security drop-down list, choose one of the following: None?Layer 3 security is disabled.
Web Authentication?Causes users to be prompted for a username and password when connecting to the wireless network. This is the default value.
Web Passthrough?Allows users to access the network without entering a username and password. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-3/configguide/b_cg83/b_cg83_chapter_0100111.html
 

NEW QUESTION 7
An engineer must provide a graphical trending report of the total number of wireless clients on the network. Winch report provides the required data?

  • A. Client Summary
  • B. Posture Status Count
  • C. Client Traffic Stream Metrics
  • D. Mobility Client Summary

Answer: D

Explanation:  

NEW QUESTION 8
An engineer is configuring EAP-TLS with a client trusting server model and has configured a public root certification authority. Which action does this allow?

  • A. specifies a second certification authority to trust
  • B. utilizes two subcertification authority servers
  • C. creates a PKI infrastructure
  • D. validates the AAA server

Answer: D

Explanation:
To support EAP-TLS, the AAA server (for example, Cisco Secure ACS) must have a certificate. Either a public certification authority or a private certification authority can be used to issue the AAA server certificate. The AAA server will trust a client certificate that was issued from the same root
certification authority that issued its certificate.
https://www.cisco.com/en/US/tech/ CK7 22/ CK8 09/technologies_white_paper09186a008009256b.sht ml
 

NEW QUESTION 9
Refer to the exhibit.
300-375 dumps exhibit
An engineer has configured a BYOD policy that allows for printing on the WLAN utilizing Bonjour
services. However, the engineer cannot get printing working. The WLC firmware is 8.x. the printer is connected on the wired network where a few of the access points are also connected.
Which reason that printing is not working is true?

  • A. Location-specific service is not enabled on the WLC.
  • B. Secure Web Mode Cipher-Option SSLv2 is not enabled.
  • C. mBNS and IGMP snooping is not enabled on the WLC.
  • D. IGMP Query Interval value is too low.
  • E. The number of mDNS services exceeds firmware limits.

Answer: A

Explanation:  

NEW QUESTION 10
Refer to the exhibit.
300-375 dumps exhibit
A client reports being unable to log into the wireless network, which uses PEAPv2. Which two issues appear in the output? (Choose two.)

  • A. There is a problem with the client supplicant.
  • B. The AP has the incorrect RADIUS server address.
  • C. The AP has lost IP connectivity to the authentication server.
  • D. The EAP client timeout value should be increased.
  • E. The authentication server is misconfigured on the controller.
  • F. The authentication server is misconfigured in the WLA

Answer: AD

Explanation:  

NEW QUESTION 11
An engineer is configuring client MFP. What WLAN Layer 2 security must be selected to use client MFP?

  • A. Static WEP
  • B. CKIP
  • C. WPA+WPA2
  • D. 802 1x

Answer: C

Explanation:  

NEW QUESTION 12
An engineer with ID 338860948 is implementing Cisco Identity-Based Networking on a Cisco AireOS
controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy.
Which option is the resulting ACL when a Human Resources user connects?

  • A. HR_ACL only
  • B. HR_ACL appended with BASE_ACL
  • C. BASE_ACL appended with HR_ACL
  • D. BASE_ACL only

Answer: A

Explanation:  

NEW QUESTION 13
Which feature should an engineer select to implement the use of VLAN tagging, QoS, and ACLs to clients based on RADIUS attributes?

  • A. per-WLAN RADIUS source support
  • B. client profiling
  • C. AAA override
  • D. captive bypassing
  • E. identity-based networking

Answer: C

Explanation:  

NEW QUESTION 14
A corporation has recently implemented a BYOD policy at their HQ. Which three risks should the security director be concerned about? (Choose three.)

  • A. unauthorized users
  • B. rogue ad-hocs
  • C. software piracy
  • D. lost and stolen devices
  • E. malware
  • F. keyloggers

Answer: ACE

Explanation:  

NEW QUESTION 15
A customer is concerned that radar is impacting the access point that service the wireless network in an office located near an airport. On which type of channel should you conduct spectrum analysis to identify if radar is impacting the wireless network?

  • A. UNII-3 channels
  • B. UNII-1 channels
  • C. 802.11b channels
  • D. 2.4 GHz channels
  • E. UMII-2 channels
  • F. Channels 1, 5, 9, 13

Answer: E

Explanation:  

NEW QUESTION 16
Refer to the exhibit.
300-375 dumps exhibit
An engineer utilizing ISE as the wireless AAA service noticed that the accounting process on the server at 10.10.2.3 has failed, but authentication process is still functional.
Which ISE nodes receive WLC RADIUS traffic, using the CLI output and assuming the WLAN uses the servers in their indexed order?

  • A. authentication to 10.10.2.4, accounting to 10.10.2.3.
  • B. authentication to 10.10.2.3, accounting to 10.10.2.3.
  • C. authentication to 10.10.2.4, accounting to 10.10.2.4.
  • D. authentication to 10.10.2.3, accounting to 10.10.2.4.

Answer: B

Explanation:  

NEW QUESTION 17
An engineer is designing a high availability wireless network. What mechanism should be the focus for high availability?

  • A. SNR
  • B. channel reuse
  • C. RSSI
  • D. cell overlap

Answer: B

Explanation:
Describe basic RF deployment considerations related to site survey design of data or VoWLAN applications, common RF interference sources such as devices, building material, AP location, and basic RF site survey design related to channel reuse, signal strength, and cell overlap
 

NEW QUESTION 18
Refer to the exhibit.
300-375 dumps exhibit
In this IBN topology, which device acts as the RADIUS server?

  • A. directory server
  • B. Cisco ISE
  • C. Cisco UCS
  • D. Cisco Catalyst 3850 Series Switch

Answer: D

Explanation:  

NEW QUESTION 19
Refer to the exhibit.
300-375 dumps exhibit
You are configuring a controller that runs Cisco IOS XE by using the CLI. Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)

  • A. mandatory
  • B. association-comeback
  • C. SA teardown protection
  • D. saquery-retry-time
  • E. enable
  • F. comeback-time

Answer: ABD

100% Valid and Newest Version 300-375 Questions & Answers shared by DumpSolutions, Get Full Dumps HERE: https://www.dumpsolutions.com/300-375-dumps/ (New 124 Q&As)


START 300-375 EXAM