Cisco 300-430 Free Practice Questions

NEW QUESTION 1
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

• A. Static WEP + 802.1X
• B. WPA+WPA2
• C. Static WEP
• D. CKIP
• E. 802.1X

Answer: BC

NEW QUESTION 2
Which three characteristics of a rogue AP pose a high security risk? (Choose three.)

• A. open authentication
• B. high RSSI
• C. foreign SSID
• D. accepts clients
• E. low RSSI
• F. distant location

Answer: ACD

NEW QUESTION 3
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?

• A. received signal strength
• B. triangulation
• C. time distance of arrival
• D. angle of incidence

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/WiFiLBS-DG/wifich2.html

NEW QUESTION 4
Which devices can be tracked with the Cisco Context Aware Services?

• A. wired and wireless devices
• B. wireless devices
• C. wired devices
• D. Cisco certified wireless devices

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html

NEW QUESTION 5
An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source. Which type of multicast routing should be implemented?

• A. Protocol Independent Multicast Dense Mode
• B. Source Specific Multicast
• C. Multicast Source Discovery Protocol
• D. Protocol Independent Multicast Sparse Mode

Answer: D

NEW QUESTION 6
A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

• A. There is an IEEE invalid 802.1X authentication policy on the authentication server.
• B. The user Active Directory account is locked out after several failed attempts.
• C. There is an invalid 802.1X authentication policy on the authenticator.
• D. The laptop has not received a valid IP address from the wireless controller.

Answer: C

NEW QUESTION 7
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?
A.

B.

• A.
• B.

Answer: B

NEW QUESTION 8
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be verified?

• A. SNMP RO community
• B. device interface credentials
• C. device ID
• D. shared secret

Answer: D

NEW QUESTION 9
The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

• A. CSV
• B. PDF
• C. XLS
• D. DOC
• E. plain text

Answer: AB

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-2/user/guide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide_chapter_01010.html

NEW QUESTION 10
An engineer is implementing a FlexConnect group for access points at a remote location using local switching but central DHCP. Which client feature becomes available only if this configuration is changed?

• A. multicast
• B. static IP
• C. fast roaming
• D. mDNS

Answer: B

NEW QUESTION 11
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9. Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)

• A. Permit 0.0.0.0 0.0.0.0 UDP any any
• B. Permit 0.0.0.0 0.0.0.0 any DNS any
• C. Permit 0.0.0.0 0.0.0.0 UDP DNS any
• D. Permit 0.0.0.0 0.0.0.0 UDP any DNS
• E. Permit any any any

Answer: AD

NEW QUESTION 12
Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

• A. FlexConnect ACL
• B. VLAN name override
• C. CCKM/OKC
• D. AAA override

Answer: D

NEW QUESTION 13
Which two events are outcomes of a successful RF jamming attack? (Choose two.)

• A. disruption of WLAN services
• B. unauthentication association
• C. deauthentication broadcast
• D. deauthentication multicast
• E. physical damage to AP hardware

Answer: AE

NEW QUESTION 14
A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments. Which solution must the engineer choose?

• A. Configure a second WLC to support half of the APs in the deployment.
• B. Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.
• C. Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.
• D. Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.

Answer: B

NEW QUESTION 15
Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

• A. Configure the certificate, WLAN, and radio interface on WGB.
• B. Configure the certificate on the WLC.
• C. Configure WLAN to authenticate using ISE.
• D. Configure the access point with the root certificate from ISE.
• E. Configure WGB as a network device in ISE.
• F. Configure a policy on ISE to allow devices to connect that validate the certificate.

Answer: ACF

NEW QUESTION 16
An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

• A. The Cisco CMX instances are installed in the same subnet.
• B. The types of the primary and secondary Cisco CMX installations differ.
• C. The delay between the primary and secondary instance is 200 ms.
• D. The sizes of the primary and secondary Cisco CMX installations differ.
• E. Both Cisco CMX installations are virtual.

Answer: BD

NEW QUESTION 17
Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

• A. authentication-local/switch-local
• B. WPA2 personal
• C. authentication-central/switch-central
• D. lightweight mode
• E. standalone mode
• F. WEB authentication

Answer: ABE

NEW QUESTION 18
Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

• A. It must be Inbound because traffic goes to the WLC.
• B. Packet direction has no significance; it is always Any.
• C. It must be Outbound because it is traffic that is generated from the WLC.
• D. To have the complete list of options, the CPU ACL must be created only by the CLI.

Answer: A

NEW QUESTION 19
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

• A. 1
• B. 2
• C. 5
• D. 7

Answer: B

NEW QUESTION 20
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?

• A. Change the WLAN reserved bandwidth for WebEx
• B. Create an AVC profile for WebEx
• C. Create an ACL for WebEx
• D. Change the AVC application WebEx-app-sharing to mark

Answer: B

NEW QUESTION 21
Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller web interface?

• A. Policy Profile
• B. AP Join Profile
• C. Flex Profile
• D. RF Profile

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/cisco-hyperlocation.html

NEW QUESTION 22
......