Regenerate 300-430 Faq 2021

NEW QUESTION 1
A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments. Which solution must the engineer choose?

• A. Configure a second WLC to support half of the APs in the deployment.
• B. Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.
• C. Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.
• D. Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.

Answer: B

NEW QUESTION 2
For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to, as soon as the change is made?

• A. wireless traffic only
• B. wired traffic only
• C. VPN traffic
• D. wireless and wired traffic

Answer: A

NEW QUESTION 3
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

• A. Static WEP + 802.1X
• B. WPA+WPA2
• C. Static WEP
• D. CKIP
• E. 802.1X

Answer: BC

NEW QUESTION 4
An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

• A. network policy server
• B. RADIUS
• C. TACACS+
• D. LDAP

Answer: C

NEW QUESTION 5
All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?

• A. The multicast group includes all APs
• B. The wrong multicast address was used
• C. The multicast group is assigned the wrong VLAN
• D. Multicast IGMP snooping is not enabled

Answer: D

NEW QUESTION 6
An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted. Which cause of this issue is true?

• A. Fallback is enabled
• B. Fallback is disabled
• C. DNS query is disabled
• D. DNS query is enabled

Answer: B

NEW QUESTION 7
CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

• A. Allow HTTP traffic only before authentication and block all the traffic.
• B. Allow all the traffic before authentication and intercept HTTPS only.
• C. Allow HTTPs traffic only before authentication and block all other traffic.
• D. Allow all the traffic before authentication and intercept HTTP only.
• E. Allow SNMP traffic only before authentication and block all the traffic.

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/CMX_Connect_Engage_Visitor_Connect/Guide/Cisco_CMX_Connect_Engage_Config_Guide_VC/CMX_Facebook_Wi-Fi.html

NEW QUESTION 8
What is an important consideration when implementing a dual SSID design for BYOD?

• A. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
• B. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
• C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
• D. One SSID is for provisioning and the other SSID is for gaining access to the networ
• E. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.

Answer: D

NEW QUESTION 9
An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?

• A. 1
• B. 2
• C. 3
• D. 4

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/technology/roguedetection_deploy/Rogue_Detection.html

NEW QUESTION 10
An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?

• A. Platinum QoS configured on the WLAN
• B. WMM set to required on the WLAN
• C. msl qos trust dscp configured on the controller switch port
• D. msl qos trust cos configured on the controller switch port

Answer: C

NEW QUESTION 11
Which devices can be tracked with the Cisco Context Aware Services?

• A. wired and wireless devices
• B. wireless devices
• C. wired devices
• D. Cisco certified wireless devices

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html

NEW QUESTION 12
An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

• A. permit-ACL
• B. WMM required
• C. mark
• D. rate-limit

Answer: C

NEW QUESTION 13
Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)

• A. After enabling Cisco Hyperlocation on Cisco CMX, the APs and the wireless LAN controller must be restarted.
• B. NTP can be configured, but that is not recommended.
• C. The Cisco Hyperlocation feature must be enabled on the wireless LAN controller and Cisco CMX.
• D. The Cisco Hyperlocation feature must be enabled only on the wireless LAN controller.
• E. If the Cisco CMX server is a VM, a high-end VM is needed for Cisco Hyperlocation deployments.

Answer: AC

NEW QUESTION 14
Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

• A. HTTPS
• B. Telnet
• C. SOAP
• D. SSH
• E. NMSP

Answer: AE

NEW QUESTION 15
Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

• A. It must be Inbound because traffic goes to the WLC.
• B. Packet direction has no significance; it is always Any.
• C. It must be Outbound because it is traffic that is generated from the WLC.
• D. To have the complete list of options, the CPU ACL must be created only by the CLI.

Answer: A

NEW QUESTION 16
A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

• A. SOAP/XML
• B. NMSP
• C. CAPWAP
• D. SNMP

Answer: A

NEW QUESTION 17
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

• A. 1
• B. 2
• C. 5
• D. 7

Answer: B

NEW QUESTION 18
Which statement about the VideoStream/Multicast Direct feature is true?

• A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
• B. Each VideoStream client acknowledges receiving a video IP multicast stream.
• C. It converts the unicast frame to a multicast frame over the air.
• D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/multicast_broadcast_setup.html

NEW QUESTION 19
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing. Which configuration within the network device configuration should be verified?

• A. SNMP RO community
• B. device interface credentials
• C. device ID
• D. shared secret

Answer: D

NEW QUESTION 20
A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

• A. There is an IEEE invalid 802.1X authentication policy on the authentication server.
• B. The user Active Directory account is locked out after several failed attempts.
• C. There is an invalid 802.1X authentication policy on the authenticator.
• D. The laptop has not received a valid IP address from the wireless controller.

Answer: C

NEW QUESTION 21
Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

• A. Cisco Hyperlocation Module
• B. Wireless Intrusion Prevention System
• C. Cisco Connected Mobile Experiences
• D. Cisco Mobility Services Engine

Answer: A

NEW QUESTION 22
......