Get Instant Access of 100% REAL 300-430 DUMP Pass Your Exam Easily
300-430 Free Exam Questions with Quality Guaranteed
NEW QUESTION # 121
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
- A. Controller software must be newer than 7.0.6+.
- B. mDNS uses only UDP port 5436 as a destination port.
- C. mDNS is not supported over IPv6.
- D. mDNS cannot use UDP port 5353 as the destination port.
- E. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
Answer: C,E
NEW QUESTION # 122
An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
NEW QUESTION # 123
Refer to the exhibit.
An engineer tries to manage the rogues on the Cisco WLC. Based on the configuration, which AP is marked as malicious by the controller?
- A. rogue AP with SSID admin seen for 3000 seconds and heard at -70 dBm
- B. rogue AP with SSID admin seen for 3000 seconds and heard at -60 dBm
- C. rogue AP with SSlD admin seen for 4000 seconds and heard at -60 dBm
- D. rogue AP with SSlD admin seen for 4000 seconds and heard at -70 dBm
Answer: D
Explanation:
NEW QUESTION # 124
Which three properties are used for client profiling of wireless clients? (Choose three.)
- A. MAC OUI
- B. hostname
- C. OS version
- D. IP address
- E. HTTP user agent
- F. DHCP
Answer: A,E,F
Explanation:
NEW QUESTION # 125
Refer to the exhibit.
An engineer needs to configure location services in an office. The requirement is to use FastLocate and achieve higher locations refresh rates. Which location-based technique should be implemented?
- A. probe-based
- B. data packet-based
- C. location patterning
- D. angulation
Answer: B
NEW QUESTION # 126
An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a reliable way for a Media Stream to work between Cisco FlexConnect APs. Which feature must be enabled to guarantee delivery?
- A. Multicast-to-Unicast Direct
- B. Multicast Direct
- C. Unicast Direct
- D. IGMP Direct
Answer: B
NEW QUESTION # 127
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)
- A. Static WEP
- B. CKIP
- C. Static WEP + 802.1X
- D. 802.1X
- E. WPA+WPA2
Answer: A,E
Explanation:
NEW QUESTION # 128
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)
- A. Static WEP
- B. CKIP
- C. Static WEP + 802.1X
- D. 802.1X
- E. WPA+WPA2
Answer: A,E
Explanation:
"When setting the security setting in the WLAN, there are specific elements that are not supported on the 600 series. For Layer 2 Security, only these options are supported for the Cisco Aironet 600 Series OEAP: None WPA+WPA2 Static WEP can also be used but not for .11n data rates." https://www.cisco.com/c/en/us/support/docs/wireless/aironet-600-series-officeextend-access-point/113003-office-extend-config-00.html#wlan-settings
NEW QUESTION # 129
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?
- A. Access to Cisco ISE must be allowed on the pre authentication ACL.
- B. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
- C. Traffic toward the virtual interface must be permitted.
- D. Management traffic from the guest network must be configured on the ACL rules.
Answer: A
Explanation:
NEW QUESTION # 130
An organization is supporting remote workers in different locations. In order to provide wireless network connectivity and services, OfficeExtend has been implement. The wireless connectivity is working, but users report losing connectivity to their local network printers. Which solution must be used to address this issue?
- A. FlexConnect local switching
- B. WLAN static IP tunneling
- C. OEAP gateway override
- D. OEAP split tunnel
Answer: D
NEW QUESTION # 131
An engineer must create an account to log in to the CLI of an access point for troubleshooting. Which configuration on the WLC will accomplish this?
- A. Global Configuration Enable Password
- B. SNMP V3 User
- C. Allow New Telnet Sessions
- D. ReadWrite User Access Mode
Answer: A
NEW QUESTION # 132
A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure. Which two technologies must they deploy? (Choose two.)
- A. sniffer mode with no submode
- B. monitor mode
- C. rogue detector mode
- D. FlexConnect mode
- E. local mode with WIPS submode
Answer: B,E
NEW QUESTION # 133
A customer wants to allow employees to easily onboard their personal devices to the wireless network. The visitors also must be able to connect to the same network without the need to engage with anyone from the reception desk. Which process must be configured on Cisco ISE to support this requirement?
- A. native supplicant provisioning
- B. self-registration guest portal
- C. MAC authentication bypass
- D. local web auth
Answer: B
NEW QUESTION # 134
An engineer is configuring multicast for two WLCs. The controllers are in deferent physical locations and each handles around 500 wire clients. How should the CAPWAP multicast group address be assigned during configuration?
- A. Each WLC management address must be in a different multicast group
- B. Each WLC must be assigned a unique multicast group address
- C. Each WLC management address must be in the same multicast group
- D. Both WLCs must be assigned the same multicast group address
Answer: A
NEW QUESTION # 135
Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?
- A. Policy Profile
- B. AP Join Profile
- C. RF Profile
- D. Flex Profile
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/configguide/b_wl_16_10_cg/flexconnect.html
NEW QUESTION # 136
A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?
- A. NMSP
- B. CAPWAP
- C. SOAP/XML
- D. SNMP
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/mse/7-6/MSE_wIPS/MSE_wIPS_7_6/MSE_wIPS_7_5_chapter_01000.html NMSP (Network Mobility Services Protocol) - The protocol used for communication between Wireless LAN Controllers and the Mobility Services Engine. In the case of a wIPS Deployment, this protocol provides a pathway for alarm information to be aggregated from controllers to the MSE and for wIPS configuration information to be pushed to the controller. This protocol is encrypted. https://www.cisco.com/c/en/us/td/docs/wireless/technology/wips/deployment/guide/WiPS_deployment_guide.html#pgfId-80073
NEW QUESTION # 137
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?
- A. HR_ACL appended with BASE_ACL
- B. HR_ACL only
- C. BASE_ACL only
- D. BASE_ACL appended with HR_ACL
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/98590-Per-User-ACL-
NEW QUESTION # 138
An engineer is considering an MDM integration with Cisco ISE to assist with security for lost devices.
Which two functions of MDM increase security for lost devices that access data from the network? (Choose two.)
- A. data encryption
- B. PIN enforcement
- C. data loss prevention
- D. Jailbreak/root detection
- E. data wipe
Answer: B,E
NEW QUESTION # 139 
Refer to the exhibit. The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?
- A. The Cisco CMX server receives SNMP traffic from the WLC.
- B. The Cisco CMX server receives NMSP traffic from the WLC.
- C. The Cisco CMX server receives Angle-of-Arrival data from the WLC.
- D. The Cisco CMX server receives NetFlow data from the WLC.
Answer: C
NEW QUESTION # 140
What must be configured on the Global Configuration page of the WLC for an AP to use 802.1x to authenticate to the wired infrastructure?
- A. RADIUS shared secret
- B. supplicant credentials
- C. local access point credentials
- D. TACACS server IP address
Answer: A
NEW QUESTION # 141
......
300-430 Free Exam Files Downloaded Instantly: https://certkiller.passleader.top/Cisco/300-430-exam-braindumps.html