Use Real 300-430 Dumps - Cisco Correct Answers updated on 2024
CCNP Enterprise 300-430 Exam Practice Dumps
NEW QUESTION # 51
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AР has been configured. How many image transfers between the WLC and APs will occur?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation/Reference:
NEW QUESTION # 52
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
- A. Controller software must be newer than 7.0.6+.
- B. mDNS cannot use UDP port 5353 as the destination port.
- C. mDNS uses only UDP port 5436 as a destination port.
- D. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
- E. mDNS is not supported over IPv6.
Answer: D,E
NEW QUESTION # 53
An engineer must implement a BYDD policy with these requirements:
* Onboarding unknown machines
* Easily scalable
* Low overhead on the wireless network Which method satisfies these requirements?
- A. open SSID
- B. dual SSID
- C. triple SSID
- D. single SSID
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/BYOD_Wireless.html
NEW QUESTION # 54
The CTO of an organization wants to ensure that all Android devices are placed into a separate VLAN on their wireless network. However, the CTO does not want to deploy ISE. Which feature must be implemented on the Cisco WLC?
- A. WLAN local policy
- B. RADIUS server overwrite interface
- C. custom AVC profile
- D. AAA override
Answer: A
NEW QUESTION # 55
What is an important consideration when implementing a dual SSID design for BYOD?
- A. One SSID is for provisioning and the other SSID is for gaining access to the network. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.
- B. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
- C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
- D. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
Answer: A
Explanation:
NEW QUESTION # 56
An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: C
Explanation:
NEW QUESTION # 57
A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the issue?
- A. multicast AP multicast mode
- B. controller IGMP snooping
- C. unicast AP multicast mode
- D. broadcast forwarding
Answer: C
NEW QUESTION # 58
A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?
- A. The laptop has not received a valid IP address from the wireless controller.
- B. There is an IEEE invalid 802.1X authentication policy on the authentication server.
- C. There is an invalid 802.1X authentication policy on the authenticator.
- D. The user Active Directory account is locked out after several failed attempts.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_199/Dot1X_Deployment/Dot1x_Dep_Guide.html
NEW QUESTION # 59
Refer to the exhibit.
The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?
- A. The Cisco CMX server receives NMSP traffic from the WLC.
- B. The Cisco CMX server receives SNMP traffic from the WLC.
- C. The Cisco CMX server receives NetFlow data from the WLC.
- D. The Cisco CMX server receives Angle-of-Arrival data from the WLC.
Answer: D
NEW QUESTION # 60
A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.
IP address of the primary server
IP address of the secondary server
failover mode to be configured as automatic
root password of the secondary server
email ID for NOC notifications
Enabling high availability fails when these parameters are used. Which action resolves the issue?
- A. Place primary and secondary servers in different subnets.
- B. Insert the cmxadmin password of the secondary server.
- C. Enable the virtual IP address of the primary server.
- D. Use IP protocol 4242 for the controller to reach the CMX server.
Answer: B
NEW QUESTION # 61
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?
- A. Access to Cisco ISE must be allowed on the pre authentication ACL.
- B. Traffic toward the virtual interface must be permitted.
- C. Management traffic from the guest network must be configured on the ACL rules.
- D. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
Answer: A
Explanation:
NEW QUESTION # 62
What is the difference between PIM sparse mode and PIM dense mode?
- A. Sparse mode supports only one switch. Dense mode supports multiswitch networks.
- B. Sparse mode uses distribution trees. Dense mode floods.
- C. Sparse mode supports multiswitch networks. Dense mode supports only one switch.
- D. Sparse mode floods. Dense mode uses distribution trees.
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipmulti_pim/configuration/xe-16/imc-pim-xe-16-book/imc-te
NEW QUESTION # 63
Refer to the exhibit.
An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP-PEAP cannot connect to the network. Based on the local EAP debug controller provided, why is the client unable to connect?
- A. The client is falling to accept certificate.
- B. The user is using invalid credentials.
- C. The Cisco WLC is configured for the incorrect date.
Answer: A
NEW QUESTION # 64
Which three characteristics of a rogue AP pose a high security risk? (Choose three.)
- A. low RSSI
- B. high RSSI
- C. distant location
- D. accepts clients
- E. open authentication
- F. foreign SSID
Answer: D,E,F
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/74/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010111001.html
NEW QUESTION # 65
An engineer is adding APs to an existing VolMLAN to allow for location based services. Which option will the primary change be to the network?
- A. cell overlap would decrease
- B. moving to a bridging model
- C. AP footprint
- D. triangulation of devices
- E. increased transmit power on all APs
Answer: C
NEW QUESTION # 66
When configuring a Cisco WLC, which CLI command adds a VLAN with VLAN ID of 30 to a FlexConnect group named BranchA-FCG?
- A. config flexconnect group BranchA-FCG vlan 30 add
- B. config flexconnect BranchA-FCG vlan 30 add
- C. config flexconnect group BranchA-FCG vlan add 30
- D. config flexconnect BranchA-FCG vlan add 30
Answer: C
Explanation:
NEW QUESTION # 67
An engineer has configured Media Stream on the WLC and must guarantee at least 2 Mbps stream per user.
Which RRC template should the engineer use?
- A. coarse
- B. medium
- C. ordinary
- D. low
Answer: B
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
NEW QUESTION # 68
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?
- A. session key
- B. shared-secret key
- C. WPA key
- D. encryption key
Answer: A
NEW QUESTION # 69
Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)
- A. NMSP
- B. HTTPS
- C. Telnet
- D. SOAP
- E. SSH
Answer: A,B
Explanation:
https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/33/user/guide/bk_CiscoPrimeInfrastructure_3_3_0_UserGuide/bk_CiscoPrimeInfrastructure_3_3_0_UserGuide_chapter_0100110.html
NEW QUESTION # 70
An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN.
Which output is produced when the Adaptive wIPS Top 10 AP report is run''
- A. last 10 wIPS events from monitor mode APs
- B. last 10 wIPS events from sniffer mode APs
- C. last of 10 sniffer mode APs with the most wIPS events
- D. last of 10 monitor mode APs with the most wIPS events
Answer: A
NEW QUESTION # 71
An engineer just added anew MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, which is located behind a firewall in a DMZ. It is noticed that NMSP messages are failing between the two devices. Which traffic must be allowed on the firewall to ensure that the MSE and WLC can communicate using NMSP?
- A. TCP 1613
- B. UDP 16113
- C. TCP 16113
- D. UDP 1613
Answer: C
Explanation:
hnps:'/vvw\vxJsco.com'c/en;us'support;docsAvJreless'5500-series-wJreless-controllers/113344-cuwn-ppm html
https:'/mrncciewxom/2014/09/25/what-is-nmsp/
https:'/mvwxiscoxomx/en'us'support/docs'wireless'mo
NEW QUESTION # 72
An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)
- A. X, Y real location
- B. client MAC address
- C. WLC IP address
- D. client description
- E. AP name
Answer: A,B
NEW QUESTION # 73
On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?
- A. 802.11r Fast Transition is enabled
- B. Client Exclusion is enabled
- C. FlexConnect Local Auth is disabled
- D. ISE NAC is enabled
Answer: C
Explanation:
NEW QUESTION # 74
What must be configured on ISE version 2.1 BYOD when using Single SSID?
- A. WPA2
- B. no authentication
- C. open authentication
- D. 802.1x
Answer: D
NEW QUESTION # 75
An engineer is implementing RADIUS to restrict administrative control to the network with the WLC management IP address of 192.168.1.10 and an AP subnet of 192.168.2.0/24. Which entry does the engineer define in the RADIUS server?
- A. NAS entry of the virtual interface and the network range 192 168 2 0/255 255 255 0
- B. shared secret defined on the WLC and the network range 192 168 1 0/255 255 254.0
- C. WLC roles for commands and the network range 192 168 1 0/255 255 255.0
Answer: A
NEW QUESTION # 76
......
Get ready to pass the 300-430 Exam right now using our CCNP Enterprise Exam Package: https://www.exams-boost.com/300-430-valid-materials.html
300-430 Premium Files Test pdf - Free Dumps Collection: https://drive.google.com/open?id=1qGr0JPyqoz199gRDNWUbYY3eLGGCdBny