Good Online Materials for Passing 300-430 Implementing Cisco Enterprise Wireless Networks (ENWLSI) Exam

Regina2021-09-15T02:40:40+00:00

By Regina CCNP Enterprise, Cisco, Free Questions Online 300-430, 300-430 ENWLSI, 300-430 exam questions, 300-430 free questions, 300-430 online materials

Do you know Cisco 300-430 ENWLSI exam? It is one of the Cisco CCNP Enterprise Concentration exams, which tests your knowledge of wireless network implementation. The online 300-430 study materials are good for passing your 300-430 Implementing Cisco Enterprise Wireless Networks (ENWLSI) certification exam. Newly updated 300-430 exam questions with the accurate answers, ITExamShop provide the valid 300-430 pdf file to ensure that you can pass 300-430 exam and achieve the CCNP Enterprise certification successfully.

Come here to check Cisco CCNP Enterprise 300-430 ENWLSI Free Questions Below:

Page 1 of 3

1. The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal.

What must be configured to permit only admins to have access?

The guest portal must be configured on the CPU ACLs on the Cisco WL

Access to Cisco ISE must be allowed on the pre authentication AC

Management traffic from the guest network must be configured on the ACL rules.

Traffic toward the virtual interface must be permitted.

2. An engineer must implement rogue containment for an SSID.

What is the maximum number of APs that should be used for containment?

3. Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It

shows UDP traffic from the WLC coming into the server.

What does the capture prove?

The Cisco CMX server receives NetFlow data from the WL

The Cisco CMX server receives NMSP traffic from the WL

The Cisco CMX server receives SNMP traffic from the WL

The Cisco CMX server receives Angle-of-Arrival data from the WL

4. Which two configurations are applied on the WLC to enable multicast, check multicast stream subscriptions, and stream content only to subscribed clients? (Choose two)

Enable IGMP snooping

Set the IGMP timeout to 180 seconds

Enable broadcast forwarding

Enable 802.3x flow control mode.

Set the AP multicast to 238.255.255.255

5. An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch.

Which configuration is required in the network?

Platinum QoS configured on the WLAN

WMM set to required on the WLAN

mls qos trust dscp configured on the controller switch port

mls qos trust cos configured on the controller switch port

6. A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber. QoS is being applied only as best effort.

What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?

Configure an AVC profile for the Jabber traffic and apply it to the WLA

Configure the WLAN to broadcast on 5 GHz radios only and allow Jabber users to conned.

Enable Cisco Centralized Key Management on the WLAN so that the Jabber-enabled devices will connect.

Configure QoS on the mobile devices that have Jabber installed.

7. An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.

Which configuration is needed to complete this task?

Change the WLAN reserved bandwidth for WebEx

Create an AVC profile for WebEx

Create an ACL for WebEx

Change the AVC application WebEx-app-sharing to mark

8. Refer to the exhibit.

An engineer is creating an ACL to restrict some traffic to the WLC CPU.

Which selection must be made from the direction drop-down list?

It must be Inbound because traffic goes to the WL

Packet direction has no significance; it is always Any.

It must be Outbound because it is traffic that is generated from the WL

To have the complete list of options, the CPU ACL must be created only by the CL

9. An engineer configures the wireless LAN controller to perform 802.1x user authentication.

Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

pre-authentication

local EAP

authentication caching

Cisco Centralized Key Management

10. An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted.

Which cause of this issue is true?

Fallback is enabled

Fallback is disabled

DNS query is disabled

DNS query is enabled

Page 2 of 3

11. Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

Cisco Hyperlocation Module

Wireless Intrusion Prevention System

Cisco Connected Mobile Experiences

Cisco Mobility Services Engine

12. A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors.

When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

13. A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded.

What is causing the issue?

There is an IEEE invalid 802.1X authentication policy on the authentication server.

The user Active Directory account is locked out after several failed attempts.

There is an invalid 802.1X authentication policy on the authenticator.

The laptop has not received a valid IP address from the wireless controller.

14. A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

CleanAir reports on Cisco Prime Infrastructure

Performance reports on Cisco Prime Infrastructure

Interference Devices reports on Cisco Wireless LAN Controller

Air Quality reports on Cisco Wireless LAN Controller

15. Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

HTTPS

Telnet

SOAP

SSH

NMSP

16. A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments.

Which solution must the engineer choose?

Configure a second WLC to support half of the APs in the deployment.

Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.

Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.

Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.

17. An engineer must track guest traffic flow using the WLAN infrastructure.

Which Cisco CMX feature must be configured and used to accomplish this tracking?

analytics

connect and engage

presence

detect and locate.

18. What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

3 hours

24 hours

3 days

7 days

19. An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC.

Which feature meets these requirements?

learn client IP address

FlexConnect local authentication

VLAN-based central switching

central DHCP processing

20. An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source.

Which type of multicast routing should be implemented?

Protocol Independent Multicast Dense Mode

Source Specific Multicast

Multicast Source Discovery Protocol

Protocol Independent Multicast Sparse Mode

Page 3 of 3

21. During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

WPA key

session key

encryption key

shared-secret key

22. What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

EAP-PEAP with 802.1x port authentication

EAP-TLS with 802.1x port authentication

EAP-FAST with CAPWAP DTLS + port authentication

EAP-FAST with CAPWAP DTLS

23. An engineer must create an account to log in to the CLI of an access point for troubleshooting.

Which configuration on the WLC will accomplish this?

ReadWrite User Access Mode

Global Configuration Enable Password

SNMP V3 User

Allow New Telnet Sessions

24. An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails.

Which two statements about the root of the issue are true? (Choose two.)

The Cisco CMX instances are installed in the same subnet.

The types of the primary and secondary Cisco CMX installations differ.

The delay between the primary and secondary instance is 200 ms.

The sizes of the primary and secondary Cisco CMX installations differ.

Both Cisco CMX installations are virtual.

25. An IT department receives a report of a stolen laptop and has information on the MAC address of the laptop.

Which two settings must be set on the wireless infrastructure to determine its location? (Choose two.)

Location History for Visitors must be enabled on the MS

Location History for Clients must be enabled on the MS

Location History for Rogue APs & Rogue Clients must be enabled on the MS

Client location tracking must be enabled on the MS

Tracking optimization must be enabled on the WL

26. A company is collecting the requirements for an on-premises event. During the event, a wireless client connected to a dedicated WLAN will run a video application that will need to average 300000000 bits per second to function properly.

What is the QoS marketing that needs to be applied to that WLAN?

Bronze

Platinum

Silver

Gold

27. What is an important consideration when implementing a dual SSID design for BYOD?

After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.

If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.

SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.

One SSID is for provisioning and the other SSID is for gaining access to the network. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.

28. A wireless engineer needs to implement client tracking.

Which method does the angle of

arrival use to determine the location of a wireless device?

received signal strength

triangulation

time distance of arrival

angle of incidence

29. Which devices can be tracked with the Cisco Context Aware Services?

wired and wireless devices

wireless devices

wired devices

Cisco certified wireless devices

30. An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have.

Which protocol do you recommend to achieve these goals?

network policy server

RADIUS

TACACS+

LDAP