Labour Day Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 2493360325

Good News !!! 300-430 Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI) is now Stable and With Pass Result

300-430 Practice Exam Questions and Answers

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Last Update 1 day ago
Total Questions : 216

300-430 is stable now with all latest exam questions are added 1 day ago. Just download our Full package and start your journey with Cisco Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI) certification. All these Cisco 300-430 practice exam questions are real and verified by our Experts in the related industry fields.

300-430 PDF

300-430 PDF (Printable)
$53.2
$132.99

300-430 Testing Engine

300-430 PDF (Printable)
$58
$144.99

300-430 PDF + Testing Engine

300-430 PDF (Printable)
$72.8
$181.99
Question # 1

An administrator receives reports of many interferers in the wireless network and wants to get the location of these interferers from the maps in Cisco Prime Infrastructure.

When looking at the floor plans/maps, the administrator does not see any interferers, but can see all wireless clients located successfully.

Which two statements define the cause of the issue? (Choose two.)

Options:

A.  

MSE is not added to Cisco Prime infrastructure and synchronized.

B.  

Interferer tracking is not enabled on the MS

E.  

C.  

SNMP between Cisco Prime Infrastructure and the WLC is failing.

D.  

Context Aware Service tracking limit has already been reached with tracking other elements.

E.  

NSMP communication is inactive with the WL

C.  

Discussion 0
Question # 2

What is the difference between PIM sparse mode and PIM dense mode?

Options:

A.  

Sparse mode supports only one switch. Dense mode supports multiswitch networks.

B.  

Sparse mode floods. Dense mode uses distribution trees.

C.  

Sparse mode uses distribution trees. Dense mode floods.

D.  

Sparse mode supports multiswitch networks. Dense mode supports only one switch.

Discussion 0
Question # 3

An engineer has configured Media Stream on the WLC and must guarantee at least 2 Mbps stream per user. Which RRC template should the engineer use?

Options:

A.  

coarse

B.  

medium

C.  

low

D.  

ordinary

Discussion 0
Question # 4

Refer to the exhibit. Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)

Options:

A.  

TSPEC

B.  

SIFS

C.  

802.11e

D.  

WMM

E.  

APSD

Discussion 0
Question # 5

Which configuration is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one controller to another?

Options:

A.  

Enable IGMPv3 on the central Layer 3 switch.

B.  

Enable IGMP snooping on the WL

C.  

C.  

Enable multicast mode on the WL

C.  

D.  

Create multicast groups on the central Layer 3 switch.

Discussion 0
Question # 6

An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN. Which output is produced when the Adaptive wIPS Top 10 AP report is run?

Options:

A.  

last 10 wIPS events from monitor mode APs

B.  

last 10 wIPS events from sniffer mode APs

C.  

last of 10 sniffer mode APs with the most wIPS events

D.  

last of 10 monitor mode APs with the most wIPS events

Discussion 0
Question # 7

WPA2 Enterprise with 802.1X is being used for clients to authenticate to a wireless network through a Cisco ISE server. For security reasons, the network engineer wants to ensure that only PEAP authentication is used. The engineer sent instructions to clients on how to configure the supplicants, but the ISE logs still show users authenticating using EAP-FAST. Which action ensures that access to the network is restricted for these users unless the correct authentication mechanism is configured?

Options:

A.  

Enable AAA override on the SSID, gather the usernames of these users, and disable the RADIUS accounts until the devices are correctly configured.

B.  

Enable AAA override on the SSID and configure an ACL on the WLC that allows access to users with IP addresses from a specific subnet.

C.  

Enable AAA override on the SSID and configure an access policy in Cisco ISE that denies access to the list of MACs that have used EAP-FAST.

D.  

Enable AAA override on the SSID and configure an access policy in Cisco ISE that allows access only when the EAP authentication method is PEAP.

Discussion 0
Question # 8

An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?

Options:

A.  

split tunneling

B.  

SE-connect

C.  

FlexConnect

D.  

AP failover priority

Discussion 0
Question # 9

The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

Options:

A.  

CSV

B.  

PDF

C.  

XLS

D.  

DOC

E.  

plain text

Discussion 0
Question # 10

On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?

Options:

A.  

ISE NAC is enabled

B.  

802.11r Fast Transition is enabled

C.  

Client Exclusion is enabled

D.  

FlexConnect Local Auth is disabled

Discussion 0
Question # 11

After looking in the logs, an engineer notices that RRM keeps changing the channels for non-IEEE 802.11 interferers. After surveying the area, it has been decided that RRM should not change the channel. Which feature must be enabled to ignore non-802.11 interference?

Options:

A.  

Avoid Cisco AP Load

B.  

Avoid Non-802.11 Noise

C.  

Avoid Persistent Non-WiFi Interference

D.  

Avoid Foreign AP Interference

Discussion 0
Question # 12

What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

Options:

A.  

3 hours

B.  

24 hours

C.  

3 days

D.  

7 days

Discussion 0
Question # 13

What must be configured on ISE version 2.1 BYOD when using Single SSID?

Options:

A.  

open authentication

B.  

802.1x

C.  

no authentication

D.  

WPA2

Discussion 0
Question # 14

In a Cisco WLAN deployment, it is required that all Aps from branch1 remain operational even if the control plane CAPWAP tunnel is down because of a WAN failure to headquarters. Which operational mode must be configured on the APs?

Options:

A.  

disconnected

B.  

standalone

C.  

lightweight

D.  

connected

Discussion 0
Question # 15

You enter the command or a Cisco Catalyst 3850 Series Switch that runs Cisco ISO X

E.  

What does the command do?

Options:

A.  

It defines the user identity or the device identity to be validated by the RADIUS server.

B.  

It captures information on the length of the authorized session, as well as the bandwidth usage of the client.

C.  

It defines the RADIUS server used to track which sessions are still active.

D.  

It defines the level of access of the user or the device.

Discussion 0
Question # 16

A company is deploying wireless PCs on forklifts within its new 10,000-square-foot(3048-square-rneter) facility.

The clients are configured for PEAP-MS-CHAPv2 with WPA TKIP. Users report that applications frequently drop when the clients roam between access points on the floor. A professional site survey was completed.

Which configuration change is recommended to improve the speed of client roaming?

Options:

A.  

EAP-FAST

B.  

EAP-TLS

C.  

WPAAES

D.  

WPA2AES

Discussion 0
Question # 17

Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

Options:

A.  

1800s

B.  

3600e

C.  

3800s

D.  

4800i

Discussion 0
Question # 18

A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the network readiness is pending. Which two configurations must be performed on the firewall to allow the AP to join the controller? (Choose two.)

Options:

A.  

Block UDP ports 1812 and 1813 on the firewall.

B.  

Enable NAT Address on the 5520 with an Internet-routable IP address.

C.  

Configure a static IP on the OEAP 1810.

D.  

Allow UDP ports 5246 and UDP port 5247 on the firewall.

E.  

Allow UDP ports 12222 and 12223 on the firewall.

Discussion 0
Question # 19

Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?

Options:

A.  

RF Profile

B.  

Flex Profile

C.  

Policy Profile

D.  

AP Join Profile

Discussion 0
Question # 20

Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure to track the location of clients/rogues on maps? (Choose two.)

Options:

A.  

Synchronize access points with the MS

E.  

B.  

Add the MSE to Cisco Prime Infrastructure using the CLI credentials.

C.  

Add the MSE to Cisco Prime Infrastructure using the Cisco Prime Infrastructure communication credentials.

D.  

Apply a valid license for Wireless Intrusion Prevention System.

E.  

Apply a valid license for location tracking.

Discussion 0
Question # 21

Refer to the exhibit.

Question # 21

An administrator notices slower location updates from the controller to Cisco CMX. Which command must be configured to get an update every 5 seconds for rogues?

Options:

A.  

config location notification interval rssi rogues 5

B.  

config nmsp notification interval rssi rogues 5

C.  

config subscription notification interval rssi rogues 5

D.  

config cmx notification interval rssi rogues 5

Discussion 0
Question # 22

The security policy mandates that only controller web management traffic is allowed from the IT subnet. In testing, an engineer is trying to connect to a WLAN with Web Authentication for guest users, but the page is timing out on the wireless client browser. What is the cause of the issue?

Options:

A.  

The implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.

B.  

Web Authentication Redirect is not supported with CPU ACLs.

C.  

The DNS server that is configured on the controller is incorrect.

D.  

Web Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.

Discussion 0
Question # 23

A wireless engineer has performed a Wireshark ccapture on an 802.1x authentication process to troubleshoot a connectivity issue.

Which two types of packet does the EAP contain? (Choose two.)

Options:

A.  

EAP complete

B.  

EAP response

C.  

EAP failure

D.  

EAP request

E.  

EAP reply

Discussion 0
Question # 24

An engineer is implementing profiling for BYOD devices using Cisco IS

E.  

When using a distributed model, which persona must the engineer configure with the profiling service?

Options:

A.  

Device Admin Node

B.  

Primary Admin Node

C.  

Monitor Node

D.  

Policy Services Node

Discussion 0
Question # 25

What must be configured on the Global Configuration page of the WLC for an AP to use 802.1x to authenticate to the wired infrastructure?

Options:

A.  

local access point credentials

B.  

RADIUS shared secret

C.  

TACACS server IP address

D.  

supplicant credentials

Discussion 0
Question # 26

Which EAP method can an AP use to authenticate to the wired network?

Options:

A.  

EAP-GTC

B.  

EAP-MD5

C.  

EAP-TLS

D.  

EAP-FAST

Discussion 0
Question # 27

A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

Options:

A.  

There is an IEEE invalid 802.1X authentication policy on the authentication server.

B.  

The user Active Directory account is locked out after several failed attempts.

C.  

There is an invalid 802.1X authentication policy on the authenticator.

D.  

The laptop has not received a valid IP address from the wireless controller.

Discussion 0
Question # 28

A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WL

C.  

Which configuration should be used to accomplish this goal?

Options:

A.  

FlexConnect mode with central switching enabled

B.  

FlexConnect mode with central authentication

C.  

FlexConnect mode with OfficeExtend enabled

D.  

FlexConnect mode with local authentication

Discussion 0
Question # 29

An engineer is configuring multicast for two WLCs. The controllers are in different physical locations and each handles around 500 wireless clients. How should the CAPWAP multicast group address be assigned during configuration?

Options:

A.  

Each WLC must be assigned a unique multicast group address.

B.  

Each WLC management address must be in the same multicast group.

C.  

Both WLCs must be assigned the same multicast group address.

D.  

Each WLC management address must be in a different multicast group.

Discussion 0
Question # 30

A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers. Which protocol must be allowed to reach the MSE from the controllers?

Options:

A.  

SOAP/XML

B.  

NMSP

C.  

CAPWAP

D.  

SNMP

Discussion 0
Question # 31

An engineer has configured passive fallback mode for RADIUS with default timer settings. What will occur when the primary RADIUS fails then recovers?

Options:

A.  

RADIUS requests will be sent to the secondary RADIUS server until the secondary fails to respond.

B.  

The controller will immediately revert back after it receives a RADIUS probe from the primary server.

C.  

After the inactive time expires the controller will send RADIUS to the primary.

D.  

Once RADIUS probe messages determine the primary controller is active the controller will revert back to the primary RADIUS.

Discussion 0
Question # 32

Refer to the exhibit.

Question # 32

An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop- down list?

Options:

A.  

It must be Inbound because traffic goes to the WL

C.  

B.  

Packet direction has no significance; it is always Any.

C.  

It must be Outbound because it is traffic that is generated from the WL

C.  

D.  

To have the complete list of options, the CPU ACL must be created only by the CLI.

Discussion 0
Get 300-430 dumps and pass your exam in 24 hours!

Free Exams Sample Questions