300-430試験無料問題集（281題）「Cisco Implementing Cisco Enterprise Wireless Networks 認定」

出題：1

What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

A. EAP-FAST with CAPWAP DTLS

B. EAP-PEAP with 802.1x port authentication

C. EAP-TLS with 802.1x port authentication

D. EAP-FAST with CAPWAP DTLS + port authentication

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A network engineer is deploying 8865 IP phones with wireless clients connected to them. In order to apply the appropriate QoS, the IP voice traffic needs to be distinguished from client data traffic.
Which switch configuration feature must be enabled?

A. Voice VLAN

B. QBSS

C. QoS routing

D. WME

正解：A 解答を投票する

出題：3

A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the issue?

A. controller IGMP snooping

B. unicast AP multicast mode

C. multicast AP multicast mode

D. broadcast forwarding

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Refer to the exhibit. An enterprise uses 802.11 b/g APs and must track the RFID tags within the network. How many channels must be used to maximize the optimization of the monitoring and tracking of the tags?

A. 11

B. 1

C. 4

D. 3

正解：C 解答を投票する

出題：5

CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available?
(Choose two.)

A. Allow HTTP traffic only before authentication and block all the traffic.

B. Allow all the traffic before authentication and intercept HTTPS only.

C. Allow SNMP traffic only before authentication and block all the traffic.

D. Allow all the traffic before authentication and intercept HTTP only.

E. Allow HTTPs traffic only before authentication and block all other traffic.

正解：D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An engineer is setting up a new unique NAD on a Cisco ISE.
Which two parameters must be configured? (Choose two.)

A. device password

B. device IP address

C. RADIUS shared secret

D. device hostname

E. RADIUS fallback

正解：B,C 解答を投票する

出題：7

A wireless engineer must configure access control on a WLC using a TACAS+ server for a company that is implementing centralized authentication on network devices.
Which role must be configured under the shell profile on the TACAS+ server for a user with ready-only permissions?

A. ADMIN

B. READ

C. MANAGEMENT

D. MONITOR

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

After receiving an alert regarding a rogue AP, a network engineer logs into Cisco Prime and looks at the floor map where the AP that detected the rogue is located.
The map is synchronized with a mobility services engine that determines the rogue device is actually inside the campus.
The engineer determines the rogue to be a security threat and decides to stop it from broadcasting inside the enterprise wireless network.
What is the fastest way to disable the rogue?

A. Go to the location the rogue device is indicated to be and disable the power.

B. Update the status of the rogue in Cisco Prime to contained.

C. Create an SSID on WLAN controller resembling the SSID of the rogue to spoof it and disable clients from connecting to it.

D. Classify the rogue as malicious in Cisco Prime.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

An engineer has configured passive fallback mode for RADIUS with default timer settings. What will occur when the primary RADIUS fails then recovers?

A. The controller will immediately revert back after it receives a RADIUS probe from the primary server.

B. RADIUS requests will be sent to the secondary RADIUS server until the secondary fails to respond.

C. Once RADIUS probe messages determine the primary controller is active the controller will revert back to the primary RADIUS.

D. After the inactive time expires the controller will send RADIUS to the primary.

正解：D 解答を投票する

出題：10

A company is deploying wireless PCs on forklifts within its new 10,000-square-foot (3048-square- rneter) facility.
The clients are configured for PEAP-MS-CHAPv2 with WPA TKIP. Users report that applications frequently drop when the clients roam between access points on the floor.
A professional site survey was completed.
Which configuration change is recommended to improve the speed of client roaming?

A. WPA2 AES

B. EAP-TLS

C. EAP-FAST

D. WPA AES

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

A municipality customer uses a Cisco 5520 Series Wireless Controller for the wireless network.
The customer intends to move the depot of its stores from using legacy bespoke voice-over-Wi-Fi handsets to a VoIP software package running on 5 GHz-capable laptops, tablets, and smartphones. Bluetooth headsets will be used for any voice communication on any data device.
Assuming that a suitable RF site survey for 5 GHz has already been carried out, which two configuration settings ensure the best possible voice experience? (Choose two.)

A. Turn off the 2.4 GHz radios on all APs where the voice application is used.

B. Configure AVC on the controller to prioritize voice over other applications' traffic on the same device.

C. Remark all traffic coming from the new voice-capable devices with DSCP 46 (EF) at the AP.

D. Assign the Platinum QoS profile to the SSID carrying the new-style voice traffic.

E. Create mobility groups and include all the APs in the high-density areas.

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing.
Which configuration within the network device configuration should be verified?

A. SNMP RO community

B. device interface credentials

C. shared secret

D. device ID

正解：C 解答を投票する

出題：13

After the rogue reports from Cisco Prime Infrastructure are reviewed, it is determined that the automatic rogue mitigation is not working as planned. Which security measure must be taken to help prevent rogue APs from being plugged into the network?

A. Apply a different version of spanning tree.

B. Add a MAC filter to the switch.

C. Apply port security to the switch.

D. Apply an IP access list to ports.

正解：C 解答を投票する

出題：14

A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates instead of
802.11n data rates. To what must the WMM policy of the WLAN be set to accomplish this task?

A. disabled

B. mandatory

C. required

D. allowed

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

An engineer has implemented 802.1x authentication on the wireless network utilizing the internal database of a RADIUS server. Some clients reported that they are unable to connect. After troubleshooting, it is found that PEAP authentication is failing. A debug showed the server is sending an Access-Reject message. Which action must be taken to resolve authentication?

A. Replace the client certificates from the CA with the server certificate.

B. Use the user password that is configured on the server.

C. Disable the server certificate to be validated on the client.

D. Update the client certificate to match the user account.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

300-430試験無料問題集「Cisco Implementing Cisco Enterprise Wireless Networks 認定」