[Sep-2024] 100% Actual 300-430 dumps Q&As with Explanations Verified & Correct Answers [Q130-Q151]

Q130. Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?

The Cisco CMX server receives NetFlow data from the WLC.

The Cisco CMX server receives NMSP traffic from the WLC.

The Cisco CMX server receives SNMP traffic from the WLC.

The Cisco CMX server receives Angle-of-Arrival data from the WLC.

Q131. Which two configurations are applied on the WLC to enable multicast, check multicast stream subscriptions, and stream content only to subscribed clients? (Choose two)

Set the AP multicast to 238.255.255.255

Set the IGMP timeout to 180 seconds

Enable 802.3x flow control mode.

Enable broadcast forwarding

Enable IGMP snooping

Q132. Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

mDNS uses only UDP port 5436 as a destination port.

mDNS cannot use UDP port 5353 as the destination port.

mDNS is not supported on FlexConnect APs with a locally switched WLAN.

Controller software must be newer than 7.0.6+.

mDNS is not supported over IPv6.

Q133. Refer to the exhibit.

You have a user who has a device that publishes its own service. What is the user doing from the My Devices Portal?

adding mapping between the MAC address and mDNS

configuring the mDNS service for a device

adding the device to the Cisco ISE device database

assigning exclusive access to a device or a user ID

Q134. A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?

received signal strength

triangulation

time distance of arrival

angle of incidence

Q135. Which QoS level is recommended for guest services?

gold

bronze

platinum

silver

Q136. Refer to the exhibit. You enter the command on a Cisco Catalyst 3850 Series Switch that runs Cisco ISO XE. What does the command do?

It defines the user identity or the device identity to be validated by the RADIUS server.

It captures information on the length of the authorized session, as well as the bandwidth usage of the client.

It defines the RADIUS server used to track which sessions are still active.

It defines the level of access of the user or the device.

Q137. An engineer must implement intrusion protection the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which Ap mode and submode must be implemented?

Ap mode: local, Ap submode: WIPS

Ap mode: monitor, Ap submode: WIPS

Ap mode: monitor, Ap submode: none

Ap mode: local, Ap submode: none

Q138. Refer to the exhibit.

An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

Configure the certificate, WLAN, and radio interface on WGB.

Configure the certificate on the WLC.

Configure WLAN to authenticate using ISE.

Configure the access point with the root certificate from ISE.

Configure WGB as a network device in ISE.

Configure a policy on ISE to allow devices to connect that validate the certificate.

Q139. A customer is deploying local web authentication. Which software application must be implemented on Cisco ISE to utilize as a directory service?

Solaris Directory Service

LDAP

SAML

Novell eDirectory

Q140. An engineer supports the network infrastructure within a football stadium, and there is a new requirement to send media over wireless. Multicast direct must be used to optimize multicast communication over wireless. Which multicast address must be added in the media stream configuration to meet this requirement?

WLC multicast address

video server multicast destination address

AP multicast address group

RP multicast address

Q141. An engineer has configured Media Stream on the WLC and must guarantee at least 2 Mbps stream per user.
Which RRC template should the engineer use?

medium

coarse

ordinary

low

Q142. Refer to the exhibit.

An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

Configure the certificate, WLAN, and radio interface on WGB.

Configure the certificate on the WLC.

Configure WLAN to authenticate using ISE.

Configure the access point with the root certificate from ISE.

Configure WGB as a network device in ISE.

Configure a policy on ISE to allow devices to connect that validate the certificate.

Q143. A corporation has recently implemented a BYOD policy at their HQ.
Which two risks should the security director be concerned about? (Choose two.)

network analyzers

malware

lost and stolen devices

keyloggers

unauthorized users

Q144. You are configuring the social login for a guest network. Which three options are configurable social connectors in Cisco CMX Visitor Connect? (Chose three)

Linkedn

Medium

Google+

Facebook

Myspace

Q145. The security policy mandates that only controller web management traffic is allowed from the IT subnet. In testing, an engineer is trying to connect to a WLAN with Web Authentication for guest users, but the page is timing out on the wireless client browser.
What is the cause of this issue?

Web Authentication Redirect is supported only with Internet Explorer, and the client is using Google Chrome.

The DNS server that is configured on the controller is incorrect

Web Authentication Redirect is not supported with CPUACLS.

The implemented CPU ACL on the controller is blocking HTTP/HTTPS traffic from the guest clients.

Q146. What is the difference between PIM sparse mode and PIM dense mode?

Sparse mode supports only one switch. Dense mode supports multiswitch networks.

Sparse mode floods. Dense mode uses distribution trees.

Sparse mode uses distribution trees. Dense mode floods.

Sparse mode supports multiswitch networks. Dense mode supports only one switch.

Q147. On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?

ISE NAC is enabled

802.11r Fast Transition is enabled

Client Exclusion is enabled

FlexConnect Local Auth is disabled

Q148. Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario?
(Choose three.)

authentication-local/switch-local

WPA2 personal

authentication-central/switch-central

lightweight mode

standalone mode

WEB authentication

Q149. Refer to the exhibit.

A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that they are unable to connect. During troubleshooting, the engineer notices that the authentication requests are being dropped. Which action will resolve the issue?