CCNP Enterprise ENWLSI 300-430 Free Questions

1. A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments.

Which solution must the engineer choose?

2. A corporation has recently implemented a BYOD policy at their HQ.

Which two risks should the security director be concerned about? (Choose two.)

3. Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

4. An engineer configures the wireless LAN controller to perform 802.1x user authentication.

Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

5. Which QoS level is recommended for guest services?

6. Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?

7. Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)

8. An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network.

Which element do you configure in a rule?

9. An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.

Which configuration is needed to complete this task?

10. Which three properties are used for client profiling of wireless clients? (Choose three.)

11. CORRECT TEXT

After looking in the logs, an engineer notices that RRM keeps changing the channels for non-IEEE 802. 11 interferers. After surveying the area, it has been decided that RRM should not change the channel.

Which feature must be enabled to ignore non-802.11 interference?

12. The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal.

What must be configured to permit only admins to have access?

13. An engineer must implement rogue containment for an SSID.

What is the maximum number of APs that should be used for containment?

14. An engineer has successfully implemented 10 active RFID tags in an office environment. The tags are not visible when the location accuracy is tested on the Cisco CMX Detect and Locate window.

Which setting on Cisco CMX allows the engineer to view the tags?

15. Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It

shows UDP traffic from the WLC coming into the server.

What does the capture prove?

16. A wireless network has been implemented to enable multicast video to be streamed reliably over the wireless link to the wireless to the wireless users. After a client reports that the video is unable to stream the administrator determines that the client is connecting a data rate of 12 Mbps and is trying to stream to a void multicast address on the network.

Which two actions must be applied? (Choose two.)

17. Which two configurations are applied on the WLC to enable multicast, check multicast stream subscriptions, and stream content only to subscribed clients? (Choose two)

18. A network engineer has been hired to perform a new MSE implementation on an existing network. The MSE must be installed in a different network than the Cisco WLC.

Which configuration allows the devices to communicate over NMSP?

19. A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC.

Which configuration should be used to accomplish this goal?

20. An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs.

Which two Layer 2 security options are supported in this environment? (Choose two.)

21. An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch.

Which configuration is required in the network?

22. A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber. QoS is being applied only as best effort.

What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?

23. An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.

Which configuration is needed to complete this task?

24. Refer to the exhibit.

An engineer is creating an ACL to restrict some traffic to the WLC CPU.

Which selection must be made from the direction drop-down list?

25. What is configured to use more than one port on the OEAP to extend the wired network’s?

26. What must be configured on the Global Configuration page of the WLC for an access point to use 802.1x to authenticate to the wired infrastructure?

27. Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?

A)

B)

C)

D)

28. An engineer configures the wireless LAN controller to perform 802.1x user authentication.

Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

29. An engineer just added anew MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, which is located behind a firewall in a DMZ. It is noticed that NMSP messages are failing between the two devices.

Which traffic must be allowed on the firewall to ensure that the MSE and WLC can communicate using NMSP?

30. A customer wants to Aps in the CEO’s office to have different usernames and passwords for administrative support than the other APs deployed through the facility.

Which feature

must be enabled on the WLC and Aps to achieve this goal?

31. An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted.

Which cause of this issue is true?

32. Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

33. What must be configured on ISE version 2.1 BYOD when using Single SSID?

34. An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN.

Which output is produced when the Adaptive wIPS Top 10 AP report is run”

35. A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors.

When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

36. An engineer must implement intrusion protection the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult.

Which Ap mode and submode must be implemented?

37. A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded.

What is causing the issue?

38. An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?

39. Refer to the exhibit.

A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that they are unable to connect. During troubleshooting, the engineer notices that the authentication requests are being dropped.

Which action will resolve the issue?

40. A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

41. Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

42. A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments.

Which solution must the engineer choose?

43. An engineer must track guest traffic flow using the WLAN infrastructure.

Which Cisco CMX feature must be configured and used to accomplish this tracking?

44. What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

45. An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC.

Which feature meets these requirements?

46. An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source.

Which type of multicast routing should be implemented?

47. During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

48. What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

49. An engineer must create an account to log in to the CLI of an access point for troubleshooting.

Which configuration on the WLC will accomplish this?

50. A corporation has a wireless network where all access points are configured in FlexConnect. The WLC has a Data WLAN and a VoWiFi WLAN implemented where centrally-switched is configured for the APs.

Which QoS configuration must be implemented for the wireless packets to maintain the marking across the wired and wireless network?

51. CORRECT TEXT

After looking in the logs, an engineer notices that RRM keeps changing the channels for non-IEEE 802. 11 interferers. After surveying the area, it has been decided that RRM should not change the channel.

Which feature must be enabled to ignore non-802.11 interference?

52. The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal.

What must be configured to permit only admins to have access?

53. An engineer must implement rogue containment for an SSID.

What is the maximum number of APs that should be used for containment?

54. An engineer has successfully implemented 10 active RFID tags in an office environment. The tags are not visible when the location accuracy is tested on the Cisco CMX Detect and Locate window.

Which setting on Cisco CMX allows the engineer to view the tags?

55. Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It

shows UDP traffic from the WLC coming into the server.

What does the capture prove?

56. A wireless network has been implemented to enable multicast video to be streamed reliably over the wireless link to the wireless to the wireless users. After a client reports that the video is unable to stream the administrator determines that the client is connecting a data rate of 12 Mbps and is trying to stream to a void multicast address on the network.

Which two actions must be applied? (Choose two.)

57. Which two configurations are applied on the WLC to enable multicast, check multicast stream subscriptions, and stream content only to subscribed clients? (Choose two)

58. A network engineer has been hired to perform a new MSE implementation on an existing network. The MSE must be installed in a different network than the Cisco WLC.

Which configuration allows the devices to communicate over NMSP?

59. A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC.

Which configuration should be used to accomplish this goal?

60. An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs.

Which two Layer 2 security options are supported in this environment? (Choose two.)

61. An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch.

Which configuration is required in the network?

62. A company has a single WLAN configured for 802.1x authentication with the QoS set to Silver. This WLAN supports all corporate and BYOD access. A decision has been made to allow users to install Cisco Jabber on their personal mobile devices. Users report poor voice quality when using Jabber. QoS is being applied only as best effort.

What must be configured to ensure that the WLAN remains on the Silver class and to ensure Platinum class for Jabber?

63. An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN.

Which configuration is needed to complete this task?

64. Refer to the exhibit.

An engineer is creating an ACL to restrict some traffic to the WLC CPU.

Which selection must be made from the direction drop-down list?

65. What is configured to use more than one port on the OEAP to extend the wired network’s?

66. What must be configured on the Global Configuration page of the WLC for an access point to use 802.1x to authenticate to the wired infrastructure?

67. Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?

A)

B)

C)

D)

68. An engineer configures the wireless LAN controller to perform 802.1x user authentication.

Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

69. An engineer just added anew MSE to Cisco Prime Infrastructure and wants to synchronize the MSE with the Cisco 5520 WLC, which is located behind a firewall in a DMZ. It is noticed that NMSP messages are failing between the two devices.

Which traffic must be allowed on the firewall to ensure that the MSE and WLC can communicate using NMSP?

70. A customer wants to Aps in the CEO’s office to have different usernames and passwords for administrative support than the other APs deployed through the facility.

Which feature

must be enabled on the WLC and Aps to achieve this goal?

71. An engineer configured a Cisco AireOS controller with two TACACS+ servers. The engineer notices that when the primary TACACS+ server fails, the WLC starts using the secondary server as expected, but the WLC does not use the primary server again until the secondary server fails or the controller is rebooted.

Which cause of this issue is true?

72. Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

73. What must be configured on ISE version 2.1 BYOD when using Single SSID?

74. An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN.

Which output is produced when the Adaptive wIPS Top 10 AP report is run”

75. A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors.

When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

76. An engineer must implement intrusion protection the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult.

Which Ap mode and submode must be implemented?

77. A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded.

What is causing the issue?

78. An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?

79. Refer to the exhibit.

A wireless engineer has integrated the wireless network with a RADIUS server. Although the configuration on the RADIUS is correct, users are reporting that they are unable to connect. During troubleshooting, the engineer notices that the authentication requests are being dropped.

Which action will resolve the issue?

80. A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

81. Which two protocols are used to communicate between the Cisco MSE and the Cisco Prime Infrastructure network management software? (Choose two.)

82. A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32 VLANs for 300 employees in different departments.

Which solution must the engineer choose?

83. An engineer must track guest traffic flow using the WLAN infrastructure.

Which Cisco CMX feature must be configured and used to accomplish this tracking?

84. What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

85. An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC.

Which feature meets these requirements?

86. An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source.

Which type of multicast routing should be implemented?

87. During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

88. What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

89. An engineer must create an account to log in to the CLI of an access point for troubleshooting.

Which configuration on the WLC will accomplish this?

90. A corporation has a wireless network where all access points are configured in FlexConnect. The WLC has a Data WLAN and a VoWiFi WLAN implemented where centrally-switched is configured for the APs.

Which QoS configuration must be implemented for the wireless packets to maintain the marking across the wired and wireless network?