300-430: Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI) Part 1
Question #: 1
Topic #: 1
On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?
A. ISE NAC is enabled
B. 802.11r Fast Transition is enabled
C. Client Exclusion is enabled
D. FlexConnect Local Auth is disabled
Selected Answer: D
Question #: 2
Topic #: 1
An engineer must implement intrusion protection on the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which AP mode and submode must be implemented?
A. AP mode: local, AP submode: none
B. AP mode: monitor, AP submode: WIPS
C. AP mode: monitor, AP submode: none
D. AP mode: local, AP submode: WIPS
Selected Answer: A
Question #: 3
Topic #: 1
An engineer must implement intrusion protection on the WLAN. The AP coverage is adequate and on-channel attacks are the primary concern. The building is historic, which makes adding APs difficult. Which AP mode and submode must be implemented?
A. AP mode: local, AP submode: none
B. AP mode: monitor, AP submode: WIPS
C. AP mode: monitor, AP submode: none
D. AP mode: local, AP submode: WIPS
Selected Answer: A
Question #: 4
Topic #: 1
An engineer is implementing a FlexConnect group for access points at a remote location using local switching but central DHCP. Which client feature becomes available only if this configuration is changed?
A. multicast
B. static IP
C. fast roaming
D. mDNS
Selected Answer: B
Question #: 5
Topic #: 1
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart
AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?
A. 1
B. 2
C. 5
D. 7
Selected Answer: D
Question #: 6
Topic #: 1
Where is a Cisco OEAP enabled on a Cisco Catalyst 9800 Series Wireless Controller?
A. RF Profile
B. Flex Profile
C. Policy Profile
D. AP Join Profile
Selected Answer: B
Question #: 7
Topic #: 1
When configuring a Cisco WLC, which CLI command adds a VLAN with VLAN ID of 30 to a FlexConnect group named BranchA-FCG?
A. config flexconnect BranchA-FCG vlan 30 add
B. config flexconnect BranchA-FCG vlan add 30
C. config flexconnect group BranchA-FCG vlan 30 add
D. config flexconnect group BranchA-FCG vlan add 30
Selected Answer: D
Question #: 8
Topic #: 1
Refer to the exhibit. A customer has implemented Cisco FlexConnect deployments with different WLANs around the globe and is opening a new branch in a different location. The engineer’s task is to execute all the wireless configuration and to suggest how to configure the switch ports for new APs. Which configuration must the switching team use on the switch port?
A. trunk mode
B. access mode
C. single VLAN
D. multiple VLAN
Selected Answer: A
Question #: 9
Topic #: 1
A corporation is spread across different countries and uses MPLS to connect the offices. The senior management wants to utilize the wireless network for all the employees. To ensure strong connectivity and minimize delays, an engineer needs to control the amount of traffic that is traversing between the APs and the central WLC. Which configuration should be used to accomplish this goal?
A. FlexConnect mode with central switching enabled
B. FlexConnect mode with central authentication
C. FlexConnect mode with OfficeExtend enabled
D. FlexConnect mode with local authentication
Selected Answer: D
Question #: 10
Topic #: 1
An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works remotely. What is configured on the Cisco WLC to allow the user to print a printer on his home network?
A. split tunneling
B. SE-connect
C. FlexConnect
D. AP failover priority
Selected Answer: A
Question #: 11
Topic #: 1
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)
A. Static WEP + 802.1X
B. WPA+WPA2
C. Static WEP
D. CKIP
E. 802.1X
Selected Answer: BE
Question #: 12
Topic #: 1
An organization is supporting remote workers in different locations. In order to provide wireless network connectivity and services, OfficeExtend has been implemented. The wireless connectivity is working, but users report losing connectivity to their local network printers. Which solution must be used to address this issue?
A. OEAP gateway override
B. OEAP split tunnel
C. WLAN static IP tunneling
D. FlexConnect local switching
Selected Answer: B
Question #: 13
Topic #: 1
What is configured to use more than one port on the OEAP to extend the wired network?
A. remote LAN ACL
B. AAA override
C. client load balancing
D. remote LAN
Selected Answer: D
Question #: 14
Topic #: 1
An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?
A. learn client IP address
B. FlexConnect local authentication
C. VLAN-based central switching
D. central DHCP processing
Selected Answer: C
Question #: 15
Topic #: 1
An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the management interface, it is noticed that the WLC is not responding for APs that are trying to associate to the internal IP management address. Which command should be used to reconcile this?
A. config flexconnect office-extend nat-ip-only disable
B. config network ap-discovery nap-ip-only enable
C. config flexconnect office-extend nat-ip-only enable
D. config network ap-discovery nat-ip-only disable
Selected Answer: D
Question #: 16
Topic #: 1
An engineer is responsible for a wireless network for an enterprise. The enterprise has distributed offices around the globe, and all APs are configured in
FlexConnect mode. The network must be configured to support 802.11r and CCKM. What needs to be implemented to accomplish this goal?
A. Enable VLAN-based central switching.
B. Enable FlexConnect local authentication.
C. Enable FlexConnect local switching.
D. Create FlexConnect groups.
Selected Answer: D
Question #: 17
Topic #: 1
A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the network readiness is pending. Which two configurations must be performed on the firewall to allow the AP to join the controller? (Choose two.)
A. Block UDP ports 1812 and 1813 on the firewall.
B. Enable NAT Address on the 5520 with an Internet-routable IP address.
C. Configure a static IP on the OEAP 1810.
D. Allow UDP ports 5246 and UDP port 5247 on the firewall.
E. Allow UDP ports 12222 and 12223 on the firewall.
Selected Answer: BD
Question #: 18
Topic #: 1
A corporation has employees working from their homes. A wireless engineer must connect 1810 OEAP at remote teleworker locations. All configuration has been completed on the controller side, but the network readiness is pending. Which two configurations must be performed on the firewall to allow the AP to join the controller? (Choose two.)
A. Block UDP ports 1812 and 1813 on the firewall.
B. Enable NAT Address on the 5520 with an Internet-routable IP address.
C. Configure a static IP on the OEAP 1810.
D. Allow UDP ports 5246 and UDP port 5247 on the firewall.
E. Allow UDP ports 12222 and 12223 on the firewall.
Selected Answer: BD
Question #: 19
Topic #: 1
An enterprise has two WLANs configured on WLC. It is reported that when converting APs to FlexConnect mode, WLAN A works but WLAN B does not. When converting APs to local mode, WLAN B works, but WLAN A does not. Which action is needed to complete this configuration?
A. Create a Cisco FlexConnect group with WLAN-VLAN mapping.
B. Disable local switching on the WLANs.
C. Map the AP group to the WLAN interface.
D. Join the APs to a Cisco FlexConnect group.
Selected Answer: A
Question #: 20
Topic #: 1
An engineer wants the wireless voice traffic class of service to be used to determine the queue order for packets received, and then have the differentiated services code point set to match when it is resent to another port on the switch. Which configuration is required in the network?
A. Platinum QoS configured on the WLAN
B. WMM set to required on the WLAN
C. msl qos trust dscp configured on the controller switch port
D. msl qos trust cos configured on the controller switch port
Selected Answer: D
Question #: 21
Topic #: 1
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?
A. It has a set of predefined profiles that you cannot modify further
B. It matches traffic and assigns each matched packet to QoS groups
C. It automates deployment of wired QoS and makes wireless QoS implementation easier
D. It allows the output policy map to put specific QoS queues into specific subgroups
Selected Answer: C
Question #: 22
Topic #: 1
A network engineer is deploying 8865 IP phones with wireless clients connected to them. In order to apply the appropriate QoS, the IP voice traffic needs to be distinguished from client data traffic. Which switch configuration feature must be enabled?
A. Voice VLAN
B. QBSS
C. WME
D. QoS routing
Selected Answer: A
Question #: 23
Topic #: 1
A network engineer wants to implement QoS across the network that supports multiple VLANs. All the APs are connected to switch ports and are configured in local mode. Which trust model must be configured on the switch ports to which the APs are connected?
A. CoS
B. WMM UP
C. DSCP
D. IPP
Selected Answer: C
Question #: 24
Topic #: 1
An enterprise started using WebEx as a virtual meeting solution. There is a concern that the existing wireless network will not be able to support the increased amount of traffic as a result of using WebEx. An engineer needs to remark the QoS value for this application to ensure high quality in meetings. What must be implemented to accomplish this task?
A. QoS preferred call index
B. UP to DSCP map
C. AVC profiles
D. WLAN quality of service profile
Selected Answer: C
Question #: 25
Topic #: 1
A corporation has a wireless network where all access points are configured in FlexConnect. The WLC has a Data WLAN and a VoWiFi WLAN implemented where centrally-switched SSID is configured for the APs. Which QoS configuration must be implemented for the wireless packets to maintain the marking across the wired and wireless network?
A. Set QoS to Platinum.
B. Enable CAC.
C. Allow WMM.
D. Trust DSCP.
Selected Answer: D
Question #: 26
Topic #: 1
A company is collecting the requirements for an on-premises event. During the event, a wireless client connected to a dedicated WLAN will run a video application that will need on average 391595179 bits per second to function properly. What is the QoS marking that needs to be applied to that WLAN?
A. Platinum
B. Gold
C. Silver
D. Bronze
Selected Answer: B
Question #: 27
Topic #: 1
Refer to the exhibit. Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)
A. TSPEC
B. SIFS
C. 802.11e
D. WMM
E. APSD
Selected Answer: C
Question #: 28
Topic #: 1
An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?
A. permit-ACL
B. WMM required
C. mark
D. rate-limit
Selected Answer: C
Question #: 29
Topic #: 1
An IT administrator is managing a wireless network in which most devices are Apple iOS. A QoS issue must be addressed on the WLANs. Which configuration must be performed?
A. Enable Fastlane globally under Wireless > Access Points > Global Configuration.
B. Create a new AVC Profile named AUTOQOS-AVC-PROFILE and apply to all WLANs.
C. Enable Fastlane under each WLAN setting.
D. Enable WMM TSPEC/TCLAS negotiation under Wireless > Advanced.
Selected Answer: C
Question #: 30
Topic #: 1
What is the Cisco recommended configuration for a Cisco switch port connected to an AP in local mode for optimal voice over WLAN performance with an 8821 wireless phone?
A. switchport encapsulation dot1q switchport mode trunk mls qos trust device cisco-phone
B. switchport mode access mls qos trust device cisco-phone
C. switchport mode access mls qos trust cos
D. switchport mode access mls qos trust dscp
Selected Answer: C
Question #: 31
Topic #: 1
An engineer has configured Media Stream on the WLC and must guarantee at least 2 Mbps stream per user. Which RRC template should the engineer use?
A. coarse
B. medium
C. low
D. ordinary
Selected Answer: B
Question #: 32
Topic #: 1
Refer to the exhibit.
Which COS to DSCP map must be modified to ensure that voice traffic is tagged correctly as it traverses the network?
A. COS of 6 to DSCP 46
B. COS of 3 to DSCP 26
C. COS of 7 to DSCP 48
D. COS of 5 to DSCP 46
Selected Answer: D
Question #: 33
Topic #: 1
Which QoS level is recommended for guest services?
A. gold
B. bronze
C. platinum
D. silver
Selected Answer: B
Question #: 34
Topic #: 1
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?
A. Change the WLAN reserved bandwidth for WebEx
B. Create an AVC profile for WebEx
C. Create an ACL for WebEx
D. Change the AVC application WebEx-app-sharing to mark
Selected Answer: B
Question #: 35
Topic #: 1
All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?
A. The multicast group includes all APs
B. The wrong multicast address was used
C. The multicast group is assigned the wrong VLAN
D. Multicast IGMP snooping is not enabled
Selected Answer: D
Question #: 36
Topic #: 1
What is the difference between PIM sparse mode and PIM dense mode?
A. Sparse mode supports only one switch. Dense mode supports multiswitch networks.
B. Sparse mode floods. Dense mode uses distribution trees.
C. Sparse mode uses distribution trees. Dense mode floods.
D. Sparse mode supports multiswitch networks. Dense mode supports only one switch.
Selected Answer: C
Question #: 37
Topic #: 1
An engineer has been hired to implement a way for users to stream video content without having issues on the wireless network. To accomplish this goal, the engineer must set up a reliable way for a Media Stream to work between Cisco FlexConnect APs. Which feature must be enabled to guarantee delivery?
A. Unicast Direct
B. IGMP Direct
C. Multicast Direct
D. Multicast-to-Unicast Direct
Selected Answer: B
Question #: 38
Topic #: 1
A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature corrects the issue?
A. controller IGMP snooping
B. multicast AP multicast mode
C. broadcast forwarding
D. unicast AP multicast mode
Selected Answer: B
Question #: 39
Topic #: 1
An engineer is configuring multicast for wireless for an all-company video meeting on a network using EIGRP and BGP within a single domain from a single source. Which type of multicast routing should be implemented?
A. Protocol Independent Multicast Dense Mode
B. Source Specific Multicast
C. Multicast Source Discovery Protocol
D. Protocol Independent Multicast Sparse Mode
Selected Answer: D
Question #: 40
Topic #: 1
Which statement about the VideoStream/Multicast Direct feature is true?
A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
B. Each VideoStream client acknowledges receiving a video IP multicast stream.
C. It converts the unicast frame to a multicast frame over the air.
D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.
Selected Answer: C
Question #: 41
Topic #: 1
Which configuration is applied to prevent the network from a Layer 2 flooding of multicast frames with a seamless transfer of multicast data to the client when roaming from one controller to another?
A. Enable IGMPv3 on the central Layer 3 switch.
B. Enable IGMP snooping on the WLC.
C. Enable multicast mode on the WLC.
D. Create multicast groups on the central Layer 3 switch.
Selected Answer: B
Question #: 42
Topic #: 1
An engineer is configuring multicast for two WLCs. The controllers are in different physical locations and each handles around 500 wireless clients. How should the CAPWAP multicast group address be assigned during configuration?
A. Each WLC must be assigned a unique multicast group address.
B. Each WLC management address must be in the same multicast group.
C. Both WLCs must be assigned the same multicast group address.
D. Each WLC management address must be in a different multicast group.
Selected Answer: A
Question #: 43
Topic #: 1
A wireless network has been implemented to enable multicast video to be streamed reliably over the wireless link to the wireless users. After a client reports that the video is unable to stream, the administrator determines that the client is connecting at a data rate of 12 Mbps and is trying to stream to a valid multicast address on the network. Which two actions must be applied? (Choose two.)
A. Turn off IGMP snooping for all the configured WLANs on the controller.
B. Implement video-stream for the multicast video on the controller.
C. Allow multicast-direct to work correctly and multicast-direct to be enabled globally.
D. Change the WLAN QoS value to Bronze for the WLAN that multicast will be enabled.
E. Allow RTSP to stream the video due to wireless multicast not using acknowledgements.
Selected Answer: BC
Question #: 44
Topic #: 1
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)
A. mDNS uses only UDP port 5436 as a destination port.
B. mDNS cannot use UDP port 5353 as the destination port.
C. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
D. Controller software must be newer than 7.0.6+.
E. mDNS is not supported over IPv6.
Selected Answer: CE
Question #: 45
Topic #: 1
A network engineer needs to configure multicast in the network. The implementation will use multiple multicast groups and PIM routers. Which address provides automatic discovery of the best RP for each multicast group?
A. 224.0.0.13
B. 224.0.0.14
C. 224.0.1.39
D. 224.0.1.40
Selected Answer: D
Question #: 46
Topic #: 1
A shopping center uses AireOS controllers with Cisco Wave 2 APs. A separate WLAN named Guest-012345678-WLAN is used for guest wireless clients.
Management needs location analytics to determine popular areas. CMX must track only associated clients. What must be selected on the CMX server settings?
A. Exclude probing clients
B. Duty Cycle Cutoff
C. Enable Locally Administered MAC Filtering
D. Enable Location MAC Filtering
Selected Answer: A
Question #: 47
Topic #: 1
A wireless engineer needs to implement client tracking. Which method does the angle of arrival use to determine the location of a wireless device?
A. received signal strength
B. triangulation
C. time distance of arrival
D. angle of incidence
Selected Answer: D
Question #: 48
Topic #: 1
Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure to track the location of clients/rogues on maps? (Choose two.)
A. Synchronize access points with the MSE.
B. Add the MSE to Cisco Prime Infrastructure using the CLI credentials.
C. Add the MSE to Cisco Prime Infrastructure using the Cisco Prime Infrastructure communication credentials.
D. Apply a valid license for Wireless Intrusion Prevention System.
E. Apply a valid license for location tracking.
Selected Answer: CE
Question #: 49
Topic #: 1
An IT department receives a report of a stolen laptop and has information on the MAC address of the laptop. Which two settings must be set on the wireless infrastructure to determine its location? (Choose two.)
A. Location History for Clients must be enabled on the MSE.
B. Client location tracking must be enabled on the MSE.
C. Location History for Visitors must be enabled on the MSE.
D. Location History for Rogue APs & Rogue Clients must be enabled on the MSE.
E. Tracking optimization must be enabled on the WLC.
Selected Answer: AB
Question #: 50
Topic #: 1
Refer to the exhibit. An engineer needs to manage non-802.11 interference. What is observed in the output on PI?
A. At least one strong interferer is impacting connectivity at this site.
B. Several light interferers are collectively impacting connectivity at this site.
C. The three individual clusters shown indicate poor AP placement.
D. RF at this site is unable to provide adequate wireless performance.
Selected Answer: B
