2022年最新のCisco 300-430問題集と試験テストエンジン [Q25-Q41]

2022年最新のFast2test Cisco 300-430問題集と試験テストエンジン

Cisco 300-430問題集にはリアル試験問題解答

質問 25
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?

A. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
B. Traffic toward the virtual interface must be permitted.
C. Access to Cisco ISE must be allowed on the pre authentication ACL.
D. Management traffic from the guest network must be configured on the ACL rules.

正解: C

解説:

質問 26
An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

A. mark
B. rate-limit
C. permit-ACL
D. WMM required

正解: A

解説:

質問 27
Refer to the exhibit.

An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

A. Configure the certificate, WLAN, and radio interface on WGB.
B. Configure WLAN to authenticate using ISE.
C. Configure the certificate on the WLC.
D. Configure WGB as a network device in ISE.
E. Configure a policy on ISE to allow devices to connect that validate the certificate.
F. Configure the access point with the root certificate from ISE.

正解: A,B,E

質問 28
Which statement about the VideoStream/Multicast Direct feature is true?

A. It converts the unicast frame to a multicast frame over the air.
B. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
C. Each VideoStream client acknowledges receiving a video IP multicast stream.
D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

正解: C

解説:

質問 29
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9.
Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)

A. Permit 0.0.0.0 0.0.0.0 UDP any DNS
B. Permit 0.0.0.0 0.0.0.0 any DNS any
C. Permit any any any
D. Permit 0.0.0.0 0.0.0.0 UDP any any
E. Permit 0.0.0.0 0.0.0.0 UDP DNS any

正解: A,E

解説:
Explanation

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

質問 30
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?

A. Option D
B. Option A
C. Option B
D. Option C

正解: C

質問 31
An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?

A. DNS server IP
B. Client interface IP
C. controller management
D. virtual interface IP

正解: D

質問 32
What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?

A. EAP-FAST with CAPWAP DTLS + port authentication
B. EAP-FAST with CAPWAP DTLS
C. EAP-TLS with 802.1x port authentication
D. EAP-PEAP with 802.1x port authentication

正解: A

解説:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/1612/configguide/ewc_cg_16_12/802_1x_support.pdf

質問 33
What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?

A. 15 seconds
B. 10 seconds
C. 60 seconds
D. 30 seconds

正解: A

質問 34
The security learn is concerned about the access to all network devices, including the Cisco WLC. To permit only the admin subnet to have access to management, a CPU ACL is created and applied. However, guest users cannot get to the web portal. What must be configured to permit only admins to have access?

A. The guest portal must be configured on the CPU ACLs on the Cisco WLC.
B. Traffic toward the virtual interface must be permitted.
C. Access to Cisco ISE must be allowed on the pre authentication ACL.
D. Management traffic from the guest network must be configured on the ACL rules.

正解: C

解説:

質問 35
Which three properties are used for client profiling of wireless clients? (Choose three.)

A. OS version
B. DHCP
C. MAC OUI
D. hostname
E. HTTP user agent
F. IP address

正解: B,C,E

解説:

質問 36
Which two events are outcomes of a successful RF jamming attack? (Choose two.)

A. physical damage to AP hardware
B. deauthentication broadcast
C. disruption of WLAN services
D. deauthentication multicast
E. unauthentication association

正解: A,C

解説:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/mse/3350/72/wIPS_Configuration/Guide/wIPS_72/msecg_appA

質問 37
Which two best practices should be considered when a customer wants to purchase and implement Voice over Wireless for Cisco 7925 IP Phones? (Choose two.)

A. Use a separate Cisco Wireless Lan Controller.
B. Enable 802.1x and Cisco Centralized Key Management for phone authentication.
C. Use dedicated Access Points only for Voice over Wireless.
D. Set data for 2.4 GHz and voice for 5 GHz using separate SSIDs.
E. Enable lower data rates for 2.4-GHz data WLAN and higher data rates for phones.

正解: B,D

解説:
Explanation/Reference:

質問 38
Refer to the exhibit.

An engineer needs to configure location services in an office. The requirement is to use FastLocate and achieve higher locations refresh rates. Which location-based technique should be implemented?

A. probe-based
B. angulation
C. location patterning
D. data packet-based

正解: D

解説:

質問 39
Which network is connected by default when connecting to the unused Ethernet port of a MAP?

A. the VLAN that is associated with the SSID that the MAPs are communicating on
B. the native VLAN that the WLC is connected to
C. the VLAN that is associated with WLAN number 1 in the WLC
D. the native VLAN that the MAP is connected to

正解: D

解説:
Explanation/Reference:

質問 40
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?