For security purposes, an engineer enables CPU ACL and chooses an ACL on the Security > Access Control Lists > CPU Access Control Lists menu. Which kind of traffic does this change apply to as soon as the change is made?
Answer : D
When an engineer enables CPU ACLs on a Cisco device through Security > Access Control Lists > CPU Access Control Lists menu, this change applies immediately to both wireless and wired traffic directed towards the CPU of the device. This includes all management traffic destined for control plane services within the device itself, providing an additional layer of security against potential threats.Reference: (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)
In a Cisco WLAN deployment, it is required that all Aps from branch1 remain operational even if the control plane CAPWAP tunnel is down because of a WAN failure to headquarters. Which operational mode must be configured on the APs?
Answer : B
In a Cisco WLAN deployment where it is required that all APs from branch1 remain operational even if the control plane CAPWAP tunnel is down, the operational mode that must be configured on the APs is standalone (option B). In standalone mode, the APs can continue to function and provide network access to clients even without a connection to the WLC, which is essential during a WAN failure to headquarters.Reference: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide, with a focus on AP operational modes and their behavior during network disruptions.
Which two events are outcomes of a successful RF jamming attack? (Choose two.)
Answer : A, E
A successful RF jamming attack primarily disrupts WLAN services by overwhelming the network with noise or unwanted signals, making it impossible for legitimate devices to communicate effectively. While physical damage to AP hardware is not a direct outcome of RF jamming, the persistent interference can lead to hardware malfunction due to overheating or overcompensation for the poor signal environment.Reference: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.
An engineer must run a Client Traffic Stream Metrics report in Cisco Prime Infrastructure. Which task must be run before the report?
Answer : C
Before running a Client Traffic Stream Metrics report in Cisco Prime Infrastructure, the task that must be run is ''client status''. This task collects the necessary data regarding the clients' traffic streams, which is then used to generate the report.Reference:= Cisco Prime Infrastructure Reports User Guide
A customer requires wireless traffic from the branch to be routed through the firewall at corporate headquarters. A RADIUS server is in each branch location. Which Cisco FlexConnect configuration must be used?
Answer : B
To route wireless traffic from the branch through the firewall at corporate headquarters, the correct Cisco FlexConnect configuration iscentral authentication and central switching. This setup ensures that both user authentication and data traffic are handled centrally at the corporate headquarters, allowing the firewall to inspect and route the traffic accordingly. Local RADIUS servers in each branch can still be used for redundancy or other purposes, but the central control of traffic is maintained.Reference: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.
On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational. Which command set prevents this connection?
Answer : B
On a Cisco Catalyst 9800 Series Wireless Controller, the command set that prevents a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational is thefallback-radio-shutcommand within the FlexConnect profile configuration. This command disables the radios on the AP, thus preventing client connections during Ethernet link failure.Reference: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide
An IT administrator deploys Cisco 2802i APs in all office locations, including main campus and branch offices. The WLC that manages the APs is located at the data center on the main campus. The APs on the main campus are configured to use Local mode and the APs in the branches use FlexConnect mode. Which configuration must be applied to the APs for corporate devices on the main campus to be mapped to the local LAN switch on different VLANs according to the VLAN tag ID and WLAN?
Answer : C
In a FlexConnect deployment, enabling FlexConnect Local Switching allows branch office APs to map client traffic directly onto the local LAN, bypassing the need to tunnel all traffic back to the WLC at the main campus. This is essential for corporate devices at branch offices to access local resources efficiently and to be mapped to the correct VLANs according to their VLAN tag ID and WLAN. This setting is not relevant for APs in Local mode at the main campus, as they already switch traffic locally by default.