Cisco 300-430 ENWLSI Exam Questions Instant Access

Question 1

A multitenant building contains known wireless networks in most of the suites. Rogues must be classified in the WLC. How are the competing wireless APs classified?

Aadhoc

Bfriendly

Cmalicious

Dunclassified

Answer : D

In a multitenant building, competing wireless APs are initially classified as 'unclassified' in the WLC. This classification means that the APs are not recognized as part of the network's infrastructure. Over time, administrators can classify these APs as 'friendly', 'malicious', or maintain them as 'unclassified' based on their potential impact on the network.Reference: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide.

Question 2

Which QoS level is recommended for guest services?

Agold

Bbronze

Cplatinum

Dsilver

Answer : B

The bronze QoS level is typically recommended for guest services in a wireless network environment. This level prioritizes basic internet access, which is suitable for guest services that do not require high bandwidth or low latency. It ensures that more critical services are not impacted by guest traffic, which is often less sensitive to performance fluctuations.Reference:= CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

Question 3

CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

AAllow HTTP traffic only before authentication and block all the traffic.

BAllow all the traffic before authentication and intercept HTTPS only.

CAllow HTTPs traffic only before authentication and block all other traffic.

DAllow all the traffic before authentication and intercept HTTP only.

EAllow SNMP traffic only before authentication and block all the traffic.

Answer : A, D

CMX Facebook Wi-Fi is designed to provide limited access to the network before a user completes authentication. This feature allows HTTP traffic only before authentication while blocking all other traffic, which corresponds with option A. Additionally, it intercepts HTTP traffic to redirect the user to the authentication page, which aligns with option D. The purpose of these restrictions is to ensure that users can be directed to log in via Facebook for Wi-Fi access without compromising network security by allowing unchecked access.Reference:= (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

Question 4

What must be configured on ISE version 2.1 BYOD when using Single SSID?

Aopen authentication

B802.1x

Cno authentication

DWPA2
Explanation:
In Cisco ISE version 2.1 for BYOD with a Single SSID setup, 802.1x must be configured to provide the necessary layer of security and to facilitate the device registration process. 802.1x authentication allows for the use of EAP (Extensible Authentication Protocol) to authenticate users before they can access the network. This ensures that only authorized devices can join the BYOD network, providing a secure method for device onboarding and access control.Reference: CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

Answer : B

Question 5

An engineer is implementing profiling for BYOD devices using Cisco ISE. When using a distributed model, which persona must the engineer configure with the profiling service?

ADevice Admin Node

BPrimary Admin Node

CMonitor Node

DPolicy Services Node

Answer : D

In a distributed deployment of Cisco ISE, profiling services are configured on Policy Services Nodes (PSNs). These nodes handle all context-based access control, including profiling services.

Question 6

Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

Aauthentication-local/switch-local

BWPA2 personal

Cauthentication-central/switch-central

Dlightweight mode

Estandalone mode

FWEB authentication

Answer : A, E, F

In this scenario where branch wireless users can still associate locally but cannot access head office services due to WAN downtime indicates that Cisco FlexConnect is likely in use. The correct elements are: A - authentication-local/switch-local: This means that client authentication and data switching are happening locally at the branch. E - standalone mode: With WAN down, FlexConnect APs operate in standalone mode allowing clients to associate even without connectivity back to WLC. F - WEB authentication: This could be used as an authentication method regardless of WAN state since it's processed locally at AP level.Reference:= (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide

Question 7

What must be configured on the Global Configuration page of the WLC for an AP to use 802.1x to authenticate to the wired infrastructure?

Alocal access point credentials

BRADIUS shared secret

CTACACS server IP address

Dsupplicant credentials

Answer : B

On the Global Configuration page of a Wireless LAN Controller (WLC), for an Access Point (AP) to use IEEE 802.1X for authenticating to the wired infrastructure, it is necessary to configure a RADIUS shared secret. This secret will be used by the AP as part of its credentials when communicating with a RADIUS server during the authentication process.Reference: (CCNP Enterprise Wireless Design ENWLSD 300-425 and Implementation ENWLSI 300-430 Official Cert Guide)

Cisco Implementing Cisco Enterprise Wireless Networks 300-430 ENWLSI Exam Questions