Implementing Cisco Enterprise Wireless Networks (ENWLSI) practice questions

1. Question 1 of 25

   On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?

   • AISE NAC is enabled
   • B802.11r Fast Transition is enabled
   • CClient Exclusion is enabled
   • DFlexConnect Local Auth is disabled

   Show answer

   Correct answer: A

   How others answered

   • A71%
   • D21%

   Only 71% agreed on this answer — treat it as contested rather than settled.

   Explanation

   As per cisco documentation All 802.11 authentication and association processing occurs regardless of which operational mode the AP is in. When in connected mode, the FlexConnect AP forwards all association/authentication information to the WLC. When in standalone mode, the AP cannot notify the WLC of such events, which is why WLANs that make use of central authentication/switching methods are unavailable.

   Adapted from community discussion by poy4242 · 2022-07-09 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. K

      kthekillerc

      2021-10-04

      6 upvotes

      The question stated the AP lost connection therefore all connected users would loose connectivity and have to reauthenticate. If Flexconnect Local Auth has been disabled this behavior would occur. The provided answer is correct.

   2. P

      poy4242

      2022-07-09

      Selected A4 upvotes

      As per cisco documentation All 802.11 authentication and association processing occurs regardless of which operational mode the AP is in. When in connected mode, the FlexConnect AP forwards all association/authentication information to the WLC. When in standalone mode, the AP cannot notify the WLC of such events, which is why WLANs that make use of central authentication/switching methods are unavailable.

   3. G

      GoldLeader

      2023-07-15

      Selected A2 upvotes

      D is wrong because in standalone mode existing clients are not de-authenticated and the SSID remains up and locally switched. NAC enabled WLANs however REQUIRE a connection to the WLC. When the WLC connection is lost NAC enabled SSID must therefore become disabled and users deleted.

   4. L

      Liselot

      2022-07-28

      Selected A1 upvote

      MAC Filtering is not supported on FlexConnect access points in standalone mode. However, MAC Filtering is supported on FlexConnect access points in connected mode with local switching and central authentication. Also, Open SSID, MAC Filtering, and RADIUS NAC for a locally switched WLAN with FlexConnect access points is a valid configuration where MAC is checked by ISE. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-3/config-guide/b_cg83/flexconnect.html#:~:text=MAC%20Filtering%20is,checked%20by%20ISE.

2. Question 2 of 25

   Which component must be integrated with Cisco DNA Center to display the location of a client that is experiencing connectivity issues?

   • ACisco Hyperlocation Module
   • BWireless Intrusion Prevention System
   • CCisco Connected Mobile Experiences
   • DCisco Mobility Services Engine

   Show answer

   Correct answer: C

   How others answered

   • C82%
   • A18%

   Explanation

   C is for sure the correct answer: Cisco Connected Mobile Experiences (CMX) is a smart Wi-Fi solution that uses the Cisco wireless infrastructure to provide location services and location analytics for consumers' mobile devices.

   Adapted from community discussion by NightmareCreature · 2021-08-29 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. R

      rrahim

      2025-02-16

      Selected C1 upvote

      Cisco Connected Mobile Experiences (CMX): CMX is a location-based analytics and engagement platform that integrates with Cisco DNA Center. It provides real-time location tracking of wireless clients, enabling network administrators to pinpoint the location of devices experiencing connectivity issues. CMX uses data from Cisco access points (APs) and other network elements to determine the physical location of clients within a wireless environment. Why the Other Options Are Incorrect: A. Cisco Hyperlocation Module: The Cisco Hyperlocation Module is an add-on module for certain Cisco APs that enhances location accuracy. While it improves location tracking, it is not a standalone solution for displaying client locations in Cisco DNA Center. It works in conjunction with CMX.

   2. N

      NightmareCreature

      2021-08-29

      3 upvotes

      C is for sure the correct answer: Cisco Connected Mobile Experiences (CMX) is a smart Wi-Fi solution that uses the Cisco wireless infrastructure to provide location services and location analytics for consumers' mobile devices.

   3. C

      copa77

      2023-01-31

      Selected C2 upvotes

      C is correct https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-2-3/b_cisco_dna_assurance_2_2_3_ug/b_cisco_dna_assurance_2_2_3_ug_chapter_010000.pdf

   4. C

      casterJR

      2024-04-26

      1 upvote

      C is correct - Cisco DNA Center supports integration with both Cisco Connected Mobile Experiences (CMX) and Cisco Spaces for location services. while Cisco Hyperlocation Module itself is not directly integrated with Cisco DNA Center, you can choose between CMX and Cisco Spaces for location services, depending on your requirements and existing infrastructure

3. Question 3 of 25

   An engineer must provide a graphical report with summary grouped data of the total number of wireless clients on the network. Which Cisco Prime Infrastructure report provides the required data?

   • AClient Traffic Stream Metrics
   • BClient Summary
   • CPosture Status Count
   • DMobility Client Summary

   Show answer

   Correct answer: B

   How others answered

   • B80%
   • D20%

   Explanation

   Client Summary Dashboard has nice data, but is not a graphical report. It is a graphical dashboard. The question specifies what PI report provides the data. So in my opinion, D. Mobility Client Summary report is the correct choice.

   Adapted from community discussion by TiredOfCertExams · 2024-05-22 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. R

      rrahim

      2025-02-16

      Selected B1 upvote

      Client Summary Report: The Client Summary report in Cisco Prime Infrastructure provides a high-level overview of wireless clients connected to the network. It includes grouped data such as the total number of clients, client distribution by SSID, client distribution by AP, and other relevant metrics. This report is ideal for generating graphical summaries of client activity and connectivity. Why the Other Options Are Incorrect: A. Client Traffic Stream Metrics: This report focuses on detailed traffic metrics for individual clients, such as throughput, retries, and packet counts. It does not provide a summary of the total number of clients. C. Posture Status Count: This report is related to network access control (NAC) and provides information about the compliance status of clients (e.g., compliant, non-compliant). It does not provide a summary of the total number of wireless clients. D. Mobility Client Summary: This report is specific to mobility services and provides information about client roaming behavior. It does not provide a summary of the total number of clients on the network.

   2. V

      Vlad_Is_Love_ua

      2024-05-02

      Selected B2 upvotes

      https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-9/user/guide/bk_CiscoPrimeInfrastructure_3_9_0_UserGuide/monitor_network_clients_and_users.html#con_1418185

   3. C

      cskshiet

      2022-06-02

      3 upvotes

      Correct. https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-0/user/guide/prime_infra_ug/reps.html

   4. T

      TiredOfCertExams

      2024-05-22

      2 upvotes

      Client Summary Dashboard has nice data, but is not a graphical report. It is a graphical dashboard. The question specifies what PI report provides the data. So in my opinion, D. Mobility Client Summary report is the correct choice.

4. Question 4 of 25

   An engineer is using Cisco Prime Infrastructure reporting to monitor the state of security on the WLAN. Which output is produced when the Adaptive wIPS Top 10 AP report is run?

   • Alast 10 wIPS events from monitor mode APs
   • Blast 10 wIPS events from sniffer mode APs
   • Clast of 10 sniffer mode APs with the most wIPS events
   • Dlast of 10 monitor mode APs with the most wIPS events

   Show answer

   Correct answer: A

   How others answered

   • A100%

   Explanation

   Not about events. Adaptive wIPS Top 10 APs - This report displays the top ten access points with the highest number of generated adaptive wIPS alarms. https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-0/user/guide/prime_infra_ug/reps.html

   Adapted from community discussion by drel · 2022-07-06 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. M

      Mimimimimi

      2023-10-07

      5 upvotes

      Answer A is correct. It is literally in the below source: https://www.cisco.com/c/en/us/td/docs/wireless/mse/3350/6-0/wIPS/configuration/guide/wipscg60/msecg_ch7_wIPS.html#:~:text=Adaptive%20wIPS%20Top%2010%20AP%E2%80%94Lists%20the%20last%2010%20events%20reported%20for%20monitor%20access%20points.

   2. V

      Vlad_Is_Love_ua

      2024-05-02

      Selected A3 upvotes

      Adaptive wIPS Top 10 AP—Lists the last 10 events reported for monitor access points. https://www.cisco.com/c/en/us/td/docs/wireless/mse/3350/6-0/wIPS/configuration/guide/wipscg60/msecg_ch7_wIPS.html#:~:text=Adaptive%20wIPS

   3. D

      drel

      2022-07-06

      3 upvotes

      Not about events. Adaptive wIPS Top 10 APs - This report displays the top ten access points with the highest number of generated adaptive wIPS alarms. https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-0/user/guide/prime_infra_ug/reps.html

   4. C

      Caradum

      2023-07-20

      3 upvotes

      https://www.cisco.com/c/en/us/td/docs/wireless/mse/3350/6-0/wIPS/configuration/guide/wipscg60/msecg_ch7_wIPS.html "Adaptive wIPS Top 10 AP—Lists the last 10 events reported for monitor access points." Correct Answer is D.

5. Question 5 of 25

   What must be configured on the Global Configuration page of the WLC for an AP to use 802.1x to authenticate to the wired infrastructure?

   • Alocal access point credentials
   • BRADIUS shared secret
   • CTACACS server IP address
   • Dsupplicant credentials

   Show answer

   Correct answer: D

   How others answered

   • D100%

   Explanation

   Incorrect should be D: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_01101000.pdf Choose Wireless > Access Points > Global Configuration to open the Global Configuration page. Under 802.1x Supplicant Credentials, select the 802.1x Authentication check box. In the Username text box, enter the username that is to be inherited by all access points that join the controller.

   Adapted from community discussion by daeman · 2024-03-07 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. D

      daeman

      2024-03-07

      Selected D7 upvotes

      Incorrect should be D: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_01101000.pdf Choose Wireless > Access Points > Global Configuration to open the Global Configuration page. Under 802.1x Supplicant Credentials, select the 802.1x Authentication check box. In the Username text box, enter the username that is to be inherited by all access points that join the controller.

   2. S

      segr4523

      2024-03-15

      Selected D4 upvotes

      RADIUS shared secret would mean the AP is the authenticator, which is not the case. The controller is the authenticator. If we want to authenticate an AP to the wired network, we need ton enable the dot1x supplicant on the AP and provide its authentication credentials

   3. R

      rrahim

      2025-02-23

      Selected D1 upvote

      For an Access Point (AP) to use 802.1X to authenticate to the wired infrastructure, the supplicant credentials must be configured on the Global Configuration page of the Wireless LAN Controller (WLC). The AP acts as a supplicant in this scenario, and it needs credentials (username and password) to authenticate itself to the wired network using the 802.1X protocol. These credentials are typically configured on the WLC and are used by the AP to communicate with a RADIUS server for authentication.

   4. V

      Vlad_Is_Love_ua

      2024-11-02

      Selected D1 upvote

      Configure the LAP In this section, you are presented with the information to configure the LAP as a 802.1x supplicant. If the AP is already joined to the WLC, go the Wireless tab and click on the AP, go the Credentials field and under the 802.1x Supplicant Credentials heading, check the Over-ride Global credentials check box in order to set the 802.1x username and password for this AP. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-fixed/107946-LAP-802-1x.html

6. Question 6 of 25

   Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

   

   • AIt must be Inbound because traffic goes to the WLC.
   • BPacket direction has no significance; it is always Any.
   • CIt must be Outbound because it is traffic that is generated from the WLC.
   • DTo have the complete list of options, the CPU ACL must be created only by the CLI.

   Show answer

   Correct answer: B

   How others answered

   • B100%

   Explanation

   Does not matter which direction is selected. It will always be any for a CPU ACL. Answer is B. Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/access_control_lists.html#:~:text=If%20you%20are%20planning%20to%20apply%20this%20ACL%20to%20the%20controller%20CPU%2C%20the%20packet%20direction%20does%20not%20have%20any%20significance%2C%20it%20is%20always%20%E2%80%98Any%E2%80%99.

   Adapted from community discussion by Mimimimimi · 2023-10-08 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. M

      Mimimimimi

      2023-10-08

      12 upvotes

      Does not matter which direction is selected. It will always be any for a CPU ACL. Answer is B. Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/access_control_lists.html#:~:text=If%20you%20are%20planning%20to%20apply%20this%20ACL%20to%20the%20controller%20CPU%2C%20the%20packet%20direction%20does%20not%20have%20any%20significance%2C%20it%20is%20always%20%E2%80%98Any%E2%80%99.

   2. D

      Den07

      2022-03-07

      8 upvotes

      B should be the answer by looking at the configuration: If the source and destination are any, the direction in which this ACL is applied can be any.

   3. M

      maro_moh

      2022-02-16

      5 upvotes

      I think the correct answer is ( B ) because source and destination in the exhibit are Any what do u think ?? https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html

   4. M

      maro_moh

      2022-02-16

      4 upvotes

      I think the correct answer is ( B ) because source and direction in the exhibit are Any what do u think ?? https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html

7. Question 7 of 25

   An engineer is troubleshooting a Cisco CMX high-availability deployment and notices that the primary and backup Cisco CMX servers are both considered primary. Which command must the engineer run on the backup server?

   • Acmxha convert backup
   • Bcmxha backup convert
   • Ccmxha secondary convert
   • Dcmxha convert secondary

   Show answer

   Correct answer: C

   How others answered

   • C100%

   Explanation

   C. To convert the system to a secondary server and display Cisco CMX high availability (HA) information, use the cmxha secondary command. cmxha secondary{ convert | info }

   Adapted from community discussion by Zanjit500 · 2024-06-08 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. D

      daeman

      2023-09-07

      Selected C8 upvotes

      Incorrect answer is C: cmxha secondary{ convert | info } https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-3/cmx_command/cmxcli103.pdf

   2. R

      rrahim

      2025-02-23

      Selected C1 upvote

      To convert the system to a secondary server and display Cisco CMX high availability (HA) information, use the cmxha secondary command. https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-6/cmx_command/cmxcli106/cmxcli1051_chapter_011.html#wp1145343340 cmxha secondary { convert | info }

   3. Z

      Zanjit500

      2024-06-08

      2 upvotes

      C. To convert the system to a secondary server and display Cisco CMX high availability (HA) information, use the cmxha secondary command. cmxha secondary{ convert | info }

   4. B

      Batman20023

      2024-10-07

      1 upvote

      correct is C: $cmxha secondary convert Are you sure you wish to convert the system to a secondary? [y/N]: y Stopping all services. This may take a while.. Stopped all services

8. Question 8 of 25

   An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?

   • ASet ORIGIN to Wired. Enable LSS by using the config mdns service Iss All command.
   • BSet ORIGIN to Wired. Enable LSS by using the config mdns service Iss AppleTV command.
   • CSet ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.
   • DSet ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.

   Show answer

   Correct answer: D

   How others answered

   • D70%
   • B30%

   Only 70% agreed on this answer — treat it as contested rather than settled.

   Explanation

   I think D is correct LSS status cannot be enabled for services with ORIGIN set to WIRED and vice-versa. ref: https://www.cisco.com/c/en/us/td/docs/wireless/technology/bonjour/7-5/Bonjour_Gateway_Phase-2_WLC_software_release_7-5.html#:~:text=LSS%20status%20cannot%20be%20enabled%20for%20services%20with%20ORIGIN%20set%20to%20WIRED%20and%20vice%2Dversa. (WLC) >config mdns service lss

   Adapted from community discussion by rph02533 · 2022-12-16 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. R

      rph02533

      2022-12-16

      Selected D4 upvotes

      I think D is correct LSS status cannot be enabled for services with ORIGIN set to WIRED and vice-versa. ref: https://www.cisco.com/c/en/us/td/docs/wireless/technology/bonjour/7-5/Bonjour_Gateway_Phase-2_WLC_software_release_7-5.html#:~:text=LSS%20status%20cannot%20be%20enabled%20for%20services%20with%20ORIGIN%20set%20to%20WIRED%20and%20vice%2Dversa. (WLC) >config mdns service lss

   2. M

      most_ahdy

      2023-08-25

      Selected D3 upvotes

      it is D https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/multicast_broadcast_setup.html

   3. [

      [Removed]

      2023-10-12

      1 upvote

      D. Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command is the correct answer because it allows for both Wireless and All origins, and specifically enables LSS for the AppleTV mDNS service. This ensures that LSS is enabled for the AppleTV mDNS service regardless of whether the origin is set to Wireless or All.

   4. G

      GOfeni

      2024-11-01

      1 upvote

      Refer to https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/multicast_broadcast_setup.html. LSS applies only to wireless service provider database entries. There is no location awareness for wired service provider devices. The status of LSS cannot be enabled for services with ORIGIN set to wired and vice-versa.

9. Question 9 of 25

   Select 2

   A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons that Cisco DNA Center is ignoring the interference? (Choose two.)

   • AThe interference is less than or equal to 30% on the 2.4 GHz radio.
   • BThe interference is less than or equal to 50% on the 2.4 GHz radio.
   • CCisco DNA Center includes only Cisco CleanAir interferers in the AP health score.
   • DThe interference is less than or equal to 30% on the 5 GHz radio.
   • ECisco DNA Center does not include interference in the AP health score.

   Show answer

   Correct answer: B, D

   How others answered

   • BD57%
   • BC29%

   Only 57% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Your source is good. Your judgement seems incorrect to me: Answer D: 30 % interference on 5 GHz is more than 20%. Corrects answers are AB as 50% and 30% are both applicable for a score of 10 on the 2,4 GHz band.

   Adapted from community discussion by Mimimimimi · 2022-10-08 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

   1. M

      Mimimimimi

      2022-10-08

      9 upvotes

      Your source is good. Your judgement seems incorrect to me: Answer D: 30 % interference on 5 GHz is more than 20%. Corrects answers are AB as 50% and 30% are both applicable for a score of 10 on the 2,4 GHz band.

   2. R

      rrahim

      2025-02-23

      Selected B, D1 upvote

      Apologies for any confusion in my previous responses. Upon further review and based on the information from the Cisco DNA Assurance User Guide, Release 2.3.3, the correct answers are: B. The interference is less than or equal to 50% on the 2.4 GHz radio. D. The interference is less than or equal to 20% on the 5 GHz radio. Explanation: Cisco DNA Center calculates the Access Point (AP) health score based on several parameters, including interference levels. The thresholds for interference are: 2.4 GHz Radio: If interference is ≤50%, the health score remains unaffected. If interference is >50%, the health score is impacted. 5 GHz Radio: If interference is ≤20%, the health score remains unaffected. If interference is >20%, the health score is impacted. Therefore, if the interference detected is within these thresholds, Cisco DNA Center considers it negligible, and the AP health score remains unaffected.

   3. D

      daeman

      2022-09-07

      Selected B, D2 upvotes

      Incorrect, the answer should be B and D: For 2.4-GHz radio: If interference is less than or equal to 50 percent, the score is 10. If interference is more than 50 percent, the score is 0. For 5-GHz radio: If interference is less than or equal to 20 percent, the score 10. If interference is more than 20 percent, the score is 0. https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-2-2/b_cisco_dna_assurance_2_2_2_ug/b_cisco_dna_assurance_2_2_2_ug_chapter_0110.html

   4. P

      PauBau

      2023-04-05

      Selected B, D1 upvote

      B and D, https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center-assurance/2-3-4/b_cisco_dna_assurance_2_3_4_ug/b_cisco_dna_assurance_2_3_3_ug_chapter_0110.html Air Quality Score The score is calculated individually for each radio, and then the average radio the score is determined. For 2.4-GHz radio: If air quality is 60 percent or more, the score is 10. If air quality is less than 60 percent, the score is 1. For 5-GHz radio: If air quality is 75 percent or more, the score is 10. If air quality is less than 75 percent, the score is 1.

10. Question 10 of 25

    Select 2

    An engineer added more APs to newly renovated areas in building. The engineer is now receiving Out-of-Sync alarms on Cisco Prime Infrastructure. Which two actions resolve this issue? (Choose two.)

    • AManually synchronize from Cisco Prime Infrastructure.
    • BManually synchronize from MSE.
    • CEnable automatic synchronization on Cisco Prime Infrastructure.
    • DEnable automatic synchronization on MSE.
    • EAdd new APs to maps on Cisco Prime Infrastructure.

    Show answer

    Correct answer: A, C

    How others answered

    • AC36%
    • AE27%
    • BD18%

    Only 36% agreed on this answer — treat it as contested rather than settled.

    Explanation

    A. This would immediately sync the system and then C. would keep it in sync going forward when future changes happen. I think E. is wrong because the APs have already been added to the map which is why there is an out of sync with MSE to begin with.

    Adapted from community discussion by GoldLeader · 2023-07-16 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. G

       GoldLeader

       2023-07-16

       Selected A, C4 upvotes

       A. This would immediately sync the system and then C. would keep it in sync going forward when future changes happen. I think E. is wrong because the APs have already been added to the map which is why there is an out of sync with MSE to begin with.

    2. M

       MaxMusti

       2024-07-30

       1 upvote

       Guys read it by your selfe and think: Why should add an AP to the map Sync him, you add them from your inventory https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-5/user/guide/bk_CiscoPrimeInfrastructure_3_5_0_UserGuide/bk_CiscoPrimeInfrastructure_3_5_0_UserGuide_chapter_0100110.html#:~:text=NEs%20with%20MSE-,Set%20Up%20Synchronization%20Between%20MSE%20Databases%20and%20Product%20Database,-Manual%20synchronization%20of

    3. S

       Smithy448

       2023-03-23

       1 upvote

       I reckon C,E are the best answer...although Manually syncing from PI is also an option. https://www.cisco.com/c/en/us/td/docs/wireless/mse/7-6/MSE_CAS/7_6_MSE_CAS/7_4_MSE_CAS_chapter_011.pdf

    4. [

       [Removed]

       2023-10-12

       1 upvote

       Manually synchronize from Cisco Prime Infrastructure. Add new APs to maps on Cisco Prime Infrastructure.

11. Question 11 of 25

    A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates instead of 802.11n data rates. To what must the WMM policy of the WLAN be set to accomplish this task?

    • Arequired
    • Ballowed
    • Cdisabled
    • Dmandatory

    Show answer

    Correct answer: C

    How others answered

    • C75%
    • B25%

    Explanation

    Agree with wirelessvibes. Based on https://www.cisco.com/c/en/us/support/docs/wireless-mobility/voice-over-wireless-lan-vowlan/116056-technote-qos-00.html WMM also shortens the Interframe Spacing requirements for high priority packets so that voice and video can be sent in bursts without the need to wait as much for lower priority data inbetween. Additionally, WMM is needed in order to obtain 802.11n and 802.11ac data rates. This means that with --== WMM disabled ==-- or for non-WMM clients, the maximum usable data rate is 54 Mbps. WMM Enable WMM on a WLAN in order to create the simplest implementation of QoS; this option is on the QoS tab in the WLAN configuration menu. Other WMM policy settings are: Disabled - WMM is not in use on the WLAN. Required - Clients must support WMM or they are not permitted to access the WLAN. Allowed - Clients that support WMM may use it, while those that do not support WMM can still connect to the network.

    Adapted from community discussion by Yod_Jjot · 2022-10-24 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. Y

       Yod_Jjot

       2022-10-24

       7 upvotes

       Agree with wirelessvibes. Based on https://www.cisco.com/c/en/us/support/docs/wireless-mobility/voice-over-wireless-lan-vowlan/116056-technote-qos-00.html WMM also shortens the Interframe Spacing requirements for high priority packets so that voice and video can be sent in bursts without the need to wait as much for lower priority data inbetween. Additionally, WMM is needed in order to obtain 802.11n and 802.11ac data rates. This means that with --== WMM disabled ==-- or for non-WMM clients, the maximum usable data rate is 54 Mbps. WMM Enable WMM on a WLAN in order to create the simplest implementation of QoS; this option is on the QoS tab in the WLAN configuration menu. Other WMM policy settings are: Disabled - WMM is not in use on the WLAN. Required - Clients must support WMM or they are not permitted to access the WLAN. Allowed - Clients that support WMM may use it, while those that do not support WMM can still connect to the network.

    2. W

       wirelessvibes

       2022-10-22

       9 upvotes

       So C, according to this: https://community.cisco.com/t5/wireless/how-to-disable-802-11n-access-on-guest-network/td-p/1363413

    3. W

       wirelessvibes

       2022-10-22

       6 upvotes

       What you can do is go to your WLAN SSID and under the QoS feature, disable WMM. WMM is required for 802.11N support... Test is out and hopefully that solves your issue.

    4. G

       GOfeni

       2024-10-31

       Selected C1 upvote

       The following are WMM policies available on the WLAN: - Disabled: Disables WMM on the WLAN. - Required: Requires client devices to use WMM. Devices that do not support WMM cannot join the WLAN. - Allowed: Devices that cannot support WMM can join the WLAN but will not benefit from the 802.11n rates. From the above, it seems only WMM capable devices would be able to use 802.11n data rates. Therefore, if WMM is disabled, no device will be able to use 802.11n rates at all. Correct answer is C.

12. Question 12 of 25

    Select 2

    An IT administrator deployed an OEAP to the home of a remote user, but the OEAP cannot reach the WLC. Which two configuration settings must be completed before an OEAP is deployed successfully? (Choose two.)

    • AConfigure Secondary Controller Name and Management IP address in the High Availability tab.
    • BConfigure LSC to authorize the OEAP.
    • CConfigure the AP mode to FlexConnect and check the box for Office Extend AP.
    • DConfigure the WLC with an external IP address on the virtual interface.
    • EConfigure Primary Controller Name and Management IP address in the High Availability tab.

    Show answer

    Correct answer: C, E

    How others answered

    • CE67%
    • CD33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    C and E are the best answers: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/configuring_officeextend_access_points.html Step 4 and 5 show that these are two of the valid steps required to configure the OEAP.

    Adapted from community discussion by daeman · 2022-09-09 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. S

       somebodyfromtheinterwebz

       2023-01-19

       Selected C, E4 upvotes

       C and E; see page 13, Step 4 and 5: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/b_cg81_chapter_0101111.pdf

    2. W

       wirelessvibes

       2022-10-22

       4 upvotes

       According to this https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/configuring_officeextend_access_points.html#ID2064 the provided answer is correct - C and E

    3. D

       daeman

       2022-09-09

       3 upvotes

       C and E are the best answers: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/configuring_officeextend_access_points.html Step 4 and 5 show that these are two of the valid steps required to configure the OEAP.

    4. C

       cvndani

       2022-09-24

       3 upvotes

       In this Cisco video you can see the option correct is C and D https://www.youtube.com/watch?v=MfdemAD0vos

13. Question 13 of 25

    An engineer wants to upgrade the APs in a Cisco FlexConnect group. To accomplish this upgrade, the FlexConnect AP Upgrade setting will be used. One AP of each model with the lowest MAC address in the group must receive the upgrade directly from the controller. Which action accomplishes this direct upgrade?

    • ARemove the APs from the group.
    • BReboot all APs before the upgrade.
    • CAllocate the master APs to different groups.
    • DDo not set any master APs.

    Show answer

    Correct answer: D

    How others answered

    • D88%

    Explanation

    C is the correct answer. Ref: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-6/config-guide/b_cg86/configuring_flexconnect_ap_upgrades_for_flexconnect_aps.pdf See the "Configuring FlexConnect AP Upgrades (GUI)" section. Step 6 From the AP Name drop-down list, click Add Master to add the primary access point. You can manually assign primary access points in the FlexConnect group by selecting the access points.

    Adapted from community discussion by Yod_Jjot · 2023-04-25 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. Y

       Yod_Jjot

       2023-04-25

       3 upvotes

       C is the correct answer. Ref: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-6/config-guide/b_cg86/configuring_flexconnect_ap_upgrades_for_flexconnect_aps.pdf See the "Configuring FlexConnect AP Upgrades (GUI)" section. Step 6 From the AP Name drop-down list, click Add Master to add the primary access point. You can manually assign primary access points in the FlexConnect group by selecting the access points.

    2. A

       Aaron_0801

       2023-07-07

       Selected D1 upvote

       Answer is D A FlexConnect group can have one primary AP per AP model. If a primary AP is not selected manually, the AP that has the least MAC address value is automatically chosen as the primary AP for that model. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-6/config-guide/b_cg86/configuring_flexconnect_ap_upgrades_for_flexconnect_aps.html#:~:text=A%20FlexConnect%20group%20can%20have%20one%20primary%20AP%20per%20AP%20model.%20If%20a%20primary%20AP%20is%20not%20selected%20manually%2C%20the%20AP%20that%20has%20the%20least%20MAC%20address%20value%20is%20automatically%20chosen%20as%20the%20primary%20AP%20for%20that%20model.

    3. S

       strengtis

       2023-04-05

       Selected D3 upvotes

       Should be D as the default AP the image will be downloaded to is the one with the lowest MAC

    4. G

       GoldLeader

       2024-01-16

       Selected D2 upvotes

       D. seems to do exactly what the question wants. By default the AP for each model with the lowest mac with do the download. No need to set it manually.

14. Question 14 of 25

    

    Refer to the exhibit. An engineer is configuring a Cisco wireless LAN controller and needs wireless multicast to use the 54Mbps rates. Which action meets this requirement?

    • AChange the 24 Mpbs to Supported.
    • BSet all data rates below 54 Mbps to Supported.
    • CChange the 54 Mpbs to Mandatory.
    • DSet all data rates below 54 Mbps to Disable.

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    It is C. Multicast will use the lowest Manditory rate, so set 54Mbps to manditory will have the desired result without having to disable everything else.

    Adapted from community discussion by NoWiresIncluded · 2023-12-01 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. Q

       qqqqqqqqqqq123

       2023-05-29

       Selected C4 upvotes

       https://community.cisco.com/t5/wireless/wlc-settings-for-high-performance-cells/td-p/2298996#:~:text=The%20highest%20mandatory%20rate%20is,of%2018%20or%2024%20Mbps.

    2. N

       NoWiresIncluded

       2023-12-01

       Selected C3 upvotes

       It is C. Multicast will use the lowest Manditory rate, so set 54Mbps to manditory will have the desired result without having to disable everything else.

    3. M

       most_ahdy

       2024-02-24

       1 upvote

       CAPWAP APs transmit multicast packets at one of the configured mandatory data rates. If reliable reception is a goal, multicast frames must be transmitted at a low data rate, by disabling the higher mandatory data rates. If support for high data rate multicast frames is required, it can be useful to shrink the cell size and disable all lower data rates, or to use Media Stream. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/81671-multicast-wlc-lap.html

    4. R

       rph02533

       2023-06-16

       1 upvote

       Provided answer D looks correct https://community.cisco.com/t5/wireless/wlc-settings-for-high-performance-cells/td-p/2298996#:~:text=never%20use%20two%20mandatory%20rates%2C%20you%20would%20only%20set%20one%20mandatory%20rate%20and%20multicast%20is%20sent%20at%20that%20rate By disabling all below 54 Mbps only 54 Mbps will remain as supported

15. Question 15 of 25

    An engineer must implement Video Stream on a Cisco Wireless Network for a single SSID deployment model. Which feature must be enabled on Cisco Catalyst 9800 Series WLC?

    • AVideo CAC
    • BmDNS Policy
    • CIGMP Snooping
    • DMulticast Direct

    Show answer

    Correct answer: D

    How others answered

    • D75%
    • C25%

    Explanation

    D. is the correct answer. On 9800 under Configuration --> Wireless --> Media Stream --> the check box is called Multicast Direct Enable.

    Adapted from community discussion by GoldLeader · 2023-07-16 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. X

       xaero

       2023-07-24

       Selected D4 upvotes

       https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215859-video-stream-on-catalyst-9800-wireless-c.html VideoStream, known as Multicast Direct

    2. G

       GoldLeader

       2023-07-16

       Selected D2 upvotes

       D. is the correct answer. On 9800 under Configuration --> Wireless --> Media Stream --> the check box is called Multicast Direct Enable.

    3. M

       McMurphy

       2024-11-12

       1 upvote

       According to this link answer is D "General Unicast Video Redirect: allows unicast video flow to wireless clients. Multicast Direct Admission Control Media Stream Admission Control - we enable CAC for media = voice + video. Media Stream - Multicast Direct Parameters Multicast Direct Enable: you must enable this checkbox"

    4. G

       Gumpy1

       2024-05-21

       1 upvote

       Video Stream, means the same as Multicast direct--therefore the question is an engineer must implement multicast direct (the answer wouldn't be multicast direct). https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215859-video-stream-on-catalyst-9800-wireless-c.pdf

16. Question 16 of 25

    A network engineer is configuring a Cisco AireOS 8.2 WLC, Cisco MSE, and Cisco PI with Cisco 3700 Series APs and Cisco Hyperlocation modules. The engineer configures and enables a WLAN with Hyperlocation. During testing, the engineer notices that the Hyperlocation module cannot be seen on the WLC. Which action resolves the issue?

    • AConfigure the APs to be in monitor mode.
    • BEnable Hyperlocation in the Global Configuration settings of the WLC.
    • CAdd the key hash that is used to add the Hyperlocation module to the WLC.
    • DEnable the NTP server that is connected to the Hyperlocation module.

    Show answer

    Correct answer: B

    How others answered

    • B100%

    Explanation

    Step 1 Choose Wireless > Access Points > Global Configuration. Step 2 In the Hyperlocation Config Parameters section: Check the Enable Hyperlocation check box. Based on AP and installed module, checking the Enable Hyperlocation check box enables different location service (PRL-based or AoA-based). https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_011010.html#config-hyperlocation-global:~:text=Check%20the%20Enable%20Hyperlocation%20check%20box.

    Adapted from community discussion by Vlad_Is_Love_ua · 2023-07-24 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. V

       Vlad_Is_Love_ua

       2023-07-24

       Selected B4 upvotes

       Step 1 Choose Wireless > Access Points > Global Configuration. Step 2 In the Hyperlocation Config Parameters section: Check the Enable Hyperlocation check box. Based on AP and installed module, checking the Enable Hyperlocation check box enables different location service (PRL-based or AoA-based). https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-2/config-guide/b_cg82/b_cg82_chapter_011010.html#config-hyperlocation-global:~:text=Check%20the%20Enable%20Hyperlocation%20check%20box.

    2. C

       ce1997d

       2024-09-13

       Selected B1 upvote

       HyperLocation module cannot be seen on the WLC Ensure the correct AP type is used for deployment. Ensure the correct software code is installed for the WLC that supports the HyperLocation module deployment. Ensure HyperLocation is enabled on the WLC global configuration settings. Ensure HyperLocation Module is plugged in right and screws are tight. Ensure that the AP is not in monitor mode. Ensure the correct recommended bracket (AIR-AP-BRACKET-2) is used to install the AP and Module combination.

    3. L

       laputaxu

       2023-07-25

       3 upvotes

       More source https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-2/b_hyperLocation_best_practices_and_troubleshooting_guide.html#id_12821

    4. G

       GoldLeader

       2023-07-16

       Selected B2 upvotes

       Correct answer should be B. Wireless --> Access Points --> Global Configuration --> Enable Hyperlocation checkbox.

17. Question 17 of 25

    An engineer configures Cisco CMX. which uses Layer 2 high availability on primary and secondary CMX instances, according to these specifications: • Primary CMX IP address: 192.168.1.4/24 • Secondary CMX IP address: 192.168.4.4/24 • Virtual IP address: 192.168.4.1/24 During testing, the engineer discovers that the failover fails. Which action resolves the issue?

    • APlace the primary CMX IP address and the virtual IP address in the same subnet.
    • BPlace the secondary CMX IP address and the virtual IP address in different subnets.
    • CUse a virtual IP address with CMX Layer 3 high availability.
    • DPlace the primary CMX IP address and the secondary CMX IP address in the same subnet.

    Show answer

    Correct answer: D

    How others answered

    • D100%

    Explanation

    The primary and secondary must be reachable between each system. Both primary and secondary must be on the same subnet. This is required so the virtual IP address used can be switched to either system. https://www.cisco.com/c/en/us/support/docs/availability/high-availability/213664-configure-cmx-high-availability.html#anc5

    Adapted from community discussion by learn4team · 2024-10-01 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. L

       learn4team

       2024-10-01

       Selected D3 upvotes

       The primary and secondary must be reachable between each system. Both primary and secondary must be on the same subnet. This is required so the virtual IP address used can be switched to either system. https://www.cisco.com/c/en/us/support/docs/availability/high-availability/213664-configure-cmx-high-availability.html#anc5

    2. R

       rrahim

       2025-02-20

       Selected D1 upvote

       D. Place the primary CMX IP address and the secondary CMX IP address in the same subnet. For Layer 2 high availability (HA) to work correctly in Cisco CMX, the primary CMX IP address and the secondary CMX IP address must be in the same subnet. The virtual IP address (VIP) must also be in the same subnet as both the primary and secondary IP addresses. In the given scenario, the primary and secondary CMX IP addresses are in different subnets, which is causing the failover to fail.

    3. S

       Soulmate

       2024-09-24

       2 upvotes

       I think the question is incorrect. There should be another option /choice - all nodes will be in same subnet - as it is layer 2.

    4. L

       largestyle

       2024-09-13

       1 upvote

       If the primary and secondary need to be in the same subnet the answer must be "Place the primary CMX IP address and the secondary CMX IP address in the same subnet." https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-6/cmx_config/b_cg_cmx106/managin g_cisco_cmx_system_settings.html#concept_88FD92666F8140A980280E009C45152F

18. Question 18 of 25

    Which QoS level is recommended for guest services?

    • Agold
    • Bbronze
    • Cplatinum
    • Dsilver

    Show answer

    Correct answer: D

    How others answered

    • D83%
    • B17%

    Explanation

    but in the configuration guide of release 8.10 there is a different indication: Bronze/Background—Provides the lowest bandwidth for guest services. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/quality_of_service.html?bookSearch=true

    Adapted from community discussion by Baio · 2020-12-28 · 7 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. B

       Baio

       2020-12-28

       7 upvotes

       but in the configuration guide of release 8.10 there is a different indication: Bronze/Background—Provides the lowest bandwidth for guest services. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-guide/b_cg810/quality_of_service.html?bookSearch=true

    2. P

       Pawnstar

       2021-09-19

       5 upvotes

       The controller supports four QoS levels: Platinum/Voice—Ensures a high quality of service for voice over wireless. Gold/Video—Supports high-quality video applications. Silver/Best Effort—Supports normal bandwidth for clients. This is the default setting. Bronze/Background—Provides the lowest bandwidth for guest services. Answer is B.

    3. C

       cvndani

       2022-09-26

       4 upvotes

       I cursed for five days the 300-430 ENWLSI oficial course, in Ciso eReader (ENWLSI v1.1.22), page 51 says : -Platinum (voice): Assures a high QoS for voice over wireless. -Gold (video): Supports high-quality video applications. -Silver (best effort): Supports normal bandwidth for clients. -Bronze (background): Provides the lowest bandwidth for guest services.

    4. G

       GameOver

       2022-02-16

       3 upvotes

       QoS Profile Name Maximum DSCP Ceiling Use Case Platinum 46 Most commonly used. Recommended for most enterprise deployments. Gold 34 Limited use. Silver 0 Hotspots/guest

19. Question 19 of 25

    Select 2

    Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

    • AmDNS uses only UDP port 5436 as a destination port.
    • BmDNS cannot use UDP port 5353 as the destination port.
    • CmDNS is not supported on FlexConnect APs with a locally switched WLAN.
    • DController software must be newer than 7.0.6+.
    • EmDNS is not supported over IPv6.

    Show answer

    Correct answer: C, E

    How others answered

    • CE100%

    Explanation

    C E ARE CORRECT https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/multicast_broadcast_setup.html Restrictions for Configuring Multicast DNS mDNS over IPv6 is not supported. mDNS snooping is not supported on access points in FlexConnect mode in a locally switched WLAN and mesh access points. For locally switched WLANs, all multicast traffic including mDNS is simply bridged between the local VLAN and the SSID.

    Adapted from community discussion by shasxz · 2021-09-01 · 20 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. S

       shasxz

       2021-09-01

       20 upvotes

       C E ARE CORRECT https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/multicast_broadcast_setup.html Restrictions for Configuring Multicast DNS mDNS over IPv6 is not supported. mDNS snooping is not supported on access points in FlexConnect mode in a locally switched WLAN and mesh access points. For locally switched WLANs, all multicast traffic including mDNS is simply bridged between the local VLAN and the SSID.

    2. P

       Profiteur

       2021-09-05

       5 upvotes

       Agreed, we also have the first introduction on mDNS on the release 7.4; Support for the Multicast DNS (mDNS) protocol is introduced. Check older release if you need; https://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn74.html

    3. P

       Pawnstar

       2022-04-27

       4 upvotes

       Answer is C and E. Restrictions for Configuring Multicast DNS mDNS over IPv6 is not supported. mDNS snooping is not supported on access points in FlexConnect mode in a locally switched WLAN and mesh access points. For locally switched WLANs, all multicast traffic including mDNS is simply bridged between the local VLAN and the SSID.

    4. R

       rrahim

       2025-02-21

       Selected C, E1 upvote

       When configuring mDNS (Multicast DNS), the following restrictions apply: C. mDNS is not supported on FlexConnect APs with a locally switched WLAN: mDNS is not supported on FlexConnect APs when the WLAN is configured for local switching. This is because mDNS relies on centralized processing on the Wireless LAN Controller (WLC), and local switching bypasses the WLC. E. mDNS is not supported over IPv6: mDNS is designed to work with IPv4 and is not supported over IPv6. If the network uses IPv6, mDNS will not function.

20. Question 20 of 25

    Select 2

    An IT department receives a report of a stolen laptop and has information on the MAC address of the laptop. Which two settings must be set on the wireless infrastructure to determine its location? (Choose two.)

    • ALocation History for Clients must be enabled on the MSE.
    • BClient location tracking must be enabled on the MSE.
    • CLocation History for Visitors must be enabled on the MSE.
    • DLocation History for Rogue APs & Rogue Clients must be enabled on the MSE.
    • ETracking optimization must be enabled on the WLC.

    Show answer

    Correct answer: B, E

    How others answered

    • BE40%
    • AB40%
    • BD20%

    Only 40% agreed on this answer — treat it as contested rather than settled.

    Explanation

    B. Client location tracking must be enabled on the MSE: This setting is necessary to track the location of the clients, including the stolen laptop, on the maps. E. Tracking optimization must be enabled on the WLC: This setting ensures that the WLC optimizes the tracking process by sending only relevant information to the MSE, reducing network traffic.

    Adapted from community discussion by JimDiGriz · 2023-10-05 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. J

       JimDiGriz

       2023-10-05

       Selected B, E2 upvotes

       B. Client location tracking must be enabled on the MSE: This setting is necessary to track the location of the clients, including the stolen laptop, on the maps. E. Tracking optimization must be enabled on the WLC: This setting ensures that the WLC optimizes the tracking process by sending only relevant information to the MSE, reducing network traffic.

    2. G

       Gumpy1

       2024-10-10

       1 upvote

       A & B A-Location History for Clients - where it was B-Client location tracking - for current tracking Not C - it isn’t a visitor, but even if it was it was still a client, it isn’t listed as visitor location history in docs that I saw Not D - this is not a Rogue AP or Rogue Client - it was an employee laptop Not E - Tracking Optimization is for RFID tags - not laptops, laptops do not have RFID tags in them Configuring MSE Tracking and History Parameters https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-7/user/guide/bk_CiscoPrimeInfrastructure_3_7_0_User_Guide/bk_CiscoPrimeInfrastructure_3_7_0_User_Guide_chapter_0100110.html#task_1153829

    3. P

       PauBau

       2023-10-05

       2 upvotes

       I would go for A and B. You would see where a client currently is or where it has been seen last which would be relevant if it is now switched off but you still want to locate it. C: N/A as we could assume it is for a corporate client D: N/A, same as C E: Tracking optimization is just for channels 1,6,11 on 2.4 GHz, so N/A for 5GHz

    4. R

       rph02533

       2023-06-15

       1 upvote

       A & B seems correct To generate report and investigate further both - history and tracking parameters have to be configured prior the incident https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/MSE_CMX/8_0_MSE_CAS/configuring_mse___system_settings_and_services.html https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/MSE_CMX/8_0_MSE_CAS/monitoring_the_system_and___services.html#:~:text=client%20report%20results-,Client%20Location,historical%20location%20information%20of%20a%20wireless%20client%20detected%20by%20an%20MSE.,-Note

21. Question 21 of 25

    After looking in the logs, an engineer notices that RRM keeps changing the channels for non-IEEE 802.11 interferers. After surveying the area, it has been decided that RRM should not change the channel. Which feature must be enabled to ignore non-802.11 interference?

    • AAvoid Cisco AP Load
    • BAvoid Non-802.11 Noise
    • CAvoid Persistent Non-WiFi Interference
    • DAvoid Foreign AP Interference

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    Should be C correct Check the Avoid Non-802.11a (802.11b) Noise check box to cause the controller’s RRM algorithms to consider noise (non-802.11 traffic) in the channel when assigning channels to lightweight access points, or uncheck it to disable this feature. For example, RRM may have access points avoid channels with significant interference from nonaccess point sources, such as microwave ovens. The default value is selected. Check the Avoid Persistent Non-WiFi Interference check box to configure the controller to stop ignoring persistent non-Wi-Fi interference in new channel calculation. The persistent non-Wi-Fi interference is considered during the metric calculation for channels. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-6/config-guide/b_cg86/radio_resource_management.html

    Adapted from community discussion by Cyrillka · 2023-09-16 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. C

       Cyrillka

       2023-09-16

       5 upvotes

       Should be C correct Check the Avoid Non-802.11a (802.11b) Noise check box to cause the controller’s RRM algorithms to consider noise (non-802.11 traffic) in the channel when assigning channels to lightweight access points, or uncheck it to disable this feature. For example, RRM may have access points avoid channels with significant interference from nonaccess point sources, such as microwave ovens. The default value is selected. Check the Avoid Persistent Non-WiFi Interference check box to configure the controller to stop ignoring persistent non-Wi-Fi interference in new channel calculation. The persistent non-Wi-Fi interference is considered during the metric calculation for channels. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-6/config-guide/b_cg86/radio_resource_management.html

    2. R

       rrahim

       2025-02-21

       Selected C1 upvote

       To prevent Radio Resource Management (RRM) from changing channels due to non-802.11 interference, the Avoid Persistent Non-WiFi Interference feature must be enabled. Here’s why: Avoid Persistent Non-WiFi Interference: This feature allows RRM to ignore non-802.11 interference (e.g., from microwaves, cordless phones, or Bluetooth devices) when making channel decisions. It ensures that RRM does not unnecessarily change channels in response to transient or persistent non-WiFi interference. Why it’s the solution: If RRM keeps changing channels due to non-802.11 interference, it can disrupt network performance. Enabling this feature ensures that RRM focuses on optimizing channels based on WiFi-related factors rather than non-WiFi interference.

    3. A

       anonymonkey

       2024-03-07

       4 upvotes

       ugh, it's actually unchecking this and checking C...tricky https://community.cisco.com/t5/wireless/non-wifi-interference/td-p/2444494

    4. T

       twoplanker

       2024-12-02

       2 upvotes

       I actually got this question on my last exam verbatim and yes, the question is written incorrectly. It should be "disable" but either way, C is correct.

22. Question 22 of 25

    An engineer must configure MSE to provide guests access using social media authentication. Which service does the engineer configure so that guests use Facebook credentials to authenticate?

    • ASocial Connect
    • BClient Connect
    • CVisitor Connect
    • DGuest Connect

    Show answer

    Correct answer: C

    How others answered

    • C100%

    Explanation

    Visitor Connect as Captive Portal CMX Visitor Connect is an intuitive simple guest captive portal that allows easy onboarding of the guests. The Visitor Connect is location aware and serve different splash templates to different locations or zones. •Social authentication plug-in like Facebook, Linkedin, and Google+ https://www.cisco.com/c/en/us/td/docs/wireless/mse/7-6/CMX_Dashboard/Guide/Cisco_CMX_Dashboard_Config_Guide/CMX_Dashboard_Visitor_Connect.html

    Adapted from community discussion by Kyle9856 · 2022-09-30 · 5 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. K

       kthekillerc

       2022-08-15

       9 upvotes

       Correction the answer is C, also another question on the exam that is not in this dump is what is the Facebook url redirect port and it is http://mse>8084/fbwifi/forward.

    2. C

       Coffee313

       2022-03-14

       8 upvotes

       C is correct https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/CMX_Connect_Engage_Visitor_Connect/Guide/Cisco_CMX_Connect_Engage_Config_Guide_VC/Overview.html

    3. K

       Kyle9856

       2022-09-30

       Selected C5 upvotes

       Visitor Connect as Captive Portal CMX Visitor Connect is an intuitive simple guest captive portal that allows easy onboarding of the guests. The Visitor Connect is location aware and serve different splash templates to different locations or zones. •Social authentication plug-in like Facebook, Linkedin, and Google+ https://www.cisco.com/c/en/us/td/docs/wireless/mse/7-6/CMX_Dashboard/Guide/Cisco_CMX_Dashboard_Config_Guide/CMX_Dashboard_Visitor_Connect.html

    4. R

       rrahim

       2025-02-22

       Selected C1 upvote

       Visitor Connect: This feature is part of the Cisco CMX Connect and Engage solution and provides a customizable guest access portal. It supports social authentication plug-ins (e.g., Facebook, LinkedIn, Google+) for guest onboarding, making it the correct choice for enabling social media authentication. How it works: Visitor Connect integrates with the MSE, WLC, and lightweight APs to provide a seamless guest access experience. Guests can log in using their social media accounts, and the system handles the authentication process. Why not the other options? A. Social Connect: While this might sound like the correct option, the documentation confirms that Visitor Connect is the feature that supports social authentication plug-ins.

23. Question 23 of 25

    Select 2

    Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)

    • AAfter enabling Cisco Hyperlocation on Cisco CMX, the APs and the wireless LAN controller must be restarted.
    • BNTP can be configured, but that is not recommended.
    • CThe Cisco Hyperlocation feature must be enabled on the wireless LAN controller and Cisco CMX.
    • DThe Cisco Hyperlocation feature must be enabled only on the wireless LAN controller.
    • EIf the Cisco CMX server is a VM, a high-end VM is needed for Cisco Hyperlocation deployments.

    Show answer

    Correct answer: C, E

    How others answered

    • CE100%

    Explanation

    Agreed; Sauce is here: https://www.cisco.com/c/en/us/support/docs/wireless/connected-mobile-experiences/214757-cmx-location-limitations-and-hardware-re.html CMX limitations The amount of data the CMX Location can handle heavily depends on the node size. Software limitations of Low, Standard and High end node can be found in the table below: Limitations Low-end Standard High-end Hyperlocation support No No Yes

    Adapted from community discussion by Profiteur · 2022-03-05 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. P

       Profiteur

       2022-03-05

       6 upvotes

       Agreed; Sauce is here: https://www.cisco.com/c/en/us/support/docs/wireless/connected-mobile-experiences/214757-cmx-location-limitations-and-hardware-re.html CMX limitations The amount of data the CMX Location can handle heavily depends on the node size. Software limitations of Low, Standard and High end node can be found in the table below: Limitations Low-end Standard High-end Hyperlocation support No No Yes

    2. C

       Citizenx

       2023-05-04

       6 upvotes

       C+E are right. A is wrong because only APs and the hyperlocation service on CMX must be restarted. -NTP is very important -HIGH end vm needed.

    3. P

       powerslave666

       2022-06-21

       1 upvote

       It doesn't indicate restart: The major steps involved in setting up a Hyperlocation system are: 1. Assemble the APs and mount them to the ceiling, recording the exact X, Y, height, and orientation of the devices. 2. Install Cisco WLC and connect the APs to Cisco WLC. 3. Enable the functions that are required, including Hyperlocation, in Cisco WLC. 4. Import Cisco WLC into Cisco PI. 5. Place the AP on the map in Cisco PI. 6. Save and export the map from Cisco PI to a local storage point. 7. Install Cisco CMX. 8. Configure and enable Hyperlocation. 9. Import the map from the local storage point. 10. Verify that the system is showing the clients correctly on the map and that the APs are placed and oriented correctly. 11. Complete Location Accuracy testing of static clients to determine the level of accuracy obtained. By following these basic steps, a system can be up and running within one day, and the accuracy of the system can be gauged.

    4. M

       Mimimimimi

       2022-12-30

       3 upvotes

       I believe the answer is C&E. Following Skliffi's URL: Wrong answers: Answer A: CMX & AP's need a restart, not the WLC B: Must always be configured. D: It must be enabled on CMX AND WLC C: Features must indeed be enabled on WLC & CMX E: A high-end VM is required.

24. Question 24 of 25

    An engineer must track guest traffic flow using the WLAN infrastructure. Which Cisco CMX feature must be configured and used to accomplish this tracking?

    • Aanalytics
    • Bconnect and engage
    • Cpresence
    • Ddetect and locate

    Show answer

    Correct answer: C

    How others answered

    • C56%
    • A22%

    Only 56% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I believe the answer to be Presence Read the difference between Presence Analytics and Detect and Locate - Since I read the it to be related to traffic I say Presence Presence Analytics https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-4/cmx_config/b_cg_cmx104/the_cisco_cmx_presence_analytics_service.html#concept_7C141AE7189344CA8F9238F4A7ED1DFD vs Detect and Locate https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-4/cmx_config/b_cg_cmx104/the_cisco_cmx_detect_and_locate_service.html

    Adapted from community discussion by HarryPotter69 · 2022-03-29 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. C

       Citizenx

       2022-05-17

       5 upvotes

       After reading more about this, i think it should be presence (c), and to be in detail: presence analytics: it gives you info about visitors, passerby of visitors and peak hours. The detect an locate is more about tracking objects.

    2. C

       cskshiet

       2021-06-02

       3 upvotes

       Correct answer is C: The Cisco CMX Presence Analytics service is a comprehensive analytics and engagement platform that uses APs to detect visitor presence based on their mobile devices’ Received Signal Strength Indication (RSSI). The AP detects these client mobile devices irrespective of the latter’s wireless association state as long as they are within the specified signal range, and the wireless option is enabled on the mobile device (ability to detect devices wirelessly even if they are not connected to the network https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-4/cmx_config/b_cg_cmx104/the_cisco_cmx_presence_analytics_service.html

    3. G

       gabtown

       2022-09-19

       Selected C4 upvotes

       Answer is C. https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-4/cmx_config/b_cg_cmx104/the_cisco_cmx_presence_analytics_service.html#concept_7C141AE7189344CA8F9238F4A7ED1DFD

    4. H

       HarryPotter69

       2022-03-29

       3 upvotes

       I believe the answer to be Presence Read the difference between Presence Analytics and Detect and Locate - Since I read the it to be related to traffic I say Presence Presence Analytics https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-4/cmx_config/b_cg_cmx104/the_cisco_cmx_presence_analytics_service.html#concept_7C141AE7189344CA8F9238F4A7ED1DFD vs Detect and Locate https://www.cisco.com/c/en/us/td/docs/wireless/mse/10-4/cmx_config/b_cg_cmx104/the_cisco_cmx_detect_and_locate_service.html

25. Question 25 of 25

    

    Refer to the exhibit. A customer has implemented Cisco FlexConnect deployments with different WLANs around the globe and is opening a new branch in a different location. The engineer's task is to execute all the wireless configuration and to suggest how to configure the switch ports for new APs. Which configuration must the switching team use on the switch port?

    • Atrunk mode
    • Baccess mode
    • Csingle VLAN
    • Dmultiple VLAN

    Show answer

    Correct answer: A

    How others answered

    • A67%
    • B33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    ChatGPT says: To configure switch ports for new APs in a FlexConnect deployment, the switching team should use the following configuration: Configure the switch port as an access port and assign it to the appropriate VLAN. Enable Power over Ethernet (PoE) on the switch port to provide power to the AP. Enable PortFast on the switch port to speed up the process of moving the port to the forwarding state. Configure the switch port as an edge port to prevent the port from participating in Spanning Tree Protocol (STP) convergence. Configure the switch port with the appropriate Quality of Service (QoS) settings to ensure that traffic from the AP is given priority over other traffic. For FlexConnect deployments, it is recommended to configure the switch port as an access port rather than a trunk port. This allows the AP to communicate directly with the FlexConnect controller without interference from other VLANs. Additionally, when configuring the switch port as an access port, ensure that the native VLAN on the switch port matches the VLAN assigned to the WLAN. It is also important to configure the AP with the appropriate VLAN and SSID settings to ensure that it can communicate with the FlexConnect controller and provide wireless access to clients.

    Adapted from community discussion by JimDiGriz · 2023-10-02 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 300-430 or CertExamHQ.

    1. F

       Fortinet

       2022-02-27

       9 upvotes

       answer should be B, there is no wlan being switch locally as shown in the picture by not checking flexconnect local switching

    2. J

       JimDiGriz

       2023-10-02

       2 upvotes

       ChatGPT says: To configure switch ports for new APs in a FlexConnect deployment, the switching team should use the following configuration: Configure the switch port as an access port and assign it to the appropriate VLAN. Enable Power over Ethernet (PoE) on the switch port to provide power to the AP. Enable PortFast on the switch port to speed up the process of moving the port to the forwarding state. Configure the switch port as an edge port to prevent the port from participating in Spanning Tree Protocol (STP) convergence. Configure the switch port with the appropriate Quality of Service (QoS) settings to ensure that traffic from the AP is given priority over other traffic. For FlexConnect deployments, it is recommended to configure the switch port as an access port rather than a trunk port. This allows the AP to communicate directly with the FlexConnect controller without interference from other VLANs. Additionally, when configuring the switch port as an access port, ensure that the native VLAN on the switch port matches the VLAN assigned to the WLAN. It is also important to configure the AP with the appropriate VLAN and SSID settings to ensure that it can communicate with the FlexConnect controller and provide wireless access to clients.

    3. G

       GoldLeader

       2024-01-15

       Selected A4 upvotes

       Answer A. Trunk Mode is the best answer. I think this question is trying to be tricky by showing teh FlexConnect Local Switching enabled checkbox "unchecked". And while true if this was the only WLAN enabled an access port config would work. This however is not in keeping with the whole point of FlexConnect which is to do local switching in which case a trunk port is required.

    4. K

       kashika_2

       2022-04-03

       3 upvotes

       I would day A correct. Picture shows how to configure one wlan, OEAP Flexconnect should be configured on the AP not the wlan. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/215928-flexconnect-oeap-with-split-tunneling-co.html

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-430 practice, question 1 of 25