2018/October Braindump2go 300-375 Exam Dumps with PDF and VCE New Updated Today! Folliwing are some new 300-375 Real Exam Questions:
1.|2018 Latest 300-375 Exam Dumps (VCE & PDF) 133Q&As Download:
https://www.braindump2go.com/300-375.html
2.|2018 Latest 300-375 Exam Questions & Answers Download:
https://drive.google.com/drive/folders/0B75b5xYLjSSNR21JWVIyUWFaTWM?usp=sharing
QUESTION 120
Scenario
Local Web Auth has been configured on the East-WLC-2504A, but it is not working. Determine which actions must be taken to restore the Local Web Auth service. The Local Web Auth service must operate only with the Contractors WLAN.
Contractors WLAN ID – 10
Employees WLAN ID – 2
Note, not all menu items, text boxes, or radio buttons are active.
Virtual Terminal
Which four changes must be made to configuration parameters to restore the Local Web Auth feature on the East-WLC-2504A? Assume the passwords are correctly entered as “ciscotest”. (Choose four.)
A. Remove the existing Local Net User Bill Smith and add a New Local Net User “Bill Smith” password “ciscotest’, WLAN Profile “Contractors”.
B. Remove WLAN 10 and WLAN 2, replace WLAN 10 with Profile Name Employees and SSID Contractors;
replace WLAN 2 with Profile Name Employees and SSID Employees.
C. Remove WLAN 10 and WLAN 2, replace WLAN 10 with Profile Name Contractors and SSID Contractors,
replace WLAN 2 with Profile Name Employees and SSID Employees.
D. Change the Layer 2 security to None on the Contractors WLAN.
E. Under Layer 3 Security, change the Layer 3 Security to Web Policy on the Contractors WLAN.
F. Under Security Local Net Users add a New Local Net User “Bill Smith” password “Cisco”, interface/ Interface Group “east-wing”.
G. Change the Layer 2 Security to None + EAP Pass-through on the Contractors WLAN.
H. Under WLANs > Edit “Contractors “change the interface/Interface group to “east-wing”.
Answer: CEFG
QUESTION 121
An engineer is implementing SNMP v3 on a Cisco 5700 Series WLC. Which three commands are the minimum needed to configure SNMP v3? (Choose three.)
A. snmp-server enable traps
B. snmp-server group
C. snmp-server user
D. snmp-server community
E. snmp-server context
F. snmp-server engineID
Answer: BCF
QUESTION 122
Refer to the exhibit. An engineer has configured a BYOD policy that allows for printing on the WLAN utilizing Bonjour services. However, the engineer cannot get printing working. The WLC firmware is 8.x. the printer is connected on the wired network where a few of the access points are also connected. Which reason that printing is not working is true?
A. Location-specific service is not enabled on the WLC.
B. Secure Web Mode Cipher-Option SSLv2 is not enabled.
C. mBNS and IGMP snooping is not enabled on the WLC.
D. IGMP Query Interval value is too low.
E. The number of mDNS services exceeds firmware limits.
Answer: A
QUESTION 123
Which two fast roaming algorithms will allow a WLAN client to roam to a new AP and re-establish a new session key without a full reauthentication of the WLAN client? (Choose two.)
A. PKC
B. GTK
C. PMK
D. PTK
E. CKM
Answer: AE
QUESTION 124
A new MSE with wIPS service has been installed and no alarm information appears to be reaching the MSE from controllers.
What protocol must be allowed to reach the MSE from the controllers?
A. NMSP
B. SOAP/XML
C. SNMP
D. CAPWAP
Answer: B
QUESTION 125
Which condition introduce security risk to a BYOD policy?
A. enterprise-managed MDM platform used for personal devices
B. access to LAN without implementing MDM solution
C. enforcement of BYOD access to internet only network
D. enterprise life-cycle enforcement of personal device refresh
Answer: B
QUESTION 126
An engineer ran the PCI report in Cisco Prime Infrastructure and received a warning on PCIDSS Requirement 2.1.1 that the SNMP strings are set to default and must be changed. Which tab in the Cisco WLC can the engineer use to navigate to these settings?
A. Management
B. Security
C. Controller
D. Wireless
Answer: A
QUESTION 127
Refer to the exhibit. A network engineer must configure a WLAN on a Cisco IOS-XE controller to support corporate devices (using VLAN 30) and BYOD (using VLAN 40) on the same secure SSID. The security team has built an ISE deployment to be used for VLAN assignment and to restrict access based on policy and posture compliance.
Given the existing WLAN configuration, which configuration change must be made?
A. remove ip dhcp required
B. Add aaa-override
C. Remove nac
D. Add mac-filtering default
Answer: B
QUESTION 128
Which EAP method can an AP use to authenticate to the wired network?
A. EAP-GTC
B. EAP-MD5
C. EAP-TLS
D. EAP-FAST
Answer: C
QUESTION 129
A wireless engineer must implement a corporate wireless network for a large company with ID 338860948 in the most efficient way possible. The wireless network must support a total of 32 VLANS for 300 employees in different departments.
What is the best configuration option in this scenario?
A. Configure a second WLC to support half of the APs in the deployment.
B. Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.
C. Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.
D. Configure one single SSID and implement Cisco ISE VLLAN assignment according to different user roles.
Answer: B
QUESTION 130
An engineer with ID 338860948 is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. Which option is the resulting ACL when a Human Resources user connects?
A. HR_ACL only
B. HR_ACL appended with BASE_ACL
C. BASE_ACL appended with HR_ACL
D. BASE_ACL only
Answer: A
QUESTION 131
An engineer is adding APs to an existing VoWLAN to allow for location based services. Which option will the primary change be to the network?
A. increased transmit power on all APs
B. moving to a bridging model
C. AP footprint
D. cell overlap would decrease
E. triangulation of devices
Answer: C
QUESTION 132
Refer to the exhibit. An engineer utilizing ISE as the wireless AAA service noticed that the accounting process on the server at 10.10.2.3 has failed, but authentication process is still functional. Which ISE nodes receive WLC RADIUS traffic, using the CLI output and assuming the WLAN uses the servers in their indexed order?
A. authentication to 10.10.2.4, accounting to 10.10.2.3.
B. authentication to 10.10.2.3, accounting to 10.10.2.3.
C. authentication to 10.10.2.4, accounting to 10.10.2.4.
D. authentication to 10.10.2.3, accounting to 10.10.2.4.
Answer: B
QUESTION 133
Refer to the exhibit. You are configuring a controller that runs Cisco IOS XE by using the CLI. Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)
A. mandatory
B. association-comeback
C. SA teardown protection
D. saquery-retry-time
E. enable
F. comeback-time
Answer: ABD
!!!RECOMMEND!!!
1.|2018 Latest 300-375 Exam Dumps (VCE & PDF) 133Q&As Download:
https://www.braindump2go.com/300-375.html
2.|2018 Latest 300-375 Study Guide Video: