NEW QUESTION 1
Refer to the exhibit. An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection must be made from the direction drop-down list?

• A. It must be Inbound because traffic goes to the WLC.
• B. Packet direction has no significance; it is always Any.
• C. It must be Outbound because it is traffic that is generated from the WLC.
• D. To have the complete list of options, the CPU ACL must be created only by the CLI.

Answer: A

NEW QUESTION 2
Which statement about the VideoStream/Multicast Direct feature is true?

• A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
• B. Each VideoStream client acknowledges receiving a video IP multicast stream.
• C. It converts the unicast frame to a multicast frame over the air.
• D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/multicast_broadcast_setup.html

NEW QUESTION 3
A network engineer observes a spike in controller CPU overhead and overall network utilization after multicast is enabled on a controller with 500 APs. Which feature connects the issue?

• A. controller IGMP snooping
• B. multicast AP multicast mode
• C. broadcast forwarding
• D. unicast AP multicast mode

Answer: B

NEW QUESTION 4
An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

• A. The Cisco CMX instances are installed in the same subnet.
• B. The types of the primary and secondary Cisco CMX installations differ.
• C. The delay between the primary and secondary instance is 200 ms.
• D. The sizes of the primary and secondary Cisco CMX installations differ.
• E. Both Cisco CMX installations are virtual.

Answer: BD

NEW QUESTION 5
Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?

• A. The Cisco CMX server receives NetFlow data from the WLC.
• B. The Cisco CMX server receives NMSP traffic from the WLC.
• C. The Cisco CMX server receives SNMP traffic from the WLC.
• D. The Cisco CMX server receives Angle-of-Arrival data from the WLC.

Answer: D

NEW QUESTION 6
What is an important consideration when implementing a dual SSID design for BYOD?

• A. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
• B. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
• C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
• D. One SSID is for provisioning and the other SSID is for gaining access to the networ
• E. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.

Answer: D

NEW QUESTION 7
A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded. What is causing the issue?

• A. There is an IEEE invalid 802.1X authentication policy on the authentication server.
• B. The user Active Directory account is locked out after several failed attempts.
• C. There is an invalid 802.1X authentication policy on the authenticator.
• D. The laptop has not received a valid IP address from the wireless controller.

Answer: C

NEW QUESTION 8
An engineer must implement Cisco Identity-Based Networking Services at a remote site using ISE to dynamically assign groups of users to specific IP subnets. If the subnet assigned to a client is available at the remote site, then traffic must be offloaded locally, and subnets are unavailable at the remote site must be tunneled back to the WLC. Which feature meets these requirements?

• A. learn client IP address
• B. FlexConnect local authentication
• C. VLAN-based central switching
• D. central DHCP processing

Answer: C

NEW QUESTION 9
An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

• A. network policy server
• B. RADIUS
• C. TACACS+
• D. LDAP

Answer: C

NEW QUESTION 10
Which two restrictions are in place with regards to configuring mDNS? (Choose two.)

• A. mDNS uses only UDP port 5436 as a destination port.
• B. mDNS cannot use UDP port 5353 as the destination port.
• C. mDNS is not supported on FlexConnect APs with a locally switched WLAN.
• D. Controller software must be newer than 7.0.6+.
• E. mDNS is not supported over IPv6.

Answer: CD

NEW QUESTION 11
An engineer must implement rogue containment for an SSID. What is the maximum number of APs that should be used for containment?

• A. 1
• B. 2
• C. 3
• D. 4

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/technology/roguedetection_deploy/Rogue_Detection.html

NEW QUESTION 12
Refer to the exhibit.

Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)

• A. TSPEC
• B. SIFS
• C. 802.11e
• D. WMM
• E. APSD

Answer: CD

NEW QUESTION 13
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?

• A. Change the WLAN reserved bandwidth for WebEx
• B. Create an AVC profile for WebEx
• C. Create an ACL for WebEx
• D. Change the AVC application WebEx-app-sharing to mark

Answer: B

NEW QUESTION 14
CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

• A. Allow HTTP traffic only before authentication and block all the traffic.
• B. Allow all the traffic before authentication and intercept HTTPS only.
• C. Allow HTTPs traffic only before authentication and block all other traffic.
• D. Allow all the traffic before authentication and intercept HTTP only.
• E. Allow SNMP traffic only before authentication and block all the traffic.

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/CMX_Connect_Engage_Visitor_Connect/Guide/Cisco_CMX_Connect_Engage_Config_Guide_VC/CMX_Facebook_Wi-Fi.html

NEW QUESTION 15
The IT manager is asking the wireless team to get a report for all guest user associations during the past two weeks. In which two formats can Cisco Prime save this report? (Choose two.)

• A. CSV
• B. PDF
• C. XLS
• D. DOC
• E. plain text

Answer: AB

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/3-2/user/guide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide/bk_CiscoPrimeInfrastructure_3_2_0_UserGuide_chapter_01010.html

NEW QUESTION 16
An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

• A. pre-authentication
• B. local EAP
• C. authentication caching
• D. Cisco Centralized Key Management

Answer: B

NEW QUESTION 17
An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)

• A. X, Y real location
• B. client description
• C. AP name
• D. client MAC address
• E. WLC IP address

Answer: AD

NEW QUESTION 18
A customer is experiencing performance issues with its wireless network and asks a wireless engineer to provide information about all sources of interference and their impacts to the wireless network over the past few days. Where can the requested information be accessed?

• A. CleanAir reports on Cisco Prime Infrastructure
• B. Performance reports on Cisco Prime Infrastructure
• C. Interference Devices reports on Cisco Wireless LAN Controller
• D. Air Quality reports on Cisco Wireless LAN Controller

Answer: A

NEW QUESTION 19
Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)

• A. authentication-local/switch-local
• B. WPA2 personal
• C. authentication-central/switch-central
• D. lightweight mode
• E. standalone mode
• F. WEB authentication

Answer: ABE

NEW QUESTION 20
What is the difference between PIM sparse mode and PIM dense mode?

• A. Sparse mode supports only one switc
• B. Dense mode supports multiswitch networks.
• C. Sparse mode flood
• D. Dense mode uses distribution trees.
• E. Sparse mode uses distribution tree
• F. Dense mode floods.
• G. Sparse mode supports multiswitch network
• H. Dense mode supports only one switch.

Answer: C

NEW QUESTION 21
Which two events are outcomes of a successful RF jamming attack? (Choose two.)

• A. disruption of WLAN services
• B. unauthentication association
• C. deauthentication broadcast
• D. deauthentication multicast
• E. physical damage to AP hardware

Answer: AE

NEW QUESTION 22
Which AP model of the Cisco Aironet Active Sensor is used with Cisco DNA Center?

• A. 1800s
• B. 3600e
• C. 3800s
• D. 4800i

Answer: A

NEW QUESTION 23
Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

• A. Configure the certificate, WLAN, and radio interface on WGB.
• B. Configure the certificate on the WLC.
• C. Configure WLAN to authenticate using ISE.
• D. Configure the access point with the root certificate from ISE.
• E. Configure WGB as a network device in ISE.
• F. Configure a policy on ISE to allow devices to connect that validate the certificate.

Answer: ACF

NEW QUESTION 24
All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?

• A. The multicast group includes all APs
• B. The wrong multicast address was used
• C. The multicast group is assigned the wrong VLAN
• D. Multicast IGMP snooping is not enabled

Answer: D

NEW QUESTION 25
When implementing self-registration for guest/BYOD devices, what happens when an employee tries to connect four devices to the network at the same time?

• A. The last device is removed and the newly added device is updated as active device.
• B. The registration is allowed, but only one device is connected at any given time.
• C. All devices are allowed on the network simultaneously.
• D. Purge time dictates how long a device is registered to the portal.

Answer: B

NEW QUESTION 26
......