Cisco Wireless Controller Questions 3

An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which configuration must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

• pre-authentication

• local EAP

• authentication caching

• Cisco Centralized Key Management

An IT team is growing quickly and needs a solution for management device access. The solution must authenticate users from an external repository instead of the current local on the WLC, and it must also identify the user and determine what level of access users should have. Which protocol do you recommend to achieve these goals?

• network policy server

• RADIUS

• TACACS+

• LDAP

Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

• • A. Configure the certificate, WLAN, and radio interface on WGB.

• • B. Configure the certificate on the WLC.

• • C. Configure WLAN to authenticate using ISE.

• • D. Configure the access point with the root certificate from ISE.

• • F. Configure a policy on ISE to allow devices to connect that validate the certificate.

During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

• WPA key

• session key

• encryption key

• shared-secret key

A network is set up to support wired and wireless clients. Both types must authenticate using 802.1X before connecting to the network. Different types of client authentication must be separated on a Cisco ISE deployment. Which two configuration items achieve this task? (Choose two.)

• A. device profiles

• B. policy sets

• C. separate networks

• D. policy groups

• E. policy results

An engineer is troubleshooting a Cisco CMX high-availability deployment and notices that the primary and backup Cisco CMX servers are both considered primary. Which command must the engineer run on the backup server?

• cmxha convert backup

• cmxha backup convert

• cmxha secondary convert

• cmxha convert secondary

A network administrator managing a Cisco Catalyst 9800-80 WLC must place all iOS connected devices to the guest SSID on VLAN 101. The rest of the clients must connect on VLAN 102 distribute load across subnets. To achieve this configuration, the administrator configures a local policy on the WLC. Which two configurations are required? (Choose two.)

• A. Assign a policy map under global security policy settings.

• B. Add local profiling policy under global security policy settings.

• C. Create a service template.

• D. Allow HTTP and DHCP profiling under policy map.

• E. Enable device classification on global wireless settings.

An engineer is assembling a PCI report for compliance purposes and must include missed best practices that are related to WLAN controllers. The engineer has access to all WLCs, Cisco MSE, and Cisco Prime Infrastructure. Which method most efficiently displays a summary of inconsistencies?

• WLC running-config

• Cisco Prime Infrastructure monitoring

• Cisco Prime Infrastructure reporting

• WLC logs

An engineer is ensuring that, on the IEEE 802.1X wireless network, clients authenticate using a central repository and local credentials on the Cisco WLC. Which two configuration elements must be completed on the WLAN? (Choose two.)

• TACACS+

• MAC authentication

• local EAP enabled

• web authentication

• LDAP server

An engineer must enable LSS for the AppleTV mDNS service only when ORIGIN is set to Wired. Which action meets this requirement?

• Set ORIGIN to Wired. Enable LSS by using the config mdns service lss All command.

• Set ORIGIN to Wired. Enable LSS by using the config mdns service lss AppleTV command.

• Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss All command.

• Set ORIGIN to either Wireless or All. Enable LSS by using the config mdns service Iss enable AppleTV command.