NEW QUESTION 1
When using a Cisco Catalyst 9800 Series Wireless Controller, which statement about AutoQoS is true?

• A. It has a set of predefined profiles that you cannot modify further
• B. It matches traffic and assigns each matched packet to QoS groups
• C. It automates deployment of wired QoS and makes wireless QoS implementation easier
• D. It allows the output policy map to put specific QoS queues into specific subgroups

Answer: B

NEW QUESTION 2
A corporation has recently implemented a BYOD policy at their HQ. Which two risks should the security director be concerned about? (Choose two.)

• A. network analyzers
• B. malware
• C. lost and stolen devices
• D. keyloggers
• E. unauthorized users

Answer: BC

NEW QUESTION 3
Which devices can be tracked with the Cisco Context Aware Services?

• A. wired and wireless devices
• B. wireless devices
• C. wired devices
• D. Cisco certified wireless devices

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/context-aware-software/110836-cas-faq.html

NEW QUESTION 4
An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

• A. Static WEP + 802.1X
• B. WPA+WPA2
• C. Static WEP
• D. CKIP
• E. 802.1X

Answer: BC

NEW QUESTION 5
An engineer completed the basic installation for two Cisco CMX servers and is in the process of configuring high availability, but it fails. Which two statements about the root of the issue are true? (Choose two.)

• A. The Cisco CMX instances are installed in the same subnet.
• B. The types of the primary and secondary Cisco CMX installations differ.
• C. The delay between the primary and secondary instance is 200 ms.
• D. The sizes of the primary and secondary Cisco CMX installations differ.
• E. Both Cisco CMX installations are virtual.

Answer: BD

NEW QUESTION 6
Which two steps are needed to complete integration of the MSE to Cisco Prime Infrastructure and be able to track the location of clients/rogues on maps? (Choose two.)

• A. Synchronize access points with the MSE.
• B. Add the MSE to Cisco Prime Infrastructure using the CLI credentials.
• C. Add the MSE to Cisco Prime Infrastructure using the Cisco Prime Infrastructure communication credentials configured during set up.
• D. Apply a valid license for Wireless Intrusion Prevention System.
• E. Apply a valid license for location tracking.

Answer: DE

NEW QUESTION 7
An engineer is performing a Cisco Hyperlocation accuracy test and executes the cmxloc start command on Cisco CMX. Which two parameters are relevant? (Choose two.)

• A. X, Y real location
• B. client description
• C. AP name
• D. client MAC address
• E. WLC IP address

Answer: AD

NEW QUESTION 8
CMX Facebook Wi-Fi allows access to the network before authentication. Which two elements are available? (Choose two.)

• A. Allow HTTP traffic only before authentication and block all the traffic.
• B. Allow all the traffic before authentication and intercept HTTPS only.
• C. Allow HTTPs traffic only before authentication and block all other traffic.
• D. Allow all the traffic before authentication and intercept HTTP only.
• E. Allow SNMP traffic only before authentication and block all the traffic.

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/mse/8-0/CMX_Connect_Engage_Visitor_Connect/Guide/Cisco_CMX_Connect_Engage_Config_Guide_VC/CMX_Facebook_Wi-Fi.html

NEW QUESTION 9
What is an important consideration when implementing a dual SSID design for BYOD?

• A. After using the provisioning SSID, an ACL that used to make the client switch SSIDs forces the user to associate and traverse the network by MAC filtering.
• B. If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned and traverse the network correctly.
• C. SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the client.
• D. One SSID is for provisioning and the other SSID is for gaining access to the networ
• E. The use of an ACL should not be enforced to make the client connect to the REAL SSID after provisioning.

Answer: D

NEW QUESTION 10
An engineer wants to configure WebEx to adjust the precedence and override the QoS profile on the WLAN. Which configuration is needed to complete this task?

• A. Change the WLAN reserved bandwidth for WebEx
• B. Create an AVC profile for WebEx
• C. Create an ACL for WebEx
• D. Change the AVC application WebEx-app-sharing to mark

Answer: B

NEW QUESTION 11
A FlexConnect remote office deployment is using five 2702i APs indoors and two 1532i APs outdoors. When a code upgrade is performed and FlexConnect Smart AP Image Upgrade is leveraged, but no FlexConnect Master AP has been configured, how many image transfers between the WLC and APs will occur?

• A. 1
• B. 2
• C. 5
• D. 7

Answer: B

NEW QUESTION 12
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, named BASE_ACL, is applied to the corporate_clients interface on the WLC, which is used for all corporate clients. The second ACL, named HR_ACL, is referenced by ISE in the Human Resources group policy. What is the resulting ACL when a Human Resources user connects?

• A. HR_ACL appended with BASE_ACL
• B. HR_ACL only
• C. BASE_ACL appended with HR_ACL
• D. BASE_ACL only

Answer: B

NEW QUESTION 13
All APs are receiving multicast traffic, instead of only the APs that need it. What is the cause of this problem?

• A. The multicast group includes all APs
• B. The wrong multicast address was used
• C. The multicast group is assigned the wrong VLAN
• D. Multicast IGMP snooping is not enabled

Answer: D

NEW QUESTION 14
An engineer must use Cisco AVC on a Cisco WLC to prioritize Cisco IP cameras that use the wireless network. Which element do you configure in a rule?

• A. permit-ACL
• B. WMM required
• C. mark
• D. rate-limit

Answer: C

NEW QUESTION 15
Refer to the exhibit.

Which two items must be supported on the VoWLAN phones to take full advantage of this WLAN configuration? (Choose two.)

• A. TSPEC
• B. SIFS
• C. 802.11e
• D. WMM
• E. APSD

Answer: CD

NEW QUESTION 16
Which two statements about the requirements for a Cisco Hyperlocation deployment are true? (Choose two.)

• A. After enabling Cisco Hyperlocation on Cisco CMX, the APs and the wireless LAN controller must be restarted.
• B. NTP can be configured, but that is not recommended.
• C. The Cisco Hyperlocation feature must be enabled on the wireless LAN controller and Cisco CMX.
• D. The Cisco Hyperlocation feature must be enabled only on the wireless LAN controller.
• E. If the Cisco CMX server is a VM, a high-end VM is needed for Cisco Hyperlocation deployments.

Answer: AC

NEW QUESTION 17
On a branch office deployment, it has been noted that if the FlexConnect AP is in standalone mode and loses connection to the WLC, all clients are disconnected, and the SSID is no longer advertised. Considering that FlexConnect local switching is enabled, which setting is causing this behavior?

• A. ISE NAC is enabled
• B. 802.11r Fast Transition is enabled
• C. Client Exclusion is enabled
• D. FlexConnect Local Auth is disabled

Answer: D

NEW QUESTION 18
Which three characteristics of a rogue AP pose a high security risk? (Choose three.)

• A. open authentication
• B. high RSSI
• C. foreign SSID
• D. accepts clients
• E. low RSSI
• F. distant location

Answer: ACD

NEW QUESTION 19
During the EAP process and specifically related to the client authentication session, which encrypted key is sent from the RADIUS server to the access point?

• A. WPA key
• B. session key
• C. encryption key
• D. shared-secret key

Answer: B

NEW QUESTION 20
Refer to the exhibit. An engineer must connect a fork lift via a WGB to a wireless network and must authenticate the WGB certificate against the RADIUS server. Which three steps are required for this configuration? (Choose three.)

• A. Configure the certificate, WLAN, and radio interface on WGB.
• B. Configure the certificate on the WLC.
• C. Configure WLAN to authenticate using ISE.
• D. Configure the access point with the root certificate from ISE.
• E. Configure WGB as a network device in ISE.
• F. Configure a policy on ISE to allow devices to connect that validate the certificate.

Answer: ACF

NEW QUESTION 21
What is the default NMSP echo interval between Cisco MSE and a Wireless LAN Controller?

• A. 10 seconds
• B. 15 seconds
• C. 30 seconds
• D. 60 seconds

Answer: B

Explanation:
Reference: https://www.cisco.com/en/US/docs/wireless/mse/3350/6.0/CAS/configuration/guide/msecg_ch4_CAS.html

NEW QUESTION 22
Which statement about the VideoStream/Multicast Direct feature is true?

• A. IP multicast traffic is reliable over WLAN by default as defined by the IEEE 802.11 wireless multicast delivery mechanism.
• B. Each VideoStream client acknowledges receiving a video IP multicast stream.
• C. It converts the unicast frame to a multicast frame over the air.
• D. It makes the delivery of the IP multicast stream less reliable over the air, but reliable over Ethernet.

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configuration-guide/b_cg81/multicast_broadcast_setup.html

NEW QUESTION 23
Refer to the exhibit.

The image shows a packet capture that was taken at the CLI of the Cisco CMX server. It shows UDP traffic from the WLC coming into the server. What does the capture prove?

• A. The Cisco CMX server receives NetFlow data from the WLC.
• B. The Cisco CMX server receives NMSP traffic from the WLC.
• C. The Cisco CMX server receives SNMP traffic from the WLC.
• D. The Cisco CMX server receives Angle-of-Arrival data from the WLC.

Answer: D

NEW QUESTION 24
What is the maximum time range that can be viewed on the Cisco DNA Center issues and alarms page?

• A. 3 hours
• B. 24 hours
• C. 3 days
• D. 7 days

Answer: B

NEW QUESTION 25
......