Question 91
Branch wireless users report that they can no longer access services from head office but can access services locally at the site. New wireless users can associate to the wireless while the WAN is down.
Which three elements (Cisco FlexConnect state, operation mode, and authentication method) are seen in this scenario? (Choose three.)
A. authentication-local/switch-local
B. WPA2 personal
C. authentication-central/switch-central
D. lightweight mode
E. standalone mode
F. WEB authentication
Question 92
Refer to the exhibit. An engineer deployed a Cisco WLC using local EAP. Users who are configured for EAP-PEAP cannot connect to the network. Based on the local EAP debug on the controller provided, why is the client unable to connect?
A. The client is failing to accept certificate.
B. The Cisco WLC is configured for the incorrect date.
C. The Cisco WLC local EAP profile is misconfigured.
D. The user is using invalid credentials.
Question 93
An engineer set up identity-based networking with ISE and configured AAA override on the WLAN.
Which two attributes must be used to change the client behavior from the default settings? (Choose two.)
A. DHCP timeout
B. DNS server
C. IPv6 ACL
D. DSCP value
E. multicast address
Question 94
Refer to the exhibit. The security team has implemented ISE as an AAA solution for the wireless network. The wireless engineer notices that though clients are able to authenticate successfully, the ISE policies that are designed to place them on different interfaces are not working.
Which configuration must be applied in the RADIUS Authentication Settings section from the ISE Network Device page?
A. Disable KeyWrap.
B. Use ASCII for the key input format.
C. Change the CoA Port.
D. Correct the shared secret.
Question 95
An engineer is setting up a WLAN to work with a Cisco ISE as the AAA server. The company policy requires that all users be denied access to any resources until they pass the validation.
Which component must be configured to achieve this stipulation?
A. WPA2 passkey
B. AAA override
C. CPU ACL
D. preauthentication ACL
Question 96
A Cisco WLC has been added to the network and Cisco ISE as a network device, but authentication is failing.
Which configuration within the network device configuration should be verified?
A. SNMP RO community
B. device interface credentials
C. device ID
D. shared secret
Question 97
A user is trying to connect to a wireless network that is configured for WPA2-Enterprise security using a corporate laptop. The CA certificate for the authentication server has been installed on the Trusted Root Certification Authorities store on the laptop. The user has been prompted to enter the credentials multiple times, but the authentication has not succeeded.
What is causing the issue?
A. There is an IEEE invalid 802.1X authentication policy on the authentication server.
B. The user Active Directory account is locked out after several failed attempts.
C. There is an invalid 802.1X authentication policy on the authenticator.
D. The laptop has not received a valid IP address from the wireless controller.
Question 98
A wireless engineer is configuring LWA using ISE. The customer is a startup company and requested the wireless users to authenticate against a directory, butLDAP is unavailable.
Which solution should be proposed in order to have the same security and user experience?
A. Use SAML.
B. Use the internal database of the RADIUS server.
C. Use a preshared key on the corporate WLAN.
D. Use Novell eDirectory.
Question 99
What must be configured on the Global Configuration page of the WLC for an access point to use 802.1x to authenticate to the wired infrastructure?
A. local access point credentials
B. RADIUS shared secret
C. TACACS server IP address
D. supplicant credentials
Question 100
A customer has a distributed wireless deployment model where the WLCs are located in the data centers. Because the file servers are located in the data center, the traffic from the corporate WLAN `Corp-401266017` must go through the controllers, where the guest WLAN `Guest-19283746` traffic must use the localInternet line installed in each office.
Which configuration will accomplish this task?
A. Disable Local Switching for the corporate and guest WLAN.
B. Disable Local Switching for the corporate WLAN and enable it for the guest WLAN.
C. Enable Local Switching for the corporate and guest WLAN.
D. Enable Local Switching for the corporate WLAN and disable it for the guest WLAN.
