Question 141
An engineer completes the setup of a two-node Cisco ISE deployment for a guest portal. When testing the portal, the engineer notices that sometimes there is a certificate CN mismatch.
Which certificate type helps resolve this issue?
A. Public-Signed Root
B. Public-Signed SAN
C. Self-Signed Wildcard
D. Self-Signed Standard
Question 142
On a Cisco Catalyst 9800 Series Wireless Controller, an engineer wants to prevent a FlexConnect AP from allowing wireless clients to connect when its Ethernet connection is nonoperational.
Which command set prevents this connection?
A. config terminal wireless flexconnect profile [profile name] ethernet-fallback-enable end
B. config terminal wireless flexconnect profile [profile name] fallback-radio-shut end
C. config terminal wireless profile flex [profile name] fallback-radio-shut end
D. config terminal wireless profile flex [profile name] ethernet-fallback-enable end
Question 143
A controller shows that an AP in your environment is detecting interference, but the AP health score in Cisco DNA Center is unaffected. What are two reasons thatCisco DNA Center is ignoring the interference? (Choose two.)
A. The interference is less than or equal to 30% on the 2.4 GHz radio.
B. The interference is less than or equal to 50% on the 2.4 GHz radio.
C. Cisco DNA Center includes only Cisco CleanAir interferers in the AP health score.
D. The interference is less than or equal to 30% on the 5 GHz radio.
E. Cisco DNA Center does not include interference in the AP health score.
Question 144
An engineer must control administrative access to the WLC using their Active Directory without being concerned about RBAC after the admin user is authenticated.
Which two features does the engineer configure to accomplish this task? (Choose two.)
A. Device Admin Policy Set
B. User Access Mode: ReadWrite
C. ACL
D. RADIUS server
E. TACACS server
Question 145
In a Cisco WLAN deployment, it is required that all Aps from branch1 remain operational even if the control plane CAPWAP tunnel is down because of a WAN failure to headquarters.
Which operational mode must be configured on the APs?
A. disconnected
B. standalone
C. lightweight
D. connected
Question 146
An engineer added more APs to newly renovated areas in building. The engineer is now receiving Out-of-Sync alarms on Cisco Prime Infrastructure.
Which two actions resolve this issue? (Choose two.)
A. Manually synchronize from Cisco Prime Infrastructure.
B. Manually synchronize from MSE.
C. Enable automatic synchronization on Cisco Prime Infrastructure.
D. Enable automatic synchronization on MSE.
E. Add new APs to maps on Cisco Prime Infrastructure.
Question 147
A wireless administrator must assess the different client types connected to Cisco Catalyst 9800 Series Wireless Controller without using any external servers.
Which configuration must be added to the controller to achieve this assessment?
A. native profile
B. MAC classification
C. local profile
D. device classification
Question 148
A customer is concerned that their wireless network is detecting spurious threats from channels that are not being used by their wireless infrastructure.
Which two technologies must they deploy? (Choose two.)
A. FlexConnect mode
B. monitor mode
C. sniffer mode with no submode
D. local mode with WIPS submode
E. rogue detector mode
Question 149
A network engineer created a new wireless network that will be used for guest access. The corporate network must utilize all rates. The guest network must use only lower rates instead of 802.11n data rates. To what must the WMM policy of the WLAN be set to accomplish this task?
A. required
B. allowed
C. disabled
D. mandatory
Question 150
Refer to the exhibit. An engineer implemented the CPU ACL on your Cisco 5520 Series Wireless LAN Controller, and the controller is no longer manageable via the network. What must be changes on this CPU ACL to enable it to manage the controller again?
A. Permit statements must be added to the top of the ACL in both directions,
Which specify the network to be managed from and the virtual interface of the controller.
B. Line 1 must be set to a destination port of HTTP.
C. Permit statements must be added to the top of the ACL,
Which specify the network to be managed from.
D. Line 1 must be set to the inbound direction.
