Question 81
What must be configured on ISE version 2.1 BYOD when using Single SSID?
A. open authentication
B. 802.1x
C. no authentication
D. WPA2
Question 82
A wireless engineer must implement a corporate wireless network for a large company in the most efficient way possible. The wireless network must support 32VLANs for 300 employees in different departments.
Which solution must the engineer choose?
A. Configure a second WLC to support half of the APs in the deployment.
B. Configure one single SSID and implement Cisco ISE for VLAN assignment according to different user roles.
C. Configure different AP groups to support different VLANs, so that all of the WLANs can be broadcast on both radios.
D. Configure 16 WLANs to be broadcast on the 2.4-GHz band and 16 WLANs to be broadcast on the 5.0-GHz band.
Question 83
Which feature on the Cisco Wireless LAN Controller must be present to support dynamic VLAN mapping?
A. FlexConnect ACL
B. VLAN name override
C. CCKM/OKC
D. AAA override
Question 84
Which three properties are used for client profiling of wireless clients? (Choose three.)
A. HTTP user agent
B. DHCP
C. MAC OUI
D. hostname
E. OS version
F. IP address
Question 85
Which command set configures a Cisco Catalyst 9800 Series Wireless Controller so that the client traffic enters the network at the AP switch port?
A.
B.
C.
D.
Question 86
What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller?
A. EAP-PEAP with 802.1x port authentication
B. EAP-TLS with 802.1x port authentication
C. EAP-FAST with CAPWAP DTLS + port authentication
D. EAP-FAST with CAPWAP DTLS
Question 87
An engineer must implement rogue containment for an SSID.
What is the maximum number of APs that should be used for containment?
A. 1
B. 2
C. 3
D. 4
Question 88
An engineer is following the proper upgrade path to upgrade a Cisco AireOS WLC from version 7.3 to 8.9.
Which two ACLs for Cisco CWA must be configured when upgrading from the specified codes? (Choose two.)
A. Permit 0.0.0.0 0.0.0.0 any DNS any
B. Permit 0.0.0.0 0.0.0.0 UDP DNS any
C. Permit 0.0.0.0 0.0.0.0 UDP any DNS
D. Permit any any any
E. Permit 0.0.0.0 0.0.0.0 UDP any any
Question 89
CMX Facebook Wi-Fi allows access to the network before authentication.
Which two elements are available? (Choose two.)
A. Allow HTTP traffic only before authentication and block all the traffic.
B. Allow all the traffic before authentication and intercept HTTPS only.
C. Allow HTTPs traffic only before authentication and block all other traffic.
D. Allow all the traffic before authentication and intercept HTTP only.
E. Allow SNMP traffic only before authentication and block all the traffic.
Question 90
An engineer is implementing Cisco Identity-Based Networking on a Cisco AireOS controller. The engineer has two ACLs on the controller. The first ACL, namedBASE_ACL, is applied to the corporate_clients interface on the WLC,
Which is used for all corporate clients. The second ACL, named HR_ACL, is referenced byISE in the Human Resources group policy.
What is the resulting ACL when a Human Resources user connects?
A. HR_ACL appended with BASE_ACL
B. HR_ACL only
C. BASE_ACL appended with HR_ACL
D. BASE_ACL only
