300-375 by Cisco Valid Free Exam Practice Test

Question 1

You are implementing Cisco Identity Based Networking Services on a Cisco Catalyst 3850 Series Switch that uses downloadable service templates. What is the default password that must be configured on the RADIUS server?

A. cisco B. Cisco C. cisco123 D. Cisco123

Correct Answer: C

Question 2

Refer to the exhibit. An engineer is designing a guest portal on Cisco ISE using the default configuration.
During the testing phase, the engineer receives a warning when displaying the guest portal. Which issue is occuring?

A. The connection is using an unsupported browser B. The server that is providing the portal has an expired certificate C. The connection is using an unsupported protocol D. The server that is providing the portal has a self-signed certificate

Correct Answer: B

Question 3

Which client roam is considered the fastest in a wireless deployment using Cisco IOS XE mobility controllers and mobility agents?

A. Intermobility roam B. Inter-SPG roam C. lntra-SPG roam D. Roam within stack members E. Interdomain roam

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which of the following user roles can access CMX Visitor Connect?

A. Guest User B. Connect C. Power User D. Super Administrator

Correct Answer: D

Question 5

Which three options are valid client profile probes m Cisco ISE? (Choose three.)

A. CCX B. TACACS C. 802.1X D. NetFlow E. HTTP F. DHCP

Correct Answer: D,E,F

Question 6

An engineer must enable EAP on a new WLAN and is ensuring that the necessary components are available.
Which component uses EAP and 802.1x to pass user authentication to the authenticator?

A. supplicant B. AP C. AAA server D. controller

Correct Answer: D

Question 7

Which security method does a Cisco guest wireless deployment that relies on Cisco ISE guest portal for user authentication use?

A. No security methods are needed to deploy CWA B. Layer 2 and Layer 3 C. Layer 2 only D. Layer 3 only

Correct Answer: C

Question 8

Which two PCI DSS requirements must a company meet to be PCI compliant? (Choose two.)

A. the ACL configuration B. the firewall configuration C. the network segmentation D. EAP authentication E. customer data protection

Correct Answer: C,E

Question 9

A network engineer is implementing a wireless network and is considering deploying a single SSID for device onboarding. Winch option is a benefit of using dual SSIDs with a captive portal on the onboard SSID compared to a single SSID solution?

A. allow multiple devices per user B. minimize client configuration errors C. limit of a single device per user D. restrict allowed devices types

Correct Answer: D

Question 10

Refer to the exhibit.

A client reports being unable to log into the wireless network, which uses PEAPv2. Which two issues appear in the output? (Choose two.)

A. The EAP client timeout value should be increased. B. The authentication server is misconfigured in the WLAN. C. The AP has lost IP connectivity to the authentication server. D. There is a problem with the client supplicant. E. The authentication server is misconfigured on the controller. F. The AP has the incorrect RADIUS server address.

Correct Answer: A,D

Question 11

An engineer is preparing to implement a BYOD SSID at remote offices using local switching and wants to ensure that Wi-Fi Direct clients can communicate after the SSID is deployed. The engineer is planning on implementing the config wlan wifidirect allow 1 command. Which Wi-Fi Direct Client Policy consideration is applicable?

A. Policy is applicable only when P2P is set to disabled. B. Policy is applicable only on WLANs that have APs in local mode only. C. Policy is applicable only with central switched WLANs on FlexConnect Aps. D. Policy is applicable only to APs in FlexConnect mode only.

Correct Answer: B

Cisco Securing Wireless Enterprise Networks - 300-375 Exam Practice Test