Test 301-400

Which unit of measure is used to measure wireless RF SNR?

• dBm

• dB

• mW

• dBi

What is the centralized control policy in a Cisco SD-WAN deployment?

• set of statements that defines how routing is performed

• list of enabled services for all nodes within the cloud

• set of rules that governs nodes authentication within the cloud

• list of ordered statements that define user access policies

In a Cisco SD-Access wireless architecture, which device manages endpoint ID to edge node bindings?

• fabric edge node

• fabric border node

• fabric control plane node

• fabric wireless controller

Refer to the exhibit. A network engineer issues the debug command while troubleshooting a network issue. What does the output confirm?

• ACL100 is tracking ICMP traffic from Serial 1/0 destined for Serial3/0

• ACL100 is tracking ICMP traffic from 1.1.1.1 destined for 10.1.1.1

• ACL 100 is tracking all traffic from 10.1.1.1 destined for 1.1.1.1

• ACL100 is tracking ICMP traffic from 10.1.1. 1 destined for 1.1.1.1

A network administrator applies the following configuration to an IOS device:

aaa new-model

aaa authentication login default local group tacacs+

What is the process of password checks when a login attempt is made to the device?

• A local database is checked first. If that check fails, a TACACS+ server is checked.

• A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked.

• A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked

• TACACS + sewer is checked first 15 that check fails a local database is checked

Refer to the exhibit: A client requests a new SSID that will use web-based authentication and extremal RADIUS servers. Which Layer 2 security mode must be selected?

• WPA2+WPA3

• Static WEP

• None

• WPA+WPA2

Refer to the exhibit. An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command set accomplishes this task?

• R1(config)#time-range WEEKEND

  R1(config-time-range#periodic weekend 00:00 to 23:59

   

  R1(config#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

  R1(config)#access-list 150 permit ip any any.

   

  R1(config)#interface G0/1

  R1(config-if)#ip access-group 150 in

• R1(config)#time-range WEEKEND

  R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00

  R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

  R1(config#access-list 150 permit ip any any

  R1(config)#interface G0/1

  R1(config-if#ip access-group 150 in

• R3(config#time-range WEEKEND

  R3(config-time-range)#periodic weekend 00:00 to 23:59

   

  R3(config)access-list 150 permit tep host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

  R3(config)#access-list 150 permit ip any any time-range WEEKEND

   

  R3(config)#interface G0/1

  R3(config-if)#ip access-group 150 out

• R3(config)#time-range WEEKEND

  R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59

  R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND

  R3(confia)# access-list 150 permit ip anv any time-range WEEKEND

  R3(config)#interface GO/1

  R3(config-if)#ip access-group 150 out

What is one primary REST security design principle?

• separation of privilege

• password hashing

• confidential algorithms

• OAuth

What are two considerations when using SSO as a network redundancy feature? (Choose two.)

• must be combined with NSF to support uninterrupted Layer 3 operations

• the multicast state is preserved during switchover

• both supervisors must be configured separately

• requires synchronization between supervisors in order to guarantee continuous connectivity

• must be combined with NSF to support uninterrupted Layer 2 operations

An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The CiscolSE servers are hosted at 10.9.11.141 and 10.1.11.141. Which access list meets the requirements?

• ip access-list extended ACL_WEBAUTH_REDIRECT

  70 permit ip any host 10.9.11.141

  80 permit ip any host 10.1.1.141

  500 deny  top any any eq www

  600 deny top any any eq 443

  700 deny top any any eq 8443

  800 deny udp any any eq domain

  901 deny ip any any

• ip access-list extended ACL_WEBAUTH_REDIRECT

  50 deny ip host 10.9.11.44 any

  60 deny ip any host 10.9.11.141

  70 deny ip host 10.1.11.141 any

  80 deny ip any host 10.1.11.141

  500 permit tcp any any eq www

  600 permittop any any eq 443

  700 permit tcp any any eq 80

• ip access-list extended ACL_WEBAUTH_REDIRECT

  70 deny ip any host 10.9.11.141

  80 deny ip any host 10.1.11.141

  500 permit tcp any any eq www

  600 permit tcp any any eq 443

  700 permit tcp any any eq 8443

  800 deny udp any any eq domain

• ip access-list extended ACL_WEBAUTH_REDIRECT

  70 permit ip any host 10.9.11.141

  80 permit ip any host 10.1.11.141

  500 permit tcp any any eq www

  600 permit tcp any any eq 443

  700 permit tcp any any eq 8443

  800 deny udp any any eq domain