Free 300-430 Practice Test Questions 2026

A corporation is spread across different countries and uses MPLS to connect the offices.
The senior management wants to utilize the wireless network for all the employees. To
ensure strong connectivity and minimize delays, an engineer needs to control the amount
of traffic that is traversing between the APs and the central WLC. Which configuration
should be used to accomplish this goal?

A.

FlexConnect mode with OfficeExtend enabled

B.

FlexConnect mode with local authentication

C.

FlexConned mode with central switching enabled

D.

FlexConnect mode with central authentication

Refer to the exhibit.

An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection
must be made from the direction drop-down list?

A.

It must be Inbound because traffic goes to the WLC.

B.

Packet direction has no significance; it is always Any.

C.

It must be Outbound because it is traffic that is generated from the WLC.

D.

To have the complete list of options, the CPU ACL must be created only by the CLI

Branch wireless users report that they can no longer access services from head office but
can access services locally at the site. New wireless users can associate to the wireless
while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode,
and authentication method) are seen in this scenario? (Choose three.)

A.

A. authentication-local/switch-local

B.

WPA2 personal

C.

authentication-central/switch-central

D.

lightweight mode

E.

standalone mode

F.

WEB authentication

Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller
web interface?

A.

Policy Profile

B.

AP Join Profile

C.

Flex Profile

D.

RF Profile

The IT manager is asking the wireless team to get a report for all guest user associations
during the past two weeks. In which two formats can Cisco Prime save this report?
(Choose two.)

A.

CSV

B.

PDF

C.

XLS

D.

DOC

E.

plain text

What is an important consideration when implementing a dual SSID design for BYOD?

A.

After using the provisioning SSID, an ACL that used to make the client switch SSIDs
forces the user to associate and traverse the network by MAC filtering.

B.

If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned
and traverse the network correctly.

C.

SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to
authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the
client.

D.

One SSID is for provisioning and the other SSID is for gaining access to the network.
The use of an ACL should not be enforced to make the client connect to the REAL SSID
after provisioning.

What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800
Series Wireless Controller?

A.

EAP-PEAP with 802.1x port authentication

B.

EAP-TLS with 802.1x port authentication

C.

EAP-FAST with CAPWAP DTLS + port authentication

D.

EAP-FAST with CAPWAP DTLS

An engineer must track guest traffic flow using the WLAN infrastructure. Which Cisco CMX
feature must be configured and used to accomplish this tracking?

A.

analytics

B.

connect and engage

C.

presence

D.

detect and locate.

An engineer configures the wireless LAN controller to perform 802.1x user authentication.
Which configuration must be enabled to ensure that client devices can connect to the
wireless, even when WLC cannot communicate with the RADIUS?

A.

pre-authentication

B.

local EAP

C.

authentication caching

D.

Cisco Centralized Key Management

A wireless engineer needs to implement client tracking. Which method does the angle of
arrival use to determine the location of a wireless device?

A.

received signal strength

B.

triangulation

C.

time distance of arrival

D.

angle of incidence

An engineer must implement Cisco Identity-Based Networking Services at a remote site
using ISE to dynamically assign groups of users to specific IP subnets. If the subnet
assigned to a client is available at the remote site, then traffic must be offloaded locally,
and subnets are unavailable at the remote site must be tunneled back to the WLC. Which
feature meets these requirements?

A.

learn client IP address

B.

FlexConnect local authentication

C.

VLAN-based central switching

D.

central DHCP processing

An engineer wants the wireless voice traffic class of service to be used to determine the
queue order for packets received, and then have the differentiated services code point set
to match when it is resent to another port on the switch. Which configuration is required in
the network?

A.

Platinum QoS configured on the WLAN

B.

WMM set to required on the WLAN

C.

mls qos trust dscp configured on the controller switch port

D.

mls qos trust cos configured on the controller switch port