Free 300-430 Practice Test Questions 2026

A wireless engineer completed the configuration of QoS on the WLC and the policy map on the switch that the WLC is connected. During testing, the engineer realizes that the markings are preserved in an incorrect way in the end-to-end traffic flow. What is missing from the configuration?

A. NetFlow

B. class map

C. ACL

D. port channel

A network engineer must get an autonomous AP to authenticate to the upstream switch via IEEE 802.1 X. Drag and drop the commands from the left onto the right to complete the configuration.

A customer managing a large network has implemented location services. Due to heavy load, it is needed to load balance the data coming through NMSP from the WLCs. Load must be spread between multiple CMX servers to help optimize the data flow for APs. Which configuration in CMX meets this requirement?

A. cmxctl config feature flags nmsplb.cmx-ap-grouping true

B. cmxctl config feature flags nmsplb.cmxgrouping true

C. cmxctl config feature flags nmsplb.cmx-loadbalance true

D. cmxctl config feature flags nmsplb.cmx-rssi-distribute true

Which EAP method can an AP use to authenticate to the wired network?

A. EAP-GTC

B. EAP-MD5

C. EAP-TLS

D. EAP-FAST

A company has a Cisco wireless network with Cisco ISE. The company wants to allow employees to use their personal mobile devices on the wireless network. The company wants to allow access to the network only if the devices meet certain criteria. To meet the requirement, the company asked a network engineer to create a native supplicant profile. Which two fields must be configured when the profile is created? (Choose two.)

A. Allowed Protocol (PEAP/TLS)

B. Allowed Protocol (Ms-CHAPv2/ EAP-FAST)

C. SSID Name

D. WLC Name

E. Allowed Protocol (LEAP/ EAP-TTLS)

A wireless administrator receives this information to complete a CMX deployment in high availability by using version 10.6 to gather analytics.
IP address of the primary server
IP address of the secondary server
failover mode to be configured as automatic
root password of the secondary server
email ID for NOC notifications
Enabling high availability fails when these parameters are used. Which action resolves the issue?

A. Insert the cmxadmin password of the secondary server.

B. Use IP protocol 4242 for the controller to reach the CMX server.

C. Place primary and secondary servers in different subnets.

D. Enable the virtual IP address of the primary server.

A customer is deploying Cisco Catalyst Center (formerly DNA Center) to manage a Cisco Catalyst 9800 Series Wireless Controller Cisco CleanAir is used to address wireless interference Which two configurations must be completed from the Cisco Catalyst Center GUI to manage the interferes? (Choose two )

A. Enable Neighbor List Dual Band on the configured WLANs

B. Disable Persistent Device Propagation in the CleanAir configuration model

C. Configure the RX SOP threshold to be high

D. Enable CleanAir Device Reporting in the CleanAir configuration model

E. The CleanAir configuration model must be applied to a wireless network profile

Refer to the exhibit. A network administrator must automate notifications for Security Advisories Data reports on the Cisco Catalyst Center v2.3.7 using the Report notification feature. Preferring a programmable approach over UI/CLI, the administrator decides to create a webhook via the Cisco DNA Center API to send real-time HTTP notifications to an external application. The webhook URL https://example.com/webhook uses HTTPS with a self-signed certificate, which requires a specific configuration in the payload to ensure the webhook functions correctly. Which code snippet must be placed onto the box in the code to complete the Python script that configures the webhook to use the self-signed certificate to extract the Security Advisories Data report?

A. Option A

B. Option B

C. Option C

D. Option D

An engineer set up identity-based networking with ISE and configured AAA override on the WLAN. Which two attributes must be used to change the client behavior from the default settings? (Choose two.)

A. DHCP timeout

B. DNS server

C. IPv6 ACL

D. DSCP value

E. multicast address

A Cisco 8540 WLC manages Cisco Aironet 4800 Series Aps and sends AoA data to a Cisco CMX 3375 Appliance for Hyperlocation. The load from the WLC is distributed to another virtual CMX server using CMX grouping. The virtual CMX server shows location RSSI data and not Hyperlocation. No AoA metrics are shown on the metrics page of the CMX virtual appliance under System > Metrics > Location Metrics. How must the network administrator resolve this issue?

A. Enable Wireless > Access Points > Global Configuration> Enable Hyperlocation on the WLC.

B. Enable the HALO module on the CMX appliance for the data collection.

C. Allow port 2003 for AoA packets to flow through between the CMX appliances.

D. Use one Hyperlocation-enabled WLC and CMX for AoA data.

An engineer is configuring wireless guests using Cisco CWA. When a device connects, it must be redirected to the WebAuth, but this was failing. What must be configured for the device to be redirected correctly?

A. Configure the ACL name on the anchor controller

B. Enabled DHCP option 7.

C. Remove the CN entry from the SAN

D. Allow ICMP toward the portal

An engineer has configured Cisco Centralized Key Management for an enterprise that has remote branches. The remote offices are connected back to the data center using a VPN connection with low-bandwidth connections. The goal is to improve roaming. Which type of group must be configured?

A. RF

B. Cisco FlexConnect

C. interlace

D. AP