Certification Exam Prep Questions For
(300-375) Securing Cisco Wireless Enterprise Networks (WISECURE)

Name: Practice Exam - Securing Cisco Wireless Enterprise Networks
SKU: Practice Exam - Securing Cisco Wireless Enterprise Networks
Price: 109 USD
Availability: InStock

QuickStart is now offering assessment questions for Securing Cisco Wireless Enterprise Networks (WISECURE) (300-375). Whether you are deciding which exam to sign up for, or simply want to practice the materials necessary to complete certification for this course, we have provided a practice assessment to better aid in certification. 100% of the questions are real questions; from a recent version of the test you will take for Securing Cisco Wireless Enterprise Networks (WISECURE) (300-375).

The two considerations that a network engineer must have in order to plan for voice over wireless roaming? (Choose two.)

A. Roaming occurs when the phone has reached -80 st or below.: Incorrect.

B. Full reauthentication introduces gaps in a voice conversation.: Correct!

C. Roaming occurs when e phone has seen at least four APs.: Incorrect.

D. Roaming with only 802.1x authentication requires full reauthentication.: Correct!

Which two 802.11 methods that can be conﬁgured in order to protect the data of card holder? (Choose two.)

A. CCMP: Incorrect.

B. VPN: Correct!

C. WEP: Incorrect.

D. SSL: Correct!

E. TKIP: Incorrect.

The two necessary changes to be made by an engineer for changing the authentication method of a wireless network to EAP-TLS from EAP-FAST? (Choose two.)

A. All authentication clients require their own certiﬁcates.: Correct!

B. A Cisco NAC server is required.: Incorrect.

C. Cisco Secure ACS is required.: Incorrect.

D. The authentication server now requires a certiﬁcate.: Correct!

Which mobility mode should a Cisco 5508 wireless Controller must be in, in order to use the MA functionality on a Cisco catalyst 3850 series switch with a cisco 550 Wireless Controller as an MC?

A. converged access mobility: Correct!

B. classic mobility: Incorrect.

C. new mobility: Incorrect.

D. auto-anchor mobility: Incorrect.

A wireless network needs to be authenticated through an ACS server for which WPA2 Enterprise with 802.1x is used. To maintain security, the network engineer will only be suing PEAP authentication. He sent instructions regarding configuring supplicants to clients. However, the users are still suing EAP-FAST in the ACS logs authentication. Choose an option that stops these users from accessing the network, unless they are able to configure the correct mechanism.

A. Enable AAA override on the SSID, gather the usernames of these users, and disable their RADIUS accounts until they make sure they correctly conﬁgured their devices.: Incorrect.

B. Enable AAA override on the SSID and conﬁgure an access policy in ACS that puts clients that authenticated using EAP-FAST into a quarantine VLAN.: Correct!

C. Enable AAA override on the SSID and conﬁgure an access policy in ACS that denies access to the list of MACS that have used EAP-FAST.: Incorrect.

D. Enable AAA override on the SSID and conﬁgure an access policy in ACS that allows access only when the EAP authentication method is PEAP.: Incorrect.

BYOD deployment strategy is being configure by an engineer and prefers a single SSID model. Which technology is required in order to accomplish this conﬁguration?

A. wireless control system: Incorrect.

B. Prime Infrastructure: Incorrect.

C. mobility service engine: Incorrect.

D. identify service engine: Correct!

When you conﬁgure the BYOD access to network, for some reason you face increased risk of security and challenges. Which challenge do you think will be resolved by deploying digital client certiﬁcates?

A. enforcing company usage policies: Correct!

B. managing the increase connected devices: Incorrect.

C. ensuring wireless LAN performance and reliability: Incorrect.

D. providing device choice and support: Incorrect.

The stable operation of the corporate wireless network is being impaired by the denial of service attacks and the client is concerned. The customer wants a mobile devices that will be able to operate on the corporate wireless network. Which IEEE standard should be supported by the mobile devices in order to address the customer concerns?

A. 802.11k: Incorrect.

B. 802.11r: Incorrect.

C. 802.11W: Correct!

D. 802.11h: Incorrect.

After receiving an alert which was regarding a rogue AP, the network engineer decides to log into Cisco Prime and then looks at the location of the rogue that AP detected on the floor map. The map is in synchronization with a mobility services engine that very well determines the rogue device in actual is inside the campus. The engineer then determines the rogue as a security threat and therefore decides to stop the broadcasting inside the enterprise wireless network. The fastest way in order to disable the rogue is?

A. Classify the rogue as malicious in Cisco Prime.: Correct!

B. Go to the location the rogue device is indicated to be and disable the power.: Incorrect.

C. Create an SSID on WLAN controller resembling the SSID of the rogue to spoof it and disable clients from connecting to it.: Incorrect.

D. Update the status of the rogue in Cisco Prime to contained.: Incorrect.

The MFP is being configured by an engineer. What WLAN Layer 2 security should be selected in order to use client MFP?

A. Static WEP: Incorrect.

B. WPA+WPA2: Correct!

C. 802 1x: Incorrect.

D. CKIP: Incorrect.

The two events that are the possible outcomes of a successful attack of RF jamming? (Choose two.)

A. deauthentication multicast: Incorrect.

B. physical damage to AP hardware: Correct!

C. unauthentication association: Incorrect.

D. disruption of WLAN services: Correct!

E. deauthentication broadcast: Incorrect.

Which CLI command will be used on Cisco IOS XE Software in order to put the AP named Floor1_AP1 back in the default AP group?

A. ap name Floor1_AP1 ap-groupname default: Incorrect.

B. ap Floor1_AP1 ap-groupname default-group: Incorrect.

C. ap name Floor1_AP1 apgroup default-group: Incorrect.

D. ap name Floor1_AP1 ap-groupname default-group: Correct!

An engineer is going to conﬁgure a new mobility anchor on the CLI for a WLAN with the conﬁg WLAN mobility anchor add 310.10.10.10 command, but for some reason the command is failing. Which two conditions in order to be able to enter this command must be met? (Choose two.)