Question 1

Scenario: You have been asked by your customer to help resolve issues in their routed network. Their network engineer has deployed HSRP. On closer inspection HSRP doesn't appear to be operating properly and it appears there are other network problems as well. You are to provide solutions to all the network problems.      Examine the configuration on R4. The routing table shows no entries for 172.16.10.0/24 and 172.16.20.0/24.  Identify which of the following is the issue preventing route entries being installed on R4 routing table?
A) HSRP issue between R4 and R2
B) This is an OSPF issue between R4 and R2
C) This is a DHCP issue between R4 and R2
D) The distribute-list configured on R4 is blocking route entries
E) The ACL configured on R4 is blocking inbound traffic on the interface connected to R2

Accepted Answer

The answer of Scenario: You have been asked by your...

Question 2

An engineer has configured the wireless controller to authenticate clients on the employee SSID against Microsoft Active Directory using PEAP authentication. Which protocol does the controller use to communicate with the authentication server?
A) WPA2
B) RADIUS
C) 802.1X
D) EAP

Accepted Answer

The controller uses the RADIUS protocol to communicate with the authentication server for PEAP authentication.

Question 3

Refer to the exhibit.  A network engineer must configure a WLAN on a Cisco IOS-XE controller to support corporate devices (using VLAN 30) and BYOD (using VLAN 40) on the same secure SSID. The security team has built an ISE deployment to be used for VLAN assignment and to restrict access based on policy and posture compliance. Given the existing WLAN configuration, which configuration change must be made?
A) remove ip dhcp required remove ip dhcp required
B) Add aaa-override Add aaa-override
C) Remove nac Remove nac
D) Add mac-filtering default mac-filtering default

Accepted Answer

The answer of Refer to the exhibit.  A network...

Question 4

Refer to the exhibit.  You are configuring a controller that runs Cisco IOS XE by using the CLI. Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)
A) mandatory
B) association-comeback
C) SA teardown protection
D) saquery-retry-time
E) enable
F) comeback-time

Accepted Answer

The answer of Refer to the exhibit.  You are...

Question 5

If Smart Account Sync is not used, which Cisco SD-WAN component is used to upload an authorized serial number file?
A) WAN Edge
B) vSmart
C) vBond
D) vManage

Accepted Answer

vManage is the component used to upload an authorized serial number file when Smart Account Sync is not used in Cisco SD-WAN.

Question 6

An engineer is configuring central web authentication using a Cisco 5508 wireless controller and the Cisco Identity Service Engine. Which two attributes must be configured on Cisco ISE to add the controller as a network device? (Choose two.)
A) controller IP address
B) authentication protocol
C) controller software version
D) out-of-band SGA PAC
E) RADIUS shared secret

Accepted Answer

The controller IP address and RADIUS shared secret are required to add the controller as a network device in Cisco ISE for authentication purposes.

Question 7

Refer to the exhibit.  What is the 1.1.1.1 IP address?
A) the wireless client IP address
B) the RADIUS server IP address
C) the controller management IP address
D) the lightweight AP IP address
E) the controller A?-manager IP address
F) the controller virtual interface IP address

Accepted Answer

The answer of Refer to the exhibit.  What is...

Question 8

Access points at branch sites for a company are in FlexConnect mode and perform local switching, but they authenticate to the central RADIUS at headquarters. VPN connections to the headquarters have gone down, but each branch site has a local authentication server. Which three features on the wireless controller can be configured to maintain network operations if this situation reoccurs? (Choose three.)
A) Put APs in FlexConnect Group for Remote Branches.
B) Set Branch RADIUS as Primary.
C) Put APs in AP Group Per Branch.
D) Put APs in FlexConnect Group Per Branch.
E) Set Branch RADIUS as Secondary.
F) Set HQ RADIUS as Primary.

Accepted Answer

The answer of Access points at branch sites for a...

Question 9

Scenario: A customer network engineer has edited their OSPF network configuration and now your customer is experiencing network issues. They have contacted you to resolve the issues and return the network to full functionality.        The OSPF neighbor relationship has been lost between R1 and R3. What is causing this problem?
A) The serial interface in R1 should be taken out of the shutdown state.
B) A neighbor statement needs to be configured in R1 and R3 pointing at each other.
C) The R1 network type should be changed to point-to-multipoint non-broadcast.
D) The hello, dead and wait timers on R1 need to be reconfigured to match the values on R3.

Accepted Answer

The answer of Scenario: A customer network engineer has edited...

Question 10

Scenario: You have been asked by your customer to help resolve issues in their routed network. Their network engineer has deployed HSRP. On closer inspection HSRP doesn't appear to be operating properly and it appears there are other network problems as well. You are to provide solutions to all the network problems.      You have received notification from network monitoring system that link between R1 and R5 is down and you noticed that the active router for HSRP group 1 has not failed over to the standby router for group 1. You are required to troubleshoot and identify the issue.
A) There is an HSRP group track command misconfiguration
B) There is an HSRP group priority misconfiguration
C) There is an HSRP authentication misconfiguration
D) There is an HSRP group number mismatch
E) This is not an HSRP issue; this is routing issue.

Accepted Answer

The answer of Scenario: You have been asked by your...

Question 11

When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?
A) two
B) four
C) one
D) three

Accepted Answer

In a Zone-Based Firewall, a single VPN can only be part of one zone at a time.

Question 12

An engineer is configuring a new mobility anchor for a WLAN on the CLI with the config wlan mobility anchor add 3 10.10.10.10 command, but the command is failing. Which two conditions must be met to be able to enter this command? (Choose two.)
A) The anchor controller IP address must be within the management interface subnet.
B) The anchor controller must be in the same mobility group.
C) The WLAN ID must be enabled.
D) The mobility group keepalive must be configured.
E) The indicated WLAN ID must be present on the controller.

Accepted Answer

The answer of An engineer is configuring a new mobility...

Question 13

After receiving an alert regarding a rogue AP, a network engineer logs into Cisco Prime and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines the rogue device is actually inside the campus. The engineer determines the rogue to be a security threat and decides to stop it from broadcasting inside the enterprise wireless network. What is the fastest way to disable the rogue?
A) Go to the location the rogue device is indicated to be and disable the power.
B) Create an SSID on the WLAN controller resembling the SSID of the rogue to spoof it and disable clients from connecting to it.
C) Classify the rogue as malicious in Cisco Prime.
D) Update the status of the rogue in Cisco Prime to contained.

Accepted Answer

Classifying the rogue as malicious in Cisco Prime will automatically disable it from broadcasting.

Question 14

MFP is enabled globally on a WLAN with default settings on a single controller wireless network. Older client devices are disconnected from the network during a deauthentication attack. What is the cause of this issue?
A) The client devices do not support WPA
B) The client devices do not support CCXv5.
C) The MFP on the WLAN is set to optional.
D) The NTP server is not configured on the controller.

Accepted Answer

Older client devices may not support CCXv5, which is required for MFP (Management Frame Protection) to function properly. Without this support, they cannot handle the MFP frames, leading to disconnection during attacks.

Question 15

How many mobility peers can a Cisco Catalyst 3850-MC node have?
A) 8
B) 2
C) 6
D) 16
E) 4

Accepted Answer

A Cisco Catalyst 3850-MC node can have up to 8 mobility peers.

Question 16

Clients on access points within an AP group are not receiving multicast traffic after roaming to another AP within the AP group. Which configuration must be done to maintain multicast connectivity?
A) Enable an ACL on the router that serves the VLAN or subnet.
B) Enable NAC out-of-band support.
C) Enable a unique NAS-ID for the AP group.
D) Enable IGMP snooping.

Accepted Answer

Enabling IGMP snooping helps manage multicast traffic by listening to IGMP conversations between hosts and routers, ensuring that multicast traffic is only sent to the intended recipients, which can help maintain multicast connectivity when clients roam between APs.

Question 17

An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which option must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?
A) local EAP
B) authentication caching
C) ?r?-authentication
D) Cisco Centralized Key Management

Accepted Answer

Local EAP allows the WLC to handle authentication locally, enabling client devices to connect even if the WLC cannot communicate with the RADIUS server.

Question 18

Scenario: You have been asked by your customer to help resolve issues in their routed network. Their network engineer has deployed HSRP. On closer inspection HSRP doesn't appear to be operating properly and it appears there are other network problems as well. You are to provide solutions to all the network problems.      The following debug messages are noticed for HSRP group 2. But still neither R1 nor R2 has identified one of them as standby router. Identify the reason causing the issue. Note: only show commands can be used to troubleshoot the ticket. R1# 'Mar 26 11:17:39.234: HSRP: Et1/0 Grp 2 Hello out 172.16.20.2 Active pri 100 vIP 172.16.20.254 'Mar 26 11:17:40.034: HSRP: EtO/0 Grp 1 Hello out 172.16.10.2 Active prj 130 vIP 172.16.10.254 'Mar 26 11:17:40.364: HSRP: EtO/0 Grp 1 Hello in 172.16.10.1 Standby pri 100 vIP 'Mar 26 11:17:41.969: HSRP: Et1/0 Grp 2 Hello out 172.16.20.2 Active pri 100 vIP 'Mar 26 11:17:42.719: HSRP: EtO/0 Grp 1 Hello out 172.16.10.2 Active prj 130 vIP 'Mar 26 11:17:42.918: HSRP: EtO/0 Grp 1 Hello in 172.16.10.1 Standby pri 100 vIP 'Mar 26 11:17:44.869: HSRP: Et1/0 Grp 2 Hello out 172.16.20.2 Active pri 100 vIP 'Mar 26 11:17:45.485: HSRP: EtO/0 Grp 1 Hello out 172.16.10.2 Active prj 130 vIP 'Mar 26 11:17:45.718: HSRP: EtO/0 Grp 1 Hello in 172.16.10.1 Standby pri 100 vIP 'Mar 26 11:17:47.439: HSRP: Et1/0 Grp 2 Hello out 172.16.20.2 Active pri 100 vIP 'Mar 26 11:17:48.252: HSRP: EtO/0 Grp 1 Hello in 172.16.10.1 Standby pri 100 vIP 'Mar 26 11:17:48.322: HSRP: EtO/0 Grp 1 Hello out 172.16.10.2 Active prj 130 vIP 'Mar 26 11:17:50.389: HSRP: Et1/0 Grp 2 Hello out 172.16.20.2 Active pri 100 vIP 'Mar 26 11:17:50.735: HSRP: EtO/0 Grp 1 Hello in 172.16.10.1 Standby pri 100 vIP 'Mar 26 11:17:50.921: HSRP: EtO/0 Grp 1 Hello out 172.16.10.2 Active prj 130 vIP 'Mar 26 11:17:53.089: HSRP: Et1/0 Grp2 Hello out 172.16.20.2 Active pri 100 vIP 'Mar 26 11:17:53.338: HSRP: EtO/0 Grp 1 Hello out 172.16.10.2 Active pri130vlP 'Mar 26 11:17:53.633: HSRP: EtO/0 Grp 1 Hello in 172.16.10.1 Standby pri 100 vIP
A) HSRP group priority misconfiguration
B) There is an HSRP authentication misconfiguration
C) There is an HSRP group number mismatch
D) This is not an HSRP issue: this is DHCP issue.
E) The ACL applied to interface is blocking HSRP hello packet exchange

Accepted Answer

The answer of Scenario: You have been asked by your...

Question 19

An engineer is attempting to send multicast data to all multicast routers in the network with ID XXXXXXXXX. Which IP address should be used?
A) 224.0.0.1
B) 224.0.0.2
C) 224.0.0.4
D) 224.0.0.3

Accepted Answer

The IP address 224.0.0.2 is used to send multicast data to all multicast routers in the network.

Question 20

Scenario: You have been asked by your customer to help resolve issues in their routed network. Their network engineer has deployed HSRP. On closer inspection HSRP doesn't appear to be operating properly and it appears there are other network problems as well. You are to provide solutions to all the network problems.      You examine the configuration on R5 and discover that no routes are being learned from R4. Which issue prevents the route entries from being installed in the routing table?
A) HSRP issue between R5 and R4
B) There is an OSPF issue between R5and R4
C) There is a DHCP issue between R5 and R4
D) The distribute-list configured on R5 is blocking route entries
E) The ACL configured on R5 is blocking traffic for the subnets advertised from R4.

Accepted Answer

The answer of Scenario: You have been asked by your...

Exam 9: Implementing Cisco SD-WAN Solutions (ENSDWI)

An engineer has configured the wireless controller to authenticate clients on the employee SSID against Microsoft Active Directory using PEAP authentication. Which protocol does the controller use to communicate with the authentication server?

Refer to the exhibit. You are configuring a controller that runs Cisco IOS XE by using the CLI. Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)

If Smart Account Sync is not used, which Cisco SD-WAN component is used to upload an authorized serial number file?

An engineer is configuring central web authentication using a Cisco 5508 wireless controller and the Cisco Identity Service Engine. Which two attributes must be configured on Cisco ISE to add the controller as a network device? (Choose two.)

Refer to the exhibit. What is the 1.1.1.1 IP address?

When VPNs are grouped to create destination zone in Zone-Based Firewall, how many zones can a single VPN be part of?

An engineer is configuring a new mobility anchor for a WLAN on the CLI with the config wlan mobility anchor add 3 10.10.10.10 command, but the command is failing. Which two conditions must be met to be able to enter this command? (Choose two.)

MFP is enabled globally on a WLAN with default settings on a single controller wireless network. Older client devices are disconnected from the network during a deauthentication attack. What is the cause of this issue?

How many mobility peers can a Cisco Catalyst 3850-MC node have?

Clients on access points within an AP group are not receiving multicast traffic after roaming to another AP within the AP group. Which configuration must be done to maintain multicast connectivity?

An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which option must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

An engineer is attempting to send multicast data to all multicast routers in the network with ID XXXXXXXXX. Which IP address should be used?