Tag Archives: address

Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?

A. Option 43 B. Option 60 C. Option 67 D. Option 150 Answer: Option A. Explanation:  No answer description available for this question Show AnswerDiscussion The post Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller? appeared first on Majanto.

An administrator is configuring RADIUS on a Cisco switch with a key set to Cisc407294634 but is receiving the error “Authentication failed: 22040 Wrong password or invalid shared secret.” What must be done to address this issue?

A. Add the network device as a NAD inside Cisco ISE using the existing key. B. Configure the key on the Cisco ISE instead of the Cisco switch. C. Validate that the key is correct on both the Cisco switch as well as Cisco ISE. D. Use a key that is between eight and ten characters. Answer: Option… Read More »

An organization has a fully distributed Cisco ISE deployment. When implementing probes, an administrator must scan for unknown endpoints to learn the IP-to- MAC address bindings The scan is complete on one PSN, but the information is not available on the others. What must be done to make the information available?

A. Cisco ISE must be configured to learn the IP-MAC binding of unknown endpoints via RADIUS authentication, not via scanning. B. Cisco ISE must learn the IP-MAC binding of unknown endpoints via DHCP profiling, not via scanning. C. Scanning must be initiated from the MnT node to centrally gather the information. D. Scanning must be initiated from the… Read More »

An administrator is troubleshooting an endpoint that is supposed to bypass 802.1X and use MAB. The endpoint is bypassing 802.1X and successfully getting network access using MAB, however the endpoint cannot communicate because it cannot obtain an IP address. What is the problem?

A. The endpoint is using the wrong protocol to authenticate with Cisco ISE. B. The 802.1X timeout period is too long. C. The DHCP probe for Cisco ISE is not working as expected. D. An ACL on the port is blocking HTTP traffic. Answer: Option B. Explanation:  No answer description available for this question Show AnswerDiscussion The post… Read More »

A network architect is troubleshooting the L2TPv3 tunneling security due to the untrusted nature of the underlaying network. Which two L2TPv3 features does the architect deploy to address the ongoing issues? (Choose two.)

A. TCP MD5 authentication B. control message hashing C. CHAP authentication D. control message rate limiting E. asymmetric mutual authentication with PSK Answer: Option B, C. Explanation:  No answer description available for this question Show AnswerDiscussion The post A network architect is troubleshooting the L2TPv3 tunneling security due to the untrusted nature of the underlaying network. Which two… Read More »

Fill in the blank: When search engines use factors like geolocation, IP address and location-based search terms to produce geographically tailored results, this is called _____________.

Fill in the blank: When search engines use factors like geolocation, IP address and location-based search terms to produce geographically tailored results, this is called _____________. Local Search Geo search Mobile search Organic search

An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication Redirect page. To which IP address is guest client HTTPS traffic allowed for this to work?

A. DNS server IP B. controller management IP C. virtual interface IP D. client interface IP Answer: Option C. Explanation:  No answer description available for this question. Show AnswerDiscussion The post An engineer must implement a CPU ACL that blocks web management traffic to the controller, but they also must allow guests to reach a Web Authentication Redirect… Read More »

An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the management interface, it is noticed that the WLC is not responding for APs that are trying to associate to the internal IP management address. Which command should be used to reconcile this?

A. config flexconnect office-extend nat-ip-only disable B. config network ap-discovery nap-ip-only enable C. config flexconnect office-extend nat-ip-only enable D. config network ap-discovery nat-ip-only disable Answer: Option C. Explanation:  No answer description available for this question. Show AnswerDiscussion The post An engineer must configure Cisco OEAPs for three executives. As soon as the NAT address is configured on the… Read More »