Free Cisco 300-430 Practice Questions 2026 | Implementing Cisco Enterprise Wireless Networks (ENWLSI)

An engineer configures a Cisco Aironet 600 Series OfficeExtend AP for a user who works
remotely. What is configured on the Cisco WLC to allow the user to print a printer on his
home network?

A.

split tunneling

B.

SE-connect

C.

FlexConnect

D.

AP failover priority

An engineer must configure a Cisco WLC to support Cisco Aironet 600 Series OfficeExtend
APs. Which two Layer 2 security options are supported in this environment? (Choose two.)

A.

Static WEP + 802.1X

B.

WPA+WPA2

C.

Static WEP

D.

CKIP

E.

802.1X

A corporation has recently implemented a BYOD policy at their HQ. Which two risks should
the security director be concerned about? (Choose two.)

A.

network analyzers

B.

malware

C.

lost and stolen devices

D.

keyloggers

E.

unauthorized users

An engineer must create an account to log in to the CLI of an access point for
troubleshooting. Which configuration on the WLC will accomplish this?

A.

ReadWrite User Access Mode

B.

Global Configuration Enable Password

C.

SNMP V3 User

D.

Allow New Telnet Sessions
https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-
4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_
chapter_01101011.html

A corporation is spread across different countries and uses MPLS to connect the offices.
The senior management wants to utilize the wireless network for all the employees. To
ensure strong connectivity and minimize delays, an engineer needs to control the amount
of traffic that is traversing between the APs and the central WLC. Which configuration
should be used to accomplish this goal?

A.

FlexConnect mode with OfficeExtend enabled

B.

FlexConnect mode with local authentication

C.

FlexConned mode with central switching enabled

D.

FlexConnect mode with central authentication

Refer to the exhibit.

An engineer is creating an ACL to restrict some traffic to the WLC CPU. Which selection
must be made from the direction drop-down list?

A.

It must be Inbound because traffic goes to the WLC.

B.

Packet direction has no significance; it is always Any.

C.

It must be Outbound because it is traffic that is generated from the WLC.

D.

To have the complete list of options, the CPU ACL must be created only by the CLI

Branch wireless users report that they can no longer access services from head office but
can access services locally at the site. New wireless users can associate to the wireless
while the WAN is down. Which three elements (Cisco FlexConnect state, operation mode,
and authentication method) are seen in this scenario? (Choose three.)

A.

A. authentication-local/switch-local

B.

WPA2 personal

C.

authentication-central/switch-central

D.

lightweight mode

E.

standalone mode

F.

WEB authentication

Where is Cisco Hyperlocation enabled on a Cisco Catalyst 9800 Series Wireless Controller
web interface?

A.

Policy Profile

B.

AP Join Profile

C.

Flex Profile

D.

RF Profile

The IT manager is asking the wireless team to get a report for all guest user associations
during the past two weeks. In which two formats can Cisco Prime save this report?
(Choose two.)

A.

CSV

B.

PDF

C.

XLS

D.

DOC

E.

plain text

What is an important consideration when implementing a dual SSID design for BYOD?

A.

After using the provisioning SSID, an ACL that used to make the client switch SSIDs
forces the user to associate and traverse the network by MAC filtering.

B.

If multiple WLCs are used, the WLAN IDs must be exact for the clients to be provisioned
and traverse the network correctly.

C.

SSIDs for this setup must be configured with NAC State-RADIUS NAC for the clients to
authenticate with Cisco ISE, or with NAC State-ISE NAC for Cisco ISE to associate the
client.

D.

One SSID is for provisioning and the other SSID is for gaining access to the network.
The use of an ACL should not be enforced to make the client connect to the REAL SSID
after provisioning.