CiscoCertified Network Professional Enterprise Wireless (ENWLSI)
Domain 8Objective 2
8.2 Implement Access Point Authentication (including 802.1X) 300-430 Practice Questions (Page 1)
Part of the Device Hardening domain, which accounts for 10% of the 300-430 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)
31questions here
7free pages
6concepts
10%of the exam
Questions 1–5
- 1
A network engineer is configuring 802.1X on a Cisco AP. The AP is connected to a switch port that is configured for 802.1X with 'multi-auth' mode. The AP is configured with EAP-FAST and the correct RADIUS server. However, the AP fails authentication. The switch logs show that the AP's MAC address is not in the authorized list. What is the most likely cause?
Select an answer first - 2
A network administrator is troubleshooting 802.1X authentication failures for Cisco APs using EAP-TLS. The APs have valid certificates, but the RADIUS server logs show 'certificate validation failed' for the client certificate. The administrator has verified that the CA that issued the client certificates is in the RADIUS server's trust store. What else should the administrator check?
Select an answer first - 3
A network engineer is configuring 802.1X for APs on a Cisco switch. The APs are connected to switch ports that are configured for multi-auth mode. The engineer notices that the APs authenticate successfully, but after a few minutes, they lose connectivity and the switch logs show 'Authentication failed' for the AP's MAC address. What is the most likely cause?
Select an answer first - 4
A company is implementing EAP-TLS for AP authentication. The RADIUS server has a certificate signed by an internal CA. The APs are configured to validate the server certificate. What must be installed on the APs to ensure the certificate validation succeeds?
Select an answer first - 5
What is the default UDP port used by RADIUS for authentication requests?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “300-430” is a trademark of its owner, used for identification only.