A network engineer has implemented a Control Plane ACL on a Cisco 9800 controller to allow only management traffic from the NOC. After implementation, the engineer notices that the controller's CPU utilization has decreased significantly. What does this indicate?

The ACL is blocking all traffic, including legitimate management traffic.

The ACL is effectively filtering unwanted traffic, reducing CPU load.

The controller is not receiving any traffic at all.

The ACL is not working correctly.

Which type of traffic is primarily affected when a Control Plane ACL is applied on a Cisco wireless LAN controller?

Traffic from the internet to wireless clients

Traffic forwarded between access points and the wired network

Traffic destined to the controller's CPU, such as management and protocol packets

Traffic between wireless clients on different VLANs

What is the primary purpose of implementing Control Plane ACLs (CPACLs) on a Cisco wireless LAN controller?

To restrict management access to the controller's web interface only

To protect the controller's CPU from malicious or excessive traffic destined to the control plane

To segment wireless client traffic into different VLANs

To filter traffic between wireless clients on the same VLAN

A wireless controller is experiencing high CPU utilization due to excessive broadcast and multicast traffic reaching the control plane. The engineer wants to reduce this load while maintaining necessary functionality. What should the engineer implement?

A Control Plane ACL that denies broadcast and multicast traffic and permits necessary unicast traffic.

Increase the controller's memory to handle more traffic.

Disable the controller's wireless interfaces to reduce traffic.

A switchport ACL on the access switch to block broadcast traffic.

A network engineer is configuring a Control Plane ACL on a Cisco 9800 WLC to protect the management plane. The ACL must allow SSH (TCP 22) and HTTPS (TCP 443) from the management subnet 192.168.1.0/24, and allow CAPWAP from AP subnet 10.0.0.0/8. All other traffic should be denied. The engineer applies the ACL to the control plane. What is the most likely result if the ACL is applied correctly?

All traffic to the control plane will be dropped, including management and CAPWAP, because the ACL is applied to the control plane

Only CAPWAP traffic will be permitted, and management traffic will be dropped because the ACL is applied to the control plane

The ACL will have no effect because Control Plane ACLs are only applied to the management interface

Management traffic from the management subnet and CAPWAP from APs will be permitted, while all other traffic to the control plane is dropped

CiscoCertified Network Professional Enterprise Wireless (ENWLSI)

Domain 8Objective 3

8.3 Implement Control Plane ACLs on the Controller 300-430 Practice Questions (Page 1)

Part of the Device Hardening domain, which accounts for 10% of the 300-430 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

3concepts

10%of the exam

Questions 1–5

1application · medium
A network engineer has implemented a Control Plane ACL on a Cisco 9800 controller to allow only management traffic from the NOC. After implementation, the engineer notices that the controller's CPU utilization has decreased significantly. What does this indicate?
Select an answer first
2foundation · easy
Which type of traffic is primarily affected when a Control Plane ACL is applied on a Cisco wireless LAN controller?
Select an answer first
3foundation · easy
What is the primary purpose of implementing Control Plane ACLs (CPACLs) on a Cisco wireless LAN controller?
Select an answer first
4application · medium
A wireless controller is experiencing high CPU utilization due to excessive broadcast and multicast traffic reaching the control plane. The engineer wants to reduce this load while maintaining necessary functionality. What should the engineer implement?
Select an answer first
5application · medium
A network engineer is configuring a Control Plane ACL on a Cisco 9800 WLC to protect the management plane. The ACL must allow SSH (TCP 22) and HTTPS (TCP 443) from the management subnet 192.168.1.0/24, and allow CAPWAP from AP subnet 10.0.0.0/8. All other traffic should be denied. The engineer applies the ACL to the control plane. What is the most likely result if the ACL is applied correctly?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 300-430

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “300-430” is a trademark of its owner, used for identification only.