What is the purpose of applying an access control list (ACL) to the management interface of a Cisco wireless controller?

To encrypt management traffic between the controller and the administrator.

To restrict which source IP addresses can access management services.

To log all management commands executed by administrators.

To authenticate users attempting to manage the device.

A security audit on a Cisco WLC reveals that Telnet is enabled on the management interface, and no login banner is configured. The audit requires that all management access be encrypted and that a banner warning against unauthorized access be displayed. Which two configurations are required?

Disable Telnet and configure an ACL to allow only the NOC subnet.

Enable SSH and configure an ACL to allow only the NOC subnet.

Enable Telnet and configure a login banner.

Enable SSH and disable Telnet; configure a login banner.

Why would a network administrator configure local user accounts on a Cisco wireless controller in addition to RADIUS authentication?

To automatically synchronize passwords with the RADIUS server.

To increase the encryption strength of RADIUS communication.

To allow multiple administrators to share the same username.

To provide a fallback authentication method if the RADIUS server is unreachable.

A Cisco WLC currently allows Telnet access for management. The security team wants to eliminate insecure protocols and enforce encrypted management sessions. Additionally, they want to display a warning banner before login. What should the engineer do?

Configure a login banner and leave Telnet enabled.

Disable Telnet, enable SSH, and configure a login banner.

Disable Telnet and rely on HTTP for management.

Enable SSH and keep Telnet enabled for fallback.

A large enterprise uses RADIUS for wireless client authentication and is now implementing device administration on Cisco WLCs. The security team requires that all administrative commands be authorized individually and that the entire communication between the WLC and the AAA server be encrypted. The network team wants to minimize the number of AAA servers to maintain. Which approach best meets these requirements?

Use the existing RADIUS server for both wireless client authentication and device administration.

Configure the WLC to use RADIUS for authentication and TACACS+ for authorization.

Deploy a TACACS+ server for device administration and keep RADIUS for wireless client authentication.

Use RADIUS for device administration and enable command authorization via local policies.

CiscoCertified Network Professional Enterprise Wireless (ENWLSI)

Domain 8Objective 1

8.1 Implement Device Access Controls (including RADIUS and TACACS+) 300-430 Practice Questions (Page 4)

Part of the Device Hardening domain, which accounts for 10% of the 300-430 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

10%of the exam

Questions 16–20

16foundation · easy
What is the purpose of applying an access control list (ACL) to the management interface of a Cisco wireless controller?
Select an answer first
17application · medium
A security audit on a Cisco WLC reveals that Telnet is enabled on the management interface, and no login banner is configured. The audit requires that all management access be encrypted and that a banner warning against unauthorized access be displayed. Which two configurations are required?
Select an answer first
18foundation · easy
Why would a network administrator configure local user accounts on a Cisco wireless controller in addition to RADIUS authentication?
Select an answer first
19application · medium
A Cisco WLC currently allows Telnet access for management. The security team wants to eliminate insecure protocols and enforce encrypted management sessions. Additionally, they want to display a warning banner before login. What should the engineer do?
Select an answer first
20expert · hard
A large enterprise uses RADIUS for wireless client authentication and is now implementing device administration on Cisco WLCs. The security team requires that all administrative commands be authorized individually and that the entire communication between the WLC and the AAA server be encrypted. The network team wants to minimize the number of AAA servers to maintain. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 300-430

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “300-430” is a trademark of its owner, used for identification only.