6.4 Implement Identity-Based Networking on Different Wireless Architectures (VLANs, QoS, ACLs) 300-430 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company uses a centralized WLC (Cisco 9800) with CAPWAP and ISE. They have implemented identity-based networking with dACLs. Users report that they can access the internet but cannot reach internal resources, even though the dACL should permit them. The ISE logs show successful authentication and authorization. What is the most likely cause?

   • AThe RADIUS shared secret is incorrect, causing the dACL to be dropped.
   • BThe dACL is not properly defined on the WLC, or the dACL name in the authorization profile does not match the dACL name on the WLC.
   • CThe dACL is applied to the wrong interface on the WLC.
   • DThe client's supplicant is blocking the dACL.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the purpose of applying QoS policies based on user identity in a wireless network?

   • ATo ensure that all users receive the same bandwidth regardless of their role
   • BTo block all non-business traffic
   • CTo encrypt traffic differently for each user
   • DTo provide different levels of network service, such as priority or bandwidth, to different user groups
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company uses a centralized WLC (Cisco 9800) with CAPWAP and ISE. They have implemented identity-based networking with dynamic VLAN assignment. Users report that they are being placed in the default VLAN instead of their assigned VLAN. The ISE logs show successful authentication and authorization. What is the most likely cause?

   • AThe WLC is configured with a static VLAN that overrides the RADIUS-returned VLAN.
   • BThe WLC's RADIUS shared secret is incorrect, causing the Access-Accept to be dropped.
   • CThe VLAN attribute is not included in the ISE authorization profile, or the VLAN is not defined on the WLC.
   • DThe client's supplicant is not configured to request a VLAN.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of dynamic VLAN assignment in an identity-based wireless network?

   • ATo encrypt all traffic with a unique key per VLAN
   • BTo increase the wireless signal strength for each user
   • CTo reduce the number of SSIDs needed by placing users in different VLANs based on their identity
   • DTo allow clients to roam between access points without re-authenticating
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary benefit of dynamically applying ACLs based on identity rather than using static ACLs on the SSID?

   • AIt increases the wireless encryption strength
   • BIt allows different users on the same SSID to have different access permissions
   • CIt reduces the number of access points needed
   • DIt eliminates the need for a firewall
   Reveal Solution Discussion Select an answer first