A hospital's wireless network has detected a rogue AP that is broadcasting the hospital's guest SSID. The rogue AP is located in a patient care area, and the hospital is concerned about patient privacy and safety. The security team wants to contain the rogue AP immediately, but the hospital's policy requires that any containment action must not disrupt critical medical devices that use Wi-Fi. What should the administrator do?

Enable containment on the rogue AP, but limit the containment to the APs that are closest to the rogue AP to minimize disruption.

Do not contain the rogue AP; instead, monitor it and wait for the security team to physically locate and remove it.

Disable the guest SSID on all APs to prevent clients from associating with the rogue AP.

Immediately enable containment on all APs to ensure the rogue AP is contained as quickly as possible.

A network administrator wants to ensure that critical WLC alarms are also visible in Cisco Catalyst Center for centralized monitoring. The WLC is already integrated with Cisco Catalyst Center. What must be configured to achieve this?

Set the WLC alarm severity to 'Critical' for all categories.

Configure SNMP traps on the WLC to send to a third-party server.

Enable alarm forwarding from the WLC to Cisco Catalyst Center in the integration settings.

Manually create matching alarms in Cisco Catalyst Center.

A network operations center (NOC) is overwhelmed by the number of alarms generated by the WLCs and Cisco Catalyst Center. The NOC manager wants to reduce the alarm volume while ensuring that no critical events are missed. The team has already adjusted severity thresholds, but the volume is still high. What is the next best step to reduce alarm noise?

Disable all alarms that are not marked as 'Critical' on the WLCs.

Increase the polling interval on the WLCs to reduce the frequency of alarm checks.

Configure the WLCs to send alarms only to a syslog server, not to the NOC.

Implement alarm correlation rules in Catalyst Center to group related alarms into a single incident.

CiscoCertified Network Professional Enterprise Wireless (ENWLSI)

Domain 7Objective 2

7.2 Manage Alarms and Rogues (APs and Clients) 300-430 Practice Questions (Page 1)

Part of the Monitoring domain, which accounts for 15% of the 300-430 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

5concepts

15%of the exam

Questions 1–5

1expert · hard
A hospital's wireless network has detected a rogue AP that is broadcasting the hospital's guest SSID. The rogue AP is located in a patient care area, and the hospital is concerned about patient privacy and safety. The security team wants to contain the rogue AP immediately, but the hospital's policy requires that any containment action must not disrupt critical medical devices that use Wi-Fi. What should the administrator do?
Select an answer first
2foundation · easy
On a Cisco WLC, which alarm category would an administrator use to filter alarms related to authentication failures on the wireless network?
Select an answer first
3application · medium
A network administrator wants to ensure that critical WLC alarms are also visible in Cisco Catalyst Center for centralized monitoring. The WLC is already integrated with Cisco Catalyst Center. What must be configured to achieve this?
Select an answer first
4expert · hard
A network operations center (NOC) is overwhelmed by the number of alarms generated by the WLCs and Cisco Catalyst Center. The NOC manager wants to reduce the alarm volume while ensuring that no critical events are missed. The team has already adjusted severity thresholds, but the volume is still high. What is the next best step to reduce alarm noise?
Select an answer first
5foundation · easy
A Cisco WLC detects an access point that is not part of the managed network but is broadcasting the same SSID as a legitimate corporate SSID. How does the WLC classify this access point by default?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 300-430

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “300-430” is a trademark of its owner, used for identification only.

7.2 Manage Alarms and Rogues (APs and Clients) 300-430 Practice Questions (Page 1)

Questions 1–5

On a Cisco WLC, which alarm category would an administrator use to filter alarms related to authentication failures on the wireless network?

A network administrator wants to ensure that critical WLC alarms are also visible in Cisco Catalyst Center for centralized monitoring. The WLC is already integrated with Cisco Catalyst Center. What must be configured to achieve this?

A Cisco WLC detects an access point that is not part of the managed network but is broadcasting the same SSID as a legitimate corporate SSID. How does the WLC classify this access point by default?

Keep studying — Monitoring