A university reports that students using the eduroam SSID can authenticate but are not assigned an IP address. The WLC shows clients in the 'DHCP' state. ISE is used for authentication. What should the administrator check?

The client's 802.1X supplicant configuration

The DHCP scope and relay configuration on the WLC

The RADIUS authentication policy in ISE

A company has a WLC with multiple SSIDs. The corporate SSID uses 802.1X with ISE. Users report that they can connect but cannot access the internet. Catalyst Center shows the clients with a health score of 9/10 and no RF issues. ISE logs show successful authentication. What is the most likely cause?

The client's DNS settings are incorrect

The WLC's RADIUS server is unreachable

The ISE authorization profile returns a VLAN that has no internet route

A manufacturing plant has a wireless network with a WLC and ISE. During a shift change, many clients fail to authenticate. ISE logs show 'Authentication failed' for some clients and 'RADIUS timeout' for others. The WLC shows high CPU usage. What is the most likely cause?

ISE is overwhelmed by the sudden increase in authentication requests

The WLC's RADIUS shared secret was changed

The clients are using the wrong SSID

The APs are on a congested channel

A university is deploying a new SSID for IoT devices that use EAP-TLS. The devices fail authentication with 'certificate validation failed' errors. What should the admin verify?

The WLC has the correct RADIUS shared secret

The devices have the correct root CA certificate installed and the trust anchor is configured in ISE

A company uses ISE for 802.1X authentication. A group of users reports that they can connect to the Wi-Fi but cannot access internal servers. Catalyst Center shows the clients with a health score of 8/10 and no connectivity issues. What should the administrator review in ISE?

The WLC's RADIUS timeout settings

The authorization profiles assigned to the users

The authentication logs for RADIUS failures

The client's certificate validity

CiscoCertified Network Professional Enterprise Wireless (ENWLSI)

Domain 7Objective 4

7.4 Troubleshoot Client Connectivity 300-430 Practice Questions (Page 3)

Part of the Monitoring domain, which accounts for 15% of the 300-430 exam. Cisco does not publish an official question count, but from its 90-minute exam (~35–60 total, ~5–9 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

3concepts

15%of the exam

Questions 11–15

11application · medium
A university reports that students using the eduroam SSID can authenticate but are not assigned an IP address. The WLC shows clients in the 'DHCP' state. ISE is used for authentication. What should the administrator check?
Select an answer first
12expert · hard
A company has a WLC with multiple SSIDs. The corporate SSID uses 802.1X with ISE. Users report that they can connect but cannot access the internet. Catalyst Center shows the clients with a health score of 9/10 and no RF issues. ISE logs show successful authentication. What is the most likely cause?
Select an answer first
13expert · hard
A manufacturing plant has a wireless network with a WLC and ISE. During a shift change, many clients fail to authenticate. ISE logs show 'Authentication failed' for some clients and 'RADIUS timeout' for others. The WLC shows high CPU usage. What is the most likely cause?
Select an answer first
14application · medium
A university is deploying a new SSID for IoT devices that use EAP-TLS. The devices fail authentication with 'certificate validation failed' errors. What should the admin verify?
Select an answer first
15application · medium
A company uses ISE for 802.1X authentication. A group of users reports that they can connect to the Wi-Fi but cannot access internal servers. Catalyst Center shows the clients with a health score of 8/10 and no connectivity issues. What should the administrator review in ISE?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 300-430

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “300-430” is a trademark of its owner, used for identification only.