Cisco 300-375 Securing Wireless Enterprise Networks Online Training
Cisco 300-375 Online Training
The questions for 300-375 were last updated at Oct 23,2025.
- Exam Code: 300-375
- Exam Name: Securing Wireless Enterprise Networks
- Certification Provider: Cisco
- Latest update: Oct 23,2025
After receiving an alert regarding a rogue AP, a network engineer logs into Cisco Prime and looks at the floor map where the AP that detected the rogue is located. The map is synchronized with a mobility services engine that determines the rogue device is actually inside the campus. The engineer determines the rogue to be a security threat and decides to stop it from broadcasting inside the enterprise wireless network.
What is the fastest way to disable the rogue?
- A . Go to the location the rogue device is indicated to be and disable the power.
- B . Create an SSID on WLAN controller resembling the SSID of the rogue to spoof it and disable clients from connecting to it.
- C . Classify the rogue as malicious in Cisco Prime.
- D . Update the status of the rogue in Cisco Prime to contained.
An engineer is configuring client MFP.
What WLAN Layer 2 security must be selected to use client MFP?
- A . Static WEP
- B . CKIP
- C . WPA+WPA2
- D . 802 1x
Which two events are possible outcomes of a successful RF jamming attack? (Choose two.)
- A . unauthentication association
- B . deauthentication multicast
- C . deauthentication broadcast
- D . disruption of WLAN services
- E . physical damage to AP hardware
Which CLI command do you use on Cisco IOS XE Software to put the AP named Floor1_AP1 back in the default AP group?
- A . ap Floor1_AP1 ap-groupname default-group
- B . ap name Floor1_AP1 apgroup default-group
- C . ap name Floor1_AP1 ap-groupname default-group
- D . ap name Floor1_AP1 ap-groupname default
An engineer is configuring a new mobility anchor for a WLAN on the CLI with the config wlan mobility anchor add 3 10.10.10.10 command, but the command is failing.
Which two conditions must be met to be able to enter this command? (Choose two.)
- A . The anchor controller IP address must be within the management interface subnet.
- B . The anchor controller must be in the same mobility group.
- C . The WLAN must be enabled.
- D . The mobility group keepalive must be configured.
- E . The indicated WLAN ID must be present on the controller.
A customer has deployed PEAP authentication with a Novell eDirectory LDAP Server.
Which authentication method must be configured on the client to support this deployment?
- A . PEAP(EAP-MSCHAPv2)
- B . PEAP(EAP-TTLS)
- C . PEAP(EAP-GTC)
- D . PEAP(EAP-WPA)
Access points at branch sites for a company are in FlexConncct mode and perform local switching, but they authenticate to the central RADIUS at headquarters. VPN connections to the headquarters have gone down, but each branch site has a local authentication server.
Which three features on the wireless controller can be configured to maintain network operations if this situation reoccurs? (Choose three.)
- A . Put APs in FlexConnect Group for Remote Branches.
- B . Set Branch RADIUS as Primary.
- C . Put APs in AP Group Per Branch.
- D . Put APs in FlexConnect Group Per Branch.
- E . Set Branch RADIUS OS Secondary.
- F . Set HQ RADIUS a-s primary.
Which security method does a Cisco guest wireless deployment that relies on Cisco ISE guest portal for user authentication use?
- A . Layer 2 and Layer 3
- B . Layer 2 only
- C . No security methods are needed to deploy CWA
- D . Layer 3 only
Which two options are types of MFP that can be performed? (Choose two.)
- A . message integrity check
- B . infrastructure
- C . client
- D . AES-CCMP
- E . RSN
An engineer has determined that the source of an authentication issue is the client laptop.
Which three items must be verified for EAP-TLS authentication? (Choose three.)
- A . The client certificate is formatted as X 509 version 3
- B . The validate server certificate option is disabled.
- C . The client certificate has a valid expiration date.
- D . The user account is the same in the certificate.
- E . The supplicant is configured correctly.
- F . The subject key identifier is configured correctly.