Securing Cisco Wireless Enterprise Networks

Here you have the best Cisco 300-375 practice exam questions

You have 50 total questions to study from
Each page has 5 questions, making a total of 10 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 18, 2025
This site is not affiliated with or endorsed by Cisco.

Question 1 of 50

Which two considerations must a network engineer have when planning for voice over wireless roaming? (Choose two.)

A.

Roaming with only 802.1x authentication requires full reauthentication.

B.

Roaming time increases when using 802.1x + Cisco Centralized Key Management.

C.

Full reauthentication introduces gaps in a voice conversation.

D.

Roaming occurs when the phone has reached -80 dBs or below.

E.

Roaming occurs when the phone has seen at least four APs.

Correct Answer: A, C

Question 2 of 50

WPA2 Enterprise with 802.1x is being used for clients to authenticate to a wireless network through an ACS server. For security reasons, the network engineer wants to ensure only PEAP authentication can be used. The engineer sent instructions to clients on how to configure their supplicants, but users are still in the
ACS logs authenticating using E-FAST. Which option describes the most efficient way the engineer can ensure these users cannot access the network unless the correct authentication mechanism is configured?

A.

Enable AAA override on the SSID, gather the usernames of these users, and disable their RADIUS accounts until they make sure they correctly configured their devices.

B.

Enable AAA override on the SSID and configure an access policy in ACS that denies access to the list of MACs that have used EAP-FAST.

C.

Enable АAА override on the SSID and configure an access policy in ACS that allows access only when the EAP authentication method is PEAP.

D.

Enable AAA override on the SSID and configure an access policy in ACS that puts clients that authenticated using EАР-FAST into a quarantine VLAN.

Correct Answer: D

Question 3 of 50

An engineer is configuring a BYOD deployment strategy and prefers a single SSID model. Which technology is required to accomplish this configuration?

A.

mobility service engine

B.

wireless control system

C.

identity service engine

D.

Prime Infrastructure

Correct Answer: C

Question 4 of 50

When you configure BYOD access to the network, you face increased security risks and challenges. Which challenge is resolved by deploying digital client certificates?

A.

managing the increase in connected devices

B.

ensuring wireless LAN performance and reliability

C.

providing device choice and support

D.

enforcing company usage policies

Correct Answer: D

Question 5 of 50

Scenario -
Refer to the exhibit. The East-WLC-2504A controller has been configured for WPA2 + PSK, although it isnt working properly. Refer to the exhibit to resolve the configuration issues.

WLAN ID: 11 -

Profile Name: Contractors -

SSID: Contractors -

VLAN: 2 -
Note, not all menu items, text boxes, or radio buttons are active.

Topology -
Exam 300-375: Question 5 - Image 1