You are installing a new AP, out of the box, on the Internet. However, you are required to enforce only preregistered APs to be allowed to connect to the DMZ controller. Which two of these actions best meet the requirement? (Choose two.)

• A. Authorize the AP to use an internal authorization list on the WLC, or to use an AAA server.
• B. Make sure that the option to accept Cisco SSC from the AP is enabled on the WLC.
• C. Make sure that the option to accept an LSC from the AP is enabled on the WL
• D. Make sure that the option to accept an MIC from the AP is enabled on the WLC.

Which two methods can be used in Cisco Secure ACS 5.2 to assign client authentication requests to different access services or authorization policies, based on the SSID to which the client is associated? (Choose two.)

• A. DNIS-based end station filter
• B. condition based on the RADIUS-IETF:Called-Station-ID(30) attribute
• C. CLI-based end station filter
• D. condition based on the RADIUS-IETF:Calling-Station-ID(31) attribute
• E. condition based on the RADIUS-IETF. Filter-ID(11) attribute

When configuring multiple BSSIDs in autonomous APs, which three requirements and guidelines should you follow? (Choose three.)

• A. RADIUS-assigned VLANs are supported when you enable multiple BSSIDs.
• B. When you enable BSSIDs, the AP automatically maps a BSSID to each SSI You cannot manually map a BSSID to a specific SSI
• C. APs must contain an 802.11a or 802.11b/g radio that supports multiple BSSIDs.
• D. You cannot enable multiple BSSIDs on APs that participate in WDS.
• E. Any Wi-Fi certified client device can associate to an AP that uses multiple BSSIDs.
• F. VLANs cannot be configured.

A wireless network administrator needs to limit guest user TCP traffic to no more than 50,000 kb/s, to conserve bandwidth on the guest WLAN. To do this, the administrator configures the average real-time rate to 50,000 kb/s and the burst real-time rate to 60,000 kb/s. Why does a test of the guest account show no restriction for the client TCP traffic?

• A. The average real-time rate and burst real-time rate should always be equal.
• B. The administrator should have configured the average data rate and burst data rate.
• C. The administrator should have configured the average data rate and the average real-time rate.
• D. The average real-time rate should always be higher than the burst real-time rate.

You are configuring a TACACS+ server and the security team asks you for details about this protocol. Which three statements about the TACACS+ protocol are true? (Choose three.)

• A. It is UDP based.
• B. It uses port 49 by default.
• C. It is TCP based.
• D. The username is encrypted.
• E. It uses port 59 by default.
• F. The username is sent in cleartext.