642-737 Pdf Training Guides

By Author: Kristi McLeod
Total Articles: 155
Comment this article

Question: 1

Which statement describes the major difference between PEAP and EAP-FAST client authentication?

A. EAP-FAST requires a backend AAA server, and PEAP does not.
B. EAP-FAST is a Cisco-only proprietary protocol, whereas PEAP is an industry-standard protocol.
C. PEAP requires a server-side certificate, while EAP-FAST does not require certificates.
D. PEAP authentication protocol requires a client certificate, and EAP-FAST requires a secure password.

Answer: C

Question: 2

Which one best describes the EAP Identity Request frame when a wireless client is connecting to a Cisco WLC v7.0-based AP WLAN?

A. sourced from the Cisco ACS Server to the client
B. sourced from the client to the Cisco ACS Server
C. sourced from the WLC to the client
D. sourced from the client to the WLC
E. sourced from the AP to the client
F. sourced from the client to the AP

Answer: C

Question: 3

What are the four packet types that are used ...
... by EAP? (Choose four.)

A. EAP Type
B. EAP Request
C. EAP Identity
D. EAP Response
E. EAP Success
F. EAP Failure
G. EAP Authentication

Answer: B, D, E, F

Question: 4

When a supplicant and AAA server are configured to use PEAP, which mechanism is used by the client to authenticate the AAA server in Phase One?

A. PMK
B. shared secret keys
C. digital certificate
D. PAC

Answer: C

Question: 5

Which EAP types are supported by MAC 10.7 for authentication to a Cisco Unified Wireless Network?

A. LEAP and EAP-Fast only
B. EAP-TLS and PEAP only
C. LEAP, EAP-TLS, and PEAP only
D. LEAP, EAP-FAST, EAP-TLS, and PEAP

Answer: D

Question: 6

What are two of the benefits that the Cisco AnyConnect v3.0 provides to the administrator for client WLAN security configuration? (Choose two.)

A. Provides a reporting mechanism for rouge APs
B. Prevents a user from adding any WLANs
C. Hides the complexity of 802.1X and EAP configuration
D. Supports centralized or distributed client architectures
E. Provides concurrent wired and wireless connectivity
F. Allows users to modify but not delete admin-created profiles

Answer: C, D

Question: 7

When using the Standalone Profile Editor in the Cisco AnyConnect v3.0 to create a new NAM profile, which two statements describe the profile becoming active? (Choose two.)

A. selects the new profile from NAM
B. selects "Network Repair" from NAM
C. becomes active after a save of the profile name
D. ensures use of "configuration.xml" as the profile name
E. ensures use of "config.xml" as the profile name
F. ensures use of "nam.xml" as the profile name

Answer: B, D

Question: 8

Which two parameters can directly affect client roaming decisions? (Choose two.)

A. SNR
B. RSSI
C. MFP status
D. RF fingerprinting
E. RRM

Answer: A, B

Question: 9

Which three parameters can be communicated between a Cisco WLC v7.0 and Cisco Compatible Extensions v4-enabled client to improve a secure roaming connection? (Choose three.)

A. minimum SNR
B. transition time
C. scan threshold
D. hysteresis
E. PER
F. MIC errors

Answer: B, C, D

Question: 10

Which three Cisco WLC v7.0 CLI family of commands would be appropriate to troubleshoot a wireless client failure for connection to an AP? (Choose three.)

A. debug capwap
B. debug mac addr
C. debug ccxdiag
D. debug dhcp
E. debug ap
F. debug dtls
G. debug aaa

Answer: B, D, G

Question: 11

What is the best method to verify AP parameters that are seen from a wireless client?

A. WCS debug commands
B. ACS log files
C. WCS show commands
D. AP debug commands
E. packet analyzers

Answer: E

Question: 12

Employees are allowed to start bringing their own wireless devices to work for use on the 802.11a/b/g/n WLAN when using their existing credentials. However, they are experiencing issues. Which two items are the most probable cause of these issues? (Choose two.)

A. incorrect IP address
B. supplicant or driver
C. incorrect user name
D. wrong wireless band
E. application issues

Answer: B, E

Question: 13

Employees adjust their wireless laptop for work at the office and when away from the office. What are the two most likely security issues for an employee laptop when connected at the corporate WLAN? (Choose two.)

A. loading a freeware customer contact application
B. configuring a static IP address
C. updating the driver
D. adding a coffee shop wireless HotSpot

Answer: A, C

Question: 14

Which two options are supported when deploying wireless NAC out-of-band implementations? (Choose two.)

A. Cisco NAS in virtual gateway mode
B. WLANs with allow AAA override enabled
C. Cisco NAC Guest Server integration with the Cisco NAM
D. dynamic VLAN mappings on the Cisco NAS, which is based on the returned RADIUS attributes from the Cisco Secure ACS
E. autonomous APs

Answer: A, C

Question: 15

When deploying wireless Cisco NAC OOB operations, which appliance performs VLAN mappings to map the quarantine VLANs to the access VLANs?

A. Cisco NAC Appliance Manager
B. Cisco NAC Appliance Server
C. Cisco NAC Guest Server
D. Cisco Wireless LAN Controller
E. the Layer 3 switch that connects the Cisco WLC to the Cisco NAC appliances

Answer: B