642-737 by Cisco Valid Free Exam Practice Test

Question 1

What third party tool can an engineer use to test encryption and authentication?

A. WiControl B. NetStumbler C. AirSnort D. Kismet

Correct Answer: C

Question 2

Which two statements best describe the local authentication configuration options for a Cisco WLC v7.0 and local mode AP? (Choose two.)

A. LEAP and EAP-FAST only B. LEAP, EAP-FAST, EAP-PEAP, and EAP-TLS only C. EAP-FAST with PAC provision only D. LEAP, EAP-FAST, EAP-PEAP, EAP-TLS, and EAP-MD5 E. EAP-FAST with PAC or certificate provision

Correct Answer: B,E

Question 3

A wireless client has a browser with a manually configured proxy. The Cisco WLC v7.0 has been configured for basic WLAN Layer 3 web pass through with the remaining default configuration. Which two statements are true when the client attempts to connect to a WLAN for guest access using web authentication? (Choose two.)

A. The WLC allows access for a client request to ports 80 or 8080 only. B. The WLC allows access if the client is requesting a globally resolvable DNS address. C. Access requires DHCP with option 252. D. The WLC allows access if it is configured for WebAuth Proxy. E. Access requires DHCP with option 150.

Correct Answer: C,D

Question 4

When deploying wireless Cisco NAC OOB operations, which appliance performs VLAN mappings to map the quarantine VLANs to the access VLANs?

A. Cisco NAC Guest Server B. the Layer 3 switch that connects the Cisco WLC to the Cisco NAC appliances C. Cisco NAC Appliance Manager D. Cisco Wireless LAN Controller E. Cisco NAC Appliance Server

Correct Answer: E

Question 5

An engineer must segment traffic into separate WLANs. Which three factors should be used to determine traffic segmentation? (Choose three.)

A. enterprise resource planning B. security capabilities C. subnet requirements D. QoS policy E. application requirements F. access control policies for voice

Correct Answer: B,D,E

Question 6

Which protocol port(s) need open access for communication between the MSE and WLC?

A. UDP 5247 and 5264 B. UDP 16113 C. TCP 16113 D. UDP 16666 and 16667 E. UDP 161 and 162

Correct Answer: C

Question 7

DRAG DROP

Correct Answer:

Question 8

An engineer must change the wireless authentication from WPA2-Personal to WPA2Enterprise. Which three requirements are necessary? (Choose three.)

A. 802.11i B. pre-shared key C. 802.11u D. EAP E. 802.1X F. RADIUS G. fast secure roaming

Correct Answer: D,E,F

Question 9

An engineer is configuring EAP-FAST for a Windows 7 client with an Intel wireless card. What option can be used for automatic PAC delivery?

A. SIM B. LEAP C. PKI D. TTLS E. GTC

Correct Answer: E

Question 10

A client is failing EAP authentication and a debug shows that the server is sending an Access-Reject message. Which action must you take to resolve authentication?

A. Verify that the user is using the same password that is on the server. B. Verify that the client server certificate has the proper Windows OIDs. C. Verify that the Validate server certificate on the client is disabled. D. Verify that the user account is the same in the client certificate. E. Verify that the client certificates are from the proper CA and server certificate.

Correct Answer: A

Cisco Implementing Advanced Cisco Unified Wireless Security (IAUWS) v2.0 - 642-737 Exam Practice Test