Cisco 640-722 Online Practice Questions and Exam Preparation

Cisco 640-722 Online Questions & Answers

• Question 151:

  An engineer is using WCS' client troubleshooting tool to investigate issues with a client device. What is the longest log capture they will be able to take?

  A. 2 minutes
  B. 5 minutes
  C. 10 minutes
  D. 30 minutes
  C. 10 minutes

• Question 152:

  A company wants to implement wireless in all 20 remote office locations and wants centralized management of these remote sites. What application would meet the requirements?

  A. Control And Provisioning of Wireless Access Points
  B. Cisco point- to multi-point wireless bridging
  C. Cisco autonomous access points in FlexConnect mode
  D. Split MAC architecture utilizing LWAPP and WLC
  D. Split MAC architecture utilizing LWAPP and WLC

• Question 153:

  You run minimum PEAP-GTC authentication in your wireless environment. Which version of Cisco Compatible Extensions supports PEAP-GTC?

  A. Cisco Compatible Extensions v1
  B. Cisco Compatible Extensions v2
  C. Cisco Compatible Extensions v3
  D. Cisco Compatible Extensions v4
  E. Cisco Compatible Extensions v5
  B. Cisco Compatible Extensions v2

  ---

  * PEAP/GTC is supported on Cisco Compatible Version 2 clients and above.

  Reference: http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1300-series/prod_qas09186a00802030dc.html

• Question 154:

  In a typical wireless network using WPA, WPA2 or VPN, why is it still possible for a rogue client to launch a DOS attack?

  A. WPA and WPA2 are not considered strong encryption algorithms and are easily cracked.
  B. 802.11 management frames are easily compromised.
  C. Cisco Compatible Extensions v5 are required with WPA, WPA2, or VPN to keep rogues from launching attacks in the wireless network.
  D. The message integrity check frames are never encrypted or authenticated, which allows rogues to spoof clients.
  B. 802.11 management frames are easily compromised.

  ---

  Another form of basic security now available is WPA or WPA2 Pre-Shared Key (PSK). The PSK verifies users via a password, or identifying code, (also called a passphrase) on both the client station and the access point. A client may only gain access to the network if the client's password matches the access point's password. The PSK also provides keying material that TKIP or AES use to generate an encryption key for each packet of transmitted data. While more secure than static WEP, PSK is similar to static WEP in that the PSK is stored on the client station and can be compromised if the client station is lost or stolen. A strong PSK passphrase that uses a mixture of letters, numbers, and non-alphanumeric characters is recommended.

  Reference: http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1200-access-point/prod_brochure09186a00801f7d0b.html

• Question 155:

  What are two security threats to wireless networks? (Choose two.)

  A. ad-hoc networks
  B. client misassociation
  C. port redirection
  D. cross-site scripting
  A. ad-hoc networks
  B. client misassociation

  ---

  An ad hoc network is a collection of wireless clients that form a network amongst themselves without the use of an AP. As far as network administrators are concerned, ad hoc wireless networks are uncontrolled. If they do not use encryption,

  they may expose sensitive data to outside eavesdroppers. If a device is connected to a wired network and has bridging enabled, an ad-hoc network may also function like a rogue AP. Additionally, ad-hoc networks can expose client devices to

  viruses and other security vulnerabilities. For these reasons, many administrators choose to prohibit ad-hoc networks.

  Valid Client Misassociation:

  This feature does not detect attacks, but rather it monitors authorized (valid) wireless clients and their association within the network. Valid client misassociation is potentially dangerous to network security. The four types of misassociation that

  we monitor are:

  

  Authorized Client associated to Rogue - A valid client that is associated to a rogue AP

  

  Authorized Client associated to External AP - An external AP, in this context, is any AP that is not valid and not a rogue

  

  Authorized Client associated to Honeypot AP - A honeypot is an AP that is not valid but is using an SSID that has been designated as valid/protected

  

  Authorized Client in ad hoc connection mode - A valid client that has joined an ad hoc network

  Reference: http://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_UG/New_WIP.php

• Question 156:

  Which Cisco WCS tool allows you to view current reports, open specific types of reports, create and save new reports, and manage scheduled runs?

  A. Reports menu
  B. Reports launch page
  C. Scheduled Run results
  D. saved reports
  B. Reports launch page

  ---

  The report launch pad provides access to all NCS reports from a single page. From this page, you can view current reports, open specific types of reports, create and save new reports, and manage scheduled runs. Reference: http://www.cisco.com/c/en/us/td/docs/wireless/ncs/1-0/configuration/guide/NCS10cg/reps.html#wp1089982

• Question 157:

  Which Extensible Authentication Protocol types are supported by the Cisco Unified Wireless Network?

  A. EAP-TLS, PEAP-MSCHAPv2, and PEAP-GTC only
  B. LEAP and EAP-FAST only
  C. EAP-TLS, PEAP-MSCHAPv2, PEAP-GTC, LEAP, and EAP-FAST only
  D. any EAP supported by the RADIUS authentication server
  D. any EAP supported by the RADIUS authentication server

  ---

  Extensible Authentication Protocol, or EAP, is an authentication framework frequently used in wireless networks and point-to-point connections. EAP is an authentication framework providing for the transport and usage of keying material and parameters generated by EAP methods. There are many methods defined by RFCs and a number of vendor specific methods and new proposals exist. EAP is not a wire protocol; instead it only defines message formats. Each protocol that uses EAP defines a way to encapsulate EAP messages within that protocol's messages.

  Reference: http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol.

• Question 158:

  Which three items do you need to establish a wireless connection to an enterprise wireless network? (Choose three.)

  A. SSID name
  B. RF channel
  C. RF signal
  D. 802.1X/EAP credentials
  E. pre-shared key
  F. web page
  G. WPA/WPA2 settings
  A. SSID name
  C. RF signal
  D. 802.1X/EAP credentials

  ---

  Most clients enable you to associate to a detected network (broadcasted SSID) or configure a specific profile. In all cases, you must configure the network name (SSID), the operating mode (ad-hoc or infrastructure), and some security settings (that will be different depending on whether the SSID uses Pre-Shared Key Security or Enterprise [EAP/802.1x] security).

  Reference: CCNA Wireless (640-722 IUWNE) Quick Reference Guide

• Question 159:

  Which user group has the ability to configure all features of the Cisco WCS except the user accounts and passwords?

  A. Admin
  B. SuperUser
  C. Root
  D. Supervisor
  A. Admin

  ---

  System Monitoring -- Allows users to monitor WCS operations.

  ConfigManagers -- Allows users to monitor and configure WCS operations.

  Admin -- Allows users to monitor and configure WCS operations and perform all system administration tasks except administering WCS user accounts and passwords.

  SuperUsers -- Allows users to monitor and configure WCS operations and perform all system administration tasks including administering WCS user accounts and passwords. Superusers tasks can be changed.

  North bound API -- A user group used only with WCS Navigator.

  Users Assistant -- Allows only local net user administration. User assistants cannot configure or monitor controllers. They must access the Configure > Controller path to configure these local net features.

• Question 160:

  Strong security is required, but a centralized RADIUS authenticator has not been implemented. Which two steps must you take to provide maximum security when using a pre-shared key? (Choose two.)

  A. Change the TKIP on a weekly basis.
  B. Use a key that includes mixed-case letters, numbers, and symbols with a length greater than 10 characters.
  C. Use only with WPA and WPA2, following proper strong key guidelines.
  D. Use the longest possible WEP key in your security policy.
  B. Use a key that includes mixed-case letters, numbers, and symbols with a length greater than 10 characters.
  C. Use only with WPA and WPA2, following proper strong key guidelines.

  ---

  Another form of basic security now available is WPA or WPA2 Pre-Shared Key (PSK). The PSK verifies users via a password, or identifying code, (also called a passphrase) on both the client station and the access point. A client may only gain access to the network if the client's password matches the access point's password. The PSK also provides keying material that TKIP or AES use to generate an encryption key for each packet of transmitted data. While more secure than static WEP, PSK is similar to static WEP in that the PSK is stored on the client station and can be compromised if the client station is lost or stolen. A strong PSK passphrase that uses a mixture of letters, numbers, and non-alphanumeric characters is recommended.

  Reference: http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1200-access-point/prod_brochure09186a00801f7d0b.html