Cisco 640-722 Online Practice Questions and Exam Preparation

Cisco 640-722 Online Questions & Answers

• Question 171:

  Which method is used to shield the client from class 3 management attacks?

  A. client MFP
  B. WEP
  C. WPA
  D. client protection suite
  E. 802.1X
  A. client MFP

  ---

  With MFP, all management frames are cryptographically hashed to create a Message Integrity Check (MIC). The MIC is added to the end of the frame (before the Frame Check Sequence (FCS)).

  

  In a centralized wireless architecture, infrastructure MFP is enabled/disabled on the WLC (global config). Protection can be selectively disabled per WLAN, and validation can be selectively disabled per AP.

  

  Protection can be disabled on the WLANs that are used by devices that cannot cope with extra IEs.

  

  Validation must be disabled on APs that are overloaded or overpowered.

  

  When MFP is enabled on one or more WLANs configured in the WLC, the WLC sends a unique key to each radio on each registered AP. Management frames are sent by the AP over the MFP- enabled WLANs. These APs are labeled with a frame protection MIC IE. Any attempt to alter the frame invalidates the message, which causes the receiving AP that is configured to detect MFP frames to report the discrepancy to the WLAN controller.

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/82196-mfp.html

• Question 172:

  What is the IEEE name for a group of access points that are connected by using the Ethernet?

  A. ESS
  B. BSS
  C. IBSS
  D. ISS
  A. ESS

  ---

  The wired section of the network that can be reached through the AP is called, from the perspective of the wireless side, the Distribution System (DS). When the distribution system links two APs, or two cells, via Ethernet, the group is called an Extended Service Set (ESS).

  Reference: CCNA Wireless (640-722 IUWNE) Quick Reference Guide page 5

• Question 173:

  Refer to the exhibit.

  

  Which action allows you to view a summary count by alarm types for the displayed total of 11 alarms?

  A. Choose Monitor > Alarms
  B. Click the Security tab
  C. Click a respective number in the Alarm Summary
  D. Click the Alarm Summary blue arrow
  E. Choose Home (house icon) > Alarm Summary
  D. Click the Alarm Summary blue arrow

  ---

  When WCS receives an alarm message from a controller, it displays an alarm indicator at the top of the WCS window (see Figure 2-11 ).

  

  Critical (red), Major (orange) and Minor (yellow) alarms appear in the alarm dashboard, left to right. Figure 2-11 WCS Alarm Summary

  

  Alarms indicate the current fault or state of an element that needs attention, and they are usually generated by one or more events. The alarm can be cleared but the event remains.

• Question 174:

  DRAG DROP

  Drag the commands on the left that are enabled during a SSH or Telnet session with a lightweight AP and drop them on the right.

  Select and Place:

  

  

• Question 175:

  An engineer wants to setup WPA2 Enterprise using EAP-TLS and a remote RADIUS server. What device(s) would the engineer specify the EAP type on?

  A. the supplicant and authentication server
  B. the supplicant and authenticator
  C. the authenticator and authentication server
  D. the supplicant only
  E. the authentication server only
  A. the supplicant and authentication server

• Question 176:

  DRAG DROP

  Drag the appropriate EAP descriptions on the left and drop them in the correct sequence of events for PEAP on the right.

  Select and Place:

  

  

• Question 177:

  Which three WLC debug commands are appropriate to troubleshoot a wireless client that is associated to an AP? (Choose three.)

  A. debug capwap
  B. debug mac addr
  C. debug dot11
  D. debug dhcp
  E. debug ap
  F. debug dtls
  B. debug mac addr
  C. debug dot11
  D. debug dhcp

  ---

  See reference link for associated WLC debug commands.

  Reference: "WLC Debug and Show Commands" http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112064-wlc-commands.html

• Question 178:

  Which statement about customization of a web page that is used on a WLC to authorize guest users is true?

  A. The administrator can use either a modified internal login page or the customized web page.
  B. The administrator can use only the internal login page, and only the organization logo can be changed.
  C. The administrator can use only the internal login page with a customized logo, headline, and message.
  D. The administrator can use only the customized web page that is uploaded to a WLC.
  A. The administrator can use either a modified internal login page or the customized web page.

  ---

  The default login page contains a Cisco logo and Cisco-specific text. You can choose to have the web authentication system display one of the following:

  

  The default login page

  

  A modified version of the default login page

  

  A customized login page that you configure on an external web server

  

  A customized login page that you download to the controller

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0/configuration/guide/c70/c70users.html#wp1049273

• Question 179:

  In what WCS menu would an engineer locate the WCS software version?

  A. Administration > Settings
  B. Help > About Cisco WCS
  C. Help > Online Help
  D. Administration > License Center
  B. Help > About Cisco WCS

• Question 180:

  A controller is connected to a Cisco Catalyst switch. The switch port configuration looks like this:

  interface GigabitEthernet 1/0/10 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 1,20,30,50 switchport trunk native vlan 20 switchport mode trunk

  Which controller CLI command assigns its management interface to the native VLAN interface of the Cisco Catalyst switch?

  A. config interface vlan management 0
  B. config interface vlan management 1
  C. config interface vlan management 20
  D. config interface vlan management 30
  E. config interface vlan management 50
  A. config interface vlan management 0

  ---

  Since the controller management interface is connected to the native vlan interface of the Cisco Catalyst switch, the correct command is: config interface vlan management vlan-id 0

  Reference: http://www.cisco.com/en/US/docs/wireless/controller/5.0/configuration/guide/c5mint.html#wp1182892