Cisco 640-722 Online Practice Questions and Exam Preparation

Cisco 640-722 Online Questions & Answers

• Question 211:

  A Cisco Aironet 1260 AP is unable to join a Cisco 2500 Series WLC that is connected through a Layer 2 switch. Which three options help to verify the wireless network operation and locate a possible issue? (Choose three.)

  A. Verify status of GUI Wireless > Country
  B. Verify status of GUI Wireless > Timers
  C. Verify status of GUI WLANs > ID > Advanced
  D. CLI debug of dot11
  E. CLI debug of DHCP
  F. Verify Cisco WLC license
  G. Verify Cisco WLC model
  A. Verify status of GUI Wireless > Country
  E. CLI debug of DHCP
  F. Verify Cisco WLC license

  ---

  See reference link below for troubleshooting.

  "Troubleshoot a Lightweight Access Point Not Joining a Wireless LAN Controller"

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/99948-lap-notjoin-wlc-tshoot.html#topic1

• Question 212:

  Which open standard defines the combination of Extensible Authentication Protocol with Advanced Encryption Standard for providing strong wireless LAN client security?

  A. IEEE 802.1X
  B. IEEE 802.11i
  C. WEP
  D. WPA
  E. WPA2
  B. IEEE 802.11i

  ---

  802.11i supersedes the previous security specification, Wired Equivalent Privacy (WEP), which was shown to have security vulnerabilities. Wi-Fi Protected Access (WPA) had previously been introduced by the Wi-Fi Alliance as an intermediate solution to WEP insecurities. WPA implemented a subset of a draft of 802.11i. The Wi-Fi Alliance refers to their approved, interoperable implementation of the full 802.11i as WPA2, also called RSN (Robust Security Network). 802.11i makes use of the Advanced Encryption Standard (AES) block cipher, whereas WEP and WPA use the RC4 stream cipher.

  Reference: http://en.wikipedia.org/wiki/IEEE_802.11i-2004

• Question 213:

  Which official port should be used when configuring external RADIUS authentication on a Cisco WLC version 7.0?

  A. 49
  B. 1645
  C. 1646
  D. 1812
  E. 1813
  D. 1812

  ---

  RADIUS authentication uses UDP port 1812, while accounting uses UDP port 1813. Early implementations of RADIUS used ports 1645 and 1646, but that usage is obsolete. Reference: http://docstore.mik.ua/orelly/networking_2ndEd/fire/ch21_07.htm

• Question 214:

  DRAG DROP

  Refer to the exhibit. Drag the steps for Open Authentication from the left and drop them in the correct order on the right.

  Select and Place:

  

  

• Question 215:

  When using a Cisco WLC version 7.0 with a default configuration, how is a remote management HTTPS access connection secured?

  A. The Cisco WLC uses a pre-shared key to authenticate the user, which limits the number of potential users that can access the controller.
  B. The Cisco WLC generates its own local web administration SSL certificate and automatically applies it to the GUI.
  C. The Cisco WLC uses a CA certificate for SSL access.
  D. The Cisco WLC uses HTTPS to secure the HTTP session via a preconfigured password that generates a certificate for each session.
  B. The Cisco WLC generates its own local web administration SSL certificate and automatically applies it to the GUI.

  ---

  You can protect communication with the GUI by enabling HTTPS. HTTPS protects HTTP browser sessions by using the Secure Socket Layer (SSL) protocol. When you enable HTTPS, the controller generates its own local web administration SSL certificate and automatically applies it to the GUI. You also have the option of downloading an externally generated certificate.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/controller/6-0/configuration/guide/Controller60CG/c60intf.html

• Question 216:

  Which two pieces of information are needed for the wireless client to connect to the wireless network? (Choose two.)

  A. SSID
  B. security settings
  C. channel number
  D. AP name
  A. SSID
  B. security settings

  ---

  Most clients enable you to associate to a detected network (broadcasted SSID) or configure a specific profile. In all cases, you must configure the network name (SSID), the operating mode (ad-hoc or infrastructure), and some security settings (that will be different depending on whether the SSID uses Pre-Shared Key Security or Enterprise [EAP/802.1x] security).

  Reference: Reference: CCNA Wireless (640-722 IUWNE) Quick Reference Guide

• Question 217:

  Which Cisco AnyConnect module provides wireless connectivity?

  A. telemetry
  B. web security
  C. VPN
  D. NAM
  E. DART
  F. posture
  G. CSSC
  D. NAM

  ---

  The main components used in IUWNE are the Cisco AnyConnect Mobility Client itself, associated with the Network Access Module (NAM) used to manage existing profiles and provide the wireless connectivity. Reference: CCNA Wireless (640-722 IUWNE) Quick Reference Guide page 73

• Question 218:

  You are configuring an IP address on an autonomous access point. Which interface do you use to configure the IP address?

  A. BVI1
  B. FastEthernet 0
  C. Dot11Radio0
  D. VLAN 1
  A. BVI1

  ---

  Assigning the IP Address to the BVI When you assign an IP address to the access point by using the CLI, you must assign the address to the bridge-group virtual interface (BVI). Beginning in a privileged EXEC mode, follow these steps to assign an IP address to the access point BVI using the access point console port.

  

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1140/autonomous/getting_started/guide/ap1140aut_getstart.html

• Question 219:

  Which interface is considered a dynamic interface?

  A. the virtual interface
  B. the AP manager interface
  C. the LAG interface
  D. the management interface
  E. the service port interface
  F. a WLAN client data interface
  F. a WLAN client data interface

  ---

  Dynamic interfaces, also known as VLAN interfaces, are created by users and designed to be analogous to VLANs for wireless LAN clients. A controller can support up to 512 dynamic interfaces (VLANs). Each dynamic interface is individually configured and allows separate communication streams to exist on any or all of a controller's distribution system ports. Each dynamic interface controls VLANs and other communications between controllers and all other network devices, and each acts as a DHCP relay for wireless clients associated to WLANs mapped to the interface.

  Reference; http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/ b_cg74_CONSOLIDATED_chapter_011111.html

• Question 220:

  A network engineer is upgrading the WLC image through the GUI for maintenance. What three transfer methods are available? (Choose three.)

  A. FTP
  B. SNMP
  C. TFTP
  D. SFTP
  E. HTTP
  F. SMB
  G. HTTPS
  H. SCP
  A. FTP
  C. TFTP
  D. SFTP