Cisco 640-722 Online Practice Questions and Exam Preparation

Cisco 640-722 Online Questions & Answers

• Question 221:

  When an AP, in its default configuration mode, connects to a Cisco WLC, which methods are available for remote management access to an AP?

  A. SSL and SSH are available only after configuration by a Cisco WLC version 7.0.
  B. SSH only
  C. HTTPS, and SSH
  D. SSH and Telnet
  E. SSH and Telnet are available only after configuration by a Cisco WLC version 7.0.
  D. SSH and Telnet

  ---

  In Wireless LAN Controller release 5.0 and later, the controller supports the use of Telnet or Secure Shell (SSH) protocols to troubleshoot lightweight access points. You can use these protocols in order to make debugging easier, especially when the access point is unable to connect to the controller. You can configure Telnet and SSH support only through the controller CLI.

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/70278-lap-faq.html

• Question 222:

  When a wireless guest network is implemented using auto-anchor mobility in a controller-based wireless network, which controller is responsible for a guest client's IP address and their security configuration?

  A. any controller that supports the same VLAN
  B. foreign controller
  C. anchor controller
  D. master controller
  E. RF group master controller
  C. anchor controller

  ---

  The anchor controller is responsible for termination of guest WLAN traffic and subsequent access to the Internet. Guest traffic egress occurs at the anchor controller, and the anchor controller is responsible for the client IP address via DHCP and their security configuration.

  Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/emob41dg/emob41dg-wrapper/ch10GuAc.html#wp1064207

• Question 223:

  Which option describes computer-to-computer wireless communication?

  A. BSS and BSA
  B. IBSS and ad hoc network
  C. ad hoc network and BSA
  D. IBSS and ESS
  E. ESS and BSA
  F. BSS and ad hoc network
  B. IBSS and ad hoc network

  ---

  Ad-hoc mode is an 802.11 networking framework in which devices or stations communicate directly with each other, without the use of an access point (AP). Ad- hoc mode is also referred to as peer-to-peer mode or an Independent Basic Service Set (IBSS). Ad-hoc mode is useful for establishing a network where wireless infrastructure does not exist or where services are not required.

  Reference: http://www.webopedia.com/TERM/A/ad_hoc_mode.html

• Question 224:

  You are in a coffee shop and you have connected to their wireless hot-spot. Your Windows 7 wireless client shows five green bars with a yellow shield. Which statement about the level of signal strength and the WLAN security that is present is true?

  A. You have excellent signal strength and a secure network connection.
  B. Your wireless client needs a username and password before it can connect to the WLAN.
  C. You have excellent signal strength and the client is waiting for you to enter a username and password.
  D. Your laptop is not receiving a signal.
  E. Your laptop is receiving an excellent signal and the network security is open.
  E. Your laptop is receiving an excellent signal and the network security is open.

  ---

  Five green bars means that the signal you are receiving is excellent (there are up to 5 bars) and the yellow shield is a warning indication signal that the security settings have been set to open, meaning no authentication is needed.

• Question 225:

  Which protocol helps the administrator to determine whether a detected rogue AP is in the network of the organization?

  A. RLDP
  B. RCP
  C. RDP
  D. RAPP
  A. RLDP

  ---

  RLDP is an active approach, which is used when rogue AP has no authentication (Open Authentication) configured. This mode, which is disabled by default, instructs an active AP to move to the rogue channel and connect to the rogue as a client. During this time, the active AP sends deauthentication messages to all connected clients and then shuts down the radio interface. Then, it will associate to the rogue AP as a client. The AP then tries to obtain an IP address from the rogue AP and forwards a User Datagram Protocol (UDP) packet (port 6352) that contains the local AP and rogue connection information to the controller through the rogue AP. If the controller receives this packet, the alarm is set to notify the network administrator that a rogue AP was discovered on the wired network with the RLDP feature.

  Reference: https://supportforums.cisco.com/discussion/10941011/rd-rogue-detector-or-rldp-rogue-location-discovery-protocol

• Question 226:

  A wireless bridge is being installed near an airport. An organization informs the city council about complying with max power levels that could be used and settings on any 5GHz channels used that might interfere with the airport radar. What organization is this?

  A. Institute of Electrical and Electronics Engineers
  B. Internet Engineering Task Force
  C. Federal Communications Commission
  D. Wireless Fidelity Alliance
  C. Federal Communications Commission

• Question 227:

  Which portion of a WLAN deployment can WLC message logs help to troubleshoot?

  A. RF issues
  B. encryption issues between APs and clients
  C. configuration verification issues
  D. infrastructure and client Issues
  E. AP placement issues
  D. infrastructure and client Issues

  ---

  From the official CCNA wireless certification guide:

  "The message logs include information related to the network infrastructure, client issues, authentication issues, and AP association issues"

• Question 228:

  When a wireless client is authenticated in a controller-based wireless network, which three pieces of source identification information can be used by the controller for an Access-Request message that is sent to an external RADIUS server? (Choose three.)

  A. wireless client IP address
  B. controller IP address
  C. AP IP address
  D. wireless client MAC address
  E. controller MAC address
  F. AP MAC address
  B. controller IP address
  E. controller MAC address
  F. AP MAC address

  ---

  From the Call Station ID Type drop-down list, choose IP Address, System MAC Address, or AP MAC Address to specify whether the IP address, system MAC address, or AP MAC address of the originator will be sent to the RADIUS server in the Access-Request message.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0/configuration/guide/c70/c70sol.html#wp1389032 (Step 3)

• Question 229:

  Which key is established using the four-way handshake during the WPA authentication process?

  A. Pairwise Master Key
  B. Pairwise Multiple Key
  C. Pairwise Session Key
  D. Pairwise Transient Key
  E. Pairwise Transverse Key
  D. Pairwise Transient Key

  ---

  The authentication process leaves two considerations: the access point (AP) still needs to authenticate itself to the client station (STA), and keys to encrypt the traffic need to be derived. The earlier EAP exchange or WPA2-PSK configuration has provided the shared secret key PMK (Pairwise Master Key). To derive the PMK from the WPA-PSK, the PSK is put through PBKDF2-SHA1 as the cryptographic hash function. This key is, however, designed to last the entire session and should be exposed as little as possible. Therefore the four-way handshake is used to establish another key called the PTK (Pairwise Transient Key). The PTK is generated by concatenating the following attributes: PMK, AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address. The product is then put through a pseudo random function.

  Reference: http://en.wikipedia.org/wiki/IEEE_802.11i-2004

• Question 230:

  What WCS report displays hardware type, software distribution, and CDP information?

  A. Device > AP Profile Status
  B. Device > AP Summary
  C. Network Summary > Executive Summary
  D. Device > Inventory
  E. Network Summary > 802.11n Summary
  D. Device > Inventory