Cisco 640-722 Online Practice Questions and Exam Preparation

Cisco 640-722 Online Questions & Answers

• Question 251:

  What 802.1x role is responsible for moving a port to the authorized state?

  A. Supplicant
  B. Authenticator
  C. Authentication Server
  D. RADIUS Server
  B. Authenticator

• Question 252:

  Which three options are limitations when configuring basic security on an autonomous AP when using the express security page setup? (Choose three.)

  A. You need multiple SSIDs.
  B. Delete all the SSIDs.
  C. Edit the SSIDs.
  D. Use multiple authentication servers.
  E. Use the same SSID on both radios.
  F. Use a single SSID on a single radio.
  C. Edit the SSIDs.
  D. Use multiple authentication servers.
  E. Use the same SSID on both radios.

  ---

  The security settings in the Easy Setup Radio Configuration section are designed for simple configuration of basic security. The options available are a subset of the wireless device security capabilities. Keep these limitations in mind when using the Express Security page:

  

  If the No VLAN option is selected, the static WEP key can be configured once. If you select Enable VLAN, the static WEP key should be disabled.

  

  You cannot edit SSIDs. However, you can delete SSIDs and re-create them.

  

  You cannot configure multiple authentication servers. To configure multiple authentication servers, use the Security Server Manager page.

  

  You cannot configure multiple WEP keys. To configure multiple WEP keys, use the Security Encryption Manager page.

  

  You cannot assign an SSID to a VLAN that is already configured on the wireless device. To assign an SSID to an existing VLAN, use the Security SSID Manager page.

  

  You cannot configure combinations of authentication types on the same SSID (for example, MAC address authentication and EAP authentication). To configure combinations of authentication types, use the Security SSID Manager page.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/access_point/15_2_4_JB/configuration/guide/scg15-2-4-Book/scg15-2-4-chap4-first.html

• Question 253:

  Which statement correctly describes the procedure for a lightweight AP to successfully establish a connection to a controller?

  A. The AP authenticates the received Cisco WLC certificate as valid. The AP then sends its certificate to the controller.
  B. The AP sends its certificate to the controller. The AP then authenticates the received Cisco WLC certificate as valid.
  C. The AP sends its certificate to the RADIUS server. The AP then authenticates the controller certificate as valid.
  D. The AP sends its certificate to the RADIUS server. The AP then authenticates the RADIUS certificate as valid.
  E. The AP authenticates the received RADIUS server certificate as valid. The AP then sends its certificate to the RADIUS server.
  F. The AP authenticates the received RADIUS server certificate as valid. The AP then sends its certificate to the controller.
  B. The AP sends its certificate to the controller. The AP then authenticates the received Cisco WLC certificate as valid.

  ---

  The controller will respond to all discovery requests without checking certificates or AP credentials. However, join requests must have a valid certificate in order to get a join response from the controller. If the LAP does not receive a join response from its choice, the LAP will try the next controller in the list unless the controller is a configured controller (Primary/Secondary/Tertiary).

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/99948-lap-notjoin-wlc-tshoot.html#backinfo

• Question 254:

  An AP using version 7.0 MR1 broadcasts a Layer 3 CAPWAP discovery message on the local IP subnet. Which step does the AP take next?

  A. Determine if the controller responses include the primary controller.
  B. Determine if the controller responses include the master controller.
  C. Send a discovery request using DHCP option 43.
  D. Send a discovery request using DNS.
  E. Send a discovery request using locally stored information on the AP.
  F. Send a discovery request using OTAP.
  E. Send a discovery request using locally stored information on the AP.

  ---

  If the LAP was registered to a WLC in a previous deployment, the LAP maintains the list of WLC IP addresses locally in NVRAM. The stored WLC IP addresses include all of the WLCs that are in previously joined WLC "mobility groups". This is the discovery process:

  a. LAPs send a unicast Layer 3 LWAPP discovery request to each of the WLC IP addresses that the LAP has in its NVRAM. b. WLCs that receive the LWAPP discovery message reply with a unicast LWAPP discovery response message to the LAP.

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/70333-lap-registration.html#topic2

• Question 255:

  Refer to the exhibit.

  

  You made a manual configuration change to a controller and now you need to compare the controller configuration seen on Cisco WCS to the configuration that is present in the controller. Which menu can you use to do compare the configurations?

  A. Reports
  B. Monitor
  C. Configure
  D. Services
  E. Administration
  F. Tools
  C. Configure

  ---

  The Configure menu enables you to configure templates, controllers, access points, Ethernet switches, chokepoints, Wi-Fi TDOA receivers, config groups, auto provisioning, scheduled configuration tasks, profiles, ACS view servers, and TFTP servers on your network.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/wcs/7-0/configuration/guide/WCS70cg/7_0wst.html#wp1068994

• Question 256:

  Which two statements about AES-CCMP are true? (Choose two.)

  A. It is an encryption algorithm used in the 802.11i security protocol.
  B. It is defined in 802.1X.
  C. It is the encryption algorithm used in TKIP implementations.
  D. It is required in WPA.
  E. It is required in WPA2.
  A. It is an encryption algorithm used in the 802.11i security protocol.
  E. It is required in WPA2.

  ---

  WPA2 has replaced WPA. WPA2, which requires testing and certification by the Wi-Fi Alliance, implements the mandatory elements of IEEE 802.11i. In particular, it includes mandatory support for CCMP, an AES-based encryption mode with strong security.

  Reference: http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access

• Question 257:

  Which two destinations can Cisco WCS administrators specify for a scheduled report? (Choose two.)

  A. a file on the Cisco WCS
  B. a specified email address
  C. a specified World Wide Web server
  D. a TFTP server
  A. a file on the Cisco WCS
  B. a specified email address

  ---

  Reports are saved in either CSV or PDF format and are either saved to a file on WCS for later download or e-mailed to a specific e-mail address. The reporting types include the following:

  

  Current, which provides a snap shot of the data from the last polling cycle without continuously polling Historical, which retrieves data from the device periodically and stores it in the WCS database

  

  Trend, which generates a report using aggregated data. Data can be periodically collected based from devices on user-defined intervals, and a schedule can be established for report generation.

  

  With WCS, you also have the ability to export any report that you can view, sort reports into logical groups, and archive for long-term storage.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/wcs/7-0/configuration/guide/WCS70cg/7_0reps.html

• Question 258:

  Which Cisco WLC command family can help to troubleshoot communication between an AP and the WLC?

  A. (Cisco Controller) >debug capwap
  B. (Cisco Controller) >debug ap
  C. (Cisco Controller) >debug cac
  D. (Cisco Controller) >debug dot11
  A. (Cisco Controller) >debug capwap

  ---

  Example debugs available for this shown below:

  WLC side debug commands:

  

  (Cisco Controller) >debug capwap

  

  events Configures debug of CAPWAP events and state

  

  errors Configures debug of CAPWAP errors

  

  detail Configures debug of CAPWAP detail

  

  info Configures debug of CAPWAP info

  

  packet Configures debug of CAPWAP packet

  

  payload Configures debug of CAPWAP payloads

  

  hexdump Configures debug of CAPWAP payloads

  Reference: https://mrncciew.files.wordpress.com/2013/03/brkewn-3011-troubleshooting-wireless-lans.pdf

• Question 259:

  An engineer is adding a controller to a WCS. What three categories of parameters are needed? (Choose three.)

  A. IP parameters
  B. SNMP Parameters
  C. Mobility Parameters
  D. Telnet/SSH Parameters
  E. TFTP Parameters
  F. RADIUS Parameters
  A. IP parameters
  B. SNMP Parameters
  D. Telnet/SSH Parameters

• Question 260:

  Which CAPWAP AP management-access method is available as the default setting?

  A. only the console port
  B. the console port and SSH
  C. the console port, SSH, and HTTPS
  D. SSH only
  A. only the console port

  ---

  After an access point joins the controller, the access point enables console port security only, and you are prompted for your username and password whenever you log into the access point's console port. When you log in, you are in non-privileged mode, and you must enter the enable password in order to use the privileged mode.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/controller/5-2/configuration/guide/Controller52CG/c52lwap.pdf