Cisco 640-722 Online Practice Questions and Exam Preparation

Cisco 640-722 Online Questions & Answers

• Question 61:

  Which two Cisco Unified Wireless Network capabilities use information that is provided by Radio Resource Management neighbor messages in version 7.0 MR1? (Choose two.)

  A. aggressive load balancing
  B. dynamic channel assignment
  C. hybrid remote edge access point
  D. inter-controller mobility (that is, mobility groups)
  E. rogue AP classification
  B. dynamic channel assignment
  E. rogue AP classification

  ---

  Reference: http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/71113-rrm-new.html

• Question 62:

  What protocol is used to determine the best pathway back to a root access point?

  A. CCKM
  B. WNMP
  C. AWPP
  D. LWAP
  C. AWPP

  ---

  AWPP enables a remote access point to dynamically find the best path back to a RAP for each MAP that is part of the RAP's bridge group (BGN). Unlike traditional routing protocols, AWPP takes RF details into account. To optimize the route, a MAP actively solicits neighbor MAP. During the solicitation, the MAP learns all of the available neighbors back to a RAP (Root Access Point), determines which neighbor offers the best path, and then synchronizes with that neighbor. The path decisions of AWPP are based on link quality and the number of hops.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/technology/mesh/7-0/design/guide/MeshAP_70.html#wp1351984

• Question 63:

  What two capabilities would be present on a wireless client device that supports CCXv3? (Choose two.)

  A. WPA2
  B. 802.1x
  C. PEAP-MSCHAP
  D. NAC
  E. MFP
  F. EAP-TLS
  A. WPA2
  B. 802.1x

• Question 64:

  When the enterprise-based authentication method is used for WPA2, a bidirectional handshake exchange occurs between the client and the authenticator.

  Which five options are results of that exchange being used on a controller-based network? (Choose five.)

  A. a bidirectional exchange of a nonce used for key generation
  B. binding of a Pairwise Master Key at the client and the controller
  C. creation of the Pairwise Transient Key
  D. distribution of the Group Transient Key
  E. distribution of the Pairwise Master key for caching at the access point
  F. proof that each side is alive
  A. a bidirectional exchange of a nonce used for key generation
  B. binding of a Pairwise Master Key at the client and the controller
  C. creation of the Pairwise Transient Key
  D. distribution of the Group Transient Key
  F. proof that each side is alive

  ---

  Regardless of whether WPA or WPA2 is used during the initial connection between the station and the AP, the two agree on common security requirements. Following that agreement, a series of important key related activities occur in this specific order:

  1.

  The authentication server derives a key called the PMK. This key will remain the same for entire session. The same key is derived on the station. The server moves the PMK to the AP where it's needed.

  2.

  The next step is called the four-way handshake. Its purpose is to derive another key called the PTK. This step occurs between the AP and the station, and as you would think, it requires four steps to complete:

  a.

  The AP sends a random number known as nonce to the station.

  b.

  Using this value along with the PMK, the station creates a key used to encrypt a nonce that's called SNonce, which is then sent to the AP. It includes a reaffirmation of the security parameters that were negotiated earlier. It also protects the integrity of this frame with a MIC. This bidirectional exchange of nonce is a critical part of the key-generation process.

  c.

  Now that the AP has the client nonce, it will generate a key for unicast transmission with the station. It sends the nonce back to the station along with a group key commonly called a group transient key, as well as a confirmation of security parameters. d. The fourth message simply confirms to the AP that the temporal keys (TKs) are in place.

• Question 65:

  When adding a controller to manage through Cisco WCS, which address type is used and which SNMP function does the Cisco WCS perform?

  A. The controller is managed through its MAC address and the Cisco WCS acts as a SNMP TRAP authenticator.
  B. The IP address of the controller is used and the Cisco WCS acts as a SNMP TRAP receiver.
  C. The controller is managed through its MAC address and the Cisco WCS acts as a SNMP agent.
  D. The controller connects through its MAC address to the Cisco WCS and the Cisco WCS uses the SNMP to manage the controller for all configured SNMP parameters.
  B. The IP address of the controller is used and the Cisco WCS acts as a SNMP TRAP receiver.

  ---

  

• Question 66:

  DRAG DROP

  Drag the features on the left that use the “split MAC” model and drop them on the appropriate device on the right.

  Select and Place:

  

  

• Question 67:

  On the Cisco Wireless LAN Controller GUI, what sub-menu option under the Command menu will transfer code and configuration files to the controller?

  A. Download File
  B. Upload File
  C. Download Configuration
  D. Upload Configuration
  A. Download File

• Question 68:

  Which wireless topology supports roaming?

  A. IBSS
  B. BSS
  C. ESS
  D. bridging
  C. ESS

  ---

  Extended Services Set (ESS): The wireless topology is extended with two or more BSSs connected by a distribution system (DS) or a wired infrastructure. An ESS generally includes a common SSID to allow roaming from access point to access point without requiring client configuration.

  Reference: http://www.ciscopress.com/articles/article.asp?p=1156068andseqNum=4

• Question 69:

  Refer to the exhibit.

  

  Which tab is used to set up web authentication for guest users?

  A. Security > Layer 3
  B. Security > Layer 2
  C. Security > AAA Servers
  D. Advanced
  E. General
  A. Security > Layer 3

  ---

  

  From the Layer 3 Security drop-down list, choose one of the following:

• Question 70:

  An AP was reset while working on the correct association to a Cisco WCS version 7.0. Which item was cleared during the reset?

  A. static IP address
  B. the location ID of the AP
  C. WLC primary, secondary, tertiary
  D. AP name
  E. certificate
  F. Nothing was cleared.
  F. Nothing was cleared.

  ---

  Reset - Sets the table to the default display so nothing will be cleared.