Cisco 640-722 Online Practice Questions and Exam Preparation

Cisco 640-722 Online Questions & Answers

• Question 71:

  Which module does the Cisco AnyConnect Secure Mobility client integrate into the AnyConnect client package for access to both wired and wireless networks?

  A. Network Access Manager
  B. Telemetry
  C. Web Security
  D. DART
  A. Network Access Manager

  ---

  The main components used in IUWNE are the Cisco AnyConnect Mobility Client itself, associated with the Network Access Module (NAM) used to manage existing profiles and provide the wireless connectivity. Reference: CCNA Wireless (640-722 IUWNE) Quick Reference Guide page 73

• Question 72:

  Which option lists the key features of Cisco Compatible Extensions v5?

  A. Roaming and real-time diagnostics, MFP, a diagnostic channel that allows troubleshooting of the client, client reporting, optional location service, and expedited bandwidth
  B. AP assisted roam, Cisco Centralized Key Management, radio measurements, and transmit power control
  C. CAC, UPSD, voice metrics, MBSSIDs, location, link tests, and NAC
  D. WME, proxy ARP, EAP-FAST, and WPA2, and single sign-on
  E. LEAP, WPA, 802.1x and VLANs per AP, TKIP, and WiFi
  A. Roaming and real-time diagnostics, MFP, a diagnostic channel that allows troubleshooting of the client, client reporting, optional location service, and expedited bandwidth

  ---

  CCXv5 provides for the following:

  

  Client Troubleshooting "Diagnostic Channel"

  

  Client Reporting

  

  Roaming and Real-time Diagnostics

  

  Management Frame Protection

  

  Location Services (Optional)

  

  Expedited Bandwidth Request (Optional)

  

  Interpretation of status and result codes

  

  Performance

  

  Cisco Infrastructure IE

  

  Compliance with CCX v1-4.

  Reference: http://www.cisco.com/web/partners/downloads/765/ccx/Comp_Ext_Cust_Preso.pdf

• Question 73:

  A customer is deploying the Cisco 5508 Wireless Controller in a unified wireless solution. Which command must be configured on the neighboring switch port if the management interface on the WLC is configured to send untagged traffic to ensure that management traffic utilizes VLAN 10?

  A. switchport trunk native vlan 10
  B. spanning-tree portfast
  C. switchport trunk allowed vlan 10
  D. channel-group 10
  A. switchport trunk native vlan 10

• Question 74:

  Which two statements best describe the LAG configuration between a Cisco WLC and a Cisco Catalyst switch? (Choose two.)

  A. The Catalyst switch should be configured for PAgP.
  B. The Catalyst switch should be configured only for Layer 2 load balancing.
  C. The Catalyst switch should be configured for "on" mode.
  D. The Cisco WLC relies on the connected switch to perform the load-balance of traffic.
  E. The Cisco WLC aggregates multiple management interfaces into a single virtual interface.
  C. The Catalyst switch should be configured for "on" mode.
  D. The Cisco WLC relies on the connected switch to perform the load-balance of traffic.

  ---

  Reference: Restrictions for Link Aggregation

  You can bundle all eight ports on a Cisco 5508 Controller into a single link.

  

  Terminating on two different modules within a single Catalyst 6500 series switch provides redundancy and ensures that connectivity between the switch and the controller is maintained when one module fails. The controller's port 1 is connected to Gigabit interface 3/1, and the controller's port 2 is connected to Gigabit interface 2/1 on the Catalyst 6500 series switch. Both switch ports are assigned to the same channel group. LAG requires the EtherChannel to be configured for 'mode on' on both the controller and the Catalyst switch.

  

  Once the EtherChannel is configured as on at both ends of the link, the Catalyst switch should not be configured for either Link Aggregation Control Protocol (LACP) or Cisco proprietary Port Aggregation Protocol (PAgP) but be set unconditionally to LAG. Because Cisco WLC relies on the connected switch to perform the load-balance of traffic, the controller does not answer to negotiation frames and the LAG is not formed if a dynamic form of LAG is set on the switch. Additionally, LACP and PAgP are not supported on the controller.

  Reference: http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/ b_cg74_CONSOLIDATED_chapter_0100011.html

• Question 75:

  Which four parameters must be configured for local EAP-FAST on the controller? (Choose four.)

  A. authority ID
  B. authority ID Information
  C. client key
  D. PAC
  E. server key
  F. TTL for PAC
  G. monitor key
  H. NTP source
  A. authority ID
  B. authority ID Information
  E. server key
  F. TTL for PAC

  ---

  EAP-FAST is designed to speed re-authentication when a station roams from one AP to another. Here are the parameters that can be configured:

  *

  Server Key (in hexadecimal): The key (in hexadecimal characters) used to encrypt and decrypt PACs.

  *

  Time to Live for the PAC: Enter the number of days for the PAC to remain viable. The valid range is 1 to 1000 days, and the default setting is 10 days.

  *

  Authority ID (in hexadecimal): Enter the authority identifier of the local EAP-FAST server in hexadecimal characters. It is possible to enter up to 32 hexadecimal characters, but an even number of characters must be entered. This will identify the controller as the emitter of the PAC.

  *

  Authority ID Information: Enter the authority identifier of the local EAP-FAST server in text format.

  *

  Anonymous Provision: Enable this setting to allow anonymous provisioning. This feature allows PACs to be sent automatically to clients that do not have one during PAC provisioning. If this feature is disabled, PACS must be manually provisioned. Disable this feature when using EAP-FAST with certificates. The default setting is enabled.

• Question 76:

  Instructions

  

  THIS TASK DOES NOT REQUIRE DEVICE CONFIGURATION.

  

  To access the multiple-choice question, click on the numbered box on the left of the top panel.

  

  There is one multiple-choice question with this task. Be sure to answer the question before selecting the Next button.

  Scenario

  You have just finished configuring a WLC2504 through the console CLI. The WLC is attached to an existing production network switch. However, you are not able to reach the WLC via https://10.10.10.10.

  

  

  

  

  Which change can correct inband access to the WLC?

  A. change the switch FastEthernetO/1 duplex setting
  B. change the switch FastEthernetO/1 speed setting
  C. enable the switch FastEthernetO/1 spanning-tree port-fast trunk
  D. change the switch FastEthernetO/1 trunk encapsulation
  E. change the WLC management interface to use DHCP
  F. change the WLC management interface VLAN
  G. change the WLC configuration of NTP
  H. browse to WLC via http://10.10.10.10
  D. change the switch FastEthernetO/1 trunk encapsulation

  ---

  All of the other ports in the network are using the default VLAN (VLAN 1) but port 0/1, which connects to the WLC, is configured as a trunk, so VLAN 1 is not operational.

  

• Question 77:

  What is the impact of configuring a single SSID to support TKIP and AES encryption simultaneously?

  A. The overhead associated with supporting both encryption methods degrades client throughput significantly.
  B. Some wireless client drivers might not handle complex SSID settings and may be unable to associate to the WLAN.
  C. This configuration is unsupported and the Cisco Wireless Control System generates alarms continuously until the configuration is corrected.
  D. This configuration is common for migrating from WPA to WPA2. No problem is associated with using this configuration.
  B. Some wireless client drivers might not handle complex SSID settings and may be unable to associate to the WLAN.

  ---

  AES encryption uses hardware so there is almost no overhead when using it. TKIP is based on software. So when we support both TKIP and AES the client throughput will not significantly degrade -> A is not correct. When choosing both AES and TKIP, the router will support both encryption algorithms. Because not all wireless NICs support AES, some only support TKIP, so this option is probably the best choice -> B is not correct. As the picture below, Cisco Wireless Control System does support both simultaneously -> C is not correct.

  

• Question 78:

  You have an Apple IOS iPhone4 that is used on your home Wi-Fi network and a personal laptop that is used on your work's enterprise wireless network. At your office, you are unable to see the enterprise wireless network on your iPhone4. What is the most likely cause of this issue?

  A. WPA2 CPU intensive encryption is not supported on the client.
  B. WPA2 must be enabled on the client.
  C. A new profile must be created on the client.
  D. Wi-Fi must be enabled on the client.
  E. The enterprise is 2.4 GHz only.
  F. The enterprise is 5 GHz only.
  G. The RF channel must be adjusted on the client.
  F. The enterprise is 5 GHz only.

  ---

  The iPhone4 only supports 2.4 Ghz wireless. 5 Ghz wireless support was added with the iPhone5.

• Question 79:

  Which two wireless technologies can interfere with 802.11 networks? (Choose two.)

  A. DECT
  B. ZigBee
  C. WiMax
  D. GSM
  A. DECT
  B. ZigBee

  ---

  Digital Enhanced Cordless Telecommunication (DECT), also known as cordless telephones, and Zigbee are both well-known sources of interferences within an 802.11 network.

• Question 80:

  Refer to the exhibit.

  

  A wireless network that consists of Cisco Aironet 1260 APs and Cisco 2100 Series WLC has been correctly configured with Cisco WCS version 7, which is also used for management. The CleanAir Zone of Impact is not visible for the respective Cisco WCS maps.

  Which two issues are causing the problem? (Choose two.)

  A. software version
  B. AP
  C. Cisco WLC
  D. Cisco MSE
  E. Cisco WCS
  F. Cisco WCS is not enabled.
  B. AP
  D. Cisco MSE

  ---

  Cisco WCS includes new Air Quality tools, heat map options, and device detail information including:

  

  Options to display real-time network air quality by access point, floor, building, or campus

  

  Adjustable Cisco WCS heat map display of the average and minimum air quality for each location on the wireless network

  

  Mouse-over details about each interferer, including type of interferer, active or inactive status, detected and reported dates, and zone of impact from the floor map