Cisco 642-737 Online Practice Questions and Exam Preparation

Cisco 642-737 Online Questions & Answers

• Question 131:

  A network engineer is troubleshooting using the mping command between the local and DMZ WLC. Which two ports should a network engineer verify are currently open on the firewall between the controllers? (Choose two.)

  A. ICMP
  B. IP protocol 97
  C. TCP 91
  D. TCP 16113
  E. UDP 161
  F. UDP 16666
  B. IP protocol 97
  F. UDP 16666

• Question 132:

  An engineer is troubleshooting the authentication interaction between a WLAN controller and the authentication server. Which two debug commands should be utilized? (Choose two.)

  A. debug client
  B. debug mobility handoff enable
  C. debug aaa all enable
  D. debug pem state
  E. debug locp event enable
  A. debug client
  C. debug aaa all enable

• Question 133:

  An engineer is securing the wireless network from vulnerabilities. Which four strategies are recommended for mitigation? (Choose four.)

  A. MFP
  B. identity-based networking
  C. rogue location
  D. EAP-TLS
  E. guest monitoring
  F. RF profiles
  G. rogue detection
  H. password policies
  A. MFP
  C. rogue location
  E. guest monitoring
  G. rogue detection

• Question 134:

  Which type of attack is characterized by an evil twin?

  A. DoS
  B. man in the middle
  C. jamming
  D. eavesdropping
  B. man in the middle

• Question 135:

  Which two attacks represent a social engineering attack? (Choose two.)

  A. using AirMagnet Wi-Fi Analyzer to search for hidden SSIDs
  B. calling the IT helpdesk and asking for network information
  C. spoofing the MAC address of an employee device
  D. entering a business and posing as IT support staff
  B. calling the IT helpdesk and asking for network information
  D. entering a business and posing as IT support staff

• Question 136:

  When configuring guest WLAN access, which two statements are true? (Choose two.)

  A. The SSID that is defined for the guest WLAN on the foreign controllers must be the same as that defined on the anchor controller.
  B. The foreign controllers must be defined with an ingress interface and an egress interface in the guest WLAN.
  C. The foreign and anchor controllers must be configured in a mobility group for the foreign controllers to be able to initiate EoIP tunnels to one or more anchor controllers.
  D. The mobility domain name of the anchor controller should be the same as what is configured for the foreign controllers.
  A. The SSID that is defined for the guest WLAN on the foreign controllers must be the same as that defined on the anchor controller.
  C. The foreign and anchor controllers must be configured in a mobility group for the foreign controllers to be able to initiate EoIP tunnels to one or more anchor controllers.

• Question 137:

  What does the eping mobility_peer_IP_address command do?

  A. It tests EoIP connectivity via port 97 though the management interface.
  B. It tests EoIP connectivity via port 97 though the AP manager interface.
  C. It tests UDP connectivity via port 16666 through the management interface.
  D. It tests UDP connectivity via port 16666 through the AP manager interface.
  A. It tests EoIP connectivity via port 97 though the management interface.

• Question 138:

  Refer to the exhibit.

  

  What is the 1.1.1.1 IP address?

  A. the controller virtual interface IP address
  B. the controller management IP address
  C. the controller AP-manager IP address
  D. the RADIUS server IP address
  E. the lightweight AP IP address
  F. the wireless client IP address
  A. the controller virtual interface IP address

• Question 139:

  When implementing certificates through the use of a CA, how is the certificate of client A validated by client B when received?

  A. verifying the client A certificate using the client A private key
  B. verifying the client A certificate using the client A public key
  C. verifying the client A certificate using the client B private key
  D. verifying the client A certificate using the client B public key
  E. verifying the client A certificate using the CA private key
  F. verifying the client A certificate using the CA public key
  F. verifying the client A certificate using the CA public key

• Question 140:

  An engineer needs to use the secure X.509 standard for wireless authentication. What EAP method would be used?

  A. SSL
  B. TLS
  C. S/MIME
  D. IKE
  B. TLS