Cisco 642-737 Online Practice Questions and Exam Preparation

Cisco 642-737 Online Questions & Answers

• Question 161:

  DRAG DROP

  Select and Place:

  

  

• Question 162:

  MFP is enabled globally on a WLAN with default settings on a single controller wireless network. Older client devices are disconnected from the network during a deauthentication attack. What is the cause of this issue?

  A. The client devices do not support CCXv5.
  B. The client devices do not support WPA.
  C. The NTP server is not configured on the controller.
  D. The MFP on the WLAN is set to optional.
  A. The client devices do not support CCXv5.

• Question 163:

  Which protocol port(s) need open access when deploying NAC appliances to communicate with the Cisco WLC v7.0 to move an authenticated user from the quarantine VLAN to the access VLAN?

  A. UDP 16666
  B. UDP 514
  C. UDP 5246 and 5247
  D. UDP 161 and 162
  E. TCP 443
  D. UDP 161 and 162

• Question 164:

  An engineer is configuring 802.1x authentication on an autonomous AP. What two configuration commands must be included on the AP if the RADIUS server IP is 10.9.4.9? (Choose two.)

  A. radius-server host 10.9.4.9 auth-port 1812 acct-port 1813 key Cisco123
  B. aaa new-model
  C. aaa authorization
  D. aaa attribute list 10.9.4.9
  E. aaa group server radius 10.9.4.9
  A. radius-server host 10.9.4.9 auth-port 1812 acct-port 1813 key Cisco123
  B. aaa new-model

• Question 165:

  An engineer has narrowed down an authentication issue to the client laptop. What three items should be verified for EAP-TLS authentication? (Choose three.)

  A. The user account is the same in the certificate.
  B. The Subject Key Identifier is configured correctly.
  C. The client certificate is formatted as X.509 version 3.
  D. Validate server certificate is disabled.
  E. The supplicant is configured correctly.
  F. The client certificate has a valid expiration date.
  A. The user account is the same in the certificate.
  C. The client certificate is formatted as X.509 version 3.
  E. The supplicant is configured correctly.

• Question 166:

  An engineer configures the wireless LAN controller to perform 802.1x user authentication. Which option must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

  A. local EAP
  B. Cisco Centralized Key Management
  C. authentication caching
  D. pre-authentication
  A. local EAP

• Question 167:

  An engineer is responding to a man-in-the-middle attack and needs to enable security features to prevent such attacks in the future. What security feature would prevent a man- in-the-middle attack?

  A. Management Frame Protection
  B. ACL
  C. Enable client and infrastructure MFP
  D. AAA Override
  C. Enable client and infrastructure MFP

• Question 168:

  Which three of the items listed are required configuration parameters for the WLC to enable NAC out-of-band single sign-on when implementing NAC appliances? (Choose three.)

  A. EAP authentication
  B. web authentication
  C. SNMP
  D. RADIUS accounting
  E. WLAN > SNMP NAC enabled
  F. WLAN > RADIUS NAC enabled
  C. SNMP
  D. RADIUS accounting
  E. WLAN > SNMP NAC enabled

• Question 169:

  What three items can be found on the Wireless Control System PCI DSS Compliance Report? (Choose three.)

  A. all authentication and encryption violations
  B. all ACL violations and reports
  C. all IDS threats
  D. detailed association history for clients connected to the network
  E. all SSIDs not using Client Exclusion
  F. all access points that have rogue detection enabled
  A. all authentication and encryption violations
  C. all IDS threats
  D. detailed association history for clients connected to the network

• Question 170:

  Which two statements are true about configuring a wired guest LAN feature? (Choose two.)

  A. Create a WLAN on the anchor controller only
  B. Select the management interface as the egress interface to reach the anchor controller
  C. Require an anchor controller to implement
  D. Select the interface that you created as the guest LAN interface in the ingress interface menu
  E. Configure on any controller from version 5.2 forward
  B. Select the management interface as the egress interface to reach the anchor controller
  D. Select the interface that you created as the guest LAN interface in the ingress interface menu