Cisco 642-737 Online Practice Questions and Exam Preparation

Cisco 642-737 Online Questions & Answers

• Question 171:

  Which option verifies that a wireless client has associated but is not yet authenticated to a WLAN when performing NAC using the Cisco NAC Appliance Manager and Server?

  A. Cisco CAM OOB Management > Devices > Discovered Clients
  B. Cisco CAS OOB Management > Devices > Discovered Clients
  C. Cisco CAM Monitor > View Online Users
  D. Cisco CAS Monitor > View Online Users
  A. Cisco CAM OOB Management > Devices > Discovered Clients

• Question 172:

  Which two options are supported when deploying wireless NAC out-of-band implementations? (Choose two.)

  A. Cisco NAS in virtual gateway mode
  B. WLANs with allow AAA override enabled
  C. Cisco NAC Guest Server integration with the Cisco NAM
  D. dynamic VLAN mappings on the Cisco NAS, which is based on the returned RADIUS attributes from the Cisco Secure ACS
  E. autonomous APs
  A. Cisco NAS in virtual gateway mode
  C. Cisco NAC Guest Server integration with the Cisco NAM

• Question 173:

  A Cisco WLC v7.0 has been only initially configured through the console setup CLI wizard. A new AP has just finished association with the controller. What is the default mode of remote access to the AP?

  A. HTTPS
  B. HTTP
  C. SSH
  D. Telnet
  E. access is disabled
  E. access is disabled

• Question 174:

  How many tunnels can a Cisco WLC v7.0 anchor?

  A. 63
  B. 64
  C. 71
  D. 72
  E. 253
  F. 254
  C. 71

• Question 175:

  Which statement correctly describes a wireless client connection to the Cisco WLC v7.0 that is configured for web guest access?

  A. The client associates to the anchor controller and authenticates to the anchor controller.
  B. The client associates to the anchor controller and authenticates to the foreign controller.
  C. The client associates to the foreign controller and authenticates to the anchor controller.
  D. The client associates to the foreign controller and authenticates to the foreign controller.
  C. The client associates to the foreign controller and authenticates to the anchor controller.

• Question 176:

  Which two firewall ports must be opened for the anchor controller to operate properly with a foreign controller for guest access? (Choose two.)

  A. ports 16666 and 16667 for controller traffic
  B. port 97 for EoIP traffic
  C. port 80 for HTTP traffic
  D. port 69 for TFTP traffic
  A. ports 16666 and 16667 for controller traffic
  B. port 97 for EoIP traffic

• Question 177:

  The controller is reporting an IDS signature 'deauth flood' attack and it has been determined that the default settings are too sensitive for the environment. What signature details should be adjusted to only trigger the alert on a certain amount of client packets within a certain period of time?

  A. Measurement Interval and Quiet Time
  B. Signature Frequency and Signature MAC Frequency
  C. Measurement Interval and Signature MAC Frequency
  D. Quiet Time and Signature Frequency
  C. Measurement Interval and Signature MAC Frequency

• Question 178:

  An engineer is configuring IDS signatures and sets Bcast deauth to enabled and immediately begins to see Broadcast deauthentication frame alerts. What Cisco recommended solution would resolve this issue?

  A. disable Bcast deauth
  B. disable Broadcast SSID on the WLAN
  C. enable MFP on the WLAN
  D. locate and disable the attacker
  C. enable MFP on the WLAN

• Question 179:

  Which three actions can be configured for EAP authentication on a Cisco 1200 Series AP? (Choose three.)

  A. Specify the shared secret and ports.
  B. Set the EAP Authentication type Priority 1 field to the server IP address under Default Server Priorities.
  C. Set the EAP Authentication type Priority 5 field to the server IP address under Default Server Priorities.
  D. Enter the IP address of the authentication server in the Server field.
  E. Enter the IP address of the management IP address of the Cisco WLC.
  F. Specify EAP account on server and ports.
  A. Specify the shared secret and ports.
  B. Set the EAP Authentication type Priority 1 field to the server IP address under Default Server Priorities.
  D. Enter the IP address of the authentication server in the Server field.

• Question 180:

  An engineer would like to use an EAP supplicant that uses PKI to authenticate the WLAN network and client, as well as a client certificate. What EAP method can be used?

  A. PEAPv1
  B. PEAPv0
  C. EAP-FAST
  D. EAP-TLS
  D. EAP-TLS