Cisco 642-737 Online Practice Questions and Exam Preparation

Cisco 642-737 Online Questions & Answers

• Question 11:

  RADIUS is set up with multiple servers on the controller and an engineer wants to select each server for specific WLANs. Where in the controller GUI is this configuration completed?

  A. Security > AAA > RADIUS
  B. Security > AAA > RADIUS > Fallback
  C. Security > Authentication > RADIUS
  D. WLANs > WLAN ID > Security > AAA Servers
  E. WLANs > WLAN ID > Security > Layer 3
  F. WLANs > WLAN ID > Advanced > AAA Servers
  D. WLANs > WLAN ID > Security > AAA Servers

• Question 12:

  Which three items must be configured on a Cisco WLC v7.0 to allow implementation of isolated bonding network? (Choose three.)

  A. RADIUS server IP address
  B. DHCP IP address
  C. SNMP trap receiver IP address
  D. interface name
  E. SNMP community name
  F. ACL name
  A. RADIUS server IP address
  D. interface name
  F. ACL name

• Question 13:

  A WLAN is configured for AAA override. Valid user authentications are failing due to a custom ACL. What are two reasons the authentication could fail? (Choose two.)

  A. The ACL returned does not exist on the WLC.
  B. The name of the ACL on the WLC is not spelled correctly.
  C. The interface referred to in the returned ACL does not exist on the WLC.
  D. The ACL returned to the WLC prevents the end user device from receiving a DHCP address.
  E. The ACL name attribute has not been configured on the Cisco Secure ACS
  A. The ACL returned does not exist on the WLC.
  B. The name of the ACL on the WLC is not spelled correctly.

• Question 14:

  Which four attack categories can the Cisco WLC v7.0 IDS detect using the 17 standard signatures? (Choose four.)

  A. broadcast deauthentication attacks
  B. Wellenreiter and NetStumbler attacks
  C. management frame floods and EAPOL floods
  D. fragmentation attacks
  E. NULL probe response attacks
  F. RF jamming attacks
  A. broadcast deauthentication attacks
  B. Wellenreiter and NetStumbler attacks
  C. management frame floods and EAPOL floods
  E. NULL probe response attacks

• Question 15:

  When configuring the WLC for NAC out-of-band, which device will be used for SNMP trap receiver IP address entries?

  A. Cisco NAC Appliance Manager
  B. Cisco NAC Appliance Server
  C. Cisco NAC Guest Server
  D. Cisco ACS
  E. Cisco WCS
  A. Cisco NAC Appliance Manager

• Question 16:

  Which two things should you verify if the Cisco NAC Guest Server is configured on the network and the client cannot access the guest network? (Choose two.)

  A. The controller can ping the Cisco NAC Guest Server.
  B. The controller can mping and eping the Cisco NAC Guest Server.
  C. AAA override is enabled on the guest WLAN.
  D. Controllers and the Cisco NAC Guest Server are in the same mobility group.
  A. The controller can ping the Cisco NAC Guest Server.
  C. AAA override is enabled on the guest WLAN.

• Question 17:

  Which three products are required to produce Cisco Clean Air Security reports? (Choose three.)

  A. WLC v7.0
  B. WCS v7.0
  C. MSE v7.0
  D. Spectrum Expert v4.0
  E. 1260 AP
  F. 3500 AP
  A. WLC v7.0
  B. WCS v7.0
  F. 3500 AP

• Question 18:

  Refer to the exhibit.

  

  Viewing the Controller > Interfaces configuration screen, which statement about the nac- vlan interface configuration is true?

  A. Wireless client traffic that is outbound on VLAN 176 will be switched to the trusted interface on the Cisco NAC Appliance Server.
  B. Wireless client traffic that is outbound on VLAN 175 will be switched to the trusted interface on the Cisco NAC Appliance Server.
  C. 10.10.175.1 is the IP address of the trusted interface on the Cisco NAC Appliance Server.
  D. 10.10.175.1 is the IP address of the untrusted interface on the Cisco NAC Appliance Server.
  E. VLAN 175 is the access VLAN.
  F. VLAN 176 traffic from the client will bypass the Cisco NAC Appliance Server.
  E. VLAN 175 is the access VLAN.

• Question 19:

  An engineer is configuring client MFP. What WLAN Layer 2 security must be selected to use client MFP?

  A. 802.1x
  B. Static WEP
  C. WPA + WPA2
  D. CKIP
  C. WPA + WPA2

• Question 20:

  What does the Cisco WLC v7.0 use to encrypt broadcast and multicast frames that are sent to a wireless client?

  A. PMK
  B. GTK
  C. PTK
  D. OKC
  E. PSK
  B. GTK