Cisco 642-737 Online Practice Questions and Exam Preparation

Cisco 642-737 Online Questions & Answers

• Question 191:

  How should the Cisco Secure ACS v4.2 and the Cisco WLC v7.0 be configured to support wireless client authentication?

  A. The WLC configured for RADIUS and the Cisco Secure ACS configured for RADIUS (Cisco Airespace)
  B. The WLC configured for RADIUS and the Cisco Secure ACS configured for RADIUS (IETF)
  C. The WLC configured for TACACS+ and the Cisco Secure ACS configured for TACACS+ (Cisco Airespace)
  D. The WLC configured for TACACS+ and the Cisco Secure ACS configured for TACACS+ (Cisco IOS)
  A. The WLC configured for RADIUS and the Cisco Secure ACS configured for RADIUS (Cisco Airespace)

• Question 192:

  Which protocol port(s) need open access for communication between the MSE and WLC?

  A. UDP 16666 and 16667
  B. UDP 5247 and 5264
  C. UDP 161 and 162
  D. UDP 16113
  E. TCP 16113
  E. TCP 16113

• Question 193:

  An engineer is troubleshooting user authentications on the Cisco CAM and is viewing the wireless clients under the discovered clients tab. What client information can be gathered from this screen?

  A. authentication status
  B. association status
  C. EAP type
  D. NAC state
  B. association status

• Question 194:

  Configuring the Cisco Secure ACS with a self-signed certificate supports which requirement?

  A. when no user certificate is required
  B. when a CA-signed certificate is required for the user
  C. when a self-signed certificate Class 4 is required for the user
  D. when a self-signed certificate Class 0 is required for the user
  A. when no user certificate is required

• Question 195:

  Which statement describes the major difference between PEAP and EAP-FAST client authentication?

  A. EAP-FAST requires a backend AAA server, and PEAP does not.
  B. EAP-FAST is a Cisco-only proprietary protocol, whereas PEAP is an industry-standard protocol.
  C. PEAP requires a server-side certificate, while EAP-FAST does not require certificates.
  D. PEAP authentication protocol requires a client certificate, and EAP-FAST requires a secure password.
  C. PEAP requires a server-side certificate, while EAP-FAST does not require certificates.

• Question 196:

  Which two statements best describe the local authentication configuration options for a Cisco WLC v7.0 and local mode AP? (Choose two.)

  A. LEAP and EAP-FAST only
  B. LEAP, EAP-FAST, EAP-PEAP, and EAP-TLS only
  C. LEAP, EAP-FAST, EAP-PEAP, EAP-TLS, and EAP-MD5
  D. EAP-FAST with PAC provision only
  E. EAP-FAST with PAC or certificate provision
  B. LEAP, EAP-FAST, EAP-PEAP, and EAP-TLS only
  E. EAP-FAST with PAC or certificate provision

• Question 197:

  Refer to the exhibit.

  

  What is the effect of setting Client Exclusion to Enabled and set to a Timeout Value of 0 seconds in a Cisco WLC v7.0?

  A. Excluded clients must be manually removed from the excluded list.
  B. Client exclusion will not occur.
  C. Client exclusion timeout will be determined by the IDS module.
  D. Clients will only be disconnected and not excluded.
  A. Excluded clients must be manually removed from the excluded list.

• Question 198:

  Cisco Client MFP is supported on which modes of LWAPP and CAPWAP APs?

  A. Local, H-REAP, and Bridge
  B. Local, H-REAP, and Monitor
  C. Local, H-REAP, and Rogue Detector
  D. Sniffer, H-REAP, and Bridge
  A. Local, H-REAP, and Bridge

• Question 199:

  Which two EAP type(s) require a client certificate? (Choose two.)

  A. LEAP
  B. PEAP
  C. EAP-FAST
  D. EAP-TLS
  E. EAP-MD5
  C. EAP-FAST
  D. EAP-TLS

• Question 200:

  Refer to the exhibit.

  

  A client reports being unable to log into the wireless network, which uses PEAPv2. Which two issues appear in the output? (Choose two.)

  A. There is a problem with the client supplicant.
  B. The AP has the incorrect RADIUS server address.
  C. The AP has lost IP connectivity to the authentication server.
  D. The EAP client timeout value should be increased.
  E. The authentication server is misconfigured on the controller.
  F. The authentication server is misconfigured in the WLAN.
  A. There is a problem with the client supplicant.
  D. The EAP client timeout value should be increased.