Cisco 642-737 Online Practice Questions and Exam Preparation

Cisco 642-737 Online Questions & Answers

• Question 21:

  What two actions must be taken by an engineer configuring wireless Identity-Based Networking for a WLAN to enable VLAN tagging? (Choose two.)

  A. enable AAA override on the WLAN
  B. create and apply the appropriate ACL to the WLAN
  C. update the RADIUS server attributes for tunnel type 64, medium type 65, and tunnel private group type 81
  D. configure RADIUS server with WLAN subnet and VLAN ID
  E. enable VLAN Select on the wireless LAN controller and the WLAN
  A. enable AAA override on the WLAN
  C. update the RADIUS server attributes for tunnel type 64, medium type 65, and tunnel private group type 81

• Question 22:

  When a supplicant and AAA server are configured to use PEAP, which mechanism is used by the client to authenticate the AAA server in Phase One?

  A. PMK
  B. shared secret keys
  C. digital certificate
  D. PAC
  C. digital certificate

• Question 23:

  DRAG DROP

  

  

• Question 24:

  An engineer is going to enable EAP on a new WLAN and is ensuring he has the necessary components. What component uses EAP and 802.1x to pass user authentication to the authenticator?

  A. AP
  B. Controller
  C. Supplicant
  D. AAA Server
  C. Supplicant

• Question 25:

  Which attribute on the Cisco WLC v7.0 does RADIUS IETF attribute "Tunnel-Private-Group ID" assign?

  A. ACL
  B. DSCP
  C. QoS D. VLAN
  D

• Question 26:

  An engineer is segmenting WLAN traffic by security options after the client has received an IP address. Which two security options are possible? (Choose two.)

  A. web policy
  B. Cisco Key Integrity Protocol
  C. PSK
  D. 802.1x
  E. VPN pass-through
  A. web policy
  E. VPN pass-through

• Question 27:

  Many users report being disconnected from the WLAN and WCS shows events for broadcast deauthentication frames. What security feature mitigates the issue?

  A. WPA2
  B. MFP
  C. IDS
  D. ACL
  E. IPS
  B. MFP

• Question 28:

  Which option correctly lists the EAP protocol(s) that can be configured on an autonomous AP for local authentication?

  A. MAC
  B. LEAP and EAP-FAST
  C. MAC, LEAP, and EAP-FAST
  D. MAC, EAP-FAST, EAP-PEAP, and EAP-TLS
  C. MAC, LEAP, and EAP-FAST

• Question 29:

  Which statement about the Cisco NAC Guest Server that is deployed in wireless guest access implementations is true?

  A. The Cisco NAC Guest Server integrates with the Cisco WCS through the RADIUS protocol.
  B. The Cisco NAC Guest Server can be used in place of Cisco WCS Lobby Ambassador functionality for guest provisioning and reporting. The Cisco WCS is still needed for WLAN management.
  C. The Cisco WLC acts as the guest accounts provisioning portal, and the Cisco NAC Guest Server acts as the captive portal capturing web requests from preassigned "guest ports" and requesting authentication.
  D. Guest accounts on the Cisco NAC Guest Server can be created using the Cisco WCS Lobby Ambassador feature.
  B. The Cisco NAC Guest Server can be used in place of Cisco WCS Lobby Ambassador functionality for guest provisioning and reporting. The Cisco WCS is still needed for WLAN management.

• Question 30:

  All authentications are failing after a firewall is placed between the Cisco NAC guest server and RADIUS clients. Which two ports must be opened on the firewall? (Choose two.)

  A. TCP port 23
  B. TCP port 443
  C. UDP port 123
  D. UDP port 1812
  E. UDP port 1813
  F. UDP port 16666
  D. UDP port 1812
  E. UDP port 1813