[Free] Download New Updated (October 2016) Cisco 642-737 Real Exam 71-80

Ensurepass

QUESTION 71

Which two fast roaming algorithms will allow a WLAN client to roam to a new AP and re- establish a new session key without a full reauthentication of the WLAN client? (Choose two.)

 

A.	PMK
B.	PTK
C.	MIC
D.	GTK
E.	CKM
F.	PKC

 

Correct Answer: EF

 

 

QUESTION 72

Which two EAP type(s) require a client certificate? (Choose two.)

 

A.	LEAP
B.	PEAP
C.	EAP-FAST
D.	EAP-TLS
E.	EAP-MD5

 

Correct Answer: CD

 

 

QUESTION 73

Which three actions must be completed to enable collaboration between a Cisco WLC and Cisco IPS? (Choose three.)

 

A.	Create a user account on the Cisco IPS for the Cisco WLC.
B.	Define the Cisco WLC as an allowed host on the Cisco IPS.
C.	Define the Cisco IPS as a CIDS sensor on the Cisco WLC.
D.	Create a Cisco IPS profile on the Cisco WLC.
E.	Configure the Cisco WLC to update the shunned client list from the Cisco IPS.
F.	Define a Cisco IPS profile to the WLAN in the Cisco WLC.

 

Correct Answer: ABC

 

 

QUESTION 74

A Cisco WLC v7.0 has been only initially configured through the console setup CLI wizard. A new AP has just finished association with the controller. What is the default mode of remote access to the AP?

 

A.	HTTPS
B.	HTTP
C.	SSH
D.	Telnet
E.	access is disabled

 

Correct Answer: E

 

 

QUESTION 75

Which four attack categories can the Cisco WLC v7.0 IDS detect using the 17 standard signatures? (Choose four.)

 

A.	broadcast deauthentication attacks
B.	Wellenreiter and NetStumbler attacks
C.	management frame floods and EAPOL floods
D.	fragmentation attacks
E.	NULL probe response attacks
F.	RF jamming attacks

 

Correct Answer: ABCE

 

 

QUESTION 76

The controller is reporting an IDS signature ‘deauth flood’ attack and it has been determined that the default settings are too sensitive for the environment. What signature details should be adjusted to only trigger the alert on a certain amount of client packets within a certain period of time?

 

A.	Measurement Interval and Quiet Time
B.	Signature Frequency and Signature MAC Frequency
C.	Measurement Interval and Signature MAC Frequency
D.	Quiet Time and Signature Frequency

 

Correct Answer: C

 

 

QUESTION 77

IPS appliance traffic monitoring has been configured in a Cisco WLC v7.0 with default parameters. Which statement correctly describes the results when malicious traffic is detected from a wireless client?

 

A.	The WLC immediately notifies the IPS appliance.
B.	The IPS appliance immediately notifies the WLC.
C.	The WLC polls the IPS for the status every 60 seconds.
D.	The IPS initiates updates to the WLC every 60 seconds.

 

Correct Answer: C

 

 

QUESTION 78

An engineer is troubleshooting a FlexConnect authentication to a local RADIUS server. What debug command can discover the issue on the controller?

 

A.	debug lwapp reap
B.	debug dot11 mgmtmsg
C.	debug hreapaaa
D.	debug lwapp reap mgmt

 

Correct Answer: C

 

 

QUESTION 79

Which option verifies that a wireless client has authenticated to a WLAN when performing NAC using the Cisco NAC Appliance Manager and Server?

 

A.	Cisco CAM OOB Management > Devices > Discovered Clients
B.	Cisco CAS OOB Management > Devices > Discovered Clients
C.	Cisco CAM Monitor > View Online Users
D.	Cisco CAS Monitor > View Online Users

 

Correct Answer: C

 

 

QUESTION 80

MFP is enabled globally on a WLAN with default settings on a single controller wireless network. Older client devices are disconnected from the network during a deauthentication attack. What is the cause of this issue?

 

A.	The client devices do not support CCXv5.
B.	The client devices do not support WPA.
C.	The NTP server is not configured on the controller.
D.	The MFP on the WLAN is set to optional.

 

Correct Answer: A

 

Free VCE & PDF File for Cisco 642-737 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …