QUESTION 71
Which two fast roaming algorithms will allow a WLAN client to roam to a new AP and re- establish a new session key without a full reauthentication of the WLAN client? (Choose two.)
A. |
PMK |
B. |
PTK |
C. |
MIC |
D. |
GTK |
E. |
CKM |
F. |
PKC |
Correct Answer: EF
QUESTION 72
Which two EAP type(s) require a client certificate? (Choose two.)
A. |
LEAP |
B. |
PEAP |
C. |
EAP-FAST |
D. |
EAP-TLS |
E. |
EAP-MD5 |
Correct Answer: CD
QUESTION 73
Which three actions must be completed to enable collaboration between a Cisco WLC and Cisco IPS? (Choose three.)
A. |
Create a user account on the Cisco IPS for the Cisco WLC. |
B. |
Define the Cisco WLC as an allowed host on the Cisco IPS. |
C. |
Define the Cisco IPS as a CIDS sensor on the Cisco WLC. |
D. |
Create a Cisco IPS profile on the Cisco WLC. |
E. |
Configure the Cisco WLC to update the shunned client list from the Cisco IPS. |
F. |
Define a Cisco IPS profile to the WLAN in the Cisco WLC. |
Correct Answer: ABC
QUESTION 74
A Cisco WLC v7.0 has been only initially configured through the console setup CLI wizard. A new AP has just finished association with the controller. What is the default mode of remote access to the AP?
A. |
HTTPS |
B. |
HTTP |
C. |
SSH |
D. |
Telnet |
E. |
access is disabled |
Correct Answer: E
QUESTION 75
Which four attack categories can the Cisco WLC v7.0 IDS detect using the 17 standard signatures? (Choose four.)
A. |
broadcast deauthentication attacks |
B. |
Wellenreiter and NetStumbler attacks |
C. |
management frame floods and EAPOL floods |
D. |
fragmentation attacks |
E. |
NULL probe response attacks |
F. |
RF jamming attacks |
Correct Answer: ABCE
QUESTION 76
The controller is reporting an IDS signature ‘deauth flood’ attack and it has been determined that the default settings are too sensitive for the environment. What signature details should be adjusted to only trigger the alert on a certain amount of client packets within a certain period of time?
A. |
Measurement Interval and Quiet Time |
B. |
Signature Frequency and Signature MAC Frequency |
C. |
Measurement Interval and Signature MAC Frequency |
D. |
Quiet Time and Signature Frequency |
Correct Answer: C
QUESTION 77
IPS appliance traffic monitoring has been configured in a Cisco WLC v7.0 with default parameters. Which statement correctly describes the results when malicious traffic is detected from a wireless client?
A. |
The WLC immediately notifies the IPS appliance. |
B. |
The IPS appliance immediately notifies the WLC. |
C. |
The WLC polls the IPS for the status every 60 seconds. |
D. |
The IPS initiates updates to the WLC every 60 seconds. |
Correct Answer: C
QUESTION 78
An engineer is troubleshooting a FlexConnect authentication to a local RADIUS server. What debug command can discover the issue on the controller?
A. |
debug lwapp reap |
B. |
debug dot11 mgmtmsg |
C. |
debug hreapaaa |
D. |
debug lwapp reap mgmt |
Correct Answer: C
QUESTION 79
Which option verifies that a wireless client has authenticated to a WLAN when performing NAC using the Cisco NAC Appliance Manager and Server?
A. |
Cisco CAM OOB Management > Devices > Discovered Clients |
B. |
Cisco CAS OOB Management > Devices > Discovered Clients |
C. |
Cisco CAM Monitor > View Online Users |
D. |
Cisco CAS Monitor > View Online Users |
Correct Answer: C
QUESTION 80
MFP is enabled globally on a WLAN with default settings on a single controller wireless network. Older client devices are disconnected from the network during a deauthentication attack. What is the cause of this issue?
A. |
The client devices do not support CCXv5. |
B. |
The client devices do not support WPA. |
C. |
The NTP server is not configured on the controller. |
D. |
The MFP on the WLAN is set to optional. |
Correct Answer: A
Free VCE & PDF File for Cisco 642-737 Real Exam
Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …
100-105 Dumps VCE PDF
200-105 Dumps VCE PDF
300-101 Dumps VCE PDF
300-115 Dumps VCE PDF
300-135 Dumps VCE PDF
300-320 Dumps VCE PDF
400-101 Dumps VCE PDF
640-911 Dumps VCE PDF
640-916 Dumps VCE PDF
70-410 Dumps VCE PDF
70-411 Dumps VCE PDF
70-412 Dumps VCE PDF
70-413 Dumps VCE PDF
70-414 Dumps VCE PDF
70-417 Dumps VCE PDF
70-461 Dumps VCE PDF
70-462 Dumps VCE PDF
70-463 Dumps VCE PDF
70-464 Dumps VCE PDF
70-465 Dumps VCE PDF
70-480 Dumps VCE PDF
70-483 Dumps VCE PDF
70-486 Dumps VCE PDF
70-487 Dumps VCE PDF
220-901 Dumps VCE PDF
220-902 Dumps VCE PDF
N10-006 Dumps VCE PDF
SY0-401 Dumps VCE PDF