Cisco 642-737 Actual Free Exam Questions & Community Discussion
An engineer is configuring client MFP. What WLAN Layer 2 security must be selected to use client MFP?
Correct Answer: C
Vote an answer
Which two things should you verify if the Cisco NAC Guest Server is configured on the network and the client cannot access the guest network? (Choose two.)
Correct Answer: C,D
Vote an answer
An engineer is troubleshooting failing authentication on a controller using an external
RADIUS server. What family of commands is used to troubleshoot the issue?
RADIUS server. What family of commands is used to troubleshoot the issue?
Correct Answer: B
Vote an answer
Which two fast roaming algorithms will allow a WLAN client to roam to a new AP and reestablish a new session key without a full reauthentication of the WLAN client? (Choose
two.)
two.)
Correct Answer: B,E
Vote an answer
What is the best method to verify AP parameters that are seen from a wireless client?
Correct Answer: C
Vote an answer
An engineer is responding to a man-in-the-middle attack and needs to enable security features to prevent such attacks in the future. What security feature would prevent a man-in-the-middle attack?
Correct Answer: D
Vote an answer
In which three places can certificates be used in a WLAN to provide secure communications? (Choose three.)
Correct Answer: A,B,C
Vote an answer
What are the four packet types that are used by EAP? (Choose four.)
Correct Answer: B,C,D,E
Vote an answer
Employees are allowed to starting bringing their own laptops to work. Which option can help provide a persistent user device check against unexpected issues of security risk application and lack of appropriate patches or updates inclusive of registry keys?
Correct Answer: C
Vote an answer
Which protocol port(s) need open access when deploying NAC appliances to communicate
with the Cisco WLC v7.0 to move an authenticated user from the quarantine VLAN to the access VLAN?
with the Cisco WLC v7.0 to move an authenticated user from the quarantine VLAN to the access VLAN?
Correct Answer: D
Vote an answer
The controller is reporting an IDS signature 'deauth flood' attack and it has been determined that the default settings are too sensitive for the environment. What signature details should be adjusted to only trigger the alert on a certain amount of client packets within a certain period of time?
Correct Answer: C
Vote an answer
An engineer is configuring 802.1x authentication on an autonomous AP. What two configuration commands must be included on the AP if the RADIUS server IP is 10.9.4.9? (Choose two.)
Correct Answer: C,D
Vote an answer
A client is failing EAP authentication and a debug shows that the server is sending an Access-Reject message. Which action must you take to resolve authentication?
Correct Answer: E
Vote an answer
An engineer is segmenting WLAN traffic by security options after the client has received an IP address. Which two security options are possible? (Choose two.)
Correct Answer: C,E
Vote an answer
Which one of the options is related to U.S. Federal Trade Commission safeguard rules for financial institutions to protect customer information?
Correct Answer: A
Vote an answer
0
0
0
10