Cisco 642-737 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 642-737
Exam Name/Title: Implementing Advanced Cisco Unified Wireless Security (IAUWS) v2.0
Certification Provider: Cisco
Corresponding Certification: CCNP Wireless

Exam Questions: 208
Updated On: May 28, 2026

Question #31

What three items can be found on the Wireless Control System PCI DSS Compliance Report? (Choose three.)

A. all SSIDs not using Client Exclusion

B. all ACL violations and reports

C. all IDS threats

D. detailed association history for clients connected to the network

E. all authentication and encryption violations

F. all access points that have rogue detection enabled

Discussion 0

Correct Answer: C,D,E Vote an answer

Question #32

Which statement correctly describes a wireless client connection to the Cisco WLC v7.0 that is configured for web guest access?

A. The client associates to the anchor controller and authenticates to the foreign controller.

B. The client associates to the foreign controller and authenticates to the foreign controller.

C. The client associates to the anchor controller and authenticates to the anchor controller.

D. The client associates to the foreign controller and authenticates to the anchor controller.

Discussion 0

Correct Answer: D Vote an answer

Question #33

All users on one of the two guest WLANs are failing to connect after a configuration change was made to a controller. What is the cause of the outage?

A. The DHCP server on the foreign controller was changed.

B. The address of the NAC guest server has been changed.

C. The configuration of the failing WLAN no longer matches the foreign controllers.

D. The interface or VLAN of the anchor controller and foreign controller no longer match.

Discussion 0

Correct Answer: C Vote an answer

Question #34

What are the three methods that a Cisco AnyConnect v3.0 profile can be applied to a client device? (Choose three.)

A. The administrator can manually copy the profile to the correct location on the client P

B. The administrator can use the Cisco AnyConnect v3.0 server feature to allow clients to authenticate with the AAA server and then download the appropriate profile to their client PC.

C. Cisco ASA version 8.2 and later can instruct users to open a specific page on the ASA web interface, from where NAM and user profiles can be downloaded.

D. The DHCP option for using a TFTP server automates where NAM and user profiles can be downloaded.

E. When loaded, the Posture Module can verify and request the user to load the latest profile.

F. The administrator can also use the predeploy installer (MSI on Windows) with the generated profiles.

Discussion 0

Correct Answer: A,C,F Vote an answer

Question #35

Which device performs the enforcement of posture assessment for a wireless client when implementing a NAC appliance solution?

A. Cisco IPS Appliance

B. Cisco NAC Appliance Server

C. Cisco 802.1X supplicant

D. Cisco Secure Access Control System

E. Cisco NAC Appliance Agent

F. Cisco NAC Guest Server

G. Cisco NAC Appliance Manager

Discussion 0

Correct Answer: B Vote an answer

Question #36

When configuring the WLC for single sign-on for the NAC, which device is used for the RADIUS accounting IP address?

A. Cisco ACS

B. Cisco WCS

C. Cisco NAC Appliance Server

D. Cisco NAC Guest Server

E. Cisco NAC Appliance Manager

Discussion 0

Correct Answer: E Vote an answer

Question #37

The Cisco WLC v7.0 is configured for external 802.1X and EAP by using the WPA2 association of wireless clients when using the Cisco Secure ACS v4.2. Which two items are required in the Cisco Secure ACS network configuration to enable correct AAA? (Choose two.)

A. WLC virtual IP address

B. AP IP address

C. WLC management IP address

D. authentication using TACACS+

E. WLC AP management IP address

F. authentication using RADIUS

G. hostname matching the WLC case-sensitive name

Discussion 0

Correct Answer: C,F Vote an answer

Question #38

Which protocol port needs open access for the Cisco WLC v7.0 using an external AAA server for checking administrative privileges for menu access?

A. UDP 1813

B. TCP 443

C. UDP 1646

D. UDP 1645

E. UDP 1812

F. TCP 49

Discussion 0

Correct Answer: F Vote an answer

Question #39

802.1X AP supplicant credentials have been enabled and configured on a Cisco WLC v7.0 in both the respective Wireless>AP>Global Configuration location and AP>Credentials tab locations. What describes the 802.1X AP authentication process when connected via Ethernet to a switch?

A. Only AP credentials are used.

B. AP credentials are used first; upon failure, the WLC global credentials are used.

C. WLC global AP credentials are used first; upon failure, the AP credentials are used.

D. Only WLC AP global credentials are used.

Discussion 0

Correct Answer: A Vote an answer

Question #40

Which type of attack is characterized by an evil twin?

A. eavesdropping

B. man in the middle

C. DoS

D. jamming

Discussion 0

Correct Answer: B Vote an answer

Question #41

Which protocol port(s) need open access for communication between the MSE and WLC?

A. TCP 16113

B. UDP 16666 and 16667

C. UDP 16113

D. UDP 5247 and 5264

E. UDP 161 and 162

Discussion 0

Correct Answer: A Vote an answer

Question #42

Which three WLAN polices can be controlled by using the Cisco IBNS on the Cisco WLC and Cisco Secure ACS? (Choose three.)

A. authentication priority order

B. VLAN

C. ACL

D. QoS setting

E. NAC state

F. EAP type

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #43

When configuring guest WLAN access, which two statements are true? (Choose two.)

A. The SSID that is defined for the guest WLAN on the foreign controllers must be the same as that defined on the anchor controller.

B. The mobility domain name of the anchor controller should be the same as what is configured for the foreign controllers.

C. The foreign and anchor controllers must be configured in a mobility group for the foreign controllers to be able to initiate EoIP tunnels to one or more anchor controllers.

D. The foreign controllers must be defined with an ingress interface and an egress interface in the guest WLAN.

Discussion 0

Correct Answer: A,C Vote an answer

Question #44

A client wants to put wireless users on different VLANs while using one SSID. Which two methods accomplish this goal? (Choose two.)

A. Configure the same WLAN on ID 1 and 17.

B. Configure similar SSIDs with different VLANs.

C. Use ACS as the RADIUS server.

D. Configure aaa override on Cisco WLC WLAN.

E. Configure the Cisco WLC internal RADIUS server.

Discussion 0

Correct Answer: C,D Vote an answer

Question #45

Cisco Client MFP is supported on which modes of LWAPP and CAPWAP APs?

A. Local, H-REAP, and Bridge

B. Local, H-REAP, and Rogue Detector

C. Local, H-REAP, and Monitor

D. Sniffer, H-REAP, and Bridge

Discussion 0

Correct Answer: A Vote an answer

Download Free Cisco 642-737 Demo

Simply submit your e-mail address below to get started with our free demo of your Cisco 642-737 exam.