Cisco 642-737 - Implementing Advanced Cisco Unified Wireless Security v2.0 Exam
Page: 2 / 42
Total 206 questions
Question #6 (Topic: )
MFP is enabled globally on a WLAN with default settings on a single controller wireless
network. Older client devices are disconnected from the network during a deauthentication
attack. What is the cause of this issue?
network. Older client devices are disconnected from the network during a deauthentication
attack. What is the cause of this issue?
A. The client devices do not support CCXv5.
B. The client devices do not support WPA.
C. The NTP server is not configured on the controller.
D. The MFP on the WLAN is set to optional.
Answer: A
Question #7 (Topic: )
Which one best describes the EAP Identity Request frame when a wireless client is
connecting to a Cisco WLC v7.0-based AP WLAN?
connecting to a Cisco WLC v7.0-based AP WLAN?
A. sourced from the Cisco ACS Server to the client
B. sourced from the client to the Cisco ACS Server
C. sourced from the WLC to the client
D. sourced from the client to the WLC
E. sourced from the AP to the client
F. sourced from the client to the AP
Answer: C
Question #8 (Topic: )
Which statement describes the major difference between PEAP and EAP-FAST client
authentication?
authentication?
A. EAP-FAST requires a backend AAA server, and PEAP does not.
B. EAP-FAST is a Cisco-only proprietary protocol, whereas PEAP is an industry-standard protocol.
C. PEAP requires a server-side certificate, while EAP-FAST does not require certificates.
D. PEAP authentication protocol requires a client certificate, and EAP-FAST requires a secure password.
Answer: C
Question #9 (Topic: )
An engineer has narrowed down an authentication issue to the client laptop. What three
items should be verified for EAP-TLS authentication? (Choose three.)
items should be verified for EAP-TLS authentication? (Choose three.)
A. The user account is the same in the certificate.
B. The Subject Key Identifier is configured correctly.
C. The client certificate is formatted as X.509 version 3.
D. Validate server certificate is disabled.
E. The supplicant is configured correctly.
F. The client certificate has a valid expiration date.
Answer: A,C,E
Question #10 (Topic: )
Which EAP protocol(s) can be used by a controller-based AP on Ethernet for 802.1X
authentication to a switch?
authentication to a switch?
A. EAP-LEAP
B. EAP-FAST
C. EAP-PEAP
D. EAP-TLS
E. 802.1X and EAP are not supported on AP-wired Ethernet
Answer: B
