Cisco CCNA CCNP CCSP exams

　
　
Exam : Cisco 642-736
Title : Implementing Advanced Cisco Unified Wireless Security (IAUWS)

1. The wireless client can roam faster on the Cisco Unified Wireless Network infrastructure when which condition is met?
A. EAP-FAST is used for client authentication on the wireless network.
B. Cisco Centralized Key Management is used for Fast Secure Roaming.
C. QoS is being used on the WLAN to control which client packets get through the network faster.
D. RRM protocol is used between multiple APs that the client associates to while roaming.
Answer: B

2. For wireless NAC out-of-band operations, which protocol is used between the Cisco NAC Appliance Manager and the wireless controller to switch the wireless client from the quarantine VLAN to the
access VLAN after the client passed the NAC authentication/posture assessment process?
A. RADIUS
B. TACACS+
C. SNMP
D. SSL
E. EAP
Answer: C

3. Which two configuration parameters does NAC OOB require on a SSID/WLAN? (Choose two.)
A. WMM enabled on the WLAN
B. open authentication on the WLAN
C. AAA override configuration on the WLAN
D. 802.1x configuration on the WLAN
Answer: BD

4. When adding the foreign controller as a mobility group member in the guest anchor controller, which statement is true?
A. The mobility group name on the guest anchor controller must match the mobility group name on the foreign controller.
B. The mobility group member IP address and MAC address belong to the management interface of the foreign controller.
C. To successfully add the foreign controller as a mobility group member in the guest anchor controller, all the parameters defined in the WLAN Security, QoS, and Advanced tabs must be
configured identically in both the anchor and foreign controller.
D. In the guest anchor controller GUI, WLANs > Mobility Anchors page, use the Switch IP Address (Anchor) drop-down menu to select the IP address corresponding to the management
interface of the anchor controller.
Answer: B

5. What is the purpose of looking for anomalous behavior on a WLAN infrastructure?
A. identifying new attack tools
B. auditing employee’s bandwidth usage
C. identifying attacks using signature matching
D. improving performance by load balancing
Answer: A

6. Which two 802.11 frame types can be used in a virtual carrier (big NAV) attack? (Choose two.)
A. association
B. ACK
C. CTS
D. beacon
E. de-authentication
Answer: BC

7. As of controller release v5.2, which two statements about wired guest access support are true? (Choose two.)
A. It is not supported on the Cisco 2100 Series Controllers.
B. No more than three wired guest access LANs can be configured on a controller.
C. Layer 3 web authentication and passthrough are not supported.
D. Wired guest access cannot be configured in a dual-controller configuration that uses an anchor controller and a foreign controller.
E. The wired guest access ports must be in the same Layer 2 network as the foreign controller.
Answer: AE

8. Which option best describes an evil twin attack?
A. a rouge access point broadcasting a trusted SSID
B. a rogue access point broadcasting any SSID
C. a rouge ad-hoc with the SSID "Free WiFi"
D. a rouge access point spreading malware upon client connection
Answer: A

Free 640-802 Demo Download

Free demo for Cisco Others 642-736 exam (Implementing Advanced Cisco Unified Wireless Security (IAUWS)). You can check out the interface, question quality and usability of our practice exams

Free Download 640-802 Exam Pdf Demo
Free Download 640-802 Exam iEngine Demo