[Free] 2017(Oct) EnsurePass Dumpsleader Cisco 642-737 Dumps with VCE and PDF 11-20

EnsurePass
2017 Oct Cisco Official New Released 642-737
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/642-737.html

Implementing Advanced Cisco Unified Wireless Security v2.0

Question No: 11

When using a controller-based AP network, which type of entry is configured in the Cisco Secure ACS?

  1. AAA client using the AP IP address

  2. AAA server using the AP IP address

  3. AAA client using the WLC IP address

  4. AAA server using the WLC IP address

Answer: A

Question No: 12

Which two firewall protocol port(s) need open access for secure management access to an anchor WLC for guest access? (Choose two.)

  1. TCP 22

  2. TCP 23

  3. TCP 80

  4. TCP 8080

  5. TCP 443

  6. UDP 123

Answer: A,E

Question No: 13

Which two tools help to provide PCI compliance reports? (Choose two.)

  1. WLC

  2. WCS

  3. MSE

  4. Ekahau Site Survey

  5. AirMagnet WiFi Analyzer

Answer: B,E

Question No: 14

Which statement about the Cisco NAC Guest Server that is deployed in wireless guest access implementations is true?

  1. The Cisco NAC Guest Server integrates with the Cisco WCS through the RADIUS protocol.

  2. The Cisco NAC Guest Server can be used in place of Cisco WCS Lobby Ambassador functionality for guest provisioning and reporting. The Cisco WCS is still needed for WLAN management.

  3. The Cisco WLC acts as the guest accounts provisioning portal, and the Cisco NAC Guest Server acts as the captive portal capturing web requests from preassigned quot;guest portsquot; and requesting authentication.

  4. Guest accounts on the Cisco NAC Guest Server can be created using the Cisco WCS Lobby Ambassador feature.

Answer: B

Question No: 15

For wireless NAC out-of-band operations, which protocol is used between the Cisco NAC Appliance Manager and the wireless controller to switch the wireless client from the quarantine VLAN to the access VLAN after the client has passed the NAC authentication and posture assessment process?

  1. RADIUS

  2. TACACS

  3. SNMP

  4. SSL

  5. EAP

Answer: C

Question No: 16

A client wants to put wireless users on different VLANs while using one SSID. Which two methods accomplish this goal? (Choose two.)

  1. Use ACS as the RADIUS server.

  2. Configure aaa override on Cisco WLC WLAN.

  3. Configure similar SSIDs with different VLANs.

  4. Configure the same WLAN on ID 1 and 17.

  5. Configure the Cisco WLC internal RADIUS server.

Answer: A,B

Question No: 17

Authentication is failing between a client and the RADIUS server. Which WLC troubleshooting command set might be useful to assist in troubleshooting the issue?

  1. show local-auth

  2. debug ldap

  3. debug aaa local-auth

  4. debug dot1X event

Answer: D

Question No: 18

What does the eping mobility_peer_IP_address command do?

  1. It tests EoIP connectivity via port 97 though the management interface.

  2. It tests EoIP connectivity via port 97 though the AP manager interface.

  3. It tests UDP connectivity via port 16666 through the management interface.

  4. It tests UDP connectivity via port 16666 through the AP manager interface.

Answer: A

Question No: 19

When implementing certificates through the use of a CA, how is the certificate of client A validated by client B when received?

  1. verifying the client A certificate using the client A private key

  2. verifying the client A certificate using the client A public key

  3. verifying the client A certificate using the client B private key

  4. verifying the client A certificate using the client B public key

  5. verifying the client A certificate using the CA private key

  6. verifying the client A certificate using the CA public key

Answer: F

Question No: 20

Many users report being disconnected from the WLAN and WCS shows events for broadcast deauthentication frames. What security feature mitigates the issue?

  1. WPA2

  2. MFP

  3. IDS

  4. ACL

  5. IPS

Answer: B

100% Free Download!
Download Free Demo:642-737 Demo PDF
100% Pass Guaranteed!
Download 2017 EnsurePass 642-737 Full Exam PDF and VCE

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 EnsurePass IT Certification PDF and VCE

You must be logged in to post a comment.

Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com