642-737 Latest Exam (Aug 2018)

[Free] 2018(Aug) Dumps4cert Cisco 642-737 Dumps with VCE and PDF Download 91-100

August 10, 2018

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 Aug Cisco Official New Released 642-737
100% Free Download! 100% Pass Guaranteed!

Implementing Advanced Cisco Unified Wireless Security v2.0

Question No: 91

Users are being disconnected from the WLAN and an engineer has found multiple alerts of broadcast deauthentication frames on the Cisco WLC. Together, which two solutions resolve this issue? (Choose two.)

  1. Change the APs to standalone mode.

  2. Change authentication to WPA or WPA2.

  3. Disable broadcasts on the WLAN.

  4. Enable MFP on the WLAN.

  5. Locate the attacker with rogue detection.

Answer: B,D

Question No: 92

IPS appliance traffic monitoring has been configured in a Cisco WLC v7.0 with default parameters. Which statement correctly describes the results when malicious traffic is detected from a wireless client?

  1. The WLC immediately notifies the IPS appliance.

  2. The IPS appliance immediately notifies the WLC.

  3. The WLC polls the IPS for the status every 60 seconds.

  4. The IPS initiates updates to the WLC every 60 seconds.

Answer: C

Question No: 93

An engineer is configuring NAC on a Wireless LAN Controller. What two CLI commands are required to create NAC out-of-band integration for SSID Cisco? (Choose two.)

  1. config interface quarantine vlan Cisco 10

  2. config interface quarantine vlan Cisco 0

  3. config wlan nac enable Cisco

  4. config guest-lan nac enable Cisco

  5. config wlan apgroup nac wlan Cisco

  6. config wlan apgroup nac guest-lan Cisco

Answer: A,C

Question No: 94

Which wireless attack can cause most client wireless adapters to lock up?

  1. management frame flood

  2. NULL probe response

  3. EAPOL flood

  4. RF jamming

  5. disassociation flood

  6. deauthentication flood

Answer: B

Question No: 95

The controller is reporting an IDS signature #39;deauth flood#39; attack and it has been determined that the default settings are too sensitive for the environment. What signature

details should be adjusted to only trigger the alert on a certain amount of client packets within a certain period of time?

  1. Measurement Interval and Quiet Time

  2. Signature Frequency and Signature MAC Frequency

  3. Measurement Interval and Signature MAC Frequency

  4. Quiet Time and Signature Frequency

Answer: C

Question No: 96

Which two statements best describe the local authentication configuration options for a Cisco WLC v7.0 and local mode AP? (Choose two.)

  1. LEAP and EAP-FAST only



  4. EAP-FAST with PAC provision only

  5. EAP-FAST with PAC or certificate provision

Answer: B,E

Question No: 97

What are the two must commonly used RADIUS (Cisco Airespace) attributes that are configured in the Cisco Secure ACS v4.2 for IBN implementation with the Cisco WLC v7.0? (Choose two.)

  1. QoS level

  2. DSCP

  3. 802.1P tag

  4. security type

  5. ACL name

  6. EAP type

  7. NAC state

Answer: A,E

Question No: 98

Which two options are supported when deploying wireless NAC out-of-band implementations? (Choose two.)

  1. Cisco NAS in virtual gateway mode

  2. WLANs with allow AAA override enabled

  3. Cisco NAC Guest Server integration with the Cisco NAM

  4. dynamic VLAN mappings on the Cisco NAS, which is based on the returned RADIUS attributes from the Cisco Secure ACS

  5. autonomous APs

Answer: A,C

Question No: 99

How do you configure the Cisco Secure ACS v4.2 and Cisco WLC v7.0 to provide the most flexibility for the management of authorized access on the WLC?

  1. Local management user defined on the WLC

  2. The WLC configured for RADIUS and the Cisco Secure ACS configured for RADIUS (Cisco Airespace)

  3. The WLC configured for RADIUS and the Cisco Secure ACS configured for RADIUS (IETF)

  4. The WLC configured for TACACS and the Cisco Secure ACS configured for TACACS (Cisco Airespace)

  5. The WLC configured for TACACS and the Cisco Secure ACS configured for TACACS (Cisco IOS)

Answer: E

Question No: 100

The Cisco NAC Guest Server is configured as which kind of device on the wireless controller?

  1. external web authentication server

  2. RADIUS server

  3. SNMP trap receiver

  4. anchor controller

  5. AAA client

Answer: B

100% Dumps4cert Free Download!
642-737 PDF
100% Dumps4cert Pass Guaranteed!
642-737 Dumps

Dumps4cert ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No