The best useful Cisco CCNP Wireless 642-737 dumps exam questions and answers free download from lead4pass. Newest helpful Cisco CCNP Wireless 642-737 dumps pdf materials and vce youtube demo update free shared. “Implementing Advanced Cisco Unified Wireless Security (IAUWS) v2.0” is the name of Cisco CCNP Wireless https://www.leads4pass.com/642-737.html exam dumps which covers all the knowledge points of the real Cisco exam. High quality Cisco CCNP Wireless 642-737 dumps pdf training resources and study guides download free try, pass Cisco 642-737 exam test easily at the first time.
Vendor: Cisco
Certifications: CCNP Wireless
Exam Name: Implementing Advanced Cisco Unified Wireless Security (IAUWS) v2.0
Exam Code: 642-737
Total Questions: 207 Q&As
Latest Cisco 642-737 dumps pdf materials free download: https://drive.google.com/open?id=1HLwuo1hYBEalnSOYwaz-9t1m5R7mRpOq
Latest Cisco 642-732 dumps pdf materials free download: https://drive.google.com/open?id=10-vnCsAIXhyBS9k4-I-RFFH_wqmrBRXf
Cisco CCNP Wireless 642-737 Dumps Exam Real Questions And Answers (Q1-Q30)
QUESTION 1
A lobby ambassador is creating guest access accounts. At which two locations can the accounts be stored? (Choose two.)
A. NAC guest server
B. Active directory
C. WLAN controller
D. WCS
E. ACS
Correct Answer: CD
QUESTION 2
An engineer is configuring a Cisco AnyConnect client. What module is selected to allow for reporting and diagnostics?
A. NAM
B. Posture
C. Telemetry
D. VPN
E. DART
Correct Answer: E
QUESTION 3
MFP is enabled globally on a WLAN with default settings on a single controller wireless network. Older client devices are disconnected from the network during a deauthentication attack. What is the cause of this issue?
A. The client devices do not support CCXv5.
B. The client devices do not support WPA.
C. The NTP server is not configured on the controller.
D. The MFP on the WLAN is set to optional.
Correct Answer: A
QUESTION 4
What does the eping mobility_peer_IP_address command do?
A. It tests EoIP connectivity via port 97 though the management interface.
B. It tests EoIP connectivity via port 97 though the AP manager interface.
C. It tests UDP connectivity via port 16666 through the management interface.
D. It tests UDP connectivity via port 16666 through the AP manager interface.
Correct Answer: A
QUESTION 5
When a supplicant and AAA server are configured to use PEAP, which mechanism is used by the client to authenticate the AAA server in Phase One?
A. PMK
B. shared secret keys
C. digital certificate
D. PAC
Correct Answer: C
QUESTION 6
An engineer needs to block SSH traffic going to the WLC, which does not originate on the management interface. Where should the ACL be applied to accomplish this with the least configuration?
A. CPU
B. Management interface
C. WLAN interfaces
D. SSID
Correct Answer: A
QUESTION 7
An engineer is troubleshooting a FlexConnect authentication to a local RADIUS server. 642-737 dumps What debug command can discover the issue on the controller?
A. debug lwapp reap
B. debug dot11 mgmtmsg
C. debug hreapaaa
D. debug lwapp reap mgmt
Correct Answer: C
QUESTION 8
An engineer is configuring NAC on a Wireless LAN Controller. What two CLI commands are required to create NAC out-of-band integration for SSID Cisco? (Choose two.)
A. config interface quarantine vlan Cisco 10
B. config interface quarantine vlan Cisco 0
C. config wlan nac enable Cisco
D. config guest-lan nac enable Cisco
E. config wlan apgroup nac wlan Cisco
F. config wlan apgroup nac guest-lan Cisco
Correct Answer: AC
QUESTION 9
The Cisco WLC v7.0 is configured for external 802.1X and EAP by using the WPA2 association of wireless clients when using the Cisco Secure ACS v4.2. Which two items are required in the Cisco Secure ACS network configuration to enable correct AAA? (Choose two.)
A. AP IP address
B. WLC virtual IP address
C. WLC management IP address
D. WLC AP management IP address
E. hostname matching the WLC case-sensitive name
F. authentication using RADIUS
G. authentication using TACACS+
Correct Answer: CF
QUESTION 10
An engineer has narrowed down an authentication issue to the client laptop. What three items should be verified for EAP-TLS authentication? (Choose three.)
A. The user account is the same in the certificate.
B. The Subject Key Identifier is configured correctly.
C. The client certificate is formatted as X.509 version 3.
D. Validate server certificate is disabled.
E. The supplicant is configured correctly.
F. The client certificate has a valid expiration date.
Correct Answer: ACE
QUESTION 11
An engineer is going to enable EAP on a new WLAN and is ensuring he has the necessary components. What component uses EAP and 802.1x to pass user authentication to the authenticator?
A. AP
B. Controller
C. Supplicant
D. AAA Server
Correct Answer: C
QUESTION 12
Refer to the exhibit.
Why is the client failing to authenticate with the AAA server?
A. excessive number of authentication attempts for username
B. incorrect read/write credentials for username
C. incorrect IP address being sent by client
D. incorrect authentication for username
Correct Answer: D
QUESTION 13
A Cisco WLC v7.0 has been only initially configured through the console setup CLI wizard. A new AP has just finished association with the controller. What is the default mode of remote access to the AP?
A. HTTPS
B. HTTP
C. SSH
D. Telnet
E. access is disabled
Correct Answer: E
QUESTION 14
Which two firewall protocol port(s) need open access for secure management access to an anchor WLC for guest access? (Choose two.)
A. TCP 22
B. TCP 23
C. TCP 80
D. TCP 8080
E. TCP 443
F. UDP 123
Correct Answer: AE
QUESTION 15
Which option verifies that a wireless client has authenticated to a WLAN when performing NAC using the Cisco NAC Appliance Manager and Server?
A. Cisco CAM OOB Management > Devices > Discovered Clients
B. Cisco CAS OOB Management > Devices > Discovered Clients
C. Cisco CAM Monitor > View Online Users
D. Cisco CAS Monitor > View Online Users
Correct Answer: C
QUESTION 16
Which two fast roaming algorithms will allow a WLAN client to roam to a new AP and re- establish a new session key without a full reauthentication of the WLAN client? (Choose two.)
A. PMK
B. PTK
C. MIC
D. GTK
E. CKM
F. PKC
Correct Answer: EF
QUESTION 17
Customer wants to configure Wireless client authentication using digtial certificates with PKI. What happens after the signer encrypts the hash with the private key of the signer during the certification signature process?
A. The verifier obtains the public key of the signer.
B. The encrypted hash is appended to the document as the signature.
C. The verifier decrypts the signature of the signer using the public key.
D. The verifier makes a hash of the received document and compares it to the decrypted signature hash.
Correct Answer: B
QUESTION 18
What is the default authentication protocol that is used for web authentication?
A. MD5-CHAP
B. CHAP
C. PAP
D. LEAP
Correct Answer: C
QUESTION 19
Which option verifies that a wireless client has associated but is not yet authenticated to a WLAN when performing NAC using the Cisco NAC Appliance Manager and Server?
A. Cisco CAM OOB Management > Devices > Discovered Clients
B. Cisco CAS OOB Management > Devices > Discovered Clients
C. Cisco CAM Monitor > View Online Users
D. Cisco CAS Monitor > View Online Users
Correct Answer: A
QUESTION 20
Configuring the Cisco Secure ACS with a self-signed certificate supports which requirement?
A. when no user certificate is required
B. when a CA-signed certificate is required for the user
C. when a self-signed certificate Class 4 is required for the user
D. when a self-signed certificate Class 0 is required for the user
Correct Answer: A
QUESTION 21
Which type of attack is characterized by an evil twin?
A. DoS
B. man in the middle
C. jamming
D. eavesdropping
Correct Answer: B
QUESTION 22
Employees adjust their wireless laptop for work at the office and when away from the office. What are the two most likely security issues for an employee laptop when connected at the corporate WLAN? 642-737 dumps (Choose two.)
A. loading a freeware customer contact application
B. configuring a static IP address
C. updating the driver
D. adding a coffee shop wireless HotSpot
Correct Answer: AC
QUESTION 23
Which protocol port(s) need open access when deploying NAC appliances to communicate with the Cisco WLC v7.0 to move an authenticated user from the quarantine VLAN to the access VLAN?
A. UDP 16666
B. UDP 514
C. UDP 5246 and 5247
D. UDP 161 and 162
E. TCP 443
Correct Answer: D
QUESTION 24
Which two considerations must a network engineer have when planning for voice over wireless roaming? (Choose two.)
A. Roaming with only 802.1x authentication requires full reauthentication.
B. Full reauthentication introduces gaps in a voice conversation.
C. Roaming occurs when e phone has seen at least four APs.
D. Roaming occurs when the phone has reached -80 dBs or below.
Correct Answer: AB
QUESTION 25
An engineer would like to use an EAP supplicant that uses PKI to authenticate the WLAN network and client, as well as a client certificate. What EAP method can be used?
A. PEAPv1
B. PEAPv0
C. EAP-FAST
D. EAP-TLS
Correct Answer: D
QUESTION 26
Refer to the exhibit.
A client reports being unable to log into the wireless network, which uses PEAPv2. Which two issues appear in the output? (Choose two.)
A. There is a problem with the client supplicant.
B. The AP has the incorrect RADIUS server address.
C. The AP has lost IP connectivity to the authentication server.
D. The EAP client timeout value should be increased.
E. The authentication server is misconfigured on the controller.
F. The authentication server is misconfigured in the WLAN.
Correct Answer: AD
QUESTION 27
Which option correctly lists the EAP protocol(s) that can be configured on an autonomous AP for local authentication?
A. MAC
B. LEAP and EAP-FAST
C. MAC, LEAP, and EAP-FAST
D. MAC, EAP-FAST, EAP-PEAP, and EAP-TLS
Correct Answer: C
QUESTION 28
Which three actions can be configured for EAP authentication on a Cisco 1200 Series AP? (Choose three.)
A. Specify the shared secret and ports.
B. Set the EAP Authentication type Priority 1 field to the server IP address under Default Server Priorities.
C. Set the EAP Authentication type Priority 5 field to the server IP address under Default Server Priorities.
D. Enter the IP address of the authentication server in the Server field.
E. Enter the IP address of the management IP address of the Cisco WLC.
F. Specify EAP account on server and ports.
Correct Answer: ABD
QUESTION 29
When using the Microsoft WLAN AutoConfig feature, which 802.1X authentication method is not supported natively by Windows 7?
A. EAP-TLS
B. EAP-FAST
C. PEAP with MS-CHAPv2
D. PEAP with GTC
Correct Answer: B
QUESTION 30
Which device provides IDS and IPS protection in a Cisco Unified Wireless Network against wireless clients with viruses and worms?
A. Cisco NAC Guest Server
B. Cisco Secure Access Control System
C. Cisco WLC
D. Cisco WCS
E. Cisco NAC Appliance Manager
F. Cisco NAC Appliance Server
G. Cisco IPS Appliance
Correct Answer: G
The Following Are Some Reviews From Our Customers:
Why Lead 4 pass?
Lead4pass is the best provider of IT learning materials and the right choice for you to pass Cisco CCNP Wireless 642-737 exam. Other brands started earlier, but the questions are not the newest and the price is relatively expensive. Lead4pass provide the latest real and cheapest questions and answers, help you pass Cisco 642-737 exam easily at first try.
Get the newest Cisco CCNP Wireless 642-737 dumps exam practice files in PDF format free download from lead4pass. The best and most updated latest Cisco CCNP Wireless https://www.leads4pass.com/642-737.html dumps pdf training resources which are the best for clearing 642-737 test, and to get certified by Cisco CCNP Wireless, download one of the many PDF readers that are available for free. 100% success and guarantee to pass Cisco 642-737 exam.
High quality Cisco CCNP Wireless 642-737 dumps vce youtube:
https://youtu.be/laiyQP4cZPA
