Implementing Advanced Cisco Unified Wireless Security (IAUWS) v2.0 (642-737) Free Practice Test

Question 1

How many tunnels can a Cisco WLC v7.0 anchor?

A. 254

B. 72

C. 71

D. 253

E. 63

F. 64

Correct Answer: C

Question 2

Which device performs the definition of rules and requirements for posture assessment of a wireless client when implementing a NAC appliance solution?

A. Cisco NAC Appliance Agent

B. Cisco NAC Guest Server

C. Cisco NAC Appliance Server

D. Cisco IPS Appliance

E. Cisco 802.1X supplicant

F. Cisco NAC Appliance Manager

G. Cisco Secure Access Control System

Correct Answer: F

Question 3

An engineer is troubleshooting user authentications on the Cisco CAM and is viewing the wireless clients under the discovered clients tab. What client information can be gathered
from this screen?

A. NAC state

B. association status

C. EAP type

D. authentication status

Correct Answer: B

Question 4

Configuring the Cisco Secure ACS with a self-signed certificate supports which requirement?

A. when a self-signed certificate Class 4 is required for the user

B. when a CA-signed certificate is required for the user

C. when no user certificate is required

D. when a self-signed certificate Class 0 is required for the user

Correct Answer: C

Question 5

DRAG DROP

Correct Answer:

Question 6

Which two statements best describe the local authentication configuration options for a Cisco WLC v7.0 and local mode AP? (Choose two.)

A. EAP-FAST with PAC provision only

B. LEAP, EAP-FAST, EAP-PEAP, and EAP-TLS only

C. EAP-FAST with PAC or certificate provision

D. LEAP, EAP-FAST, EAP-PEAP, EAP-TLS, and EAP-MD5

E. LEAP and EAP-FAST only

Correct Answer: B,C

Question 7

When implementing certificates through the use of a CA, how is the certificate of client A validated by client B when received?

A. verifying the client A certificate using the client B private key

B. verifying the client A certificate using the CA public key

C. verifying the client A certificate using the client A private key

D. verifying the client A certificate using the client B public key

E. verifying the client A certificate using the CA private key

F. verifying the client A certificate using the client A public key

Correct Answer: B

Question 8

A client is failing EAP authentication and a debug shows that the server is sending an Access-Reject message. Which action must you take to resolve authentication?

A. Verify that the Validate server certificate on the client is disabled.

B. Verify that the user is using the same password that is on the server.

C. Verify that the client server certificate has the proper Windows OIDs.

D. Verify that the client certificates are from the proper CA and server certificate.

E. Verify that the user account is the same in the client certificate.

Correct Answer: B

Question 9

Which EAP types are supported by MAC 10.7 for authentication to a Cisco Unified Wireless Network?

A. LEAP, EAP-FAST, EAP-TLS, and PEAP

B. EAP-TLS and PEAP only

C. LEAP and EAP-Fast only

D. LEAP, EAP-TLS, and PEAP only

Correct Answer: A

Question 10

Which option verifies that a wireless client has associated but is not yet authenticated to a WLAN when performing NAC using the Cisco NAC Appliance Manager and Server?

A. Cisco CAM OOB Management > Devices > Discovered Clients

B. Cisco CAS OOB Management > Devices > Discovered Clients

C. Cisco CAM Monitor > View Online Users

D. Cisco CAS Monitor > View Online Users

Correct Answer: A

Question 11

Wireless NAC single sign-on uses which type of RADIUS records to notify the Cisco NAC Appliance Manager about the authenticated wireless clients?

A. accounting records

B. authentication and accounting records

C. preauthentication records

D. authentication records

Correct Answer: A

Question 12

An engineer has configured a Cisco NAC for wireless OOB virtual gateway mode. Which three steps are part of the authentication flow process? (Choose three.)

A. The Cisco CAS bridges the client from its untrusted interface to its trusted interface.

B. The mapping rule on the Cisco NAC forward the packets on the access VLAN

C. The Cisco CAS assigns an IP address from the access VLAN.

D. The Cisco WLC switches the client IP address from quarantine VLAN to the access VLAN.

E. The Cisco CAS forwards packets arriving on quarantine VLAN and forwards them out the access VLAN by swapping VLAN tag information.

F. The Cisco NAC Appliance performs posture assessment and remediation.

Correct Answer: C,D,F

Question 13

On a newly configured wireless network, client data is not reaching the foreign controller when a client needs to roam. What port(s) should be verified as open?

A. UDP ports 161 and 162

B. UDP port 166666

C. TCP ports 443 and 80

D. IP Protocol 97

Correct Answer: D

Welcome to TestSimulate

Cisco Implementing Advanced Cisco Unified Wireless Security (IAUWS) v2.0 (642-737) Free Practice Test