Home > Cisco > Others > 642-736

642-736 Exam

Implementing Advanced Cisco Unified Wireless Security (IAUWS)

Exam Number/Code : 642-736
Exam Name : Implementing Advanced Cisco Unified Wireless Security (IAUWS)
Questions and Answers : 87 Q&As
Update Time: 2013-04-05
Price: ~~$ 119.00~~ $ 89.00
642-736 Hard Copy (PDF)
642-736 Test Engine

642-736

Free 642-736 Demo Download

Test4pass offers free demo for Others 642-736 exam (Implementing Advanced Cisco Unified Wireless Security (IAUWS)). You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products.

Exam Description

It is well known that 642-736 exam test is the hot exam of Cisco certification. Test4pass offer you all the Q&A of the 642-736 real test . It is the examination of the perfect combination and it will help you pass 642-736 exam at the first time!

Why choose Test4pass 642-736 braindumps

Quality and Value for the 642-736 Exam
100% Guarantee to Pass Your 642-736 Exam
Downloadable, Interactive 642-736 Testing engines
Verified Answers Researched by Industry Experts
Drag and Drop questions as experienced in the Actual Exams
Practice Test Questions accompanied by exhibits
Our Practice Test Questions are backed by our 100% MONEY BACK GUARANTEE.

Test4pass 642-736 Exam Features

Quality and Value for the 642-736 Exam

Test4pass Practice Exams for Cisco 642-736 are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development.

100% Guarantee to Pass Your 642-736 Exam

If you prepare for the exam using our Test4pass testing engine, we guarantee your success in the first attempt. If you do not pass the Others 642-736 exam (ProCurve Secure WAN) on your first attempt we will give you a FULL REFUND of your purchasing fee AND send you another same value product for free.

Cisco 642-736 Downloadable, Printable Exams (in PDF format)

Our Exam 642-736 Preparation Material provides you everything you will need to take your 642-736 Exam. The 642-736 Exam details are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

642-736 Downloadable, Interactive Testing engines

We are all well aware that a major problem in the IT industry is that there is a lack of quality study materials. Our Exam Preparation Material provides you everything you will need to take a certification examination. Like actual certification exams, our Practice Tests are in multiple-choice (MCQs) Our Cisco 642-736 Exam will provide you with free 642-736 dumps questions with verified answers that reflect the actual exam. These questions and answers provide you with the experience of taking the actual test. High quality and Value for the 642-736 Exam:100% Guarantee to Pass Your Others exam and get your Others Certification.

Hot KeyWords On 642-736 test

How to pass your 642-736 exam

You can search on Search Engine and Find Best IT Certification site: Test4pass.com - Find the Method to succeed 642-736 test,The safer.easier way to get Others Certification .

��
��
Exam : Cisco 642-736
Title : Implementing Advanced Cisco Unified Wireless Security (IAUWS)

1. Which two statements about the EAP-FAST client-server authentication protocol are true? (Choose two.)
A. EAP-FAST establishes secure tunnel between the client and the server using certificates.
B. PAC can be distributed manually (out-of-band provisioning) or automatically (in-band provisioning).
C. EAP-FAST protocol uses PAC keys to establish secure encrypted tunnels between client and server.
D. Secure passwords are used to generate PAC key for creating secure TTLS tunnel between the client and the server.
Answer: BC

2. When troubleshooting clients on the Diagnostic channel, which two statements are true? (Choose two.)
A. When turning the Diagnostic channel on the WLAN, the WLAN becomes disabled.
B. Only clients with Cisco Compatible Extensions enabled can be used for troubleshooting on the Diagnostic channel.
C. Up to two WLAN can be turned on with Diagnostic channel at the same time.
D. Only Cisco-manufactured wireless cards are available for the Diagnostic channel troubleshooting.
Answer: AB

3. For wireless NAC out-of-band operations, which protocol is used between the Cisco NAC Appliance Manager and the wireless controller to switch the wireless client from the quarantine VLAN to the
access VLAN after the client passed the NAC authentication/posture assessment process?
A. RADIUS
B. TACACS+
C. SNMP
D. SSL
E. EAP
Answer: C

4. The wireless client can roam faster on the Cisco Unified Wireless Network infrastructure when which condition is met?
A. EAP-FAST is used for client authentication on the wireless network.
B. Cisco Centralized Key Management is used for Fast Secure Roaming.
C. QoS is being used on the WLAN to control which client packets get through the network faster.
D. RRM protocol is used between multiple APs that the client associates to while roaming.
Answer: B

5. When adding the foreign controller as a mobility group member in the guest anchor controller, which statement is true?
A. The mobility group name on the guest anchor controller must match the mobility group name on the foreign controller.
B. The mobility group member IP address and MAC address belong to the management interface of the foreign controller.
C. To successfully add the foreign controller as a mobility group member in the guest anchor controller, all the parameters defined in the WLAN Security, QoS, and Advanced tabs must be
configured identically in both the anchor and foreign controller.
D. In the guest anchor controller GUI, WLANs > Mobility Anchors page, use the Switch IP Address (Anchor) drop-down menu to select the IP address corresponding to the management
interface of the anchor controller.
Answer: B

6. What are the configuration steps, in order, for implementing wireless guest users using the foreign and anchor controllers approach?
A. 1) RF mobility group
2) lobby ambassador
3) SSID
B. 1) mobility domain name
2) mobility group
3) web portal
C. 1) anchor controller
2) WLAN
3) local guest server
4) lobby administrator
D. 1) anchor controller
2) mobility group
3) guest WLAN
4) guest account management
Answer: D

7. When deploying guest WLAN access using the anchor controller, which is used to transport the guest data traffic between the foreign and anchor controllers?
A. UDP port 16666
B. UDP port 16667
C. IP protocol 97
D. UDP port 161
E. UDP port 162
Answer: C

8. What is the purpose of looking for anomalous behavior on a WLAN infrastructure?
A. identifying new attack tools
B. auditing employee's bandwidth usage
C. identifying attacks using signature matching
D. improving performance by load balancing
Answer: A

9. Which option best describes an evil twin attack?
A. a rouge access point broadcasting a trusted SSID
B. a rogue access point broadcasting any SSID
C. a rouge ad-hoc with the SSID "Free WiFi"
D. a rouge access point spreading malware upon client connection
Answer: A

10. As of controller release v5.2, which two statements about wired guest access support are true? (Choose two.)
A. It is not supported on the Cisco 2100 Series Controllers.
B. No more than three wired guest access LANs can be configured on a controller.
C. Layer 3 web authentication and passthrough are not supported.
D. Wired guest access cannot be configured in a dual-controller configuration that uses an anchor controller and a foreign controller.
E. The wired guest access ports must be in the same Layer 2 network as the foreign controller.
Answer: AE

11. Which two 802.11 frame types can be used in a virtual carrier (big NAV) attack? (Choose two.)
A. association
B. ACK
C. CTS
D. beacon
E. de-authentication
Answer: BC

12. Which two configuration parameters does NAC OOB require on a SSID/WLAN? (Choose two.)
A. WMM enabled on the WLAN
B. open authentication on the WLAN
C. AAA override configuration on the WLAN
D. 802.1x configuration on the WLAN
Answer: BD

13. Which ports are used by CAPWAP?
A. UDP 12222 and 12223
B. UDP 5246 and 5247
C. UDP 16666 and 16667
D. UDP 161 and 162
E. TCP 12222 and 12223
F. TCP 16666 and 16667
Answer: B

14. Which WLAN option, when enabled, allows different wireless clients to be connected to different VLANs based on the returned RADIUS attributes from the AAA server?
A. H-REAP
B. override interface ACL
C. NAC state
D. Cisco CKM
E. auth-proxy
F. allow AAA override
Answer: F