Get all latest (August) Cisco 640-722 Actual Test 131-140

Ensurepass

 

QUESTION 131

What is a risk when initiating the containment of a rogue AP?

 

A.

disassociating clients of valid access points that are operated by a neighboring organization

B.

disrupting transmission of neighboring AP clients

C.

breaking the radio of the containing AP

D.

breaking the rogue client radio or its firmware

 

Correct Answer: A

 

 

QUESTION 132

Which statement describes a security weakness of a WPA2 with a PSK?

 

A.

The compromised key can be used for another connection.

B.

The key can be eavesdropped from the wireless medium.

C.

The key can be recreated from a few eavesdropped frames.

D.

The key is not case-sensitive and is vulnerable to compromise by brute-force methods.

 

Correct Answer: A

 

 

QUESTION 133

DRAG DROP

clip_image002

 

Correct Answer:

clip_image004

 

 

QUESTION 134

Which two of the following authentication methods used for WiFi security require the use of certificates? (Choose two.)

 

A.

PEAP

B.

EAP-FAST

C.

WPA2

D.

WPA1

E.

EAP-TLS

F.

EAP-MD5

 

Correct Answer: AE

 

 

QUESTION 135

How many RADIUS servers can be configured globally and per WLAN on a Cisco WLC version 7.0?

 

A.

7 global; additional 1 per WLAN

B.

7 global; additional 3 per WLAN

C.

17 global; additional 1 per WLAN

D.

17 global; additional 3 per WLAN

E.

7 global; reuse of up to 1 maximum per WLAN

F.

17 global; reuse of up to 1 maximum per WLAN

G.

17 global; reuse of up to 3 maximum per WLAN

 

Correct Answer: G

 

 

QUESTION 136

What are the interface statuses of a lightweight AP working in rogue-detection mode?

 

A.

radios turned off, Ethernet interface up

B.

radios and Ethernet interfaces up

C.

radios turned on, Ethernet interface shut down

D.

radios turned on, Ethernet interface status controlled by Cisco WLC

 

Correct Answer: A

 

 

QUESTION 137

Refer to the exhibit. Which tab is used to set up web authentication for guest users?

 

clip_image006

 

A.

Security > Layer 3

B.

Security > Layer 2

C.

Security > AAA Servers

D.

Advanced

E.

General

 

Correct Answer: A

 

 

QUESTION 138

Refer to the ex
hibit. Which option must be chosen if only the WPA is needed?

 

clip_image008

 

A.

WPA+WPA2

B.

Static-WEP + 802.1X

C.

802.1X

D.

CKIP

 

Correct Answer: A

 

 

 

 

 

 

QUESTION 139

Which statement about configuration of Layer 2 wireless user authentication on a Cisco WLC is true?

 

A.

Local EAP is used only if an external RADIUS is not configured or is unreachable.

B.

The external RADIUS is used only if local EAP is not configured.

C.

The administrator chooses whether local EAP or an external RADIUS is used first.

D.

The external RADIUS is used only if local EAP is explicitly disabled.

 

Correct Answer: A

 

 

QUESTION 140

You are configuring SNMPv1/v2c on a WLC. What should you do for improved security?

 

A.

Remove the default SNMPv1 community.

B.

Remove the default SNMPv1 and SNMPv2 communities.

C.

Remove the default SNMPv2 community.

D.

Remove the default SNMPv3 users.

 

Correct Answer: B

 

Free VCE & PDF File for Cisco 640-722 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …