Q1. When an AP, in its default configuration mode, connects to a Cisco WLC, which methods are available for remote management access to an AP?
A. SSL and SSH are available only after configuration by a Cisco WLC version 7.0.
B. SSH only
C. HTTPS, and SSH
D. SSH and Telnet
E. SSH and Telnet are available only after configuration by a Cisco WLC version 7.0.
Answer: D
Q2. How many types of control frames are only used in PCF mode?
A. 0
B. 1
C. 2
D. 3
E. 4
F. 5
Answer: D
Q3. A customer is using the access point GUI to upgrade the software on an autonomous access point to convert it to a lightweight access point. Which two transfer protocols are valid for conducting this transfer from the WLC? (Choose two.)
A. FTP
B. RCP
C. SFTP
D. HTTP
E. SCP
F. TFTP
Answer: D,F
Q4. Which method is used to shield the client from class 3 management attacks?
A. client MFP
B. WEP
C. WPA
D. client protection suite
E. 802.1X
Answer: A
Q5. Which statement describes a security weakness of a WPA2 with a PSK?
A. The compromised key can be used for another connection.
B. The key can be eavesdropped from the wireless medium.
C. The key can be recreated from a few eavesdropped frames.
D. The key is not case-sensitive and is vulnerable to compromise by brute-force methods.
Answer: A
Q6. When deploying a Cisco Cloud Wireless Infrastructure, what two destination ports must be open? (Choose two.)
A. TCP/5246
B. UDP/5246
C. TCP/5247
D. UDP/5247
E. TCP/7351
F. UDP/7351
G. TCP/7734
H. UDP/7734
Answer: F,G
Q7. When Cisco AnyConnect modules are installed on a PC, which module must be installed first?
A. telemetry
B. web security
C. VPN
D. NAM
E. DART
F. posture
G. CSSC
Answer: C
Q8. You are configuring an IP address on an autonomous access point. Which interface do you use to configure the IP address?
A. BVI1
B. FastEthernet 0
C. Dot11Radio0
D. VLAN 1
Answer: A
Q9. Which option best describes the limitation of a client that is attempting to manage a WLC while using the client wireless adapter connection to the wireless infrastructure?
A. Controllers must be managed using only secure protocols (that is, SSH and HTTPS), not nonsecure protocols (that is, HTTP and Telnet).
B. Read-write access is not available; only read-only access is supported.
C. Uploads and downloads from the controller are not allowed.
D. Wireless clients can manage other controllers, but not the same controller and the AP to which the client is associated.
Answer: C
Q10. Refer to the exhibit.
Which action allows you to view a summary count by alarm types for the displayed total of 11 alarms?
A. Choose Monitor > Alarms
B. Click the Security tab
C. Click a respective number in the Alarm Summary
D. Click the Alarm Summary blue arrow
E. Choose Home (house icon) > Alarm Summary
Answer: D
Q11. What is the function of the Cisco AnyConnect DART tool?
A. creates a compressed bundle of client logs and information
B. visualizes a WLAN environment, showing the possible locations of problems
C. gathers statistics from neighboring clients for comparison to the baseline
D. helps to troubleshoot a WLAN connection by using easy-to-use wizards and statistic viewers
Answer: A
Q12. Which EAP protocol requires a certificate only on the server side?
A. EAP-PEAP
B. EAP-FAST
C. EAP-TLS
D. EAP-SSL
Answer: A
Q13. An engineer is gathering information for a wireless survey of a hospital. What three pieces of information must be collected for an active survey to assess the outcome best suited for the facility? (Choose three.)
A. presence of microwave ovens
B. number of patients that are at the facility
C. utilization of Location Services or voice applications
D. floor plans of adjacent facilities
E. use of wireless for secure records
F. spectrum analysis to locate all the computer work stations
G. existing Network Switch types and model numbers
H. type of devices present on the new wireless network
Answer: A,C,H
Q14. You have an Apple IOS iPhone4 that is used on your home Wi-Fi network and a personal laptop that is used on your work's enterprise wireless network. At your office, you are unable to see the enterprise wireless network on your iPhone4.
What is the most likely cause of this issue?
A. WPA2 CPU intensive encryption is not supported on the client.
B. WPA2 must be enabled on the client.
C. A new profile must be created on the client.
D. Wi-Fi must be enabled on the client.
E. The enterprise is 2.4 GHz only.
F. The enterprise is 5 GHz only.
G. The RF channel must be adjusted on the client.
Answer: F
Q15. What AnyConnect module can be used to provide a detailed scan list of the Wi-Fi environment?
A. DART
B. Telemetry
C. Web Security
D. NAM
E. Posture
Answer: A