Exam : 642-587

Title : Cisco Advanced Wireless LAN for Field

Engineers
Ver : 05-27-2009
 642-587

QUESTION 1:

The Cisco Wireless Location Appliance can track up to how many devices?

A. 1000
B. 2000
C. 2500
D. 1500

Answer: D

QUESTION 2:

Which of the following functions on the wireless LAN controller is used to determine
whether or not a rogue access point is connected to the same Layer 2 network?

A. rogue detector
B. rogue containment
C. RLDP
D. RIDP

Answer: C

QUESTION 3:

On a Cisco Aironet 1130 Series autonomous access point, the status indicator is blinking
dark blue. What does this indicate?

A. The access point is booting.

B. A firmware upgrade is in progress.
C. The internal radio has failed.
D. An access point buffer overflow is occurring.

Answer: B

QUESTION 4:

How many WLANs can a REAP support when actively connected to a wireless
controller?

A. 8
B. 32
C. 4
D. 16

Actualtests.com - The Power of Knowing

 642-587

Answer: D

QUESTION 5:

On a Cisco Aironet 1230 Series autonomous access point, the Status LED is solid red,
and the Ethernet and Radio LEDs are both off. What does this indicate?

A. A firmware upgrade is in progress.

B. The internal radio has failed.
C. An access point buffer overflow is occurring.
D. The access point is booting.

Answer: A

QUESTION 6:

A wireless controller can reside in how many mobility groups?

A. two
B. three
C. four
D. one

Answer: D

QUESTION 7:

To implement the optional phase zero when using EAP-FAST for authentication, which
of the following parameters must be set on the Cisco Secure ACS?

A. EAP-FAST master server

B. Allow automatic PAC provisioning
C. client initial message
D. authority ID info

Answer: B

QUESTION 8:

When conducting an Assisted Site Survey, the WLSE does which of the following during
the Radio Scan process?

A. chooses the least congested channel

B. uses the configured channel
C. sets all access points to the same channel

Actualtests.com - The Power of Knowing

 642-587

D. steps through each of the allowed channels

Answer: C

QUESTION 9:

The wireless LAN controller maintains up to how many controller crash files?

A. 20
B. 5
C. 15
D. 10

Answer: B

QUESTION 10:

In a network using Cisco autonomous access points running WDS, what port is used for
authentication by the local authentication service on an access point?

A. 1813
B. 1645
C. 1646
D. 1812

Answer: D

QUESTION 11:

On the WLSE, Radio Management must be enabled to use most of the features of which
one of the following?

A. Devices
B. IDS
C. Configure
D. Reports

Answer: B

QUESTION 12:

Client association using EAP-Cisco Wireless (LEAP) is failing, but EAP-PEAP is

functioning on an autonomous access point. Which of the following needs to be enabled
on the access point so EAP-Cisco Wireless (LEAP) is enabled?

A. open authentication plus MAC

Actualtests.com - The Power of Knowing

 642-587

B. open authentication plus EAP

C. shared key
D. network EAP

Answer: D

QUESTION 13:

What is the maximum number of users that can be added to an autonomous access point
that is being used as a local authenticator?

A. 75
B. 100
C. 25
D. 50

Answer: D

QUESTION 14:

Using the WLSE, you are trying to push out a configuration job to an access point, but
the job does not start. Which of the following would cause this failure?

A. invalid parameter in the template

B. incorrect SNMP communities on the access point
C. unsupported version of IOS firmware in the access point
D. pop-up blocker enabled in the browser

Answer: D

QUESTION 15:

Which of the following are true about SSIDs configured in the ADU?

A. SSIDs are not case sensitive.

B. SSIDs must be listed in the same order in the ADU as they are in the access point.
C. A maximum of three SSIDs may be configured.
D. SSIDs may have a maximum of 16 characters.

Answer: C

QUESTION 16:

WLSE uses SNMP communication with an Ethernet switch for what purpose?

A. shut down rogue access points

Actualtests.com - The Power of Knowing

 642-587

B. configure access points

C. discover access points
D. inventory access points

Answer: A

QUESTION 17:

When installing a Cisco WCS, which two ports can be changed during installation?
(Choose two.)

A. HTTPS
B. TFTP
C. RMI
D. HTTP
E. FTP

Answer: A,D

QUESTION 18:

Client exclusion policies are used to mitigate which of the following attacks?

A. dictionary
B. bit-flip and replay
C. MAC spoofing
D. man-in-the-middle

Answer: A

QUESTION 19:

Which of the following show commands would be used on the WDS to display the access
points participating in fast secure roaming?

A. router# show wlccp ap

B. router# show wlccp wds ap
C. router# show wlccp cckm
D. router# show wlccp wds cckm

Answer: B

QUESTION 20:

On a Series 1010 lightweight access point, the alarm LED is flashing red, and all other
LEDs are off. What is the lightweight access point indicating?

Actualtests.com - The Power of Knowing

 642-587

A. It has lost contact with controller.

B. Its IP address already exists.
C. It requires a code upgrade.
D. It is operating normally.

Answer: B

QUESTION 21:

You are using ADU and are authenticated and associated to an access point. You are
unable to obtain an IP address. Which of the following will cause this problem?

A. AES encryption enabled

B. TKIP enabled
C. third-party wireless supplicant enabled
D. 802.1X authentication type enabled

Answer: C

QUESTION 22:

There are 30 managed access points on the WLSE. A radio scan is started but fails. Upon
inspection of the device list in the reports tab, you notice a red indicator on the WDS
access point. Upon inspection of the WDS access point through its GUI, it is discovered
that the security keys are not set up between the WDS access point and the WLSE.
Which of the following is misconfigured?

A. SNMP communities
B. Telnet/SSH user/password
C. WLCCP credentials
D. HTTP user/password

Answer: C

QUESTION 23:

When configuring VLANs on an autonomous access point, what must be configured on

the connected switchport?

A. 802.1q trunking
B. VTP trunking
C. ISL trunking
D. DPT trunking

Answer: A

Actualtests.com - The Power of Knowing

 642-587

QUESTION 24:

What are three of the User Groups that are available on the Cisco WCS? (Choose three.)

A. Administrators
B. System Monitoring
C. Network Operator
D. Power Users
E. Admin
F. Users' Assistant

Answer: B,E,F

QUESTION 25:

There is a Cisco 870 Integrated Services Router providing unsecured access at a hotspot.
Clients are unable to associate to the broadcast SSID. Based on the following running
configuration output, which command would you use to solve the problem?

A. router (config-ssid)# guest-mode

B. router (config-ssid)# authentication open
C. router (config-int)# guest-mode
D. router (config-int)# authentication open

Answer: B

Actualtests.com - The Power of Knowing

 642-587

QUESTION 26:

On the WLSE, which of the following fault policies would be used to verify that access
to the command-line interface of the access point is secure?

A. registration error
B. authentication failures threshold
C. HTTP disabled
D. Telnet disabled

Answer: D

QUESTION 27:

Which of the following commands configures the Cisco 3845 Integrated Services Router
to allow EAP-FAST authentication using WDS?

A. router (config)# wlccp authentication-server infrastructure eap Group_1

B. router (config)# wlccp authentication-server infrastructure eap-fast Group_1
C. router (config)# wlccp authentication-server client eap-fast Group_1
D. router (config)# wlccp authentication-server client eap Group_1

Answer: D

QUESTION 28:

What three search criteria does Cisco WCS use to search for wireless controllers?
(Choose three.)

A. controller name
B. outdoor area
C. floor area
D. networks
E. MAC address
F. IP address

Answer: A,D,F

QUESTION 29:

VLANs have been enabled on an autonomous access point. In order for clients
associating to VLANs other than the native VLAN to receive an IP address, which of the
following must be configured?

A. access point Ethernet port set to SSL trunking

Actualtests.com - The Power of Knowing

 642-587

B. switchport set to 802.1q trunking

C. switchport set to SSL trunking
D. access point Ethernet port not set to 802.1q trunking

Answer: B

QUESTION 30:

In the wireless Advanced Feature Set using lightweight access points, a virtual interface
is used when supporting which of the following features?

A. PSK authentication
B. EAP authentication
C. WPA authentication
D. Web authentication

Answer: D

QUESTION 31:

When configuring a wireless LAN controller for QoS, what 802.1p tag should be applied
for video applications? (Choose one.)

A. 3
B. 1
C. 4
D. 6

Answer: C

QUESTION 32:

You are trying to deploy a configuration job to an IOS access point using the WLSE, but
the job fails. Which of the following would cause this failure?

A. SNMP communities
B. Telnet/SSH user/password
C. WLCCP credentials
D. HTTP user/password

Answer: B

QUESTION 33:

When using the WLSE to verify RF coverage, which task will use the configured radio
settings?

Actualtests.com - The Power of Knowing

 642-587

A. Frame Monitoring
B. Radio Scan
C. Self-Healing
D. Client Walkabout

Answer: D

QUESTION 34:

Your client has deployed a Cisco Wireless Location Appliance within their warehouse
environment. They have been experiencing problems with tracking objects using active
RFID tags. The RFID beacon rate is 10 seconds. You have discovered an issue with the
RFID timeout value. How should this value be changed?

A. Change the value on the wireless controller to 45 seconds.

B. Change the value on the wireless controller to 95 seconds.
C. Change the value on the Cisco WCS to 95 seconds.
D. Change the value on the Cisco WCS to 45 seconds.

Answer: B

QUESTION 35:

When configuring a Cisco 3845 Integrated Services Router to support 802.11b and g
clients, which of the following commands would be correct?

A. router (config-if)# speed basic-1.0 2.0 5.5 basic-6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0
54.0
B. router (config-if)# speed 1.0 2.0 5.5 basic-6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
C. router (config-if)# speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
D. router (config-if)# speed 1.0 2.0 5.5 6.0 9.0 basic-11.0 12.0 basic-18.0 24.0 36.0 48.0
54.0

Answer: C

QUESTION 36:

When configuring QoS on a wireless controller, the per-user, real-time bandwidth

contract is enforced for which of the following protocols?

A. IP
B. TCP
C. UDP
D. IPX

Actualtests.com - The Power of Knowing

 642-587

Answer: C

QUESTION 37:

Which of the general policies on the WLAN edit page on the WLAN controller would be
used when configuring a radio for a single antenna for an outdoor application?

A. 802.11b/g
B. radio
C. access point
D. 802.11a

Answer: B

QUESTION 38:

Your client has deployed a Cisco Wireless Location Appliance within their warehouse
environment. They have been experiencing problems with tracking objects using active
RFID tags. The RFID tag data is not being collected. On which device would you verify
that RFID status has been enabled?

A. Cisco WCS
B. access point
C. wireless controller
D. location manager

Answer: C

QUESTION 39:

DRAG DROP
You work as a network engineer at Certkiller .com. Your boss, Mrs. Certkiller, is curious
about the procedure to adding a wireless controller to the WCS.
You are required to put the steps in the correct order.

Actualtests.com - The Power of Knowing

 642-587

Answer:
Explanation:

QUESTION 40:

In a deployment using the lightweight access points, clients set up to authenticate with
EAP-PEAP or EAP-Cisco Wireless (LEAP) cannot authenticate. Upon inspection of the
Failed Attempts report you see the following error: "Unknown network access server
NAS." What two problems can cause this type of failure? (Choose two.)

A. misconfigured IP address of the AAA server on the wireless controller

B. misconfigured IP address of the wireless LAN controller on the AAA server
C. misconfigured EAP type on the wireless LAN controller
D. misconfigured shared secret on the wireless LAN controller

Actualtests.com - The Power of Knowing

 642-587

E. misconfigured EAP type on the AAA server

Answer: B,D

QUESTION 41:

Which of the following power settings represents 50 percent power in a lightweight

access point?

A. 1
B. 4
C. 2
D. 5
E. 3

Answer: C

QUESTION 42:

An 802.1X client cannot authenticate to an autonomous access point configured for

multiple VLANs. The native VLAN does not have an SSID configured. Which one of the
following links being down would prevent the clients from authenticating?

A. between the RADIUS and the access point

B. between the client's VLAN and the WLSE
C. between the native VLAN and the WLSE
D. between the client's VLAN and the RADIUS

Answer: A

QUESTION 43:

Last December you erected a bridge link between two buildings on your campus. It is
now April and the foliage in the trees is full, and the bridge link will no longer maintain
connectivity. Which action will most likely solve the problem?

A. Change the channel selection.

B. Install higher gain antennas.
C. Raise the antennas.
D. Increase transmitter power.

Answer: C

QUESTION 44:

A blinking green LED indicates which of the following conditions on a Cisco 1030

Actualtests.com - The Power of Knowing

 642-587

Remote Edge AP?

A. startup
B. site survey mode
C. lost connection to the controller
D. duplicate IP address

Answer: C

QUESTION 45:

Two access points running the core feature set are connected to the same switch and are
providing guest services. If PSPF is enabled, what must be enabled on the switch to
prevent clients from seeing one another's data?

A. port-based RADIUS
B. 802.1q trunking
C. inline power
D. protected port

Answer: D

QUESTION 46:

A lightweight access point has been connected to a Catalyst 3550 24-PWR switch, and
on power-up the access point fails. What is the problem with the switch?

A. The power supply has inadequate wattage.

B. Power is incorrectly configured on the port.
C. It does not support 802.3af PoE.
D. Power is not enabled on the port.

Answer: C

QUESTION 47:

During the installation of the Cisco WCS, an error occurs. Where will the installation log
be found?

A. at the root of the installation drive

B. in the Cisco WCS installation directory
C. on the desktop of the server
D. in the Cisco WCS\Logs directory

Answer: C

Actualtests.com - The Power of Knowing

 642-587

QUESTION 48:

The IOS of a North American Cisco Aironet 1230 Series access point has become
corrupt, necessitating the need for a TFTP firmware reload. Before you press and hold
the MODE button, what must the file be named in order for the reload to occur?

A. c1200-k9w7-tar.default
B. c1200-k9w7-tar.boot
C. c1200-k9w7-tar.123-7.JA1.tar
D. c1200-k9w7-tar.recover

Answer: A

QUESTION 49:

When using which application may it be necessary to deploy access points in

monitor-only mode?

A. VoIP
B. RFID tags
C. Data Collection
D. 802.11b and g clients

Answer: A

QUESTION 50:

You are conducting a CDP-based discovery using an edge switch for the seed. There is a
router between the switch and the WLSE. None of the access points are discovered, and
the discovery log shows the switch is SNMP unreachable. What is the problem?

A. The SNMP communities on the switch do not match the WLSE.

B. The SNMP communities on the access points do not match the WLSE.
C. The SNMP communities on the access points do not match the switch.
D. The SNMP communities on the router do not match the WLSE.

Answer: A

QUESTION 51:

For a lightweight access point to participate in aggressive load balancing, it must have
heard the client for how many seconds?

A. 15
B. 10
C. 1

Actualtests.com - The Power of Knowing

 642-587

D. 5

Answer: B

QUESTION 52:

Which two of the following EAP types requires a certificate to be installed on the Cisco
Secure ACS? (Choose two.)

A. EAP-PEAP
B. EAP-FAST
C. EAP-Cisco Wireless (LEAP)
D. EAP-TLS
E. EAP-MD5

Answer: A,D

QUESTION 53:

When setting an access point to a non-root role, what two parameters, other than Role in
the Radio Network, must be configured on the SSID Manager page? (Choose two.)

A. Infrastructure devices to associate only to this SSID

B. Enable IP redirection on this SSID
C. Set Data Beacon Rate
D. Multiple Basic Service Set Identification (BSSID)
E. Set infrastructure SSID

Answer: A,E

QUESTION 54:

To keep performance optimal on a lightweight access point, what can be done?

A. Disable Auto RF and configure manually.

B. Disable all 802.11b data rates.
C. Power access point to full power.
D. Hard code the channel.

Answer: B

QUESTION 55:

On the WLSE, which of the following tasks must be completed before Interference
Detection can be enabled?

Actualtests.com - The Power of Knowing

 642-587

A. Enable Self-Healing.
B. Configure Location Manager.
C. Conduct Client Walkabout.
D. Conduct Radio Scan.

Answer: D

QUESTION 56:

A blinking green power LED indicates which of the following conditions on a Cisco
Series 1000 lightweight access point?

A. lost connection to the controller

B. duplicate IP address
C. startup
D. site survey mode

Answer: D

QUESTION 57:

On the WLSE or WLSE Express, which of the following criteria for applying
automanaged configurations can be combined?

A. device type and subnet

B. MAC address and device type
C. serial number and version number
D. serial number and subnet

Answer: A

QUESTION 58:

Your client has deployed a Cisco Wireless Location Appliance within their warehouse
environment. They have been experiencing problems with tracking objects using active
RFID tags. To verify proper access point deployment for Location Server, the results
from an access point scan should show what information?

A. a minimum RSSI value of -50

B. rogue access points
C. a minimum of three access points
D. non-overlapping channels

Answer: C

Actualtests.com - The Power of Knowing

 642-587

QUESTION 59:

Given a bridge link 6 miles (9.7 km) long, which parameter on the Root Radio Interface
page must be configured in order for IP traffic to pass?

A. RTS
B. distance (kilometers)
C. concatenation
D. CCA

Answer: B

QUESTION 60:

When connecting to an 802.11a access point, which transmitter power selections can be
chosen in the ADU?

A. 30 mW
B. 100 mW
C. 40 mW
D. 50 mW

Answer: C

QUESTION 61:

A rogue access point is detected on the Cisco WCS console. Upon investigation, the
access point is discovered to belong to a neighboring business. Your administrator should
designate the rogue access point as which of the following?

A. known internal
B. managed
C. friendly
D. known external

Answer: D

QUESTION 62:

An REAP was supporting 16 WLANs, but now it only supports one. What happened to
cause the change?

A. Controller connectivity has been lost.

B. The access point lost its configuration.
C. The access point was rebooted.
D. An access point firmware upgrade is in progress.

Actualtests.com - The Power of Knowing

 642-587

Answer: A

QUESTION 63:

Which of the following parameter sets must be configured on the Cisco Wireless
Location Appliance?

A. Object Definitions
B. Asset Management
C. Location Views
D. Network Connections

Answer: D

QUESTION 64:

Static WEP is configured on the access point. You are authenticated and associated to the
access point but are unable to obtain an IP address. Which of the following will cause
this problem?

A. invalid radio type selected

B. no WEP key configured on the client
C. invalid SSID configured
D. invalid WEP key

Answer: D

QUESTION 65:

Which set of RF characteristics is directly monitored by the core feature set products?

A. interference, utilization, and RF diffraction

B. clients, utilization, and multipath interference
C. noise, interference, and coverage holes
D. noise, interference, and multipath interference

Answer: B

QUESTION 66:

You are installing a Cisco 4402 Series Wireless LAN Controller. What type of interface
is used on the uplink port?

A. 1000Base-X Mini-GBIC
B. 10/100/1000 Mbps RJ45

Actualtests.com - The Power of Knowing

 642-587

C. 10/100 Mbps RJ45

D. 1000Base-SX

Answer: A

QUESTION 67:

Which of the following accurately represents the functionality of a lightweight access

point configured to operate in sniffer AP mode?

A. client traffic allowed, data captured on all channels

B. client traffic allowed, data captured on a single channel
C. no client traffic allowed, data captured on a single channel
D. no client traffic allowed, data captured on all channels

Answer: C

QUESTION 68:

The Cisco Wireless Location Appliance provides an audit trail for each device tracked
for up to how many days?

A. 45
B. 60
C. 15
D. 30

Answer: D

QUESTION 69:

Cisco WCS is supported on which two of the following operating systems? (Choose
two.)

A. MAC OS X
B. Windows 2000 SP4
C. Solaris 10
D. Windows Server 2003
E. Debian LINUX

Answer: B,D

QUESTION 70:

In the Cisco WCS, how many days is data available for trending analysis?

Actualtests.com - The Power of Knowing

 642-587

A. 7
B. 60
C. 14
D. 30

Answer: A

QUESTION 71:

In order for a controller-based access point to be allowed to participate in aggressive load

balancing, it must have heard the client within how many seconds?

A. 1
B. 5
C. 10
D. 15

Answer: B

QUESTION 72:

You are troubleshooting a problem with a Cisco 7920 wireless IP phone on a standalone
WLAN. The phone rings but, when you answer, the call is dropped. What may cause this
problem?

A. The minimum data rate is not set to 11 Mbps.

B. An address resolution protocol is enabled.
C. Publicly Secure Packet forwarding is enabled.
D. The access point is set to the least congested channel.

Answer: C

QUESTION 73:

A Cisco Wireless Location Appliance has been added to track RFID tags placed on
laptops being used in a school. Classrooms at the school have concrete block walls.
During testing, you discover that the accuracy of the system needs to be improved. You
decide to edit the map in the Cisco WCS to add the interior walls. How many interior
walls can you add to improve the accuracy of the location appliance?

A. 50
B. 100
C. 150
D. 200

Answer: A

Actualtests.com - The Power of Knowing

 642-587

QUESTION 74:

The IOS of a North American Cisco Aironet 1130AG Series standalone access point has
become corrupt. You must therefore reload the TFTP firmware. Before you press and
hold the MODE button, you should verify that the file name is which of the following?

A. c1130-k9w7-tar.boot
B. c1130-k9w7-tar.default
C. c1130-k9w7-tar.recover
D. c1130-k9w7-tar.123-7.JA1.tar

Answer: B

QUESTION 75:

How many WLANs can a Cisco Aironet 1242 in H-REAP mode support when actively
connected to a wireless controller?

A. 4
B. 8
C. 16
D. 32

Answer: B

QUESTION 76:

Cisco WCS version 4.0 is supported on which operating system?

A. Solaris 10
B. Vista
C. Windows XP Pro
D. Windows 2000 SP4
E. Windows Server 2003

Answer: E

QUESTION 77:

A mobility group is created by a Cisco WLCM and 4402 Series Wireless LAN
Controller. A client that is anchored on the Cisco WLCM roams to an access point on the
4402 controller. You then run a debug command on the 4402 controller. Which message
would best describe the establishment of the tunnel from the foreign controller's
perspective?

Actualtests.com - The Power of Knowing

 642-587

A. Transmit Mobile Anchor Export message

B. Receive Mobile Anchor Export message
C. Transmit Plumbing duplex mobility tunnel message
D. Receive Plumbing duplex mobility tunnel message

Answer: A

QUESTION 78:

You are configuring an RF group of controllers that coordinate Radio Resource

Management calculations. What is the maximum number of WLAN controllers that you
can add?

A. 12
B. 17
C. 20
D. 24

Answer: C

QUESTION 79:

Which Cisco Aironet Series devices can be powered using 802.3af inline power?

A. Cisco Aironet 1100 Series

B. Cisco Aironet 1300 Series
C. Cisco Aironet 1400 Series
D. Cisco Aironet 1240AG Series

Answer: D

QUESTION 80:

You are installing a Cisco Aironet 1000 Series controller-based access point. When you
boot it, all the LEDs on the access point blink together. What does this indicate about the
access point?

A. normal operation
B. duplicate IP address
C. code upgrade in progress
D. searching for primary controller

Answer: C

QUESTION 81:

Actualtests.com - The Power of Knowing

 642-587

You have a very few Cisco 7920 wireless IP phones on your network, but lots of wireless
laptops. You want to increase the bandwidth available for the laptops by decreasing the
bandwidth reserved for the Cisco 7920 phones. What is the lowest percentage of
voice-allocated bandwidth you can select on the WLAN controller?

A. 25 percent
B. 40 percent
C. 55 percent
D. 75 percent

Answer: B

QUESTION 82:

Which of the following statements explains why it is normally best to have more than
one controller-based access point participate in the containment of one rogue access
point?

A. Multiple controller-based access points will load-balance the containment task using
fewer resources than a single access point.
B. Clients connected to the rogue access point may be out of the range of the
controller-based access point providing containment.
C. Each controller-based access point can handle only a limited amount of clients
connected to the rogue access point.
D. Clients connected to the rogue access point must be able to connect to the containment
controller-based access point.

Answer: B

QUESTION 83:

Which authentication types are allowed with the Cisco ADU when selecting
WPA/WPA2/CCKM under the security options?

A. Cisco-LEAP, EAP-FAST, EAP-PEAP (GTC), EAP-TLS

B. Cisco -LEAP, EAP-MD5, EAP-PEAP (GTC), EAP-TTLS
C. Cisco-LEAP, EAP-PSK, EAP-PEAP (MS-CHAP v2), EAP-TLS
D. Cisco-LEAP, EAP-FAST, EAP-PEAP (MS-CHAP v2), EAP-TTLS

Answer: A

QUESTION 84:

On a Cisco Aironet 802.11 a/b/g wireless LAN client adapter, the status LED and activity
LED are alternating on and off. What does this indicate?

Actualtests.com - The Power of Knowing

 642-587

A. The client card has failed.

B. The client card is not associated to the network.
C. The driver has been installed incorrectly.
D. The client card has awakened from power-save mode.

Answer: B

QUESTION 85:

You have just finished aligning a Cisco Aironet 1400 Series Wireless Bridge link using
installation mode. When you set the link back to operational mode you loose association
to the root bridge. Which action will correct the problem?

A. Configure the proper channel.

B. Enable passwords on both bridges.
C. Configure the distance parameter value.
D. Configure the bridge to force infrastructure devices to associate only to the SSID
parameter.

Answer: C

QUESTION 86:

Which of the following settings will reduce packet overhead and overall latency in a
standalone point-to-point bridge deployment?

A. enable concatenation on the root bridge only

B. enable concatenation on the non-root bridge only
C. enable concatenation on both the root bridge and non-root bridge
D. enable concatenation on the root bridge and set it as desirable on the non-root bridge
E. set concatenation as desirable on the root bridge and enable it on the non-root bridge

Answer: C

QUESTION 87:

By default, on the WLAN controller for a voice application using Cisco 7921 wireless IP
phones, what is the percentage of RF bandwidth that can be dedicated to the phones?

A. 55 percent
B. 56 percent
C. 75 percent
D. 85 percent

Answer: C

Actualtests.com - The Power of Knowing

 642-587

QUESTION 88:

When configuring Cisco Secure ACS to support wireless EAP authentication, which
device must be configured as a AAA client?

A. Wireless Control System

B. Wireless clients
C. Wireless controllers
D. Control-based access points
E. Location Appliance

Answer: C

QUESTION 89:

What is the maximum number of wireless controllers that the highest-end Cisco WCS
server can manage?

A. 35
B. 50
C. 100
D. 250

Answer: D

QUESTION 90:

On a WLAN controller, what is the default roaming bandwidth percentage reserved for
voice clients?

A. 6 percent
B. 12 percent
C. 18 percent
D. 24 percent

Answer: A

QUESTION 91:

You are trying to change the polling parameters used by the location manager via the
Cisco WCS, and your request is being denied. What is wrong?

A. Your login does not have the correct permissions.

B. You must wait for the location server to become available.
C. Polling values can be changed only on the location server.
D. Polling values can be changed only in the maintenance window.

Actualtests.com - The Power of Knowing

 642-587

Answer: A

QUESTION 92:

If all client exclusion policies are enabled, on which number of tries will 802.1X
authentications be excluded using controller-based access points?

A. three
B. four
C. five
D. six

Answer: B

QUESTION 93:

On a Cisco Aironet 1240AG Series standalone access point, the radio LED is dark blue
and blinking, but the status LED and Ethernet LED are both off. What does this indicate?

A. A firmware upgrade is in progress.

B. An access point buffer overflow is occurring.
C. The internal radio has failed.
D. The access point is booting.

Answer: D

QUESTION 94:

How many RADIUS servers can be added to a controller and thereafter assigned to the
authentication or accounting of individual WLAN IDs?

A. 14
B. 15
C. 16
D. 17

Answer: D

QUESTION 95:

You are troubleshooting a one-way call problem with a Cisco 7920 wireless IP phone on
a standalone WLAN. What may cause this problem?

A. The minimum data rate is not set to 11 Mbps.

B. An address resolution protocol has been disabled

Actualtests.com - The Power of Knowing

 642-587

C. Publicly Secure Packet forwarding is enabled

D. The access point is set to the least congested channel.

Answer: B

QUESTION 96:

Which command will enable DHCP debugging on a WLAN controller?

A. debug dhcp enable

B. debug dhcp status enable
C. debug dhcp packet enable
D. enable debug dhcp packet

Answer: C

QUESTION 97:

Clients using Cisco-LEAP and EAP-FAST authentication are having no problems

logging on to the wireless network, but clients using PEAP are failing to log on. Which
situation would result in this type of problem?

A. The AAA server is set to accept both MS-CHAP v2 and GTC for PEAP
authentication.
B. Clients have been set to validate the server identity.
C. Posture validation has not been enabled.
D. Clients and server are not using certificates.

Answer: D

QUESTION 98:

A Cisco WCS version 4.0 has been installed on a server with a dual Pentium 3.0 GHz
processor, 4GB RAM, and an 80 GB hard drive. A location appliance has been
incorporated into the network and is being monitored by the Cisco WCS. There are 3000
devices to be tracked but not all of them are being tracked on the Cisco WCS. What can
be done to correct the problem?

A. Add 4GB RAM to the Cisco WCS.

B. Add a 120 GB hard drive to the Cisco WCS.
C. Add a new location appliance.
D. Add a new Cisco WCS server dedicated to the location appliance.

Answer: C

Actualtests.com - The Power of Knowing

 642-587

QUESTION 99:

When optimizing a standalone point-to-multipoint bridge installation with eight non-root

bridges, which of the following RTS threshold and CWmin settings would be correct for
the non-root bridges?

A. RTS threshold=4000, CWmin=3

B. RTS threshold=1, CWmin=4
C. RTS threshold=4000, CWmin=5
D. RTS threshold=1, CWmin=5

Answer: D

QUESTION 100:

What is the correct order of steps for upgrading a Cisco WCS

A. back up the database, stop the WCS, upgrade the WCS, restore the database, start the
WCS
B. stop the WCS, back up the database, upgrade the WCS, restore the database, start the
WCS
C. back up the database, stop the WCS, upgrade the WCS, start the WCS, restore the
database
D. stop the WCS, back up the database, upgrade the WCS, start the WCS, restore the
database

Answer: B

QUESTION 101:

Which protocol does the RADIUS server use inside the secure tunnel of EAP-FAST to
authenticate the client when one-time passwords are in use?

A. MS-CHAP v2
B. PAP
C. GTC
D. MD5

Answer: C

QUESTION 102:

When configuring a WLAN controller for a voice application using Cisco 7920 wireless
IP phones, which two general control settings should you select? (Choose two.)

A. Aggressive Load Balancing on

Actualtests.com - The Power of Knowing

 642-587

B. Aggressive Load Balancing off

C. Multicast on
D. Multicast off
E. AP Fallback on
F. AP Fallback off

Answer: B,D

QUESTION 103:

You are charges with implementing a secure wireless installation which will provide
Internet access to client devices but will not allow communications between wireless
clients. In addition to implementing PSPF or peer-to-peer blocking on the wireless side,
which of the following actions should you perform on the wired infrastructure?

A. Take no action, you have achieved your goal.

B. Implement a Cisco Secure IPS sensor.
C. Implement a protected port on the access switches.
D. Implement 802.1X on the switch ports.

Answer: C

QUESTION 104:

You are troubleshooting a problem with a Cisco 7920 wireless IP phone that is causing
the phone to drop calls. The problem appears to be roaming bandwidth issue. In order to
verify what kind of issue it is, you decide to increase the bandwidth reserve for roaming
on the WLAN controller to maximum. What level do you set the bandwidth to?

A. 5 percent
B. 15 percent
C. 25 percent
D. 35 percent

Answer: C

QUESTION 105:

You want to dynamically assign users to an 802.1Q VLAN as a result of their

authentication. In order to accomplish this, which two IETF RADIUS attributes should
you configure on the Cisco Secure ACS? (Choose two.)

A. 064 Tunnel-Type
B. 066 Tunnel-Client-Endpoint
C. 067 Tunnel-Server-Endpoint
D. 081 Tunnel-Private-Group-ID

Actualtests.com - The Power of Knowing

 642-587

E. 082 Tunnel-Assignment-ID
F. 083 Tunnel-Preference

Answer: A,D

QUESTION 106:

A client roams from H-REAP AP1 to H-REAP AP2. The client is unable to associate to
H-REAP AP2. H-REAP AP2 has six other clients associated to it, which continue to pass
traffic. What has caused this problem?

A. H-REAP AP1 lost its connection to the controller.

B. H-REAP AP2 lost its connection to the controller.
C. H-REAP AP1 has reached its client limit.
D. H-REAP AP2 has reached its client limit

Answer: B

QUESTION 107:

You are configuring a wireless LAN controller for QoS. Which 802.11e user priority tag
should you apply to voice applications?

A. 1
B. 3
C. 4
D. 6

Answer: D

QUESTION 108:

You are using ADU and are authenticated and associated to an access point. However,
you are unable to obtain an IP address. Which of these has caused this problem?

A. invalid SSID
B. invalid 802.1X authentication type
C. invalid encryption type
D. invalid WEP key

Answer: D

QUESTION 109:

Which parameter, when enabled on a standalone access point, gives the highest priority
to a voice packet even when QoS is not enabled?

Actualtests.com - The Power of Knowing

 642-587

A. QoS Element for Wireless Phones

B. IGMP Snooping
C. WMM
D. AVVID Priority Mapping

Answer: A

QUESTION 110:

You review the Failed Attempts logs on an AAA server and find: "unknown network
access server error." Which failure could produce this error?

A. failure of the wireless client and AAA server handshake

B. supplicant authentication failure
C. AAA client and AAA server handshake
D. Wrong password used by the supplicant

Answer: C

QUESTION 111:

If it is properly deployed, a controller-based access point is capable of monitoring all

VLANs on a network when you select which of the following modes from the AP Mode
drop-down menu on the controller?

A. Monitor
B. Rogue Detector
C. Sniffer
D. Mirror

Answer: B

QUESTION 112:

On a WLAN controller, what is the default limit on the number of entries in the database
that will be used for local authentication?

A. 50
B. 128
C. 512
D. 1024

Answer: C

Actualtests.com - The Power of Knowing

 642-587

QUESTION 113:

Which Cisco Aironet Series has a built-in digital thermometer designed to protect the
radio?

A. Cisco Aironet 1500 Series

B. Cisco Aironet 1400 Series
C. Cisco Aironet 1300 Series
D. Cisco Aironet 1200 Series

Answer: C

QUESTION 114:

A Cisco 4404 WLAN controller is being connected to a Cisco 6500 Catalyst Series
Switch. How would you interconnect and configure LAG for connectivity and ensure
redundancy?

A. All four ports from the Cisco WLC terminated to the same Catalyst gigabit module
and channel group.
B. All four ports from the Cisco WLC terminated to the same Catalyst gigabit module
using two channel groups.
C. Ports 1 and 2 from Cisco WLC to Catalyst gigabit module slot 1 channel group 20 and
Cisco WLC ports 3 and 4 to Catalyst gigabit module slot 2 channel group 40.
D. Ports 1 and 2 from Cisco WLC to Catalyst gigabit module slot 1 channel group 10 and
Cisco WLC ports 3 and 4 to Catalyst gigabit module slot 2 channel group 10.

Answer: D

QUESTION 115:

Which of the following commands on the wireless interface of a Cisco 3845 Integrated
Service Router allows the SSID to broadcast?

A. router(config-ssid)# enable
B. router(config-ssid)# advertise
C. router(config-ssid)# broadcast
D. router(config-ssid)# guest-mode

Answer: D

QUESTION 116:

You have been called upon to add location-based services into an existing
controller-based wireless design which primarily encompasses handheld devices such as
barcode scanners and Cisco 7920 wireless IP phones. In which mode should you deploy

Actualtests.com - The Power of Knowing

 642-587

the additional access points to achieve the density required without excessive co-channel
interference?

A. sniffer mode
B. monitor mode
C. location mode
D. tracking mode

Answer: B

QUESTION 117:

What is the maximum number of WLAN controllers that can join a single mobility
group?

A. 12
B. 24
C. 36
D. 48

Answer: B

Actualtests.com - The Power of Knowing