1. The Cisco Wireless Location Appliance can track up to how many devices?
A. 1000
B. 2000
C. 2500
D. 1500
Answer: D 
2. Which of the following functions on the wireless LAN controller is used to determine whether or not a rogue
access point is connected to the same Layer 2 network?
A. rogue detector
B. rogue containment
C. RLDP
D. RIDP
Answer: C 
3. On a Cisco Aironet 1130 Series autonomous access point, the status indicator is blinking dark blue. What does
this indicate?
A. The access point is booting.
B. A firmware upgrade is in progress.
C. The internal radio has failed.
D. An access point buffer overflow is occurring.
Answer: B 
4. How many WLANs can a REAP support when actively connected to a wireless controller?
A. 8
B. 32
C. 4
D. 16
Answer: D 
5. On a Cisco Aironet 1230 Series autonomous access point, the Status LED is solid red, and the Ethernet and
TestInside    642-587
Radio LEDs are both off. What does this indicate?
A. A firmware upgrade is in progress.
B. The internal radio has failed.
C. An access point buffer overflow is occurring.
D. The access point is booting.
Answer: A 
6. A wireless controller can reside in how many mobility groups?
A. two
B. three
C. four
D. one
Answer: D 
7. To implement the optional phase zero when using EAP-FAST for authentication, which of the following
parameters must be set on the Cisco Secure ACS?
A. EAP-FAST master server
B. Allow automatic PAC provisioning
C. client initial message
D. authority ID info
Answer: B 
8. When conducting an Assisted Site Survey, the WLSE does which of the following during the Radio Scan
process?
A. chooses the least congested channel
B. uses the configured channel
C. sets all access points to the same channel
D. steps through each of the allowed channels
Answer: C 
9. The wireless LAN controller maintains up to how many controller crash files?
TestInside    642-587
A. 20
B. 5
C. 15
D. 10
Answer: B 
10. In a network using Cisco autonomous access points running WDS, what port is used for authentication by the
local authentication service on an access point?
A. 1813
B. 1645
C. 1646
D. 1812
Answer: D 
11. On the WLSE, Radio Management must be enabled to use most of the features of which one of the following?
A. Devices
B. IDS
C. Configure
D. Reports
Answer: B 
12. Client association using EAP-Cisco Wireless (LEAP) is failing, but EAP-PEAP is functioning on an
autonomous access point. Which of the following needs to be enabled on the access point so EAP-Cisco Wireless
(LEAP) is enabled?
A. open authentication plus MAC
B. open authentication plus EAP
C. shared key
D. network EAP
Answer: D 
13. What is the maximum number of users that can be added to an autonomous access point that is being used as a
TestInside    642-587
local authenticator?
A. 75
B. 100
C. 25
D. 50
Answer: D 
14. Using the WLSE, you are trying to push out a configuration job to an access point, but the job does not start.
Which of the following would cause this failure?
A. invalid parameter in the template
B. incorrect SNMP communities on the access point
C. unsupported version of IOS firmware in the access point
D. pop-up blocker enabled in the browser
Answer: D 
15. Which of the following are true about SSIDs configured in the ADU?
A. SSIDs are not case sensitive.
B. SSIDs must be listed in the same order in the ADU as they are in the access point.
C. A maximum of three SSIDs may be configured.
D. SSIDs may have a maximum of 16 characters.
Answer: C 
16. WLSE uses SNMP communication with an Ethernet switch for what purpose?
A. shut down rogue access points
B. configure access points
C. discover access points
D. inventory access points
Answer: A 
17. When installing a Cisco WCS, which two ports can be changed during installation? (Choose two.)
A. HTTPS
TestInside    642-587
B. TFTP
C. RMI
D. HTTP
E. FTP
Answer: A,D 
18. Client exclusion policies are used to mitigate which of the following attacks?
A. dictionary
B. bit-flip and replay
C. MAC spoofing
D. man-in-the-middle
Answer: A 
19. Which of the following show commands would be used on the WDS to display the access points participating
in fast secure roaming?
A. router# show wlccp ap
B. router# show wlccp wds ap
C. router# show wlccp cckm
D. router# show wlccp wds cckm
Answer: B 
20. On a Series 1010 lightweight access point, the alarm LED is flashing red, and all other LEDs are off. What is
the lightweight access point indicating?
A. It has lost contact with controller.
B. Its IP address already exists.
C. It requires a code upgrade.
D. It is operating normally.
Answer: B 
21. You are using ADU and are authenticated and associated to an access point. You are unable to obtain an IP
address. Which of the following will cause this problem?
TestInside    642-587
A. AES encryption enabled
B. TKIP enabled
C. third-party wireless supplicant enabled
D. 802.1X authentication type enabled
Answer: C 
22. There are 30 managed access points on the WLSE. A radio scan is started but fails. Upon inspection of the
device list in the reports tab, you notice a red indicator on the WDS access point. Upon inspection of the WDS
access point through its GUI, it is discovered that the security keys are not set up between the WDS access point
and the WLSE. 
Which of the following is misconfigured?
A. SNMP communities
B. Telnet/SSH user/password
C. WLCCP credentials
D. HTTP user/password
Answer: C 
23. When configuring VLANs on an autonomous access point, what must be configured on the connected
switchport?
A. 802.1q trunking
B. VTP trunking
C. ISL trunking
D. DPT trunking
Answer: A 
24. What are three of the User Groups that are available on the Cisco WCS? (Choose three.)
A. Administrators
B. System Monitoring
C. Network Operator
D. Power Users
E. Admin
TestInside    642-587
F. Users' Assistant
Answer: B,E,F 
25. There is a Cisco 870 Integrated Services Router providing unsecured access at a hotspot.
Clients are unable to associate to the broadcast SSID. Based on the following running configuration output, which
command would you use to solve the problem?
A. router (config-ssid)# guest-mode
B. router (config-ssid)# authentication open
C. router (config-int)# guest-mode
D. router (config-int)# authentication open
Answer: B 
26. On the WLSE, which of the following fault policies would be used to verify that access to the command-line
interface of the access point is secure?
A. registration error
B. authentication failures threshold
C. HTTP disabled
D. Telnet disabled
Answer: D 
27. Which of the following commands configures the Cisco 3845 Integrated Services Router to allow EAP-FAST
authentication using WDS?
A. router (config)# wlccp authentication-server infrastructure eap Group_1
B. router (config)# wlccp authentication-server infrastructure eap-fast Group_1
C. router (config)# wlccp authentication-server client eap-fast Group_1
D. router (config)# wlccp authentication-server client eap Group_1
Answer: D 
28. What three search criteria does Cisco WCS use to search for wireless controllers? (Choose three.)
A. controller name
B. outdoor area
TestInside    642-587
C. floor area
D. networks
E. MAC address
F. IP address
Answer: A,D,F 
29. VLANs have been enabled on an autonomous access point. In order for clients associating to VLANs other
than the native VLAN to receive an IP address, which of the following must be configured?
A. access point Ethernet port set to SSL trunking
B. switchport set to 802.1q trunking
C. switchport set to SSL trunking
D. access point Ethernet port not set to 802.1q trunking
Answer: B 
30. In the wireless Advanced Feature Set using lightweight access points, a virtual interface is used when
supporting which of the following features?
A. PSK authentication
B. EAP authentication
C. WPA authentication
D. Web authentication
Answer: D 
31. When configuring a wireless LAN controller for QoS, what 802.1p tag should be applied for video
applications? (Choose one.)
A. 3
B. 1
C. 4
D. 6
Answer: C 
32. You are trying to deploy a configuration job to an IOS access point using the WLSE, but the job fails. Which
TestInside    642-587
of the following would cause this failure?
A. SNMP communities
B. Telnet/SSH user/password
C. WLCCP credentials
D. HTTP user/password
Answer: B 
33. When using the WLSE to verify RF coverage, which task will use the configured radio settings?
A. Frame Monitoring
B. Radio Scan
C. Self-Healing
D. Client Walkabout
Answer: D 
34. Your client has deployed a Cisco Wireless Location Appliance within their warehouse environment. They have
been experiencing problems with tracking objects using active RFID tags. The RFID beacon rate is 10 seconds.
You have discovered an issue with the RFID timeout value. How should this value be changed?
A. Change the value on the wireless controller to 45 seconds.
B. Change the value on the wireless controller to 95 seconds.
C. Change the value on the Cisco WCS to 95 seconds.
D. Change the value on the Cisco WCS to 45 seconds.
Answer: B 
35. When configuring a Cisco 3845 Integrated Services Router to support 802.11b and g clients, which of the
following commands would be correct?
A. router (config-if)# speed basic-1.0 2.0 5.5 basic-6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
B. router (config-if)# speed 1.0 2.0 5.5 basic-6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
C. router (config-if)# speed basic-1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
D. router (config-if)# speed 1.0 2.0 5.5 6.0 9.0 basic-11.0 12.0 basic-18.0 24.0 36.0 48.0 54.0
Answer: C 
TestInside    642-587
36. When configuring QoS on a wireless controller, the per-user, real-time bandwidth contract is enforced for
which of the following protocols?
A. IP
B. TCP
C. UDP
D. IPX
Answer: C 
37. Which of the general policies on the WLAN edit page on the WLAN controller would be used when
configuring a radio for a single antenna for an outdoor application?
A. 802.11b/g
B. radio
C. access point
D. 802.11a
Answer: B