Customer wants to configure Wireless client authentication using digtial certificates with PKI. What happens after the signer encrypts the hash with the private key of the signer during the certification signature process?

• A. The verifier obtains the public key of the signer.
• B. The encrypted hash is appended to the document as the signature.
• C. The verifier decrypts the signature of the signer using the public key.
• D. The verifier makes a hash of the received document and compares it to the decrypted signature hash.

Clients are continually bouncing between APs when a client is on or near the border of two APs. What RF parameter should be adjusted?

• A. Adaptive Scan Threshold
• B. Hysteresis
• C. Transition Time
• D. Minimum RSSI

An engineer is changing the encryption method of a wireless network from PEAP-MSCHAP V2 to EAP-TLS. Which two changes are necessary? (Choose two.)

• A. All authentication clients require their own certificates.
• B. A Cisco NAC server is required.
• C. A new certificate is required for each authenticated user.
• D. Cisco Secure ACS is required.
• E. The authentication server requires a new certificate.
• F. The users require the Cisco AnyConnect client.

The Cisco WLC v7.0 is configured for external 802.1X and EAP by using the WPA2 association of wireless clients when using the Cisco Secure ACS v4.2. Which two items are required in the Cisco Secure ACS network configuration to enable correct AAA? (Choose two.)

• A. WLC management IP address
• B. hostname matching the WLC case-sensitive name
• C. WLC AP management IP address
• D. authentication using TACACS+
• E. authentication using RADIUS
• F. WLC virtual IP address
• G. AP IP address

A wireless client has finished 802.1X and EAP using WPA2 with a controller-based AP network using a central AAA server. How is unicast encryption implemented on the client?

• A. The client uses the PTK that is derived from a four-way handshake with the AP.
• B. The client uses the PMK that is sent from the AAA server that is derived from EAP authentication.
• C. The client uses the PTK that is sent from the WLC, which was derived from the PMK that is sent from the AAA server.
• D. The client uses the PTK that is derived from EAP authentication.
• E. The client uses the PMK that is derived from a four-way handshake with the AP.