Testking 642-565 SSSE
Security Solutions for Systems Engineers
Exam Number: 642-565
Duration: 75 minutes (70 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions
Question: 1
Drag each description on the left to the corresponding attack methodology on the right. Not all descriptions will be used.
Answer:
Question: 2
SomeCompany, Ltd. wants to implement the the PCI Data Security Standard to protect sensitive cardholder information. They are planning to use RSA to ensure data privacy, integrity, and origin
authentication. Which two of these statements describe features of the RSA keys? (Choose two.)
A - The public key only encrypts. B - The public key only decrypts.
C - The public key both encrypts and decrypts. D - The private key only encrypts.
E - The private key only decrypts.
F - The private key both encrypts and decrypts.
Answer: C, F Question: 3
What are two functions of Cisco Security Agent? (Choose two.)
A - authentication
B - control of executable content
C - resource protection
D - spam filtering
E - user tracking
Answer: B, C Question: 4
Which three policy types can be assigned to a network user role in the Cisco NAC Appliance architecture? (Choose three.)
TK
Exam Name: Security Solutions for Systems Engineers(SSSE)
Exam Type: Cisco
Exam Code: 642-565 Total Questions: 70
A - allowed IP address ranges
B - session duration
C - minimum password length D - VPN and roaming policies E - inactivity period
F - network port scanning plug-ins
Answer: B, D, F Question: 5
Which of these items is a valid method to verify a network security design?
A - network audit
B - sign-off by the operations team
C - computer simulation
D - analysis of earlier attacks
E - pilot or prototype network
Answer: E Question: 6
Drag the descriptions from the left to the corresponding Cisco security module on the right. Not all descriptions are used.
Answer:
Question: 7
Which two components should be included in a detailed design document for a security solution?
(Choose two.)
A - data source
B - existing network infrastructure
TK
Exam Name: Security Solutions for Systems Engineers(SSSE)
Exam Type: Cisco
Exam Code: 642-565 Total Questions: 70
C - organizational chart
D - proof of concept
E - traffic growth forecast
F - weak-link description
Answer: B, D Question: 8
What are three functions of CSA in helping to secure customer environments? (Choose three.)
A - application control
B - control of executable content
C - identification of vulnerabilities
D - probing of systems for compliance E - real-time analysis of network traffic F - system hardening
Answer: A, B, F Question: 9
Which two of these features are key elements of the collaborative security approach? (Choose
two.)
A - integration of security features in network equipment
B - Network Admission Control
C - coordinated defense of potential entry points
D - automated event and action filters
E - network behavioral analysis
F - device chaining
Answer: B, C Question: 10
Which two of these statements describe features of the NAC Appliance architecture. (Choose two.)
A - NAC Appliance Server evaluates the endpoint security information.
B - NAC Appliance Manager determines the appropriate access policy.
C - NAC Appliance Client acts as an authentication proxy for internal user authentication.
D - NAC Appliance Manager acts as an authentication proxy for external authentication servers.
Answer: B, D Question: 11
Which three technologies address ISO 17799 requirements for unauthorized access prevention?
(Choose three.)
A - Cisco Secure Access Control Server
B - SSLVPN C - 802.1X
D - Network Admission Control
E - Cisco Security MARS
F - intrusion prevention system
Answer: A, C, D
TK
Exam Name: Security Solutions for Systems Engineers(SSSE)
Exam Type: Cisco
Exam Code: 642-565 Total Questions: 70
Question: 12
Which certificates are needed for a device to join a certificate-authenticated network?
A - the certificates of the certificate authority and the device
B - the certificates of the device and its peer
C - the certificates of the certificate authority and the peer
D - the certificates of the certificate authority, the device, and the peer
Answer: A Question: 13
What allows Cisco Security Agent to block malicious behavior before damage can occur?
A - correlation of network traffic with signatures
B - interception of operating system calls
C - scan of downloaded files for malicious code
D - user query and response
Answer: B Question: 14
What are three advantages of Cisco Security MARS? (Choose three.)
A - performs automatic mitigation on Layer 2 devices
B - ensures that the user device is not vulnerable
C - fixes vulnerable and infected devices automatically
D - provides rapid profile-based provisioning capabilities
E - is network topology aware
F - contains scalable, distributed event analysis architecture
Answer: A, E, F Question: 15
Which encryption protocol is suitable for an enterprise with standard security requirements?
A - MD5
B - 768-bit RSA encryption
C - AES-128
D - DES
E - SHA-256
Answer: C Question: 16
In which two ways do Cisco ASA 5500 Series Adaptive Security Appliances achieve containment and control? (Choose two.)
A - by enabling businesses to create secure connections
B - by preventing unauthorized network access
C - by probing end systems for compliance
D - by tracking the state of all network communications
E - by performing traffic anomaly detection
Answer: B, D
Exam 642-565: Cisco Security Solutions for Systems Engineers (SSSE)
Related Certifications: Cisco Security Solutions and Design Specialist
Number of Questions: 70
Duration: 75 minutes
Exam Topics Include:
• Describe the technical functionality of Cisco security products
• Describe the technical benefits of Cisco security products to meet business requirements
• Describe an appropriate design methodology for Cisco Security Products
• Assess customer’s technical and business requirements
• Develop and present an integrated security solution
The 642-565 SSSE exam will test your knowledge of Cisco security products and product positioning and where each technology fits in the Cisco Self-Defending Network strategy. Topics covered include Cisco Security Appliance (ASA), PIX Firewall, IDS/IPS, VPN, Security Management, MARS and NAC.
Interactive Testing Engine Included!
70 Questions
Updated : 03/10/2008
Price : $87.99 $79.99
Free download：testking 642-565 SSSE
Free download：pass4sure 642-565 SSSE
TestKing - TestKing.com Help you pass Cisco exams
Pass4sure -Pass4sure.com The Worldwide Renowned Cisco Certification Material Provider .
Random Posts
[...] download: testking 642-565 Free download: pass4sure 642-565 Free download: actualtest 642-565 Free download: testinside [...]
[...] download: testking 642-565 Free download: pass4sure 642-565 Free download: actualtest 642-565 Free download: testinside [...]