Download Free Testking cisco ccsp 642-542 Dumps | Latest Cisco Certification Exams

Testking cisco ccsp 642-542

Cisco SAFE Implementation Exam : 642-542 Exam6.What is the function of a crypto map on a PIX Firewall?
A.to define the policy that will be applied to the traffic
B.to specify which algorithms will be used with the selected security protocol
C.to configure a preshared authentication key and associate the key with an IPSec peer address or host
name
D.to map transforms to transform sets
Correct:A
7.The VPN acceleration module (VAM) is available on what series of VPN optimized routers?
Choose two.
A.1700 Series
B.2600 Series
C.3600 Series
D.7100 Series
E.7200 Series
Correct:D E
8.Which model is recommended for an IDS with at least 100 Mbps performance?
A.4210
B.4220
C.4250
D.4260
Correct:C

15.How are packet sniffer attacks mitigated in the SAFE SMR small network corporate Internet
module?
A.RFC 2827 and 1918 filtering at ISP edge and local firewall
B.switched infrastructure and HIDS
C.protocol filtering
D.restrictive trust model and private VLANs
E.restrictive filtering and HIDS
Correct:B

17.Which three models of the Cisco 3000 Series Concentrator can have redundant power supplies?
Choose three.
A.3005
B.3020
C.3030
D.3060
E.3080
F.3090
Correct:C D E
18.What are the three modules in the SAFE SMR midsize network design? Choose three.
A.frame/ATM module
B.campus module
C.ISP edge module
D.corporate Internet module
E.WAN module
F.PSTN module
Correct:B D E
19.What threats are expected for the SAFE SMR small network campus module? Choose two.
A.IP spoofing
B.packets sniffers
C.denial of service
D.applications layer attacks
Correct:B D
20.When using PCbased IP phones, which threat is expected between data and voice segments if
not protected by a stateful firewall?
A.TCP flood DoS attack
B.IP spoofing attack
C.UDP flood DoS attack
D.application layer attack
Correct:C
21.Which IDS guidelines should be followed, according to SAFE SMR?
A.use TCP shunning as opposed to TCP resets
B.use shunning no longer than 15 minutes
C.use shunning on only UDP traffic, as it is more difficult to spoof than TCP
D.use shunning on only TCP traffic, as it is more difficult to spoof than UDP
Correct:D
22.What are the radio frequency bands used by IEEE 802.11 standards? Choose two.
A.2.8 MHz
B.2.4 GHz
C.2.2 MHz
D.5 GHz
E.900 GHz
F.900 MHz
Correct:B D
23.Using the default, how does the Cisco IDS appliance log events? Choose two.
A.location
B.type
C.rule base
D.effect
E.severity
F.user option
Correct:B E
24.What does the Cisco Unified Client framework provide?
A.distributed push policy technology
B.centralized push policy technology
C.centralized pull policy technology
D.multitiered policy technology
26.What are private VLANs?
A.tools that allow segregating traffic at Layer 3, turning broadcast segments into nonbroadcast,
multiaccesslike segments
B.tools that allow segregating traffic at Layer 2, turning broadcast segments into nonbroadcast,
multiaccesslike segments
C.tools that allow segregating traffic at Layer 2, turning nonbroadcast, multiaccesslike segments into
broadcast segments
D.tools that allow segregating traffic at Layer 3, turning nonbroadcast, multiaccesslike segments into
broadcast segments
Correct:B
27.What is the primary method for device authentication in a VoIP network?
A.IP address
B.MAC address
C.SIP address
D.IP and MAC address
Correct:B
28.Which three authentication methods are supported by CSACS? Choose three.
A.PPP
B.RADIUS
C.CHAP
D.TACACS+
E.PAP
F.static passwords
Correct:B D F
30.What service is provided by CSA Profiler?
A.Profiler analyzes applications to help in generating useful policies.
B.Profiler monitors and logs security events that occur on CSA protected hosts.
C.Profiler provides a COM component utility that installs with each CSA.
D.Profiler configures agent kits that are deployed on CSA protected hosts.
Correct:A
testking 642- 542 Interactive Testing Engine Included!
253 Questions
Updated : 09/18/2008
Price : $87.99 $79.99