Category: Cisco
About the Free Cisco 642-591 Study Guide With The All New Exam Questions Of Flydumps
100% valid Cisco 642-591 Flydumps with more new added questions.By training the Javacexam Cisco 642-591 questions, you will save a lot time in preparing the exam.Visit www.Flydumps.com to get the 100% pass Cisco 642-591 ensure!
QUESTION 4
Which high-availability option is supported by a Cisco NAC Appliance Solution?
A. Cisco NAA Backup Server
B. Cisco NAS Backup Network Scanning
C. Cisco NAM and Cisco NAS redundancy
D. Cisco NAM and Cisco NAS load Balancing
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 5
Which features must be configured to ensure that users can perform update and remediation?
A. Temporary Roles and Quarantines roles
B. Nessus Plug-ins and Antivirus Rules
C. Temporary and Quarantine network Remediation timer
D. Session timeouts and traffic controls policies
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 6
What is the local user account primarily used for?
A. For testing or for guest user accounts
B. For users who acquire temporary access or the normal login role
C. For users who acquire the quarantine access role
D. For Administrator access
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 7
DRAG DROP
You work as a network administrator at Certkiller .com. Your boss, Mrs. Certkiller, is interested in Cisco
roles.
Match the descriptions with the appropriate roles.
A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference: QUESTION 8
What isan exempt device?
New Updated Cisco 642-545 Exam Questions And Answers
Flydumps Cisco 642-545 exam questions and answers in PDF are prepared by our expert, Moreover, they are based on the recommended syllabus covering all the Cisco 642-545 exam objectives.You will find them to be very helpful and precise in the subject matter since all the Cisco 642-545 exam content is regularly updated and has been checked for accuracy by our team of Microsoft expert professionals.
Exam A
QUESTION 1
The Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS) is an appliance-based, all-inclusive solution that provides unmatched insight and control of your existing security deployment. Which three items are correct with regard to Cisco Security MARS rules? (Choose three.)
A. There are three types of rules.
B. Rules can be deleted.
C. Rules can be created using a query.
D. Rules trigger incidents.
Correct Answer: ACD Section: (none) Explanation
Explanation/Reference:
QUESTION 2
Which three benefits are of deploying Cisco Security MARS appliances by use of the global and local controller architecture? (Choose three.)
A. A global controller can provide a summary of all local controllers information (network topologies, incidents, queries, and reports results).
B. A global controller can provide a central point for creating rules and queries, which are applied simultaneously to multiple local controllers.
C. A global controller can correlate events from multiple local controllers to perform global sessionizations.
D. Users can seamlessly navigate to any local controller from the global controller GUI.
Correct Answer: ABD Section: (none) Explanation
Explanation/Reference:
QUESTION 3
Which item is the best practice to follow while restoring archived data to a Cisco Security MARS appliance?
A. Use Secure FTP to protect the data transfer.
B. Use “mode 5” restore from the Cisco Security MARS CLI to provide enhanced security during the data transfer.
C. Choose Admin > System Maintenance > Data Archiving on the Cisco Security MARS GUI to perform the restore operations on line.
D. To avoid problems, restore only to an identical or higher-end Cisco Security MARS appliance.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 4
A Cisco Security MARS appliance can’t access certain devices through the default gateway. Troubleshooting has determined that this is a Cisco Security MARS configuration issue. Which additional Cisco Security MARS configuration will be required to correct this issue?
» Read more about: New Updated Cisco 642-545 Exam Questions And Answers »
Newest PDF And VCE Cisco 642-544 Exam Dumps With New Added Questions
Flydumps Cisco 642-544 exam questions and answers in PDF are prepared by our expert, Moreover,they are based on the recommended syllabus covering all the Cisco 642-544 exam objectives.You will find them to be very helpful and precise in the subject matter since all the Microsoft Cisco 642-544 exam content is regularly updated and has been checked for accuracy by our team of Microsoft expert professionals.
Exam A
QUESTION 1
What will happen if you try to run a Cisco Security MARS query that will take a long time to complete?
A. After submitting the query, the Cisco Security MARS GUI screen will be locked up until the query is completed.
B. The query will be automatically saved as a rule.
C. The query will be automatically saved as a report.
D. You will be prompted to “Submit Batch” to run the query in batch mode.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 2
The Cisco Security MARS appliance supports which protocol for data archiving and restoring?
A. NFS
B. TFTP
C. FTP
D. Secure FTP
E. SSH
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 3
What is a benefit of using the dollar variable (as in $TARGET01) when creating queries in Cisco Security MARS?
A. The dollar variable enables multiple queries to reference the same common 5-tuple information using a variable.
B. The dollar variable ensures that the probes and attacks that are reported are happening to the same host.
C. The dollar variable allows matching of any unknown reporting device.
D. The dollar variable allows matching of any event type groups.
E. The dollar variable enables the same query to be applied to different reports.
F. The dollar variable enables the same query to be applied to different cases.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 4
A Cisco Security MARS appliance cannot access certain devices through the default gateway. Troubleshooting has determined that this is a Cisco Security MARS configuration issue.
Which additional Cisco Security MARS configuration will be required to correct this issue?
A. use the Cisco Security MARS GUI or CLI to enable a dynamic routing protocol
B. use the Cisco Security MARS CLI to add a static route
C. use the Cisco Security MARS GUI to configure multiple default gateways
D. use the Cisco Security MARS GUI or CLI to configure multiple default gateways
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 5
What are three ways to add devices to the Cisco Security MARS appliance? (Choose three.)
A. import the devices from CiscoWorks
B. import the devices from Cisco Security Manager
C. load the devices from seed files
D. use SNMP auto discovery
E. use CDP to automatically discover the neighboring devices
F. manually add the devices, one at a time
Correct Answer: CDF Section: (none) Explanation
Explanation/Reference:
QUESTION 6
Which action enables the Cisco Security MARS appliance to ignore false-positive events by either dropping the events completely, or by just logging them to the database?
» Read more about: Newest PDF And VCE Cisco 642-544 Exam Dumps With New Added Questions »
Share The Latest Free Official Cisco 642-544 Exam Training Questions And Answers
Preparing for Microsoft exams of Cisco 642-544 is really a tough task to accomplish.Flydumps delivers the most comprehensive preparation material,covering each and every aspect of Cisco 642-544 exam curriculum and all the brain is the latest.You can pass Cisco 642-544 exam without any problem
Exam A
QUESTION 1
Refering to the rule shown on the MARS GUI screen, which two of the following statements are correct? (Choose two.)
A. This rule will fire if the offset 1 condition occurs “OR” if the offset 2 condition occurs.
B. This rule will fire if the offset 3 condition occurs.
C. The expressions between cells are “AND’ while the expressions between items in the same cell are “OR”.
D. This is a user-defined rule.
E. This rule can be deleted after changing its status to “inactive.”
Correct Answer: BC Section: (none) Explanation
Explanation/Reference:
QUESTION 2
To configure a Microsoft Windows IIS server to publish logs to the Cisco Security MARS, which log agent is installed and configured on the Microsoft Windows IIS server?
A. pnLog agent
B. Cisco Security MARS agent
C. SNARE
D. None. Cisco Security MARS is an agentless device.
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 3
Drop A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference:
QUESTION 4
A Cisco Security MARS appliance cannot access certain devices through the default gateway. Troubleshooting has determined that this is a Cisco Security MARS configuration issue.
Which additional Cisco Security MARS configuration will be required to correct this issue?
A. use the Cisco Security MARS GUI or CLI to enable a dynamic routing protocol
B. use the Cisco Security MARS CLI to add a static route
C. use the Cisco Security MARS GUI to configure multiple default gateways
D. use the Cisco Security MARS GUI or CLI to configure multiple default gateways
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 5
Which action enables the Cisco Security MARS appliance to ignore false-positive events by either dropping the events completely, or by just logging them to the database?
New Dumps- Free Download Of Cisco 642-511 VCE And PDF Dumps
Good News!The Flydumps Cisco 642-511 exam questions and answers covers all the knowledge points of the real exam. With our Cisco 642-511 practice test, you will never worry about the exam.Recently the new version with all new updated Cisco 642-511 exam dumps can free download on the site Flydumps.com.Visit the site to get more exam information.
Exam A
QUESTION 1
What is the maximum number of simultaneous sessions that can be supported when doing encryption in hardware within the Cisco VPN Concentrator series of products?
A. 100
B. 1500
C. 5000
D. 10000
E. infinite
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
Explanation: The Cisco VPN 3000 Series Concentrator comes in a variety of models that can support small offices of 100 of fewer VPN connections to large enterprises of 10,000 or more simultaneous VPN connections. Redundant and nonredundant configuration are available to help ensure the high reliability of these devices. Reference: Cisco Press CCSP Cisco Secure VPN (Roland, Newcomb) p.30
QUESTION 2
Which of the following operating systems can run the software VPN client? Choose all that apply.
A. linux
B. mac
C. windows
D. solaris
Correct Answer: ABCD Section: (none) Explanation
Explanation/Reference:
Explanation:
There are VPN software clients available for Windows, Solaris, Linux, and Macintosh.
QUESTION 3
DRAG DROP Jason from the security department was given the assignment to match the Cisco VPN key with its description.
A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference:
Explanation: The Diffie-Hellman (D-H) key agreement is a public key encryption method that provides a way for two IPSec peers to establish a shared secret key that only they know, although they communicating over an insecure channel. With D-H, each peer generates a public and private key pair. The private key generated by each peer is kept secret and never shared. The public key is calculated from the private key by each peer and is exchanged over the insecure channel. Each peer combinesthe other’s
» Read more about: New Dumps- Free Download Of Cisco 642-511 VCE And PDF Dumps »
2016 New Updated — Latest Cisco 642-511 Exam Questions with PDF and VCE 100% Pass Gurantee
100% Valid! Flydumps Cisco 642-511 exam questions and answers are tested and approved by Microsoft experts.Furthermore, we are constantly updating our Cisco 642-511 exam dumps,100% guarantee in quality and reliability.
Exam A
QUESTION 1
Which of the following are valid authentication options for the Hardware Client? (Choose two)
A. User Authentication
B. Unit Authentication
C. IP Address Authentication
D. Interactive Group Authentication
Correct Answer: AB Section: (none) Explanation
Explanation/Reference:
QUESTION 2
What is the default configuration of the Cisco VPN 3002 public interface?
A. DHCP server is enabled
B. DHCP client is enabled
C. static IP address of 192.168.10.1
D. no configuration
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 3
For network extension RRI, which IP address does the Cisco VPN Concentrator advertise?
A. Cisco VPN Client NIC IP address
B. Cisco VPN 3002 assigned IP address
C. Cisco VPN 3002 public interface IP address
D. Cisco VPN 3002 private interface network address
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 4
When configuring group attributes in the Cisco VPN Concentrator, which three parameters are configurable group attributes? Choose three.
A. access hours
B. idle timeout
C. connection priority
D. maximum connect time
E. access level
F. TACACS+ server IP address
Correct Answer: ABD Section: (none) Explanation
Explanation/Reference:
QUESTION 5
To troubleshoot SCEP enrollment, the administrator should scrutinize what event class in the event log?
A. IKE
B. IPSec
C. SCEP
D. Cert
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 6
For the Cisco VPN Concentrator, what are the two types of certificate enrollment? Choose two.
A. file-based enrollment process
B. SCEP
C. PKCS#15 enrollment process
D. automated enrollment process
E. out-of-band enrollment process
F. certified enrollment process
Correct Answer: AB Section: (none) Explanation
Explanation/Reference:
QUESTION 7
LAB A.
New Questions-100% Valid New Updated Questions for Cisco 642-504 Download
Do not you know how to choose the Cisco 642-504 exam dumps? Being worried about the changed questions? Just try Flydumps new version Cisco 642-504 exam dumps. All the new questions and answers were added to the new dumps,visit Flydumps.com to free download Cisco 642-504 !
Exam A
QUESTION 1
Which two are technologies that secure the control plane of the Cisco router? (Choose two.)
A. Cisco IOS Flexible Packet Matching
B. uRPF
C. routing protocol authentication
D. CPPr
E. BPDU protection
F. role-based access control
Correct Answer: CD Section: (none) Explanation
Explanation/Reference:
QUESTION 2
What are the two category types associated with 5.x signature use in Cisco IOS IPS? (Choose two.)
A. basic
B. advanced
C. 128MB.sdf
D. 256MB.sdf
E. attack-drop
F. built-in
Correct Answer: AB Section: (none) Explanation
Explanation/Reference:
QUESTION 3
Refer to the exhibit.
Which optional AAA or RADIUS configuration command is used to support 802.1X guest VLAN
functionality?
A. aaa authentication dot1x default group radius
B. aaa authorization network default group radius
C. aaa accounting dot1x default start-stop group radius
D. aaa accounting system default start-stop group radius
E. radius-server host 10.1.1.1 auth-port 1812 acct-port 1813
Correct Answer: B Section: (none)
Explanation
Explanation/Reference:
QUESTION 4
Which is an advantage of implementing the Cisco IOS Firewall feature?
PassGuide.com-Make You Succeed To Pass IT Exams PassGuide 642-504
A. provides self-contained end-user authentication capabilities
B. integrates multiprotocol routing with security policy enforcement
C. acts primarily as a dedicated firewall device
D. is easily deployed and managed by the Cisco Adaptive Security Device Manager
E. provides data leakage protection capabilities
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 5
Which three statements correctly describe the GET VPN policy management? (Choose three.)
A. A central policy is defined at the ACS (AAA) server.
» Read more about: New Questions-100% Valid New Updated Questions for Cisco 642-504 Download »
Flydumps Recently Updated Cisco 642-453 Real Exam Questions Ensure 100 Percent Pass
Most accurate Cisco 642-453 practice test for you to free download.Cisco 642-453 is also an authenticated IT certifications site that offer all the new questions and answers timely.Visit the site Flydumps.com to get free Cisco 642-453 VCE test engine and PDF.
Exam A
QUESTION 1
Bob’s Bicycles wants to route inbound faxes directly to the recipient’s e-mail. Which gateway fax protocol will support this?
A. Fax Pass-Through
B. Fax Relay
C. T.37
D. T.38
Correct Answer: C Section: (none) Explanation
QUESTION 2
You have a client who is planning to implement a toll bypass service for the PBXs. The organization has four locations and the PBXs are a mixture of QSIG- and non-QSIG-capable devices. Which type of services will be available between a QSIG and a non-QSIG PBX?
A. The supplementary services on the non-QSIG PBX will be available to both devices.
B. Only basic calls that do not require supplementary services are supported.
C. The supplementary services supported by the QSIG PBX will be terminated by the gateway and translated to the non-QSIG PBX.
D. The gateway will translate all the supplementary services for both PBXs.
Correct Answer: B Section: (none) Explanation
QUESTION 3
A gateway is connected to the PSTN via eight analog circuits. Which two methods can be used to route calls across all eight circuits? (Choose two.)
A. For each destination pattern, configure eight dial peers pointing to each port and use the preference command to select which port is used.
B. Assign each port to a trunk group. For each destination pattern, configure a single dial peer pointing to the trunk group.
C. Assign each port to a hunt list. For each destination pattern, configure a single dial peer pointing to the hunt list.
D. For each destination pattern, configure a single dial peer. Use the port range command to select which port is used.
E. For each destination pattern, configure eight dial peers pointing to each port and use the huntstop command to select which port is used.
Correct Answer: AB Section: (none) Explanation
QUESTION 4
A Cisco voice gateway is connected to the PSTN via an analog line. How can the gateway be configured to support caller ID?
100% New Questions–Free Flydumps New Updated Cisco 642-452 Exam Questions
100% Pass Guarantee You can download free Cisco 642-452 exam dumps with all new added questions and answers from Flydumps.com.With our Cisco 642-452 exam questions and answers in hand, a lot candidates pass the Cisco 642-452 exam at their first time. We make our promise that Flydumps is your best choice.
Exam A
QUESTION 1
Refer to the exhibit. Highland Park Property Development is integrating a Cisco CallManager system with the existing PBX via an E1 QSIG trunk. After the initial configuration, no calls can be placed from IP phones to PBX phones. How can this problem be resolved?
A. Add the command isdn contiguous-bchan to the serial interface.
B. Change the channel selection order from descending to ascending.
C. Add the command isdn negotiate-bchan to the serial interface.
D. Increase the ISDN T302 timer to allow more time for call setup.
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 2
Drag Drop question
A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference:
Answer: Check certifyme eEngine, Download from Member Center
QUESTION 3
Which dial peer will send calls to the PSTN via the CAS T1 using this controller configuration?controller t1 3/0framing esflinecode b8zsds0-group 1 timeslots 1-24 type e&m-wink-start
A. dial-peer voice 1 potsdestination-pattern 9.@port 3/0:1
B. dial-peer voice 1 potsdestination-pattern 9.@port 3/0:24
C. dial-peer voice 1 potsdestination-pattern 91port 3/0:1
D. dial-peer voice 1 potsdestination-pattern 91port 3/0:24
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 4
Which three features are available during SRST failover? (Choose three.)
A. music on hold
B. IP phone speed dial
C. distinctive ring
D. call forwarding
Correct Answer: ABC Section: (none)Explanation
Explanation/Reference:
QUESTION 5
Refer to the exhibit. What is the purpose of the TCL script snippet?
» Read more about: 100% New Questions–Free Flydumps New Updated Cisco 642-452 Exam Questions »
New Questions–Free Download 2016 New Questions for Cisco 642-452 Exam 100% Valid
Free Sharing Flydumps Cisco 642-452 exam questions and answers are constantly being revised and updated for relevance and accuracy. Many candidates has passed the Cisco 642-452 exam easily by training the new version.100% pass rate.
Exam A
QUESTION 1
Which two functions are provided by a DSP farm? Select two.
A. called ID
B. transcoding
C. E911
D. directory lookup
E. conference bridging
F. music on hold
Correct Answer: BE Section: (none) Explanation
Explanation/Reference:
Explanation: The DSP farm uses the DSP resources in network modules on Cisco routers to provide voice-conferencing, transcoding, and hardware MTP services. Implementing Cisco Voice Gateways and Gatekeepers (GWGK) v1.0 pg 4-56 Implementing Advanced Gateway Features
QUESTION 2
DRAG DROP
A.
B.
C.
D.
Correct Answer: Section: (none)
Explanation
Explanation:
Why Choose H.323
*
Integrated access
*
Caller ID support on analog FXO
*
Many more TDM interface types and signaling
*
Dropping DSPs on hairpinned calls
*
Gateway-resident applications like TCL and VXML
*
CAC network design with H.323 gatekeepers
*
No release dependencies between gateways and Cisco CallManager
*
Much easier migration architecture to SIP
*
Call preservation for Cisco SRST
*
NFAS support Implementing Cisco Voice Gateways and Gatekeepers (GWGK) v1.0 pg 1-66 Function of Gateways and Gatekeepers Using MGCP as the call control protocol to a gateway has the following advantages:
*
Centralized configuration, control and download from Cisco CallManager
*
Better feature interaction with capabilities like caller ID and name display
*
Easy, centralized dial-plan management
*
Gateway voice security features (voice encryption) as of Cisco IOS Software Release 12.3.(5th)T
*
Q Signaling (QSIG) supplementary services as supported by Cisco CallManager:
-Cisco CallManager interconnects to a QSIG network using an MGCP gateway and T1 or E1 PRI connections to a private integrated services network (PISN). The MGCP gateway establishes the call connections. Using the PRI backhaul mechanism, the gateway passes the QSIG messages to the Cisco CallManager to set up QSIG calls and send QSIG messages to control features.
