最新的Cisco 642-566免費考試真題

問題1

Observe the following protocols carefully, which one is used to allow the utilization of Cisco Wide Area Application Engines or Cisco IronPort S-Series web security appliances to localize web traffic patterns I the network and to enable the local fulfillment of content requests?

A. TLS

B. HTTPS

C. WCCP

D. DTLS

正確答案: C

問題2

Which Cisco Security product is used to perform a Security Posture Assessment of client workstations?

A. Cisco NAS Appliance

B. Adaptive Security Appliance

C. Cisco Security Agent

D. Cisco ACS

E. Cisco Security Posture Assessment Tool

正確答案: A

問題3

Look at the following items carefully, which Cisco ASA's Unified Communications proxy feature manipulates both the signaling and the media channels?

A. TLS Proxy

B. H.323 Proxy

C. CUMA Proxy

D. Phone Proxy

正確答案: D

問題4

Can you tell me which one of the following platforms has the highest IPSec throughput and can support the highest number of tunnels?

A. Cisco 7200 NPE-GE+VAM2+

B. Cisco 7200 NPE-GE+VSA

C. Cisco ASR 1000-5G

D. Cisco 6500/7600 + VPN SPA

正確答案: D

問題5

Which Cisco product can provide endpoint-based trusted-traffic marking while implementing QoS?

A. Cisco Trust Agent

B. Cisco Secure Desktop

C. Cisco Security Agent

D. Cisco Secure Services Client

正確答案: C

問題6

Which three functions can be provided by the Cisco ACE 4710 Appliance in the enterprise data center? (Choose three.)

A. XML firewalling

B. HTTP protocol verification

C. HTTPS session decryption through SSL/TLS termination

D. SYN flooding attacks protection

正確答案: B,C,D

問題7

What will the NAC Appliance Agent check on the client Machine? (Choose thee.)

A. Microsofthotfixes

B. IP Address

C. Presence of Cisco Security Agent

D. Registry Keys

正確答案: A,C,D

問題8

MPLS VPN provides or supports all of the following items except which one?

A. Any-to-any connectivity

B. Confidentiality

C. Customer's isolation

D. Customer's IGP routing

正確答案: B

問題9

Cisco Security MARS and Cisco Security Manager could work together to implement which two functions? (Choose two.)

A. IPS events-to-Cisco Security MARS events correlations

B. False-positive tuning

C. Incident-vector analysis

D. Firewall events-to-Cisco Security MARS events correlations

正確答案: A,D

問題10

Can you tell me which authentication protocol can provide single sign-on (SSO) services?

A. TACACS+

B. Kerberos

C. EAP

D. RADIUS

正確答案: B

問題11

Select the advantage of the Cisco ASA phone proxy feature:

A. Allows businesses to configure granular policies for SCCP traffic, such as enforcing only registered phone calls to send traffic through the Cisco ASA security appliance and filtering to message IDs to allow or disallow specific messages

B. Enables inspection of the RTSP protocols that are used to control communications between the client and server for streaming applications

C. Allows telecommuters to connect their IP phones to the corporate IP telephony network securely over the Internet, without the need to connect over a VPN tunnel

D. Enables advanced H.323 inspection services that support H.323 versions 1 along with Direct Call Signaling (DCS) and Gatekeeper-Routed Call Signaling (GKRCS) to provide flexible security integration in a variety of H.323-driven VoIP environments

正確答案: C

問題12

Why GET VPN is not deployed over the public Internet?

A. Because the GET VPN group members use multicast to register with the key servers

B. Because the GET VPN preserves the original source and destination IP addresses, which may be private addresses that are not routable over the Internet

C. Because the GET VPN uses IPSec transport mode, which would expose the IP Addresses to the public if using the Internet

D. Because the GET VPN key servers and group members to requires a secure path to exchange the Key Encryption Key (KEK) and the traffic Encryption Key (TEK)

正確答案: B

問題13

You are a network engineer of your company. Study the following exhibit carefully, which three Cisco IOS features could be used on the VPN gateways (Cisco IOS routers) to implement high availability for remote-access IPsec VPN? (Choose three.)

A. Reverse Route Injection (RRI)

B. Dynamic VTIs

C. Dead Peer Detection (DPD)

D. cooperative key servers

正確答案: A,B,C

最新的Cisco Security Solutions for Systems Engineers - 642-566免費考試真題

聯系我們

站內鏈接

最新更新