100% valid Cisco 642-591 Flydumps with more new added questions.By training the Javacexam Cisco 642-591 questions, you will save a lot time in preparing the exam.Visit www.Flydumps.com to get the 100% pass Cisco 642-591 ensure!
QUESTION 4
Which high-availability option is supported by a Cisco NAC Appliance Solution?
A. Cisco NAA Backup Server
B. Cisco NAS Backup Network Scanning
C. Cisco NAM and Cisco NAS redundancy
D. Cisco NAM and Cisco NAS load Balancing
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 5
Which features must be configured to ensure that users can perform update and remediation?
A. Temporary Roles and Quarantines roles
B. Nessus Plug-ins and Antivirus Rules
C. Temporary and Quarantine network Remediation timer
D. Session timeouts and traffic controls policies
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 6
What is the local user account primarily used for?
A. For testing or for guest user accounts
B. For users who acquire temporary access or the normal login role
C. For users who acquire the quarantine access role
D. For Administrator access
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 7
DRAG DROP
You work as a network administrator at Certkiller .com. Your boss, Mrs. Certkiller, is interested in Cisco
roles.
Match the descriptions with the appropriate roles.
A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference: QUESTION 8
What is an exempt device?
A. A device that does not require posture assessment each time it logs in to the network
B. A device that does not have to go through certification while its MAC address remains on the certified list
C. A multiuser device that is configured as a floating device so that recertification is not required at each login
D. A single or multiuser device that is only recertified when another user of the device logs out and accesses the network
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 9
Which two functions can a Cisco NAC Appliance Agent be configured to perform? (Choose two.)
A. Check for up-to-date antivirus and antispam files
B. Detect the presence of worms and viruses before permitting network access to an end user
C. Perform registry, service and application checks
D. Initiate periodic Virus Scans
Correct Answer: AC Section: (none) Explanation
Explanation/Reference:
QUESTION 10
In a Cisco NAM high-availability configuration, when does the secondary Cisco NAM take over?
A. When the timeout value is exceeded during data-mirroring activities
B. When the IP-based heartbeat signal fails to be transmitted and received within a certain time period
C. When the UDP heartbeat signal fails to be transmitted on the serial heartbeat connection between failover peers
D. When the UDP heartbeat signal is not transmitted and received within a certain time period
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 11
Where is a local user validated?
A. At the authentication Server
B. At the Cisco NAA
C. At the Cisco NAS
D. At the Cisco NAM
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 12
In Cisco NAC Appliance Solutions, which statements is correct regarding devices on the certified list?
A. Device manually added to the certified device list are automatically deleted when the device list-clearing timer expires
B. Devices that pass the Cisco NAA requirements are automatically added to the exempt device list
C. To remove an exempt device from the certified list, click the clear Certified Device Button
D. A device is not required to be rescanned at the next login as long as it MAC address is in the certified list
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 13
How do you ensure that the Cisco NAS has the most recent version of the Cisco NAA to install on user devices?
A. From the Cisco NAS web Admin Console, enable Cisco NAA autoupdate on the Administration->Software Update Form
B. The Cisco NAA is upgraded directly to each Cisco NAS using the upgrade server form available on the Cisco NAM web console GUI
C. Configure the Cisco NAS by selecting which Cisco NAA to upgrade in the Cisco NAA Upgrade form
D. Each Time the Cisco NAA is upgraded, the Cisco NAM automatically download the new version of Cisco NAA to all Cisco NAS Servers
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 14
When trying to restrict a guest-role end user to a host that has multiple or dynamic IP Addresses; the administrator would create which type of policy?
A. Address-based inclusion Policy
B. Server-based exemption Policy
C. Host-based traffic Control Policy
D. IP-based Access Policy
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 15
Custom login pages can be targeted to specific groups of end users. Which three target methods are supported by Cisco NAC Appliance? (Choose three.)
A. Operating System
B. Subnet
C. Network Access Method
D. End-user Role
E. VLAN ID
F. Device Type
Correct Answer: ABE Section: (none) Explanation
Explanation/Reference:
QUESTION 16
When configuring an in-band central-deployment virtual gateway on the Cisco NAS, what must be configured to ensure that the interface traffic on the same Layer 2 switch does not create a loop?
A. In the network form, select the passthrough VLAN ID option for the untrusted and trusted management VLAN
B. Configure the first switch downstream of the Cisco NAS with Spanning Tree
C. In the managed subnet form, enter the IP address that is assigned to the Cisco NAS to route the subnet, not the calculated network address
D. In the VLAN mapping form, map the untrusted interface VLAN ID to a trusted network VLAN ID
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 17
In an out-of-band Cisco NAC Appliance high-availability deployment, why must port security be disabled between the switch interfaces to which the Cisco NAS and Cisco NAM are connected?
A. Port Security interfaces with SNMP message delivery between Cisco NAM failover peers
B. Port Security interfaces with UDP heartbeat signals
C. Port Security creates time-based latency, causing erratic SSL communication
D. Port Security can interface with Cisco NAS high availability and DHCP delivery
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 18
Which interface is always used by Cisco NAM failover peers to support inter-peer connections?
A. The eth1 interface
B. The Serial Connection
C. The Second Ethernet Port
D. The eth0 Interface
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 19
What does the secondary Cisco NAM do after it reboots from its initial configuration?
A. Switches to active mode, enabling load sharing with the primary Cisco NAM
B. Automatically sends a message to all Cisco NAS Servers, identifying itself as the secondary Cisco NAM
C. Automatically Synchronizes its database with the primary Cisco NAM
D. Takes over as the active Cisco NAM if the secondary Cisco NAM has a higher priority
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 20
Which NAC Appliance Component performs network scanning?
A. Cisco NAC Appliance Agent
B. Cisco NAC Appliance Server
C. Cisco NAC Appliance Manager D. Cisco NAC Trust Agent
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
CCNA Cisco 642-591 contains a powerful new testing engine that allows you to focus on individual topic areas or take complete, timed exams from CCNA Cisco 642-591.The assessment engine also tracks your performance and presents feedback on a module-by-module basis, providing question-by-question CCNA Cisco 642-591 to the text and laying out a complete study plan for review.CCNA Cisco 642-591 also includes a wealth of hands-on practice exercises and a copy of the CCNA Cisco 642-591 network simulation software that allows you to practice your CCNA Cisco 642-591 hands-on skills in a virtual lab environment.The CCNA Cisco 642-591 supporting website keeps you fully informed of any exam changes
