Category: CCSP

100% Valid And Newest–Do not worry about your Cisco 642-503 exam! Just try Flydumps the latest Cisco 642-503 exam dumps.The latest new version with all the official new added Cisco 642-503 questions and answers.High pass rate and money back

QUESTION 45
When you implement 802.1x authentication on the ACS, which two configurations are performed under the ACS System Configuration? (Choose two.)
A. Users
B. Groups
C. Global Authentication Setup
D. RACs
E. Logging
F. NAPs

Correct Answer: CE Section: (none) Explanation
Explanation/Reference:
QUESTION 46
Which three of these statements are correct regarding DMVPN configuration? (Choose three.)
A. If running EIGRP over DMVPN, the hub router tunnel interface must have “next hop self” enabled: ip next-hop-self eigrp AS-Number
B. If running EIGRP over DMVPN, the hub router tunnel interface must have split horizon disabled: no ip split-horizon eigrp AS-Number
C. The spoke routers must be configured as the NHRP servers: ip nhrp nhs spoke-tunnel-ip-address
D. At the spoke routers, static NHRP mapping to the hub router is required: ip nhrp map hub-tunnel-ip-address hub-physical-ip-address
E. The GRE tunnel mode must be set to point-to-point mode: tunnel mode gre point-to-point
F. The GRE tunnel must be associated with an IPsec profile: tunnel protection ipsec profile profile-name

Correct Answer: BDF Section: (none) Explanation
Explanation/Reference:
QUESTION 47
Refer to the exhibit. What will result from this zone-based firewall configuration?

A. All traffic from the private zone to the public zone will be dropped.
B. All traffic from the private zone to the public zone will be permitted but not inspected.
C. All traffic from the private zone to the public zone will be permitted and inspected.
D. All traffic from the public zone to the private zone will be permitted but not inspected.
E. Only HTTP and DNS traffic from the private zone to the public zone will be permitted and inspected.
F. Only HTTP and DNS traffic from the public zone to the private zone will be permitted and inspected.

Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 48
Drop

A.
B.
C.
D.

Correct Answer: Section: (none) Explanation
Explanation/Reference:
Answer: Check certifyme eEngine, Download from Member Center
QUESTION 49

A.

 » Read more about: Cisco 642-503 Real Questions Answers, First-hand Cisco 642-503 Practice Exam Online Store  »

Flydumps offers the first-hand Cisco 642-503 exam real questions and answers, by train the latest Cisco 642-503 PDF and VCE dumps,you will well prepare for the Cisco 642-503 exam. Visit Flydumps.com to get free new version for training.

QUESTION 46
Please study the exhibit carefully.
When you configure DHCP snooping, which ports should be configured as trusted ?
A. port E only
B. port A only
C. ports B and C
D. ports A, B, C, and E
E. ports A, B, and C
F. ports B, C, and E

Correct Answer: E Section: (none) Explanation
Explanation/Reference:
Explanation: Understanding DHCP Snooping and Mitigating DHCP Attacks DHCP snooping is a switch feature that determines which switch ports can respond to DHCP requests. To accomplish this configuration, you must configure a port as either trusted or untrusted. Untrusted ports can source requests only, whereas trusted ports can source DHCP replies. This will help you prevent the attack by controlling where the DHCP server is and the path that you expect DHCP replies to come from. Reference: CCSP SNRS Quick Reference Sheets
QUESTION 47
Refer to the DMVPN topology diagram in the exhibit. Which two statements are correct? (Choose two.)

A. The hub router Certkiller 1 needs to have EIGRP split horizon disabled.
B. At the Certkiller 4 router, the next hop to reach the 192.168.0.0/24 network is 172.17.0.1.
C. The spoke routers Certkiller 2 and Certkiller 4 act as the NHRP servers for resolving the remote spoke physical interface IP address.
D. At the Certkiller 2, the next hop to reach the 192.168.1.0/24 network is 172.17.0.1.
E. Before a spoke-to-spoke tunnel can be built, the spoke router needs to send an NHRP query to the hub to resolve the remote spoke router physical interface IP address.
F. At the Certkiller 4, the next hop to reach the 192.168.2.0/24 network is 10.0.0.1.

Correct Answer: AE Section: (none)
Explanation
Explanation/Reference:
Explanation: For spoke-to-spoke DMVPN networks, a unique challenge exists because the spokes cannot directly exchange information with one another, even though they are on the same logical subnet. This means that the hub router needs to advertise subnets from the other spokes on the same subnet. The IP routing rule known as split horizon prevents the hub from doing this: SNRS_ROUTER(config-router)#interface tunnel 0 SNRS_ROUTER(config-if)#no ip split-horizon eigrp 1 Reference: CCSP SNRS Quick Reference Sheets NHRP-A client and server protocol where the hub is the server and the spokes are the clients. The hub maintains an NHRP database of the public interface addresses of the each spoke. Each spoke registers its real address when it boots and queries the NHRP database for real addresses of the destination spokes in order to build direct tunnels. Reference: Cisco IOS Security Configuration Guide, Release 12.4
QUESTION 48
What does thiscommand do?

 » Read more about: Cisco 642-503 Brain Dumps, Money Back Guarantee Cisco 642-503 Demo Download 100% Pass With A High Score  »

Where To Download New Free Cisco 642-502 VCE Exam Dumps? As we all know that new Cisco 642-502 exam are difficult to pass, but if you get the valid Cisco 642-502 exam questions, you will pass the Cisco 642-502 exam easily. Nowdays, Flydumps has published the newest Cisco 642-502 exam dumps with free vce test software and pdf dumps, by training the Flydumps Cisco 642-502 questions, you will pass the exam easily!

QUESTION 45
Which ESP mode is used to provide end-to-end protection of message payloads between two hosts?
A. transport mode
B. encrypted mode
C. ESP mode
D. tunnel mode

Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 46
Which three statements about Cisco Secure ACS are true? (Choose three.)
A. NAS can access multiple Cisco Secure ACS for Windows servers.
B. Cisco Secure ACS for Windows servers can only log onto external servers.
C. The Cisco Secure ACS for Windows server supports only TACACS+.
D. Database replication is supported by the Cisco Secure ACS for Windows servers.
E. The service used for authentication and authorization on a Cisco Secure ACS for Windows server is called CSAdmin.
F. The Cisco Secure ACS for Windows servers uses the CSDBsynch service to manage the user and group accounts.

Correct Answer: ADF Section: (none) Explanation
Explanation/Reference:
QUESTION 47
After configuring multiple transform sets, where do you specify the transform sets?
A. ACL
B. ISAKMP policy
C. router interface
D. crypto map entry

Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 48
Simulate question
This is the correct configuration:

Switch(config)#interface fastEthernet 0/12

Switch(config-if)#switchport port-security maximum 1 Switch(config)#copy run start

A.

 » Read more about: Cisco 642-502 Certification Braindumps, Best Cisco 642-502 Study Guide Book For Download  »

Flydumps Cisco 642-545 exam questions and answers in PDF are prepared by our expert, Moreover, they are based on the recommended syllabus covering all the Cisco 642-545 exam objectives.You will find them to be very helpful and precise in the subject matter since all the Cisco 642-545 exam content is regularly updated and has been checked for accuracy by our team of Microsoft expert professionals.

Exam A
QUESTION 1
The Cisco Security Monitoring, Analysis, and Response System (Cisco Security MARS) is an appliance-based, all-inclusive solution that provides unmatched insight and control of your existing security deployment. Which three items are correct with regard to Cisco Security MARS rules? (Choose three.)
A. There are three types of rules.
B. Rules can be deleted.
C. Rules can be created using a query.
D. Rules trigger incidents.

Correct Answer: ACD Section: (none) Explanation
Explanation/Reference:
QUESTION 2
Which three benefits are of deploying Cisco Security MARS appliances by use of the global and local controller architecture? (Choose three.)
A. A global controller can provide a summary of all local controllers information (network topologies, incidents, queries, and reports results).
B. A global controller can provide a central point for creating rules and queries, which are applied simultaneously to multiple local controllers.
C. A global controller can correlate events from multiple local controllers to perform global sessionizations.
D. Users can seamlessly navigate to any local controller from the global controller GUI.

Correct Answer: ABD Section: (none) Explanation
Explanation/Reference:
QUESTION 3
Which item is the best practice to follow while restoring archived data to a Cisco Security MARS appliance?
A. Use Secure FTP to protect the data transfer.
B. Use “mode 5” restore from the Cisco Security MARS CLI to provide enhanced security during the data transfer.
C. Choose Admin > System Maintenance > Data Archiving on the Cisco Security MARS GUI to perform the restore operations on line.
D. To avoid problems, restore only to an identical or higher-end Cisco Security MARS appliance.

Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 4
A Cisco Security MARS appliance can’t access certain devices through the default gateway. Troubleshooting has determined that this is a Cisco Security MARS configuration issue. Which additional Cisco Security MARS configuration will be required to correct this issue?

 » Read more about: New Updated Cisco 642-545 Exam Questions And Answers  »

Do not you know how to choose the Cisco 642-504 exam dumps? Being worried about the changed questions? Just try Flydumps new version Cisco 642-504 exam dumps. All the new questions and answers were added to the new dumps,visit Flydumps.com to free download Cisco 642-504 !

Exam A
QUESTION 1
Which two are technologies that secure the control plane of the Cisco router? (Choose two.)
A. Cisco IOS Flexible Packet Matching
B. uRPF
C. routing protocol authentication
D. CPPr
E. BPDU protection
F. role-based access control
Correct Answer: CD Section: (none) Explanation
Explanation/Reference:
QUESTION 2
What are the two category types associated with 5.x signature use in Cisco IOS IPS? (Choose two.)
A. basic
B. advanced
C. 128MB.sdf
D. 256MB.sdf
E. attack-drop
F. built-in
Correct Answer: AB Section: (none) Explanation
Explanation/Reference:
QUESTION 3
Refer to the exhibit.
Which optional AAA or RADIUS configuration command is used to support 802.1X guest VLAN
functionality?
A. aaa authentication dot1x default group radius
B. aaa authorization network default group radius
C. aaa accounting dot1x default start-stop group radius
D. aaa accounting system default start-stop group radius
E. radius-server host 10.1.1.1 auth-port 1812 acct-port 1813
Correct Answer: B Section: (none)
Explanation
Explanation/Reference:
QUESTION 4
Which is an advantage of implementing the Cisco IOS Firewall feature?
PassGuide.com-Make You Succeed To Pass IT Exams PassGuide 642-504
A. provides self-contained end-user authentication capabilities
B. integrates multiprotocol routing with security policy enforcement
C. acts primarily as a dedicated firewall device
D. is easily deployed and managed by the Cisco Adaptive Security Device Manager
E. provides data leakage protection capabilities
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 5
Which three statements correctly describe the GET VPN policy management? (Choose three.)
A. A central policy is defined at the ACS (AAA) server.

 » Read more about: New Questions-100% Valid New Updated Questions for Cisco 642-504 Download  »