Tag: 642-544
Newest PDF And VCE Cisco 642-544 Exam Dumps With New Added Questions
Flydumps Cisco 642-544 exam questions and answers in PDF are prepared by our expert, Moreover,they are based on the recommended syllabus covering all the Cisco 642-544 exam objectives.You will find them to be very helpful and precise in the subject matter since all the Microsoft Cisco 642-544 exam content is regularly updated and has been checked for accuracy by our team of Microsoft expert professionals.
Exam A
QUESTION 1
What will happen if you try to run a Cisco Security MARS query that will take a long time to complete?
A. After submitting the query, the Cisco Security MARS GUI screen will be locked up until the query is completed.
B. The query will be automatically saved as a rule.
C. The query will be automatically saved as a report.
D. You will be prompted to “Submit Batch” to run the query in batch mode.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 2
The Cisco Security MARS appliance supports which protocol for data archiving and restoring?
A. NFS
B. TFTP
C. FTP
D. Secure FTP
E. SSH
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 3
What is a benefit of using the dollar variable (as in $TARGET01) when creating queries in Cisco Security MARS?
A. The dollar variable enables multiple queries to reference the same common 5-tuple information using a variable.
B. The dollar variable ensures that the probes and attacks that are reported are happening to the same host.
C. The dollar variable allows matching of any unknown reporting device.
D. The dollar variable allows matching of any event type groups.
E. The dollar variable enables the same query to be applied to different reports.
F. The dollar variable enables the same query to be applied to different cases.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 4
A Cisco Security MARS appliance cannot access certain devices through the default gateway. Troubleshooting has determined that this is a Cisco Security MARS configuration issue.
Which additional Cisco Security MARS configuration will be required to correct this issue?
A. use the Cisco Security MARS GUI or CLI to enable a dynamic routing protocol
B. use the Cisco Security MARS CLI to add a static route
C. use the Cisco Security MARS GUI to configure multiple default gateways
D. use the Cisco Security MARS GUI or CLI to configure multiple default gateways
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 5
What are three ways to add devices to the Cisco Security MARS appliance? (Choose three.)
A. import the devices from CiscoWorks
B. import the devices from Cisco Security Manager
C. load the devices from seed files
D. use SNMP auto discovery
E. use CDP to automatically discover the neighboring devices
F. manually add the devices, one at a time
Correct Answer: CDF Section: (none) Explanation
Explanation/Reference:
QUESTION 6
Which action enables the Cisco Security MARS appliance to ignore false-positive events by either dropping the events completely, or by just logging them to the database?
» Read more about: Newest PDF And VCE Cisco 642-544 Exam Dumps With New Added Questions »
Share The Latest Free Official Cisco 642-544 Exam Training Questions And Answers
Preparing for Microsoft exams of Cisco 642-544 is really a tough task to accomplish.Flydumps delivers the most comprehensive preparation material,covering each and every aspect of Cisco 642-544 exam curriculum and all the brain is the latest.You can pass Cisco 642-544 exam without any problem
Exam A
QUESTION 1
Refering to the rule shown on the MARS GUI screen, which two of the following statements are correct? (Choose two.)
A. This rule will fire if the offset 1 condition occurs “OR” if the offset 2 condition occurs.
B. This rule will fire if the offset 3 condition occurs.
C. The expressions between cells are “AND’ while the expressions between items in the same cell are “OR”.
D. This is a user-defined rule.
E. This rule can be deleted after changing its status to “inactive.”
Correct Answer: BC Section: (none) Explanation
Explanation/Reference:
QUESTION 2
To configure a Microsoft Windows IIS server to publish logs to the Cisco Security MARS, which log agent is installed and configured on the Microsoft Windows IIS server?
A. pnLog agent
B. Cisco Security MARS agent
C. SNARE
D. None. Cisco Security MARS is an agentless device.
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 3
Drop A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference:
QUESTION 4
A Cisco Security MARS appliance cannot access certain devices through the default gateway. Troubleshooting has determined that this is a Cisco Security MARS configuration issue.
Which additional Cisco Security MARS configuration will be required to correct this issue?
A. use the Cisco Security MARS GUI or CLI to enable a dynamic routing protocol
B. use the Cisco Security MARS CLI to add a static route
C. use the Cisco Security MARS GUI to configure multiple default gateways
D. use the Cisco Security MARS GUI or CLI to configure multiple default gateways
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 5
Which action enables the Cisco Security MARS appliance to ignore false-positive events by either dropping the events completely, or by just logging them to the database?
