Tag: Cisco 642-503
Cisco 642-503 Real Questions Answers, First-hand Cisco 642-503 Practice Exam Online Store
100% Valid And Newest–Do not worry about your Cisco 642-503 exam! Just try Flydumps the latest Cisco 642-503 exam dumps.The latest new version with all the official new added Cisco 642-503 questions and answers.High pass rate and money back
QUESTION 45
When you implement 802.1x authentication on the ACS, which two configurations are performed under the ACS System Configuration? (Choose two.)
A. Users
B. Groups
C. Global Authentication Setup
D. RACs
E. Logging
F. NAPs
Correct Answer: CE Section: (none) Explanation
Explanation/Reference:
QUESTION 46
Which three of these statements are correct regarding DMVPN configuration? (Choose three.)
A. If running EIGRP over DMVPN, the hub router tunnel interface must have “next hop self” enabled: ip next-hop-self eigrp AS-Number
B. If running EIGRP over DMVPN, the hub router tunnel interface must have split horizon disabled: no ip split-horizon eigrp AS-Number
C. The spoke routers must be configured as the NHRP servers: ip nhrp nhs spoke-tunnel-ip-address
D. At the spoke routers, static NHRP mapping to the hub router is required: ip nhrp map hub-tunnel-ip-address hub-physical-ip-address
E. The GRE tunnel mode must be set to point-to-point mode: tunnel mode gre point-to-point
F. The GRE tunnel must be associated with an IPsec profile: tunnel protection ipsec profile profile-name
Correct Answer: BDF Section: (none) Explanation
Explanation/Reference:
QUESTION 47
Refer to the exhibit. What will result from this zone-based firewall configuration?
A. All traffic from the private zone to the public zone will be dropped.
B. All traffic from the private zone to the public zone will be permitted but not inspected.
C. All traffic from the private zone to the public zone will be permitted and inspected.
D. All traffic from the public zone to the private zone will be permitted but not inspected.
E. Only HTTP and DNS traffic from the private zone to the public zone will be permitted and inspected.
F. Only HTTP and DNS traffic from the public zone to the private zone will be permitted and inspected.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 48
Drop
A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference:
Answer: Check certifyme eEngine, Download from Member Center
QUESTION 49
A.
Cisco 642-503 Brain Dumps, Money Back Guarantee Cisco 642-503 Demo Download 100% Pass With A High Score
Flydumps offers the first-hand Cisco 642-503 exam real questions and answers, by train the latest Cisco 642-503 PDF and VCE dumps,you will well prepare for the Cisco 642-503 exam. Visit Flydumps.com to get free new version for training.
QUESTION 46
Please study the exhibit carefully.
When you configure DHCP snooping, which ports should be configured as trusted ?
A. port E only
B. port A only
C. ports B and C
D. ports A, B, C, and E
E. ports A, B, and C
F. ports B, C, and E
Correct Answer: E Section: (none) Explanation
Explanation/Reference:
Explanation: Understanding DHCP Snooping and Mitigating DHCP Attacks DHCP snooping is a switch feature that determines which switch ports can respond to DHCP requests. To accomplish this configuration, you must configure a port as either trusted or untrusted. Untrusted ports can source requests only, whereas trusted ports can source DHCP replies. This will help you prevent the attack by controlling where the DHCP server is and the path that you expect DHCP replies to come from. Reference: CCSP SNRS Quick Reference Sheets
QUESTION 47
Refer to the DMVPN topology diagram in the exhibit. Which two statements are correct? (Choose two.)
A. The hub router Certkiller 1 needs to have EIGRP split horizon disabled.
B. At the Certkiller 4 router, the next hop to reach the 192.168.0.0/24 network is 172.17.0.1.
C. The spoke routers Certkiller 2 and Certkiller 4 act as the NHRP servers for resolving the remote spoke physical interface IP address.
D. At the Certkiller 2, the next hop to reach the 192.168.1.0/24 network is 172.17.0.1.
E. Before a spoke-to-spoke tunnel can be built, the spoke router needs to send an NHRP query to the hub to resolve the remote spoke router physical interface IP address.
F. At the Certkiller 4, the next hop to reach the 192.168.2.0/24 network is 10.0.0.1.
Correct Answer: AE Section: (none)
Explanation
Explanation/Reference:
Explanation: For spoke-to-spoke DMVPN networks, a unique challenge exists because the spokes cannot directly exchange information with one another, even though they are on the same logical subnet. This means that the hub router needs to advertise subnets from the other spokes on the same subnet. The IP routing rule known as split horizon prevents the hub from doing this: SNRS_ROUTER(config-router)#interface tunnel 0 SNRS_ROUTER(config-if)#no ip split-horizon eigrp 1 Reference: CCSP SNRS Quick Reference Sheets NHRP-A client and server protocol where the hub is the server and the spokes are the clients. The hub maintains an NHRP database of the public interface addresses of the each spoke. Each spoke registers its real address when it boots and queries the NHRP database for real addresses of the destination spokes in order to build direct tunnels. Reference: Cisco IOS Security Configuration Guide, Release 12.4
QUESTION 48
What does thiscommand do?
