Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 1:

  In which module does the firewall exist in the SAFE SMR small network design?

  A. corporate Internet
  B. edge
  C. campus
  D. Internet
  A. corporate Internet

• Question 2:

  Which three authentication methods are supported by CSACS? Choose three.

  A. RADIUS
  B. CHAP
  C. PAP
  D. TACACS+
  E. static passwords
  F. PPP
  A. RADIUS
  D. TACACS+
  E. static passwords

• Question 3:

  In the SAFE SMR midsize network design, which module does dial-in traffic terminate?

  A. WAN module
  B. ISP edge module
  C. PSTN module
  D. campus module
  E. frame/ATM module
  F. corporate Internet module
  F. corporate Internet module

• Question 4:

  How are denial of service attacks mitigated in the SAFE SMR midsize network design corporate Internet module?

  A. RFC 2827 and 1918 filtering at ISP edge and midsize network edge router
  B. IDS at the host and network levels
  C. filtering at the ISP, edge router, and corporate firewall
  D. OS and IDS detection
  E. e-mail content filtering, HIDS, and host-based virus scanning
  F. CAR at the ISP edge and TCP setup controls at the firewall
  F. CAR at the ISP edge and TCP setup controls at the firewall

• Question 5:

  How many modules exist in the SAFE Enterprise Network Campus?

  A. 5
  B. 6
  C. 3
  D. 4
  B. 6

• Question 6:

  What are three of the key devices in the SAFE SMR small network campus module? Choose three.

  A. IOS firewall
  B. corporate servers
  C. PIX firewall
  D. user workstations
  E. Layer 2 switches
  F. NIDS
  B. corporate servers
  D. user workstations
  E. Layer 2 switches

• Question 7:

  What is the primary function of the IOS firewall in the SAFE SMR small network design?

  A. provide host DoS mitigation
  B. authenticate IPSec tunnels
  C. provide remote site connectivity and general filtering for sessions initiated through the firewall
  D. provide connection state enforcement and detailed filtering for sessions initiated through the firewall
  E. provide remote site authentication
  D. provide connection state enforcement and detailed filtering for sessions initiated through the firewall

• Question 8:

  According to SAFE IPSec VPN, which is not a design objective to guide the decision-making process in implementing VPN?

  A. secure connectivity and management
  B. security and attack mitigation before and after IPSec
  C. high availability
  D. authentication of users and devices in the VPN
  E. tuning and reporting
  F. reliability, performance, and scalability
  E. tuning and reporting

• Question 9:

  What is IP logging, as defined for the Cisco IDS appliance?

  A. IDS logs user information from an attacking host
  B. IDS logs IP address information for hosts being attacked
  C. IDS captures packets from an attacking host
  D. IDS logs IP address information from an attacking host
  C. IDS captures packets from an attacking host

• Question 10:

  Which method will always compute the password if it is made up of the character set you selected to test?

  A. brute force mechanism
  B. brute force computation
  C. strong password computation
  D. password reassemble
  B. brute force computation