Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 91:

  How does Java applet filtering distinguish between trusted and untrusted applets?

  A. examines the applet for suspicious code
  B. relies on a list of external sites that you designate as friendly
  C. relies on a list of applets that you designate as hostile
  D. relies on a list of applets that you designate as friendly
  B. relies on a list of external sites that you designate as friendly

• Question 92:

  Which IDS guidelines should be followed, according to SAFE SMR?

  A. use shunning no longer than 15 minutes
  B. use TCP shunning as opposed to TCP resets
  C. use shunning on only TCP traffic, as it is more difficult to spoof than UDP
  D. use shunning on only UDP traffic, as it is more difficult to spoof than TCP
  C. use shunning on only TCP traffic, as it is more difficult to spoof than UDP

• Question 93:

  The remote site router option is nearly identical to which option?

  A. software access option
  B. hardware VPN Client option
  C. dial-up access option
  D. remote site firewall option
  D. remote site firewall option

• Question 94:

  Which of the following is not a SAFE guideline to proactively mitigate Code Red attacks?

  A. host intrusion prevention system
  B. access control
  C. network-based application recognition
  D. antivirus
  D. antivirus

• Question 95:

  What threats are expected for the SAFE SMR small network campus module? Choose two.

  A. packets sniffers
  B. IP spoofing
  C. applications layer attacks
  D. denial of service
  A. packets sniffers
  C. applications layer attacks

• Question 96:

  Which two general IP spoofing techniques does a hacker use? Choose two.

  A. an IP address within the range of trusted IP addresses
  B. an unknown IP address which cannot be traced
  C. an RFC 1918 address
  D. an authorized external IP address that is trusted
  A. an IP address within the range of trusted IP addresses
  D. an authorized external IP address that is trusted

• Question 97:

  Which vulnerability is not expected in a network design comprised of multiple security zones, multiple user groups, and a single physical switch?

  A. private VLAN attacks
  B. VTP attacks
  C. CAM table overflow
  D. MAC spoofing
  E. VLAN hopping
  B. VTP attacks

• Question 98:

  Which are key devices in the SAFE SMR midsize network design midsize network campus module? Choose three.

  A. NIDS host
  B. corporate servers
  C. layer 2 switches
  D. VPN Concentrator
  E. WAN router
  F. firewalls
  A. NIDS host
  B. corporate servers
  C. layer 2 switches

• Question 99:

  According to SAFE implementation of IPSec VPN, what are key VPN devices in a medium network? (Select three.)

  A. NIDS appliance
  B. VPN router
  C. VPN Concentrator
  D. interior firewall
  E. VPN firewall
  F. distribution router
  A. NIDS appliance
  C. VPN Concentrator
  E. VPN firewall

• Question 100:

  What method helps mitigate the threat of IP spoofing?

  A. SNMP polling
  B. logging
  C. Layer 2 switching
  D. access control
  D. access control