Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 111:

  What are the three modules in the SAFE SMR midsize network design? Choose three.

  A. corporate Internet module
  B. frame/ATM module
  C. campus module
  D. ISP edge module
  E. WAN module
  F. PSTN module
  A. corporate Internet module
  C. campus module
  E. WAN module

• Question 112:

  According to SAFE IPSec VPN, which is not a design objective to guide the decision-making process in implementing VPN?

  A. secure connectivity and management
  B. reliability, performance, and scalability
  C. tuning and reporting
  D. security and attack mitigation before and after IPSec
  E. authentication of users and devices in the VPN
  F. high availability
  C. tuning and reporting

• Question 113:

  DRAG DROP

  Frome the modules listed, select the four that could be part of the SAFE Enterprise Network Edge. Place them under SAFE Enterprise Network Edge modules. You will not use all the options.

  Select and Place:

  

  

• Question 114:

  How many options exist for remote user connectivity in the SAFE SMR remote user network?

  A. 1
  B. 4
  C. 5
  D. 2
  E. 3
  B. 4

• Question 115:

  What service is provided by CSA Profiler?

  A. Profiler monitors and logs security events that occur on CSA protected hosts.
  B. Profiler provides a COM component utility that installs with each CSA.
  C. Profiler configures agent kits that are deployed on CSA protected hosts.
  D. Profiler analyzes applications to help in generating useful policies.
  D. Profiler analyzes applications to help in generating useful policies.

• Question 116:

  What are the radio frequency bands used by IEEE 802.11 standards? Choose two.

  A. 900 GHz
  B. 2.8 MHz
  C. 5 GHz
  D. 2.2 MHz
  E. 2.4 GHz
  F. 900 MHz
  C. 5 GHz
  E. 2.4 GHz

• Question 117:

  According to SAFE worm mitigation, which of the following is not a mitigation for MS Blaster?

  A. NBAR
  B. NetFlow
  C. CAR
  D. sink-hole routers
  E. private VLANs
  D. sink-hole routers

• Question 118:

  Which is true about the PIX Firewall in the remote site firewall option in the SAFE SMR remote user design environment?

  A. ISAKMP is enabled by default
  B. ISAKMP is disabled by default
  C. ISAKMP is enabled when the ISAKMP policy is created
  D. ISAKMP is enabled when the crypto map is applied to the interface
  A. ISAKMP is enabled by default

• Question 119:

  Which command implements Unicast RPF IP spoofing protection?

  A. access-group
  B. access-list
  C. tcp verify reverse-path interface
  D. udp verify reverse-path interface
  E. ip verify reverse-path interface
  E. ip verify reverse-path interface

• Question 120:

  According to SAFE IPSec VPN, which of the following design guidelines for implementing NAT are true? (Select three.)

  A. When applying NAT after IPSec, use AH tunnel mode instead of ESP.
  B. Enabling NAT transparency mode will not resolve the connection problems associated with client applications that are not NAT friendly.
  C. When applying NAT after IPSec, use ESP tunnel mode instead of AH.
  D. IPSec tunnel will establish between two networks even if address ranges overlap.
  E. IPSec tunnel will not establish between two networks when address ranges overlap.
  F. Enabling NAT transparency mode will resolve the connection problems associated with client applications that are not NAT friendly.
  B. Enabling NAT transparency mode will not resolve the connection problems associated with client applications that are not NAT friendly.
  C. When applying NAT after IPSec, use ESP tunnel mode instead of AH.
  E. IPSec tunnel will not establish between two networks when address ranges overlap.