Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 211:

  How are password attacks mitigated in the SAFE SMR midsize network design corporate Internet module?

  A. filtering at the ISP, edge router, and corporate firewall
  B. e-mail content filtering, HIDS, and host-based virus scanning
  C. OS and IDS detection
  D. RFC 2827 and 1918 filtering at ISP edge and midsize network edge router
  E. CAR at the ISP edge and TCP setup controls at the firewall
  C. OS and IDS detection

• Question 212:

  What are private VLANs?

  A. tools that allow segregating traffic at Layer 2, turning broadcast segments into non-broadcast, multi-access-like segments
  B. tools that allow segregating traffic at Layer 3, turning broadcast segments into non-broadcast, multi-access-like segments
  C. tools that allow segregating traffic at Layer 3, turning non-broadcast, multi-access-like segments into broadcast segments
  D. tools that allow segregating traffic at Layer 2, turning non-broadcast, multi-access-like segments into broadcast segments
  A. tools that allow segregating traffic at Layer 2, turning broadcast segments into non-broadcast, multi-access-like segments

• Question 213:

  What type of authentication does the Cisco 3000 Series Concentrator use?

  A. TACACS+
  B. RADIUS
  C. PAP
  D. CHAP
  B. RADIUS

• Question 214:

  What is an assumption of SAFE SMR?

  A. implementing SAFE SMR guarantees a secure environment
  B. SAFE SMR does not assume application and OS security
  C. network contains only Cisco devices
  D. the security policy is already in place
  D. the security policy is already in place

• Question 215:

  When allowing syslog access from devices outside a firewall, what filtering at the perimeter router should you implement?

  A. RFC 2827
  B. RFC 1918
  C. RFC 1642
  D. no filtering should be implemented since it will block the syslog traffic
  E. RFC 1281
  A. RFC 2827

• Question 216:

  SIMULATION

  

  Paramteter Value Policy priority number 20 encryption algorithm 3des hash algorithm md5 authentication method pre-share Diffle-Hellman group Identifler 2 SA lifetime 83000 Pre-shared Key mycisco Transform Set Name ciscoset ISAKMP Identify Type IP address PIX Firewall Outside Interface Add 192.168.1.2 Branch Office Outside Interface Add 172.26.26.101 Crypto Map Name myamp Netmask 255.255.255.0

  IPsec paramters are not configured,should not be configured and consequently the tunnel will not be established

  The router and PIX have been configured with the following specifications: Branch Office Router Name:Wimberley E0/0: 10.2.1.1/24 E0/1: 172.26.26.101/24 Enable Password:cisco

  Corporate Office PIX Name: Blanco E0: 192.168.1.2/24 E1: 10.2.1.1/24 Enable Password:cisco

  Check the answer below

  Branch PC(configure router)

  Wimberley#conf t Wimberley(config)#crypto isa policy 20 Wimberley(config-isakmp)#enc 3des Wimberley(config-isakmp)#au pre-share Wimberley(config-isakmp)#hash md5 Wimberley(config-isakmp)#group 2 Wimberley(config-isakmp)#lifetime 83000 Wimberley(config-isakmp)#exit Wimberley(config)#crypto isa key mycisco address 192.168.1.2 Wimberley(config)#exit Corporate pc(configure PIX)

  Blanco(config)#crypto isakmp policy 20 enc 3des Blanco(config)#crypto isakmp policy 20 au pre-share Blanco(config)#crypto isakmp policy 20 hash md5 Blanco(config)#crypto isakmp policy 20 group 2 Blanco(config)#crypto isakmp policy 20 lifetime 83000 Blanco(config)#crypto isa key mycisco address 172.26.26.101

• Question 217:

  Which vulnerability is not expected in a network design comprised of multiple security zones, multiple user groups, and a single physical switch?

  A. VTP attacks
  B. MAC spoofing
  C. CAM table overflow
  D. private VLAN attacks
  E. VLAN hopping
  A. VTP attacks

• Question 218:

  After being authenticated, which actions are performed on dial-in access users in the SAFE SMR midsize network design corporate Internet module?

  A. users are provided with IP addresses from an IP pool
  B. traffic is sent through a router
  C. CHAP is used to authenticate the user
  D. traffic is sent through a Layer 3 switch
  A. users are provided with IP addresses from an IP pool