Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 21:

  Which IDS guideline should be followed, according to SAFE SMR?

  A. use TCP resets no longer than 15 minutes
  B. use UDP resets more often than shunning, because UDP traffic is more difficult to spoof
  C. use UDP resets no longer than 15 minutes
  D. use TCP resets more often than shunning, because TCP traffic is more difficult to spoof
  D. use TCP resets more often than shunning, because TCP traffic is more difficult to spoof

• Question 22:

  How are denial of service attacks mitigated in the SAFE SMR midsize network design corporate Internet module?

  A. filtering at the ISP, edge router, and corporate firewall
  B. CAR at the ISP edge and TCP setup controls at the firewall
  C. RFC 2827 and 1918 filtering at ISP edge and midsize network edge router
  D. IDS at the host and network levels
  E. OS and IDS detection
  F. e-mail content filtering, HIDS, and host-based virus scanning
  B. CAR at the ISP edge and TCP setup controls at the firewall

• Question 23:

  Which model is recommended for an IDS with at least 100 Mbps performance?

  A. 4250
  B. 4220
  C. 4260
  D. 4210
  A. 4250

• Question 24:

  What are the features of Temporal Key Integrity Protocol (TKIP)?

  A. TKIP is 802.11g standard that offers per-packet keying and message integrity check
  B. TKIP is 802.11i standard that offers per-packet keying and message integrity check
  C. TKIP is 802.11g standard that offers complementary code keying and message integrity check
  D. TKIP is 802.11i standard that offers complementary code keying and message integrity check
  B. TKIP is 802.11i standard that offers per-packet keying and message integrity check

• Question 25:

  According to SAFE SMR guidelines, what type of VPN uses primarily Cisco VPN optimized routers?

  A. site-to-site
  B. intranet to extranet
  C. extranet to remote users
  D. intranet to remote users
  A. site-to-site

• Question 26:

  The ip verify reverse-path command implements which of the following on the PIX Firewall?

  Choose two.

  A. provides session state information based on destination address
  B. performs a route lookup based on the source address
  C. provides ingress filtering
  D. performs a route lookup based on the destination address
  E. provides session state information based on source address
  B. performs a route lookup based on the source address
  C. provides ingress filtering

• Question 27:

  What method helps mitigate the threat of IP spoofing?

  A. SNMP polling
  B. access control
  C. logging
  D. Layer 2 switching
  B. access control

• Question 28:

  What is the primary identity component in a Cisco security solution?

  A. Cisco Access Control servers
  B. Cisco PIX Firewalls
  C. Cisco VPN Concentrators
  D. Cisco IDS Sensors
  E. Cisco IOS Firewalls
  A. Cisco Access Control servers

• Question 29:

  Which IDS guidelines should be followed, according to SAFE SMR?

  A. use shunning no longer than 15 minutes
  B. use shunning on only UDP traffic, as it is more difficult to spoof than TCP
  C. use shunning on only TCP traffic, as it is more difficult to spoof than UDP
  D. use TCP shunning as opposed to TCP resets
  C. use shunning on only TCP traffic, as it is more difficult to spoof than UDP

• Question 30:

  Which three statements about the monitoring stage of the Security Wheel are true? Choose three.

  A. It detects violations to the security policy.
  B. It validates the security implementation in step 1.
  C. New security policies are created during this stage.
  D. Adjustments are made to the security policy as security vulnerabilities and risks are identified.
  E. It involves system auditing and real-time intrusion detection.
  F. It involves the use of security assessments and vulnerability scanning.
  A. It detects violations to the security policy.
  B. It validates the security implementation in step 1.
  E. It involves system auditing and real-time intrusion detection.