Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 51:

  According to SAFE guidelines for implementing VPN IPSec, which of these statements are true? (Select two.)

  A. Wildcard preshared keys should be used for site-to-site device authentication.
  B. Digital certificates are not tied to IP addresses but to unique, signed information on the device that is validated by the CA.
  C. Digital certificates provide nonrepudiation but no public/private key pair aging.
  D. Digital certificates scale better but require additional administrative resources to deploy and manage.
  E. Unique preshared keys are recommended between two devices and can scale in a large network.
  B. Digital certificates are not tied to IP addresses but to unique, signed information on the device that is validated by the CA.
  D. Digital certificates scale better but require additional administrative resources to deploy and manage.

• Question 52:

  When using PC-based IP phones, which threat is expected between data and voice segments if not protected by a stateful firewall?

  A. TCP flood DoS attack
  B. application layer attack
  C. UDP flood DoS attack
  D. IP spoofing attack
  C. UDP flood DoS attack

• Question 53:

  What version of the Cisco PIX Firewall is required to use the VPN accelerator card?

  A. version 5.3 or higher
  B. version 3.3 or higher
  C. version 2.3 or higher
  D. version 6.3 or higher
  E. version 4.3 or higher
  A. version 5.3 or higher

• Question 54:

  What is IP logging, as defined for the Cisco IDS appliance?

  A. IDS logs user information from an attacking host
  B. IDS captures packets from an attacking host
  C. IDS logs IP address information for hosts being attacked
  D. IDS logs IP address information from an attacking host
  B. IDS captures packets from an attacking host

• Question 55:

  What options can be chosen for TCP session reassembly on the IDS Sensor in the SAFE SMR medium network design? Choose two.

  A. no reassembly
  B. IP reassembly
  C. total reassembly
  D. loose reassembly
  A. no reassembly
  D. loose reassembly

• Question 56:

  DRAG DROP

  According to SAFE best practices for routing protocols, which items are examples of disrupitng peering attacks?

  Select and Place:

  

  

• Question 57:

  What are the three modules in the SAFE SMR midsize network design? Choose three.

  A. corporate Internet module
  B. campus module
  C. WAN module
  D. frame/ATM module
  E. PSTN module
  F. ISP edge module
  A. corporate Internet module
  B. campus module
  C. WAN module

• Question 58:

  Which is true with regard to creating an RPC entry with the NFS program number?

  A. NFS traffic designated as hostile will not be allowed through the firewall
  B. NFS traffic designated as friendly will be allowed through the firewall
  C. all NFS traffic will be allowed through the firewall
  D. no NFS traffic will be allowed through the firewall
  C. all NFS traffic will be allowed through the firewall

• Question 59:

  Which is a design alternative in the SAFE Enterprise network design server module?

  A. proper aggregation and analysis of the Syslog information
  B. combine server module with the core module
  C. connection state enforcement and detailed filtering
  D. a separate router can be used between the server and edge distribution module rather than the layer 3 switch
  B. combine server module with the core module

• Question 60:

  According to SAFE SMR, which Cisco router is best suited for a remote office?

  A. 7100 and 7200 series
  B. 800 and 900 series
  C. 1700 series
  D. 2600 and 3600 series
  C. 1700 series