Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 61:

  Which IEEE standards are supported by Cisco Aironet 1200 Series access point? Choose three.

  A. 802.11g
  B. 802.11h
  C. 802.11j
  D. 802.11a
  E. 802.11b
  F. 802.11c
  A. 802.11g
  D. 802.11a
  E. 802.11b

• Question 62:

  Which commands are used for basic filtering in the SAFE SMR small network campus module? Choose two.

  A. access-list
  B. access-group
  C. ip route
  D. ip inspect-name
  A. access-list
  B. access-group

• Question 63:

  DRAG DROP

  Select four interceptors that are deployed by the CSA to provide protection. Move the four interceptors to the right column. You will not use all options.

  Select and Place:

  

  

• Question 64:

  Which three authentication methods are supported by CSACS? Choose three.

  A. RADIUS
  B. static passwords
  C. PAP
  D. TACACS+
  E. PPP
  F. CHAP
  A. RADIUS
  B. static passwords
  D. TACACS+

• Question 65:

  What is the definition of a strong password?

  A. defined by each company depending on the product being used
  B. at least eight characters long; contains uppercase letters, lowercase letters, numbers, and should not contain special characters
  C. at least eight characters long; contains uppercase letters, lowercase letters, numbers, and special characters
  D. at least ten characters long and should contain cryptographic characters
  C. at least eight characters long; contains uppercase letters, lowercase letters, numbers, and special characters

• Question 66:

  What is not a specific type of attack, but refers to most attacks that occur today?

  A. DoS B. IP spoofing
  C. unauthorized access
  D. brute force password
  C. unauthorized access

• Question 67:

  Which techniques does SAFE recommend to mitigate MAC spoofing attacks? (Select two.)

  A. Use port security.
  B. Implement IP Source Guard feature.
  C. Use DHCP snooping along with DAI.
  D. Implement BPDU guard enhancement command.
  E. Implement authentication for DHCP messages.
  F. Set all user ports to nontrunking mode.
  A. Use port security.
  C. Use DHCP snooping along with DAI.

• Question 68:

  What services do intranet VPNs provide?

  A. link telecommuters and mobile users to corporate network resources
  B. link network resources with third-party vendors and business partners
  C. link private networks to public networks
  D. link corporate headquarters to remote offices
  D. link corporate headquarters to remote offices

• Question 69:

  Following termination of the VPN tunnel, what action is performed on remote user traffic in the SAFE SMR midsize network design corporate Internet module?

  A. Traffic is sent through a firewall.
  B. Traffic is sent through a Layer 2 switch.
  C. Traffic is sent through a router.
  D. Traffic is sent through a Layer 3 switch.
  A. Traffic is sent through a firewall.

• Question 70:

  According to SAFE IPSec VPN, which of these are recommended design guidelines for maintaining high availability? (Select three.)

  A. Regardless of the high-availability mechanism chosen, a headend device should not be deployed in a configuration that results in CPU utilization higher than 50 percent after failure.
  B. Cisco does not recommend running IKE keepalives in combination with routing protocols for resilience to assist in keeping the state current.
  C. Cisco recommends running IKE keepalives in combination with routing protocols for resilience to assist in keeping the state current.
  D. Regardless of the high-availability mechanism chosen, a headend device should not be deployed in a configuration that results in CPU utilization higher than 75 percent after failure.
  E. When using VPN routers at the headend, use IKE keepalives for high availability.
  F. When using VPN Concentrators or VPN firewalls at the headend, use IKE keepalives for high availability.
  A. Regardless of the high-availability mechanism chosen, a headend device should not be deployed in a configuration that results in CPU utilization higher than 50 percent after failure.
  B. Cisco does not recommend running IKE keepalives in combination with routing protocols for resilience to assist in keeping the state current.
  F. When using VPN Concentrators or VPN firewalls at the headend, use IKE keepalives for high availability.