Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 71:

  What are two advantages of using integrated systems and appliances? Choose two.

  A. increased feature functionality B. achieve better performance
  C. implement on existing equipment
  D. improved manageability
  E. achieve better interoperability
  C. implement on existing equipment
  E. achieve better interoperability

• Question 72:

  What causes the default TCP intercept feature of the IOS Firewall to become more aggressive? Choose two.

  A. the number of connections arriving in the last 10 minutes exceeds 1000
  B. the number of incomplete connections exceeds 100
  C. the number of connections arriving in the last 1 minute exceeds 1100
  D. the number of incomplete connections exceeds 1100
  C. the number of connections arriving in the last 1 minute exceeds 1100
  D. the number of incomplete connections exceeds 1100

• Question 73:

  What signature actions can be configured on an IDS Sensor in the SAFE SMR medium network design? Choose two.

  A. IP log
  B. none
  C. total reassembly
  D. UDP reassembly
  A. IP log
  B. none

• Question 74:

  What threats are expected for the SAFE SMR small network campus module? Choose two.

  A. IP spoofing
  B. packets sniffers
  C. denial of service
  D. applications layer attacks
  B. packets sniffers
  D. applications layer attacks

• Question 75:

  Wired Equivalent Privacy (WEP) operates at what layer of the OSI model?

  A. data link
  B. transport
  C. network
  D. physical
  A. data link

• Question 76:

  Which are key devices in the SAFE SMR midsize network design midsize network campus module? Choose three.

  A. Syslog hosts
  B. Layer 3 switches
  C. WAN router
  D. firewalls
  E. corporate servers
  F. VPN Concentrator
  A. Syslog hosts
  B. Layer 3 switches
  E. corporate servers

• Question 77:

  Which are attack mitigation roles for the software access option in the SAFE SMR remote user network environment? Choose two.

  A. terminate IPSec
  B. host DoS mitigation
  C. authenticate remote site
  D. stateful packet filtering
  E. basic Layer 7 filtering
  A. terminate IPSec
  C. authenticate remote site

• Question 78:

  What is the function of a crypto map on a PIX Firewall?

  A. to configure a pre-shared authentication key and associate the key with an IPSec peer address or host name
  B. to define the policy that will be applied to the traffic
  C. to map transforms to transform sets
  D. to specify which algorithms will be used with the selected security protocol
  B. to define the policy that will be applied to the traffic

• Question 79:

  How do you check syslog information to ensure that it has not been altered in transit?

  A. host IDS inspects the packet to ensure time stamps are concurrent
  B. Syslog has no checking to ensure that the packet contents have not been altered in transit
  C. the firewall inspects the packet to ensure time stamps are concurrent
  D. IPSec inspects the packet to ensure time stamps are concurrent E. packets use CRC to ensure data has not been altered in transit
  B. Syslog has no checking to ensure that the packet contents have not been altered in transit

• Question 80:

  According to SAFE implementation of IPSec VPN, what are key VPN devices in a medium network? (Select three.)

  A. NIDS appliance
  B. VPN router
  C. distribution router
  D. VPN firewall
  E. VPN Concentrator
  F. interior firewall
  A. NIDS appliance
  D. VPN firewall
  E. VPN Concentrator