Cisco 642-542 Online Practice Questions and Exam Preparation

Cisco 642-542 Online Questions & Answers

• Question 81:

  The VPN acceleration module (VAM) is available on what series of VPN optimized routers? Choose two.

  A. 1700 Series
  B. 2600 Series
  C. 3600 Series
  D. 7200 Series
  E. 7100 Series
  D. 7200 Series
  E. 7100 Series

• Question 82:

  If split tunneling is disabled, how do remote users access the Internet when they have a VPN tunnel established in the software access option in the SAFE SMR remote user design environment?

  A. access to the Internet is not allowed
  B. the user must disable the VPN tunnel to access the Internet
  C. access to the Internet is provided via the corporate connection
  D. access to the Internet is provided via the ISP connection
  C. access to the Internet is provided via the corporate connection

• Question 83:

  Which threats are expected in the SAFE Enterprise Network Campus Building module? Choose two.

  A. port redirection attacks
  B. packet sniffers
  C. IP spoofing
  D. unauthorized access
  E. virus and trojan horse applications
  B. packet sniffers
  E. virus and trojan horse applications

• Question 84:

  What is the difference in implementation between the edge router and the ISP router in the SAFE SMR medium network design?

  A. The edge router is configured for rate limiting.
  B. The edge router is configured for more aggressive rate limiting.
  C. The ISP router is configured for more aggressive rate limiting.
  D. The ISP router is configured for rate limiting.
  D. The ISP router is configured for rate limiting.

• Question 85:

  What is the primary method for device authentication in a VoIP network?

  A. IP and MAC address
  B. MAC address
  C. SIP address
  D. IP address
  B. MAC address

• Question 86:

  What is an example of a trust model?

  A. NTP
  B. NTFS
  C. NFS
  D. NOS
  C. NFS

• Question 87:

  What service is provided by CSA Profiler?

  A. Profiler monitors and logs security events that occur on CSA protected hosts.
  B. Profiler analyzes applications to help in generating useful policies.
  C. Profiler provides a COM component utility that installs with each CSA.
  D. Profiler configures agent kits that are deployed on CSA protected hosts.
  B. Profiler analyzes applications to help in generating useful policies.

• Question 88:

  Which is a design alternative in the SAFE SMR midsize network design campus module?

  A. A URL filtering server can be placed on the public services segment to filter the types of Web pages employees can access.
  B. A NIDS appliance can be placed in front of the firewall.
  C. The end-user workstations can be connected directly to the core switch.
  D. The router between the firewall and the campus module can be eliminated.
  C. The end-user workstations can be connected directly to the core switch.

• Question 89:

  According to the SAFE Layer 2 security white paper, which is not a threat to switches?

  A. IP address spoofing
  B. VLAN hopping
  C. CAM table overflow
  D. DHCP starvation
  E. Spanning-Tree Protocol manipulation
  A. IP address spoofing

• Question 90:

  Which of the following is true about CSA?

  A. CSA is signature-based intrusion prevention system and creates significantly fewer true negatives than NIDS.
  B. CSA is a behavior-based intrusion prevention system and creates significantly fewer false negatives than NIDS.
  C. CSA is a signature-based intrusion prevention system and creates significantly fewer true positives than NIDS.
  D. CSA is a behavior-based intrusion prevention system and creates significantly fewer false positives than NIDS.
  D. CSA is a behavior-based intrusion prevention system and creates significantly fewer false positives than NIDS.