Cisco 642-584 Online Practice Questions and Exam Preparation

Cisco 642-584 Online Questions & Answers

• Question 21:

  Which two are key advantages of using Cisco ASDM for Cisco ASA device management? (Choose two.)

  A. Rapid configuration
  B. Powerful diagnostics
  C. No need for a console connection
  D. Offline monitoring
  E. Easy installation
  A. Rapid configuration
  B. Powerful diagnostics

• Question 22:

  A customer wants to use the Cisco ASA for a VPN to interconnect the central site and three branches. Which type of VPN would you recommend?

  A. IPsec site-to-site VPN
  B. IPsec remote access VPN
  C. SSL remote access VPN
  D. SSL site-to-site VPN
  A. IPsec site-to-site VPN

• Question 23:

  Which two security features are part of the Cisco Catalyst Integrated Security Toolkit, which is available on almost all Cisco Catalyst switches? (Choose two.)

  A. IP source guard
  B. Static ARP inspection
  C. MACsec
  D. DNS snooping
  E. SGACL
  F. Port security
  A. IP source guard
  F. Port security

• Question 24:

  Which three are valid Cisco email security deployment options? (Choose three.)

  A. Hosted email security
  B. Hybrid hosted email security
  C. Managed appliances email security
  D. Client-based email security
  E. Email security on BYOD devices
  A. Hosted email security
  B. Hybrid hosted email security
  C. Managed appliances email security

• Question 25:

  Which statement about EoMPLS and VPLS is true?

  A. EoMPLS is based on the Pseudowire Reference Model.
  B. EoMPLS does not provide point-to-point connections.
  C. VPLS emulates a point-to-multipoint IPsec VPN over MPLS.
  D. VPLS supports only partially meshed and hub-and-spoke topologies.
  A. EoMPLS is based on the Pseudowire Reference Model.

• Question 26:

  Which three are security-related advantages of desktop virtualization? (Choose three.)

  A. Performing an automatic lockdown in case of a security incident
  B. Storing user data in the data center
  C. Running applications in the data center
  D. Providing isolated VMs
  E. Preventing unintentional end user errors
  B. Storing user data in the data center
  C. Running applications in the data center
  D. Providing isolated VMs

• Question 27:

  Which of these products is the best choice to prevent undesired content from being sent through a guest connection?

  A. Cisco ISR G2 or Cisco ASA and ScanSafe
  B. Host IPS via Cisco ISE posture
  C. IPS
  D. Personal firewall via ISE posture
  A. Cisco ISR G2 or Cisco ASA and ScanSafe

• Question 28:

  Which statement about MACsec is true?

  A. MACsec provides Layer 2 hop-by-hop encryption, based on the 802.1AE standard.
  B. Cisco AnyConnect Release 3.0 supports both roles: supplicant and authenticator?
  C. 802.1X protection includes the CMD field, which is used to carry the security group tag value.
  D. MACsec does not work between any MACsec-capable supplicant and authenticator.
  A. MACsec provides Layer 2 hop-by-hop encryption, based on the 802.1AE standard.

• Question 29:

  What are two advantages of IKEv2 and Cisco FlexVPN? (Choose two.)

  A. IKEv2 is backwards compatible with IKEv1.
  B. Cisco FlexVPN supports interoperability, dynamic routing, direct spoke-to-spoke communication, remote access, source failover, per-peer QoS, and Full AAA management.
  C. IKEv2 consolidates several VPN key management features and standards into one new standard.
  D. The anticlogging cookie feature from IKEv1 has been improved.
  E. IKEv2 uses IP protocol numbers 50 and 51.
  B. Cisco FlexVPN supports interoperability, dynamic routing, direct spoke-to-spoke communication, remote access, source failover, per-peer QoS, and Full AAA management.
  C. IKEv2 consolidates several VPN key management features and standards into one new standard.

• Question 30:

  Which two statements about CVD and SBA are true? (Choose two.)

  A. SBA guides are available for enterprise deployments only.
  B. CVD includes everything from rough designs to tested versions of software code.
  C. Gold partners have access to a demo lab for each validated design.
  D. CVD is technology-oriented, while SBA is market- and solution-oriented.
  B. CVD includes everything from rough designs to tested versions of software code.
  D. CVD is technology-oriented, while SBA is market- and solution-oriented.