Cisco 642-584 Online Practice Questions and Exam Preparation

Cisco 642-584 Online Questions & Answers

• Question 31:

  What is not a security concern that is specific to virtualized environments?

  A. Policy enforcement for VMs in motion
  B. Lack of denial-of-service mitigation features
  C. Separation of compliant and non-compliant systems
  D. Lack of VM visibility, accountability, and consistency
  B. Lack of denial-of-service mitigation features

• Question 32:

  Which two statements about standard clients for wireless, wired, and VPN are true? (Choose two.)

  A. Most clients have wireless and VPN clients integrated already.
  B. Services of integrated clients differ per OS and include wireless clients, IPsec clients, and L2TP and PPTP clients.
  C. Standard clients are easy to manage by a central IT organization.
  D. Android mobile devices include the Cisco IPsec client.
  E. Apple iOS clients do not include the Cisco IPsec client.
  A. Most clients have wireless and VPN clients integrated already.
  B. Services of integrated clients differ per OS and include wireless clients, IPsec clients, and L2TP and PPTP clients.

• Question 33:

  Which statement best describes Cisco ISE?

  A. Cisco ISE consolidates user AAA, Security Group Access features, and ScanSafe functionality into one product.
  B. Cisco ISE consolidates user authentication with NAC components into one solution.
  C. Cisco ISE provides AAA features, guest provisioning, and device profiling features in the base feature set; link encryption policies, host posture, and security group access require the advanced feature set.
  D. Cisco ISE combines the capabilities of Cisco Secure ACS and Cisco Virtual Security Gateway into one product.
  B. Cisco ISE consolidates user authentication with NAC components into one solution.

• Question 34:

  Which statement about Cisco ASA performance and services is true?

  A. In Cisco ASA 5500-X product series deployment, a separate IPS and VPN hardware accelerator is required.
  B. The Cisco ASA 5555-X scales up to 16 Gbps of firewall throughput.
  C. When using BYOD in conjunction with Cisco ASA AnyConnect, an additional VPN hardware module is required.
  D. Cisco ASA IPS works in conjunction with Cisco SIO in order to provide botnet protection.
  D. Cisco ASA IPS works in conjunction with Cisco SIO in order to provide botnet protection.

• Question 35:

  Which two questions should you ask when assessing an organization's security needs? (Choose two.)

  A. Are you exploring new cloud business models?
  B. Are you enforcing the same security policies consistently across your organization?
  C. Are you using the latest hardware and software versions for your security devices?
  D. Are you using single-vendor security equipment?
  E. What are the operating hours of your security response team?
  A. Are you exploring new cloud business models?
  B. Are you enforcing the same security policies consistently across your organization?

• Question 36:

  Which four features are provided by the Cisco AnyConnect client for Windows? (Choose four.)

  A. SSL VPN
  B. IPsec VPN
  C. Host intrusion prevention system
  D. Presence
  E. MACsec encryption
  F. Antivirus
  G. Personal firewall
  H. Cisco ScanSafe integration
  A. SSL VPN
  B. IPsec VPN
  E. MACsec encryption
  H. Cisco ScanSafe integration

• Question 37:

  Which two statements about Cisco IPS are true? (Choose two.)

  A. Cisco IPS global correlation is performed before Cisco IPS reputation filters.
  B. Cisco ASA-integrated IPS and standalone IPS offer the same features.
  C. Cisco standalone IPS functionality can be virtualized.
  D. The Cisco IPS reputation filter is based on Cisco SIO and allows packets that are received from known malicious sources to be dropped before performing signature-based inspection.
  B. Cisco ASA-integrated IPS and standalone IPS offer the same features.
  D. The Cisco IPS reputation filter is based on Cisco SIO and allows packets that are received from known malicious sources to be dropped before performing signature-based inspection.

• Question 38:

  Which one is an additional feature of Cisco IPS Manager Express as compared to Cisco IPS Device Manager?

  A. Support for a single IPS device
  B. Intuitive user interface
  C. More powerful event management
  D. Health and performance tools
  C. More powerful event management

• Question 39:

  Which three are valid Cisco VPN design options for teleworkers? (Choose three.)

  A. Cisco AnyConnect VPN
  B. Cisco Secure ACS
  C. Cisco SSL VPN
  D. Cisco GET Easy VPN Remote
  E. Cisco Mobile VPN
  A. Cisco AnyConnect VPN
  C. Cisco SSL VPN
  E. Cisco Mobile VPN

• Question 40:

  Which statement about wireless intrusion prevention and rogue access point detection is true?

  A. A local mode access point provides power to wireless clients.
  B. A monitor mode access point performs background scanning in order to detect rogue access points.
  C. A monitor mode access point is dedicated to scanning (listen-only).
  D. A monitor mode access point can distribute a white list of all known access points.
  E. Any access point that broadcasts the same RF group name or is part of the same mobility group is considered to be a rogue access point.
  C. A monitor mode access point is dedicated to scanning (listen-only).