Cisco 642-874 Online Practice Questions and Exam Preparation

Cisco 642-874 Online Questions & Answers

• Question 121:

  When designing remote access to the Enterprise Campus network for teleworkers and mobile workers, which of the following should the designer consider?

  A. It is recommended to place the VPN termination device in line with the Enterprise Edge firewall, with ingress traffic limited to SSL only
  B. Maintaining access rules, based on the source IP of the client, on an internal firewall drawn from a headend RADIUS server is the most secure deployment
  C. VPN Headend routing using Reverse Route Injection (RRI) with distribution is recommended when the remote user community is small and dedicated DHCP scopes are in place
  D. Clientless SSL VPNs provide more granular access control than SSL VPN clients (thin or thick), including at Layer7
  D. Clientless SSL VPNs provide more granular access control than SSL VPN clients (thin or thick), including at Layer7

• Question 122:

  Which network virtualization plane is used to separate traffic forwarding tables?

  A. control
  B. data
  C. management D. access
  B. data

• Question 123:

  Which two design recommendations are most appropriate when OSPF is the data center core routing protocol? (Choose two.)

  A. Never use passive interfaces.
  B. Use NSSA areas from the core down.
  C. Use totally stub areas to stop type 3 LSAs.
  D. Use the lowest Ethernet interface IP address as the router ID.
  E. Manipulate the reference bandwidth.
  B. Use NSSA areas from the core down.
  E. Manipulate the reference bandwidth.

• Question 124:

  What are two characteristics of Server Load Balancing router mode? (Choose two.)

  A. The design supports multiple server subnets.
  B. An end-user sees the IP address of the real server.
  C. SLB routes between the outside and inside subnets.
  D. The source or destination MAC address is rewritten, but the IP addresses left alone.
  E. SLB acts as a "bump in the wire" between servers and upstream firewall or Layer 3 devices.
  A. The design supports multiple server subnets.
  C. SLB routes between the outside and inside subnets.

• Question 125:

  A company uses site-to-site IPsec VPN tunnels established over the public internet as a backup to its private WAN. The interoffice IP telephony service quality is degraded when a failover event occurs. What known design limitation can cause this issue?

  A. maximum headend router throughput
  B. circuit bandwidth
  C. transport reliability
  D. number of remote sites
  C. transport reliability

• Question 126:

  Which of the following is a recommended practice of a data center core?

  A. Server-to-server traffic always remains in the core layer.
  B. The core infrastructure should be in Layer 3.
  C. Core layer should run BGP along with an IGP because iBGP has a lower administrative distance than any IGP.
  D. The Cisco Express Forwarding hashing algorithm is the default, based on the IP address and Layer 4 port.
  B. The core infrastructure should be in Layer 3.

• Question 127:

  Given the addresses 10.10.16.0/24 and 10.10.23.0/24, which option is the best summary?

  A. 10.10.0.0/16
  B. 10.10.8.0/23
  C. 10.10.16.0/23
  D. 10.10.16.0/21
  D. 10.10.16.0/21

• Question 128:

  A network engineer is implementing virtualization into the enterprise network. Which system should be used to address policy enforcement at the distribution layer?

  A. Cisco IOS based firewall
  B. multilayer switches
  C. integrated firewall services
  D. identity services engine
  E. intrusion protection systems
  C. integrated firewall services

• Question 129:

  ACME corporation owns a single MDS.

  Which two SAN tools can be used to optimize the use and cost of the switching hardware? (Choose two.)

  A. zoning
  B. IVR
  C. VSAN
  D. iSCSI
  A. zoning
  C. VSAN

• Question 130:

  Which option is a benefit of site-to-site VPNs?

  A. less configuration required than a WAN circuit B. more secure than a dedicated WAN circuit
  C. less expensive than a dedicated WAN circuit
  D. more reliable than a dedicated WAN circuit
  C. less expensive than a dedicated WAN circuit