[2026] Cisco Security Solutions for Systems Engineers

문제1

See the Exhibit:
Exhibit:

In order to support IPSec VPN, which three traffic types should ACL1 permit on the firewall in front of the IPSec VPN gateway? (Choose three.)

A. UDP Port 10000

B. IP Protocol 50

C. UDP Port 5000

D. UDP port 4500

정답: B,C,D

문제2

The Cisco IOS Resilient Configuration feature enables a router to secure and maintain a working copy of the running image and configuration so that those files can withstand malicious attempts to erase the contents of persistent storage (NVRAM and Flash). What is the objective of the Cisco IOS resilient configuration?

A. Allow a compromise of the router

B. Enable primary and backup operations of two Cisco IOS routers

C. Improve the sped of Cisco IOS image or configuration recovery process

D. Enable redundant Cisco IOS images for fault tolerance router operations

정답: C

문제3

Cisco NAC Appliance, formerly Cisco Clean Access (CCA) is a network access control solution developed by Cisco Systems that helps ensure a secure and clean network environment. Which Cisco NAC Appliance design is the most scalable architecture for campus LANs because it offers high performance after posture verification?

A. Layer 3 centraldeployment

B. Layer 2 out-of-band

C. In-band real-ip gateway

D. In-band virtual gateway

정답: B

문제4

Which one is not the factor can affect the risk rating of an IPS alert?

A. Event severity

B. Signature fidelity

C. Relevance

D. Attacker location

정답: D

문제5

Refer to the following EAP authentication methods, which one needs both a client and a server digital certificate?

A. PEAP-GTC

B. EAP-TLS

C. EAP-MS-CHAP

D. EAP-FAST

정답: B

문제6

Which statement is true about the Cisco Security MARS Global Controller?

A. The Global Controller receives detailed incidents information from the Local Controllers and correlates the incidents between multiple Local Controllers

B. Most data archiving is done by the Global Controller

C. The Global Controller Centrally Manages of a group of Local Controllers

D. Rules that are created on a Local Controller can be pushed to the Global Controller

정답: C

문제7

Which of these items is a feature of a system-level approach to security management?

A. High Availability

B. Responsibility sharing

C. Single-element management

D. Multiple cross-vendor management platforms

E. Complex Operations

정답: A

문제8

Which two of these characteristics apply to promiscuous IPS operation? (Choose two.)

A. Increase latency

B. Can use stream normalization techniques

C. Impacts connectivity in case of failure or overload

D. Typically used with SPAN on the Switches

E. Invisible to the attacker

F. Less vulnerable to evasion techniques than inline mode

정답: D,E

문제9

Observe the following protocols carefully, which one is used to allow the utilization of Cisco Wide Area Application Engines or Cisco IronPort S-Series web security appliances to localize web traffic patterns I the network and to enable the local fulfillment of content requests?

A. TLS

B. DTLS

C. WCCP

D. HTTPS

정답: C

문제10

Which of these characteristics is a feature of AES?

A. It has a variable key length

B. It provides strong encryption and authentication

C. It is not supported by hardware accelerators but runs very fast in software

D. It should be used with key lengths greater than 1024 bits

정답: A

문제11

Which functions can be provided by Cisco SSL VPN solution by use of the Cisco Secure Desktop? (Select All that apply.)

A. Cache Cleaner

B. Secure Vault

C. Advanced Endpoint Assessment

D. Pre-login assessment

정답: A,B,C,D

문제12

_______________ is a valid method to verify a network security desing?

A. Network Security

B. Network Audit

C. Pilot or prototype network

D. Computer Simulation

정답: C

Cisco Security Solutions for Systems Engineers - 642-566무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트