Testking Cisco CCNP ISCW 642-825 Exam
testkin ISCW – Implementing Secure Converged Wide Area NetworksCisco: 642-825 Exam
Questions & Answers 642-825 - Questions & Answers
Interactive Testing Engine Included!
Cisco 642-825 Dumps exam Resources:
The best exam resource available is only testking.com where you can find not only Microsoft, cisco, comptia but all the vendors which are offering their certifications. So the best way to prepare for the Implementing Secure Converged Wide Area Networks (ISCW) 642-825 dumps exam is to join the testking team and using the braindumps attain the degree you are dreaming about. There are number of other resources in the market but we offer the best because our exam are continuously revised and most updated.
Implementing Secure Converged Wide Area Networks (ISCW)
Question No: 2 Which three techniques should be used to secure management protocols? (Choose three.)
A. Configure SNMP with only read-only community strings.
B. Encrypt TFTP and syslog traffic in an IPSec tunnel.
C. Implement RFC 3704 filtering at the perimeter router when allowing syslog access from devices on the
outside of a firewall.
D. Synchronize the NTP master clock with an Internet atomic clock.
E. Use SNMP version 2.
F. Use TFTP version 3 or above because these versions support a cryptographic authentication mechanism
between peers.
Answer: A, B, C
Question No: 3 What are two steps that must be taken when mitigating a worm attack? (Choose two.)
A. Inoculate systems by applying update patches.
B. Limit traffic rate.
C. Apply authentication.
D. Quarantine infected machines.
E. Enable anti-spoof measures
Answer: A, D
Question No: 4 What is a reason for implementing MPLS in a network?
A. MPLS eliminates the need of an IGP in the core.
B. MPLS reduces the required number of BGP-enabled devices in the core.
C. Reduces routing table lookup since only the MPLS core routers perform routing table lookups.
D. MPLS eliminates the need for fully meshed connections between BGP enabled devices.
Answer: B
Question No: 5 Which three statements about IOS Firewall configurations are true? (Choose three.)
Using PassGuide online virtual CCNP practice engine, easy to know well CCNP Training knowledge and pass the Cisco CCNP certification exams.A. The IP inspection rule can be applied in the inbound direction on the secured interface.
B. The IP inspection rule can be applied in the outbound direction on the unsecured interface.
C. The ACL applied in the outbound direction on the unsecured interface should be an extended ACL.
D. The ACL applied in the inbound direction on the unsecured interface should be an extended ACL.
E. For temporary openings to be created dynamically by Cisco IOS Firewall, the access-list for the returning
traffic must be a standard ACL.
F. For temporary openings to be created dynamically by Cisco IOS Firewall, the IP inspection rule must be
applied to the secured interface.
Answer: A, B, D
Question No: 6 Which three IPsec VPN statements are true? (Choose three.)
A. IKE keepalives are unidirectional and sent every ten seconds.
B. IKE uses the Diffie-Hellman algorithm to generate symmetrical keys to be used by IPsec peers.
C. IPsec uses the Encapsulating Security Protocol (ESP) or the Authentication Header (AH) protocol for
exchanging keys.
D. Main mode is the method used for the IKE phase two security association negotiations.
E. Quick mode is the method used for the IKE phase one security association negotiations.
F. To establish IKE SA, main mode utilizes six packets while aggressive mode utilizes only three packets.
Answer: A, B, F
Question No: 7 Which three MPLS statements are true? (Choose three.)
A. Cisco Express Forwarding (CEF) must be enabled as a prerequisite to running MPLS on a Cisco router.
B. Frame-mode MPLS inserts a 32-bit label between the Layer 3 and Layer 4 headers.
C. MPLS is designed for use with frame-based Layer 2 encapsulation protocols such as Frame Relay, but is not
supported by ATM because of ATM fixed-length cells.
D. OSPF, EIGRP, IS-IS, RIP, and BGP can be used in the control plane.
E. The control plane is responsible for forwarding packets.
F. The two major components of MPLS include the control plane and the data plane.
Answer: A, D, F
Free down:Testking Cisco CCNP ISCW 642-825 Exam v4.1
http://rapidshare.com/files/137015580/TestKing_Cisco_642-825_ISCW_Q182_V4.1.rar.html
New testking iscw 642-825 exam
password:www.ciscoexams.org
PassGuide CCNP Practice Test Questions
Posted in Practice Tests on August 13, 2008
PassGuide CCNP Practice Test Questions
Leave a Reply