최신 642-584 무료덤프 - Cisco Security Solutions for Systems Engineers

문제1

Which statement about the Cisco IOS Zone-Based Policy Firewall is true?

A. Only virtual interfaces can be added to a Cisco IOS Zone-Based Policy Firewall zone.

B. The Cisco IOS Zone-Based Policy Firewall applies firewall policies to traffic traversing zones.

C. A Cisco IOS Zone-Based Policy Firewall zone is a set of VLANs that share a certain trust level.

D. Cisco IOS Zone-Based Policy Firewall policies are not unidirectional.

정답: B

문제2

Which application is the most critical one regarding malicious content?

A. SFTP and SSH

B. traceroute

C. Email

D. Ping

정답: C

문제3

Which statement about the OfficeExtend Access Point solution is true?

A. The router that connects the access point to the Internet establishes an Easy VPN tunnel to the corporate network.

B. The local access point establishes a DTLS tunnel to the OfficeExtend Access Point controller that is located at the corporate network?.

C. It does not allow the end user to securely connect to the corporate network via a corporate WLAN SSID.

D. It does not allow the end user to provision a private, locally usable WLAN SSID for Internet access.

정답: B

문제4

A customer wants to use the Cisco ASA for a VPN to interconnect the central site and three branches. Which type of VPN would you recommend?

A. IPsec site-to-site VPN

B. SSL site-to-site VPN

C. IPsec remote access VPN

D. SSL remote access VPN

정답: A

문제5

The Cisco SecureX Architecture is built on which three foundational principles? (Choose three.)

A. Content access control

B. Context-aware policy

C. Virtual office management

D. Network management

E. Context-aware security enforcement

F. Network and global intelligence

정답: B,E,F

우리와 연락하기