최신 642-584 무료덤프 - Cisco Security Solutions for Systems Engineers

A. MAB allows clients that do not support 802.1X to be authenticated based on their MAC address.

B. MDA does not allow multiple clients to be independently authenticated at the same switch port if they are in different domains, or VLANs.

C. PEAP-MSCHAPv2 requires a client certificate.

D. EAP-TLS requires a client certificate.

A. Only virtual interfaces can be added to a Cisco IOS Zone-Based Policy Firewall zone.

B. The Cisco IOS Zone-Based Policy Firewall applies firewall policies to traffic traversing zones.

C. A Cisco IOS Zone-Based Policy Firewall zone is a set of VLANs that share a certain trust level.

D. Cisco IOS Zone-Based Policy Firewall policies are not unidirectional.

A. It supports session persistence after hibernation or standby.

B. It supports always-on connectivity by automatically establishing a VPN connection as needed. If multiple VPN gateways exist, load sharing occurs in a Round-robin fashion.

C. Trusted Network Detection allows the connection to be established without any user intervention (authentication), if the client is located inside the office.

D. The order of policy enforcement is as follows: dynamic access policy, user attributes, tunnel group, group policy attributes.

E. It is exclusively configured by central policies; no local configuration is possible.

A. Device consolidation

B. Hardware and software fault isolation

C. Layer 2 encryption

D. Protection of network traffic based on MACsec

E. Centralization of hardware resources

A. Cisco ASA does not support multitenant deployments.

B. Cisco ASA fits better to the core and data center.

C. Cisco ASA provides better application control.

D. Cisco ASA CX provides better AAA support.