642-504 Exam

- Covers the entire recommended syllabus
- Comprehensive questions and answers about 642-504 exam
- Verified Answers Researched by Industry Experts and almost 100% correct
- 642-504 exam questions updated on regular basis
- Same type as the certification exams, 642-504 exam preparation is in multiple-choice questions (MCQs)
- Tested by multiple times before publishing
- Try free 642-504 exam demo before you decide to buy it in Hiexam
- Technical support through Live Chat or Email

　
　
Exam : Cisco 642-504
Title : Securing Networks with Cisco Routers and Switches


1. Which three statements correctly describe the GET VPN policy management? (Choose three.)
A. A central policy is defined at the ACS (AAA) server.
B. A local policy is defined on each group member.
C. A global policy is defined on the key server, and it is distributed to the group members.
D. The key server and group member policy must match.
E. The group member appends the global policy to its local policy.
Answer: BCE

2. Which is an advantage of implementing the Cisco IOS Firewall feature?
A. provides self-contained end-user authentication capabilities
B. integrates multiprotocol routing with security policy enforcement
C. acts primarily as a dedicated firewall device
D. is easily deployed and managed by the Cisco Adaptive Security Device Manager
E. provides data leakage protection capabilities
Answer: B

3. Refer to the exhibit.
Which optional AAA or RADIUS configuration command is used to support 802.1X guest VLAN functionality?
A. aaa authentication dot1x default group radius
B. aaa authorization network default group radius
C. aaa accounting dot1x default start-stop group radius
D. aaa accounting system default start-stop group radius
E. radius-server host 10.1.1.1 auth-port 1812 acct-port 1813
Answer: B

4. Which two are technologies that secure the control plane of the Cisco router? (Choose two.)
A. Cisco IOS Flexible Packet Matching
B. uRPF
C. routing protocol authentication
D. CPPr
E. BPDU protection
F. role-based access control
Answer: CD

5. What are the two category types associated with 5.x signature use in Cisco IOS IPS? (Choose two.)
A. basic
B. advanced
C. 128MB.sdf
D. 256MB.sdf
E. attack-drop
F. built-in
Answer: AB

http://www.Hiexam.com The safer.easier way to get Others Certification.