642-541 Exam

免费下载 642-541 认证考题Demo

下载 642-541 PDF 认证考试题库
考试引擎下载

选择 pass4side 642-541 题库

642-541 考试是 Cisco 公司的 VPN and Security Cisco SAFE Implementation Exam (CSI) 认证考试官方代号，pass4side 的 642-541 权威考试题库软件是 Cisco 认证厂商的授权产品，pass4side 绝对保证第一次参加 642-541 考试的考生即可顺利通过，否则承诺全额退款！

1、Pass4Side考题大师642-541试题都是考试原题的完美组合，覆盖率95％以上，答案由多位专业资深讲师原版破解得出，正确率100％，只要您使用本站的考试题库参加642-541 考试，我们保证您一次轻松通过考试；

2、售后服务第一！我们相信要想在当今时代取得成功，必须为广大用户提供全套的周到细致的全程优质售后服务，只有客户满意了，我们才能发展。客户至上是我们Pass4Side考题大师的一贯宗旨；

3、Pass4Side实行“一次不过全额退款”承诺。如果您购买我们642-541的考题，只要不是首次通过，凭盖有PROMETRIC或VUE考试中心钢印的考试成绩单，我们将退还您购买642-541考题大师的全部费用，绝对保证您的利益不受到任何的损失；

4、本站642-541题库根据642-541考试的变化动态更新，在厂家考题每次发生变化后，我们承诺2天内更新642-541题库。在您购买我们的产品之后，我们将提供90天的免费更新。确保642-541考题的覆盖率始终都在95％以上；我们提供2种 642-541 考题大师版本供你选择。

5、软件版本642-541 考试题库
优点：具有学习模式，测试模式，线上自动升级
缺点：仅限固定电脑使用，不可打印为文本，只能PC阅读

6、PDF 格式642-541 考试题库(部分最新更新科目已不提供PDF)
优点：不需下载安装软件，方便用户打印和携带，但也带来了可随意制的弊端，因此我们提醒用户不得随意公开或出售本站的642-541题库，一经发现立即取消其升级资格，且不予退款。
缺点：不具备测试模式，通过查看 pass4side.cn网站及查收我们的更新E-MAIL获取更新信息。
　
　
Exam : Cisco 642-541
Title : VPN and Security Cisco SAFE Implementation Exam (CSI)


1. Which two general IP spoofing techniques does a hacker use? Choose two.
A. an IP address within the range of trusted IP addresses
B. an unknown IP address which cannot be traced
C. an RFC 1918 address
D. an authorized external IP address that is trusted
Answer: AD

2. What is the NIDS primary function in the SAFE SMR midsize network design corporate Internet module?
A. provide connectivity to the campus module
B. provide connectivity to the WAN module
C. provide connectivity to the LAN module
D. provides detection of attacks on ports that the firewall is configured to permit
E. provide the demarcation point between the ISP and the medium network
F. provide connection state enforcement and detailed filtering for sessions initiated through the firewall
Answer: D

3. Why are all providers of Internet connectivity urged to implement the filtering described in RFC 2827?
A. to prohibit attackers from using source addresses that reside within a range of legitimately advertised prefixes
B. to prohibit attackers from using forged source addresses that do not reside within a range of legitimately advertised prefixes
C. to filter Java applications that come from a source that is not trusted
D. to stop internal users from reaching web sites that violate the established security policy
Answer: B

4. The VPN acceleration module (VAM) is available on what series of VPN optimized routers? Choose two.
A. 1700 Series
B. 2600 Series
C. 3600 Series
D. 7100 Series
E. 7200 Series
Answer: DE

5. Which two devices in the SAFE SMR small network campus module should have HIDS installed? Choose two.
A. Layer 2 switches
B. firewalls
C. management hosts
D. desktop workstations
E. corporate servers
F. lab workstations
Answer: CE

6. In which module does the firewall exist in the SAFE SMR small network design?
A. Internet
B. campus
C. corporate Internet
D. edge
Answer: C

7. Which routing protocol does not support the use of MD5 authentication?
A. BGP
B. IGRP
C. EIGRP
D. OSPF
E. IS-IS
Answer: C

8. What is an assumption of SAFE SMR?
A. implementing SAFE SMR guarantees a secure environment
B. the security policy is already in place
C. network contains only Cisco devices
D. SAFE SMR does not assume application and OS security
Answer: B