642-584 무료 덤프문제 온라인 액세스

Which two configurations are performed on Cisco IOS routers when using Cisco AutoSecure?
(Choose two.)

• A.Directed broadcasts are globally disabled.
• B.Proxy ARP is disabled on all interfaces.
• C.ICMP is globally disabled.
• D.Source routing is globally disabled.

Which statement best describes Cisco ISE?

• A.Cisco ISE consolidates user AAA, Security Group Access features, and ScanSafe functionality into one product.
• B.Cisco ISE combines the capabilities of Cisco Secure ACS and Cisco Virtual Security Gateway into one product.
• C.Cisco ISE consolidates user authentication with NAC components into one solution.
• D.Cisco ISE provides AAA features, guest provisioning, and device profiling features in the base feature set; link encryption policies, host posture, and security group access require the advanced feature set.

Which statement about MACsec is true?

• A.Cisco AnyConnect Release 3.0 supports both roles: supplicant and authenticator?
• B.MACsec does not work between any MACsec-capable supplicant and authenticator.
• C.802.1X protection includes the CMD field, which is used to carry the security group tag value.
• D.MACsec provides Layer 2 hop-by-hop encryption, based on the 802.1AE standard.

Which statement about Cisco ASA performance and services is true?

• A.When using BYOD in conjunction with Cisco ASA AnyConnect, an additional VPN hardware module is required.
• B.Cisco ASA IPS works in conjunction with Cisco SIO in order to provide botnet protection.
• C.In Cisco ASA 5500-X product series deployment, a separate IPS and VPN hardware accelerator is required.
• D.The Cisco ASA 5555-X scales up to 16 Gbps of firewall throughput.

Which two statements about the capabilities of the Cisco AnyConnect 3.0 Secure Mobility Client for Windows are true? (Choose two.)

• A.It is exclusively configured by central policies; no local configuration is possible.
• B.It supports always-on connectivity by automatically establishing a VPN connection as needed. If multiple VPN gateways exist, load sharing occurs in a Round-robin fashion.
• C.The order of policy enforcement is as follows: dynamic access policy, user attributes, tunnel group, group policy attributes.
• D.Trusted Network Detection allows the connection to be established without any user intervention (authentication), if the client is located inside the office.
• E.It supports session persistence after hibernation or standby.