Cisco Security Solutions for Systems Engineers 認定 642-566 試験問題:

1. Match each IKE component to its supported option.
1.IKE authentication
2.IKE encryption
3.IKE data authentication/integrity
4.IKE key negotiation
a.3DES or AES b.MD5 or SHA-1
c.pre-shared key or digital certificates d.DH Group 1,2,or5

A) a-1, b-2, c-3, d-4
B) a-2, b-3, c-4, d-1
C) a-2, b-3, c-1, d-4
D) a-2, b-1, c-3, d-4

2. Which one of the following methods can be used to scale Cisco Security MARS deployments?

A) Divide the network into multiple zones,then use the global/local controllers approach.
B) Migrate from the Gen1 to Gen2 Cisco Security MARS platforms.
C) Use redundant or duplicated Cisco Security MARS appliances to implement a multi-tier architecture.
D) Use the Cisco Security MARSsyslog forwarding feature to offload the syslog storage requirement to an external server.

3. Which one of the following Cisco Security Management products is able to perform (syslog) events normalization?

A) Cisco Security MARS
B) Cisco ASDM
C) Cisco Security Manager
D) Cisco IME

4. What are the advantages of IPSec-based site-to-site VPNs over traditional WAN networks?

A) Span, flexibility, security and low cost
B) Bandwidth guarantees, flexibility, security and low cost
C) Delay guarantees, span, performance, security and low cost
D) Bandwidth guarantees, support for non-IP protocols, scalability and modular design guidelines

5. Which is the primary benefit that DTLS offers over TLS?

A) Improves security
B) Uses TCP instead of UDP to provide a reliable Transport mechanism
C) Both the application and TLS can retransmit loss packets
D) Provides low latency for real-time applications

質問と回答：