Pass4Test는 Pass4Test의  Cisco Specialist 642-584덤프자료를 공부하면 한방에 시험패스하는것을 굳게 약속드립니다. Pass4Test의  Cisco Specialist 642-584덤프로 공부하여 시험불합격받으면 바로 덤프비용전액 환불처리해드리는 서비스를 제공해드리기에 아무런 무담없는 시험준비공부를 할수 있습니다.

 

 

NO.1 Which statement describes an advantage of DV?
A. DV increases the complexity of administration.
B. DV simplifies BYOD deployment.
C. DV cannot prevent end users from uploading potentially malicious data to the system.
D. DV can prevent end users from downloading confidential data.
Answer: D

NO.2 Which three are security features that are applicable to the network edge? (Choose three.)
A. Layer 2 encryption service, also known as MACsec firewall service
B. VPN service
C. Email security service
D. WLAN authorization service
Answer: B,C,D

NO.3 The Cisco SecureX Architecture is built on which three foundational principles? (Choose
three.)
A. Context-aware policy
B. Virtual office management
C. Network management
D. Content access control
E. Context-aware security enforcement
F. Network and global intelligence
Answer: A,E,F

NO.4 Which statement about the Cisco IOS Zone-Based Policy Firewall is true?
A. Only virtual interfaces can be added to a Cisco IOS Zone-Based Policy Firewall zone.
B. A Cisco IOS Zone-Based Policy Firewall zone is a set of VLANs that share a certain trust level.
C. Cisco IOS Zone-Based Policy Firewall policies are not unidirectional.
D. The Cisco IOS Zone-Based Policy Firewall applies firewall policies to traffic traversing zones.
Answer: D

NO.5 Which statement best describes Cisco ISE?
A. Cisco ISE consolidates user AAA, Security Group Access features, and ScanSafe functionality
into one product.
B. Cisco ISE consolidates user authentication with NAC components into one solution.
C. Cisco ISE provides AAA features, guest provisioning, and device profiling features in the base
feature set; link encryption policies, host posture, and security group access require the advanced
feature set.
D. Cisco ISE combines the capabilities of Cisco Secure ACS and Cisco Virtual Security Gateway
into one product.
Answer: B

NO.6 What are two advantages of IKEv2 and Cisco FlexVPN? (Choose two.)
A. IKEv2 is backwards compatible with IKEv1.
B. Cisco FlexVPN supports interoperability, dynamic routing, direct spoke-to-spoke
communication, remote access, source failover, per-peer QoS, and Full AAA management.
C. IKEv2 consolidates several VPN key management features and standards into one new
standard.
D. The anticlogging cookie feature from IKEv1 has been improved.
E. IKEv2 uses IP protocol numbers 50 and 51.
Answer: B,C

NO.7 Which three are features of an intrusion prevention system? (Choose three.)
A. Attack obfuscation
B. Detection of behavioral anomalies
C. Detection of protocol anomalies
D. Flexible content filtering
E. Forensic capturing
F. VPN termination
Answer: B,C,E

NO.8 Which statement about IPsec and IPv6 is true?
A. IPsec is available only with IPv6.
B. IPsec support is mandatory in IPv4.
C. IPsec support is mandatory in IPv6.
D. In order to use IPsec with IPv6, IPv6 must be tunneled over IPv4.
Answer: C

NO.9 Which two statements about Cisco IPS are true? (Choose two.)
A. Cisco IPS global correlation is performed before Cisco IPS reputation filters.
B. Cisco ASA-integrated IPS and standalone IPS offer the same features.
C. Cisco standalone IPS functionality can be virtualized.
D. The Cisco IPS reputation filter is based on Cisco SIO and allows packets that are received from
known malicious sources to be dropped before performing signature-based inspection.
Answer: B,D

NO.10 Which four features are provided by the Cisco AnyConnect client for Windows? (Choose four.)
A. SSL VPN
B. IPsec VPN
C. Host intrusion prevention system
D. Presence
E. MACsec encryption
F. Antivirus
G. Personal firewall
H. Cisco ScanSafe integration
Answer: A,B,E,H