Pass4Test의  Cisco Specialist 642-584덤프는 고객님의 IT인증자격증을 취득하는 소원을들어줍니다. IT업계에 금방 종사한 분은 자격증을 많이 취득하여 자신만의 가치를 업그레이드할수 있습니다. Pass4Test의 Cisco Specialist 642-584덤프는 실제 시험문제에 대비하여 연구제작된 퍼펙트한 시험전 공부자료로서 시험이 더는 어렵지 않게 느끼도록 편하게 도와드립니다.

NO.1 Which three are security features that are applicable to the network edge? (Choose three.)
A. Layer 2 encryption service, also known as MACsec firewall service
B. VPN service
C. Email security service
D. WLAN authorization service
Answer: B,C,D

NO.2 Which four features are provided by the Cisco AnyConnect client for Windows? (Choose four.)
A. SSL VPN
B. IPsec VPN
C. Host intrusion prevention system
D. Presence
E. MACsec encryption
F. Antivirus
G. Personal firewall
H. Cisco ScanSafe integration
Answer: A,B,E,H

NO.3 Which statement best describes Cisco ISE?
A. Cisco ISE consolidates user AAA, Security Group Access features, and ScanSafe functionality
into one product.
B. Cisco ISE consolidates user authentication with NAC components into one solution.
C. Cisco ISE provides AAA features, guest provisioning, and device profiling features in the base
feature set; link encryption policies, host posture, and security group access require the advanced
feature set.
D. Cisco ISE combines the capabilities of Cisco Secure ACS and Cisco Virtual Security Gateway
into one product.
Answer: B

NO.4 What are two advantages of IKEv2 and Cisco FlexVPN? (Choose two.)
A. IKEv2 is backwards compatible with IKEv1.
B. Cisco FlexVPN supports interoperability, dynamic routing, direct spoke-to-spoke
communication, remote access, source failover, per-peer QoS, and Full AAA management.
C. IKEv2 consolidates several VPN key management features and standards into one new
standard.
D. The anticlogging cookie feature from IKEv1 has been improved.
E. IKEv2 uses IP protocol numbers 50 and 51.
Answer: B,C

NO.5 Which two statements about Cisco IPS are true? (Choose two.)
A. Cisco IPS global correlation is performed before Cisco IPS reputation filters.
B. Cisco ASA-integrated IPS and standalone IPS offer the same features.
C. Cisco standalone IPS functionality can be virtualized.
D. The Cisco IPS reputation filter is based on Cisco SIO and allows packets that are received from
known malicious sources to be dropped before performing signature-based inspection.
Answer: B,D

NO.6 The Cisco SecureX Architecture is built on which three foundational principles? (Choose
three.)
A. Context-aware policy
B. Virtual office management
C. Network management
D. Content access control
E. Context-aware security enforcement
F. Network and global intelligence
Answer: A,E,F

NO.7 Which statement about the Cisco IOS Zone-Based Policy Firewall is true?
A. Only virtual interfaces can be added to a Cisco IOS Zone-Based Policy Firewall zone.
B. A Cisco IOS Zone-Based Policy Firewall zone is a set of VLANs that share a certain trust level.
C. Cisco IOS Zone-Based Policy Firewall policies are not unidirectional.
D. The Cisco IOS Zone-Based Policy Firewall applies firewall policies to traffic traversing zones.
Answer: D

NO.8 Which statement describes an advantage of DV?
A. DV increases the complexity of administration.
B. DV simplifies BYOD deployment.
C. DV cannot prevent end users from uploading potentially malicious data to the system.
D. DV can prevent end users from downloading confidential data.
Answer: D

NO.9 Which three are features of an intrusion prevention system? (Choose three.)
A. Attack obfuscation
B. Detection of behavioral anomalies
C. Detection of protocol anomalies
D. Flexible content filtering
E. Forensic capturing
F. VPN termination
Answer: B,C,E

NO.10 Which statement about IPsec and IPv6 is true?
A. IPsec is available only with IPv6.
B. IPsec support is mandatory in IPv4.
C. IPsec support is mandatory in IPv6.
D. In order to use IPsec with IPv6, IPv6 must be tunneled over IPv4.
Answer: C