642-566 試験問題を無料オンラインアクセス

You are the network consultant from Your company. Please point out two requirements call for the deployment of 802.1X.

• A.Authenticate users on switch or wireless ports
• B.Verify security posture using TACAS+
• C.Grant or Deny network access at the port level, based on configured authorization policies
• D.Allow network access during thequeit period

Which one is not the factor can affect the risk rating of an IPS alert?

• A.Signature fidelity
• B.Event severity
• C.Relevance
• D.Attacker location

Study the exhibit below carefully, which statement is true about the security architecture, which is used to protect the multi-tiered web application?

• A.All the servers are protected by the dual-tier firewall systems and do not require additional endpoint security controls.
• B.This architecture supports application tiers that are dual homed.
• C.The second-tier Cisco ASA AIP-SSM should be tuned for inspecting Oracle attack signatures
• D.The firewall systems in the first and second tiers should be implemented with identical security
  controls to provide defense in depth.

You are network engineer at Your company. Please point out two functions of Cisco Security Agent.

• A.Control of executable content
• B.Spam filtering
• C.Authentication
• D.Resource Protection

IPSec-based site-to-site VPNs is better than traditional WAN networks what?

• A.Delay guarantees, span, performance, security and low cost
• B.Bandwidth guarantees, support for non-IP protocols, scalability and modular design guidelines
• C.Span, flexibility, security and low cost
• D.Bandwidth guarantees, flexibility, security and low cost