642-566 試験問題を無料オンラインアクセス

You are a network engineer of your company. Study the following exhibit carefully, which three Cisco IOS features could be used on the VPN gateways (Cisco IOS routers) to implement high availability for remote-access IPsec VPN? (Choose three.)

• A.Reverse Route Injection (RRI)
• B.cooperative key servers
• C.Dead Peer Detection (DPD)
• D.Dynamic VTIs

Which function can be implemented by the Cisco Security Agent data access control feature?

• A.Detects changes to system files by examining the file signature
• B.Enables trustedQoS marking at the end host
• C.Detects attempts to modify the file registry
• D.Detects malformed HTTP requests by examining the URI in the HTTP request

Observe the following Cisco software agents carefully, can you tell me which one uses content scanning to identify sensitive content and controls the transfer of sensitive content off the local endpoint over removable storage, locally or network-attached hardware, or network applications?

• A.CiscoIronPort Agent 3.0
• B.Cisco Trust Agent 2.0
• C.Cisco Security Agent 6.0
• D.Cisco NAC Appliance Agent 4.1.3

Which two methods can be used to perform IPSec peer authentication? (Choose two.)

• A.Digital Certificate
• B.Pre-shared key
• C.One-time Password
• D.AAA

Which primary security design components should be addressed while implementing secure WAN solutions?(Not all design components are required.)
1.authentication and transmission protection
2.network infrastructure device hardening
3.boundary access control
4.topology
5.high availability
6.performance and scalability
7.resource separation

• A.1, 2, 3, 5, 6
• B.1, 2, 3, 4, 5
• C.1, 2, 4, 5, 6
• D.2, 3, 4, 5, 6