642-373 - Cisco Express Foundation for Systems Engineers
Go back to Cisco
What is the benefit of using the Cisco Easy VPN Server feature along with the Cisco software VPN client for implementing remote-access VPNs?
The Cisco Easy VPN Server feature allows the Cisco software VPN client to receive its security policies from the central site VPN device. This minimizes the configuration requirements at the remote location for large remote access VPN deployments.
In which of these phases is a customer's network assessed to determine its system readiness?
Which Cisco security tool can best determine if a Cisco ISR router is properly secured?
Cisco SDM Security Audit
Which two of these statements describe important aspects of performing a wireless site survey? (Choose two.)
Site surveys can be performed manually or through assisted site survey.
Overlapping access points can create performance problems.
Which two of these statements best describe fast secure roaming for the wireless core feature set using autonomous access points? (Choose two.)
It reduces roaming latency through reduced client RF channel scanning enhancements.
Roaming occurs without reauthentication through a centralized RADIUS server.
Which definition best describes the implementation service component within the implement phase?
installing, configuring, and integrating systems components based on an implementation plan developed in earlier phases
What is one benefit of the Cisco anti-X defense strategy?
malware, virus, and worm mitigation
You are planning to connect your three branch offices to the corporate site via Frame Relay. The first branch office has been assigned the network 10.1.0.0/16, the second 10.2.0.0/16, the third 10.3.0.0/16, and the corporate headquarters uses 10.0.0.0/16. You would like to summarize all branch and corporate networks into a single route at the corporate site. Which network address and subnet mask should you choose?
What is the benefit of the parallel signature scanning feature in Cisco IOS IPS Software?
Scans multiple patterns within a Signature Micro Engine at any given time
A Cisco Catalyst switch can belong to how many VTP domains?
Which statement concerning the Active/Active failover feature is correct?
Active/Active failover is supported in "multiple mode" configuration only.
On what lower-level transport protocol does CiscoWorks LAN Management Solution rely on and why
UDP, because CiscoWorks LAN Management is an application that does not require the reliability of TCP
Which VMS Security Monitor tool allows you to monitor data for patterns of attacks from one machine to a list of targets?
Advanced Correlation Engine
A customer has deployed a wireless core feature set using autonomous access points and now wants to include a satellite building 4,500 feet away from the main campus. The customer also wants to provide wireless access to a courtyard for wireless clients in close proximity to the antenna mounting position. Which Cisco Aironet product is the most applicable solution?
Cisco Aironet 1300 Series
Which service component within the prepare phase recommends the appropriate technology strategy to address a business requirement of the customer?
analyzes the customer's business requirements and recommends the appropriate Cisco technologies to meet business requirements
Which of these is a benefit of an integrated security management system?
It provides configuration, monitoring, and troubleshooting capabilities across a wide range of security products.
What is the main advantage of configuring all switches in the enterprise network to VTP transparent mode?
Prevents the network administrator from accidentally deleting VLAN information from all switches
Which of these is the best definition of the Cisco Lifecycle Services approach?
It defines the minimum set of services required to successfully deploy and operate a set of Cisco technologies.
Which network management solution performs configuration, monitoring, and management of Cisco Firewall, VPN router, and IPS devices as well as maintains network device inventory and software distribution features?
CiscoWorks VMS/Management Center (VMS/MC)
In which of these phases is a customer's current network infrastructure assessed?
You are about to upgrade a router with a newer IOS version, but you would like to check for known bugs first. Which tool will allow you to do this most easily?
Cisco Bug Toolkit
What is one thing you should be aware of when conducting a wireless site survey?
5 GHz equipment will not be able to penetrate through walls as well as 2.4 GHz equipment.
Deploying ISRs with integrated security services can help lower the total cost of ownership. Which of these Cisco ISR Routers features illustrate this point?
using the SDM configuration tool to reduce training costs
Cisco ASDM provides 16 different graphs that help identify security risks by displaying data about potentially malicious activity. What is one kind of data these graphs show?
What is one key objective of the operations readiness assessment performed in the plan phase?
evaluate the readiness of a customer's current operations and network management infrastructure to support a new technology
What are three advantages of the Cisco Integrated Services Router Product family? (Choose three.)
Provides advanced security such as hardware encryption acceleration
Contains integrated wireless access using the 802.11 g/b standard
Contains integrated web-based management tools for easy configuration and maintenance
In the plan phase, network readiness assessment addresses which customer need?
an assessment of the preparedness of the customer's existing system infrastructure to support a proposed solution
What is the purpose of the Dynamic Configuration Tool?
to verify that hardware such as modules are compatible with your chassis
Which of these is an administrative time saving benefit of dynamic signature definition files on a Cisco router running Cisco IOS IPS?
Dynamically updates signatures from cisco.com
Which CiscoWorks component would most help you locate end-station connections at the access switch level quickly?
Which SDM feature secures the router using a set of recommended security configurations based on Cisco IOS AutoSecure and ICSA recommendations?
Which of the following best describe the customer benefit of creating a systems acceptance test plan in the design phase?
reduce unnecessary disruption, delays, rework, and other problems by establishing test cases for use in verifying that the system meets operational, functional, and interface requirements
The Cisco Lifecycle Services approach is primarily applicable to which type of companies?
All companies, regardless of size
Which two of these statements best describe the benefits of the Cisco Compatible Extensions Program? (Choose two.)
accelerates the availability of innovative features while maintaining interoperability
provides an evolving set of specifications for interoperability
What are two important approaches to communicate when identifying a customer's security risks? (Choose two.)
Business strategy should directly relate to the security policy and budget.
Security should be a continuous process.
Which of these is an accurate list of Cisco Lifecycle Services phases?
prepare, plan, design, implement, operate, and optimize
Your company has two primary divisions: Products and Services. The Products division is on network 184.108.40.206/21. The Services division is on network 220.127.116.11/21. You want to summarize both networks into one routing statement.
Which of these statements about CiscoWorks is true?
CiscoWorks does not require TCP reliability.
Which of these statements regarding Cisco's WebVPN support is correct?
Cisco security appliances act as a proxy between the end user and the target web server.
In the design phase, which service component provides the customer with a comprehensive design?
Detailed Design Development
Which tools on Cisco.com could you use to plan for correct Cisco IOS images to support a customer's security design and requirements? (Choose two.)
Cisco Feature Navigator
Cisco IOS Package Planner
Which item is a feature of Cisco Compatible Extensions, Version 3?
full WPAv2 compliance
Which design phase service component includes the development and documentation of the test case or cases used to verify that a deployed infrastructure meets operational, functional, and interface requirements?
Systems Acceptance Test Plan Development
What is one reason you might recommend a solution using only autonomous access points to a customer?
The customer wants the option to migrate to LWAPP.
Conducting a project kick-off in the plan phase provides which of the following customer benefits?
confirm project roles and responsibilities, as well as milestone dates
Which component of Cisco ASDM provides administrators with a complete system overview and device health statistics at a glance?
After properly configuring multiple VLANs, an administrator has decided to secure its VLAN network. Which three steps are required to secure this environment? (Choose three.)
Configure VTP domains appropriately or turn off VTP altogether to limit or prevent possible undesirable protocol interaction with regards to the network-wide VLAN configuration.
Disable all unused ports and place them in an unused VLAN to avoid unauthorized access.
Enable root guard feature to prevent a directly or indirectly connected STP-capable device from affecting the location of the root bridge.
Which of these best describes the Cisco Lifecycle Services approach?
a methodology for introducing new technologies
Which two of these statements best describe the benefits of Cisco's wireless IDS functionality? (Choose two.)
Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs.
2.4GHz RF management can monitor both 802.11 and non-802.11 RF interference.
Which two of these statements best describe fast secure roaming? (Choose two.)
available in autonomous and lightweight APs
a feature of WDS in autonomous APs