The www.000-419.com your best choose

1. Which three Fibre Channel switch features are unique to Cisco’s MDS 9000 Series switches? (Choose three.)
Select 3 response(s).
A. LUN Zoning
B. Read-Only Zones
C. Internet-Switch Link
D. Fibre Channel Congestion Control
E. FC Link Aggregation
F. FSPF
Answer: ABD
2. Which Cisco MDS 9500 Series feature addresses the customer requirement for five nines (99.999-percent) availability?
Select the best response.
A. active and standby FC line cards
B. virtual output queuing (VOQ)
C. SSM card is installed in the switch
D. nondisruptive software upgrades
E. redundant fan cards
Answer: D
3. Which statement is true concerning the Cisco MDS switch when operating in native interop mode?
Select the best response.
A. The MDS switch can interoperate with Non-MDS switches that are certified by SNIA.
B. The MDS switch can interoperate with Non-MDS switches that support “MDS Native” mode.
C. The MDS switch can interoperate with Non-MDS switches that properly adhere to Fibre Channel switch standards.
D. The MDS switch cannot interoperate with Non-MDS switches.
Answer: C
4. Which are two characteristics of the Cisco MDS Series fan modules? (Choose two.)
Select 2 response(s).
A. Supervisor modules shut down the fan modules when the air temperature is below a preset threshold.
B. If the Fan Status LED turns red, a fan has failed and the module must be replaced.
C. Fan modules monitor air temperature and shut down if the temperature exceeds a preset threshold.
D. Fan modules do not require the switch to be powered off in order to be replaced.
Answer: BD
5. Your customer has implemented an IPS-8 for FCIP connectivity to remote sites. How can this customer prevent unauthorized hosts from connecting to the Cisco MDS 9000 fabric through the FCIP interfaces?
Select the best response.
A. Configure RADIUS authentication
B. Configure IPSec encryption on the IPS-8
C. Configure IP ACLs on the IPS-8
D. Configure fabric binding on the IPS-8
Answer: C

 http://www.test4actual.com/642-357.html

6. What are two ways of preventing unauthorized hosts from connecting to the management interface of a Cisco MDS 9000 Family switch? (Choose two.)
Select 2 response(s).
A. use SNMPv3 only
B. configure IP ACLs
C. configure management VSANs
D. use digital certificates
E. implement RBAC
Answer: BD
7. Your customer has implemented an IPS-8 for iSCSI connectivity to workgroup servers. How can this customer prevent unauthorized hosts from connecting to the Cisco MDS 9000 fabric through the iSCSI interfaces?
Select the best response.
A. Configure RADIUS authentication
B. Configure IPSec encryption on the IPS-8
C. Configure IP ACLs on the IPS-8
D. Configure fabric binding on the IPS-8
Answer: C
8. What is the principal cost advantage of a collapsed core SAN design compared to a core-edge design if each connects the same number of host and storage ports?
Select the best response.
A. fewer hops for a given exchange
B. fewer long-wave SFPs
C. fewer ISL connections
D. fewer domains on the domain list
E. fewer director-class switches
Answer: C
9. What is the best mechanism to use to isolate backup traffic from other mission-critical traffic?
Select the best response.
A. VSANs
B. zones
C. QoS
D. IVR
Answer: A
10. Which of these provides fabric-based virtualization for multiple independent software vendors?
Select the best response.
A. Storage Services Module (SSM)
B. Cisco MDS 9000 32-port 1/2-Gbps Fibre Channel module
C. Multiprotocol Services module
D. Cisco MDS 9513 Supervisor 2
Answer: A

Product Description
Exam Number/Code: 640-816
Exam Name: Interconnecting Cisco Networking Devices Part 2
Questions and Answers:147Q&A
Update Time:2009-12-16
Price:$75.00
Test4actual offers free demo for CCNA 640-816 exam (Interconnecting Cisco Networking Devices Part 2). You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products.

With the complete collection of questions and answers, Test4actual has assembled to take you through 181 Q&A to your 642-642 exam preparation. In the 642-642 exam resources, you will cover every field and category in CCIP CCVP IP Communications helping to ready you for your successful Cisco Certification.

Exam Description
The QOS exam is one of the qualifying exams for the Cisco Certified Internetwork Professional, Cisco Certified Voice Professional, Cisco IP Telephony Design Specialist, Cisco IP Telephony Express Specialist, Cisco IP Telephony Operations Specialist, and Cisco IP Telephony Support Specialist certifications. The QOS 642-642 exam will test materials covered under the Implementing Cisco Quality of Service QOS v2.1 course. The exam will certify that the successful candidate has knowledge and skills necessary to configure and troubleshoot Cisco IOS routers running Quality of Service protocols in Service Provider and Enterprise environments. The exam covers topics on IP QOS, classification and marking Mechanisms, queuing mechanisms, traffic shaping and policing mechanisms, congestion avoidance mechanisms, link efficiency mechanisms, modular QOS command line interface, and QOS Best Practices.

1. The Acme Corporation is experiencing poor, choppy audio quality on voice calls placed across their WAN link to and from Madison. What can be done to the Location parameter for Madison to help alleviate this problem?
Select the best response.
A. Increase the audio bandwidth setting in the Location configuration window for Madison.
B. Nothing, the audio bandwidth Location parameter for Madison is not related to the problem.
C. Remove the audio bandwidth parameter in the Location configuration window for Madison.
D. Decrease the audio bandwidth setting in the Location configuration window for Madison.
Answer: D
2. How are Cisco Unified CallManager location parameters used?
Select the best response.
A. Assign directory numbers to devices as they connect to the IP telephony network.
B. Implement call admission control in a centralized call processing deployment.
C. Provide alternate call routing when the primary call path is unavailable.
D. Specify the bandwidth used for audio and video calls.
Answer: B
3. What is the impact of setting an RSVP policy per location pair with a default interlocation RSVP service policy?
Select the best response.
A. additional bandwidth capacity will be added to the default interlocation RSVP service policy
B. the RSVP policy will only be associated with one type of call; for example, if it is associated with video calls, audio calls will not be impacted
C. an RSVP mandatory mid-call retry counter will be added to calls that encounter mid-call retry errors
D. the default interlocation RSVP service policy will be overridden
Answer: D
4. How is recovery from SRST mode back to Cisco Unified Communications Manager call processing accomplished?
Select the best response.
A. The IP phones receive Keepalives from Cisco Unified Communications Manager. They then register with Cisco Unified Communications Manager and cancel their registration with the SRST gateway.
B. The IP phones receive a response to Keepalives sent to Cisco Unified Communications Manager. They then register with Cisco Unified Communications Manager and cancel their registration with the SRST gateway.
C. The SRST gateway receives Keepalives from Cisco Unified Communications Manager. The SRST gateway then rejects the IP phone registrations with instructions to register with Cisco Unified Communications Manager.
D. The SRST gateway receives a response to Keepalives sent to Cisco Unified Communications Manager. The SRST gateway then rejects the IP phone registrations with instructions to register with Cisco Unified Communications Manager.
Answer: B
5. Which debug command can be used to troubleshoot an issue with a Tcl script?
Select the best response.
A. debug tcl script
B. debug call script
C. debug custom script
D. debug voice application
Answer: D

 http://www.test4actual.com/642-456.html

6. Which encryption algorithm does SRTP utilize?
Select the best response.
A. SEAL
B. 3DES
C. IPSEC
D. AES
Answer: D
7. What is required to effectively use the Cisco CTL client to activate security in an IP telephony network?
Select the best response.
A. H.323 gateway
B. Security Tokens
C. IPSEC
D. Secure SRST
Answer: B
8. When configuring CAPF, user intervention is required when using which authentication mode?
Select the best response.
A. by existing certificate (precedence to LSC)
B. by null string
C. by existing certificate (precedence to MIC)
D. by authentication string
E. user intervention never required
Answer: D
9. Manual IOS SRTP configuration is required on which two types of gateways? (Choose two.)
Select 2 response(s).
A. H.323
B. MGCP
C. PRI
D. SIP
E. SCCP
Answer: AD
10. Which service, when correctly configured in Enterprise Parameters, permits the phone configuration files to be encrypted?
Select the best response.
A. Cisco Unified Communications Manager Service
B. Cisco IP Voice Media Streaming App Service
C. Cisco CTIManager Service
D. Cisco TFTP Service
E. Cisco CTL Client Service
Answer: D

Preparing for the 642-426 exam? Searching 642-426 Test Questions, 642-426 Practice Exam, 642-426 Dumps?

With the complete collection of questions and answers, Test4actual has assembled to take you through 42 Q&A to your 642-426 exam preparation. In the 642-426 exam resources, you will cover every field and category in Cisco Others Certification Cisco Others Certification helping to ready you for your successful Cisco Certification.

1. Which three capabilities cannot be configured if the default dial peer is matched? (Choose three.)
Select 3 response(s).
A. disable DID
B. invoke a Tcl application
C. enable dtmf-relay
D. disable VAD
E. set codec to G.711
F. set preference to 1
Answer: BCD
2. Cisco CallManager 5.0 has just been deployed in two locations across a wide-area link. A distributed model with an intercluster trunk has been used. When you call an IP phone at the remote site the phone rings, but as soon as the other person picks up the phone, the call is dropped.Where should you look to diagnose the problem?
Select the best response.
A. locations
B. system parameters
C. media resource group
D. Cisco Unified CallManager group
E. Cisco Unified CallManager CTI traces
Answer: C
3. Your company has a centralized IP Telephony system and branch offices in eight major cities.The manager of your company help desk recently published local access numbers for external customers to reduce the costs associated with your company’s toll-free 800 service. However,when customers call the new local numbers they hear a reorder tone instead of your centralized IVR.
What is the best solution to this issue?
Select the best response.
A. Deploy transcoders at each remote location.
B. Deploy transcoders at the central location.
C. Deploy Cisco Unified IP IVRs at each remote location.
D. Increase the number of ports in the centralized IVR.
Answer: B
4. You have received a trouble ticket stating that an executive with an account at a bank cannot retrieve account information by phone. When the executive calls the bank, the call is answered and the executive is prompted to enter the account code. However, the bank does not seem to recognize the DTMF tones and disconnects the call.What is a possible solution to this problem?
Select the best response.
A. Configure the voice rtp send-recv command in the gateway.
B. Set the Cisco Unified CallManager service parameter ToSendH225UserInfoMsg to True.
C. Configure the progress_ind setup enable 3 command under the gateway VoIP dial peer.
D. Configure the progress_ind alert enable 8 command under the gateway POTS dial peer.
Answer: A
5. Partition A contains four route patterns. The calling search space assigned to Device B contains only Partition A. When Device B dials 1136, which of the route patterns will be selected?
Select the best response.
A. 1[14]XX
B. 11X!
C. 1[^2-8]XX
D. 1[1-4]XX
Answer: B

 http://www.test4actual.com/642-426.html

6. You have received a trouble ticket that says users are experiencing echo when their calls go out an H.323 gateway. You have tested the gateway and have modified the configuration so that the ERL level is now 6 dB. You also increased the echo-cancel coverage value to 64 ms.
How will this impact voice quality after this change?
Select the best response.
A. The increase in echo-cancel coverage will have no effect on voice quality.
B. The ends of sentences will be chopped by the echo canceller.
C. Consonants will be chopped by the echo canceller.
D. The echo canceller will take 2-3 seconds longer to converge at the beginning of the call.
Answer: D
7. Your company has recently installed a Cisco Unified CallManager cluster and a Cisco Unity voice mail platform. You have received complaints from users that the red MWI light never comes on, even when there are new voice-mail messages in the voice mailboxes. Which two steps must be taken to resolve this issue? (Choose two.)
Select 2 response(s).
A. Verify, using the Port Usage tool, that the ports dedicated to MWI on/off are not over-utilized. Add another dedicated port if the current port is over-utilized.
B. Verify that the MWI on/off numbers are unique within the Cisco Unified CallManager cluster dial plan. If they are not, change the MWI on/off numbers in the Cisco Unified CallManager cluster so they are unique and configure the Cisco Unity server so they match.
C. Ensure that the number of ports licensed for the Cisco Unity server is greater than or equal to the number of configured ports.
D. Verify that the calls are being sent to the correct ports on the Cisco Unity server. If they are being sent to the incorrect ones by the Cisco Unified CallManager cluster, correct the values in the cluster.
E. Verify that the same numbers are being used for MWI on/off in both the Cisco Unified CallManager cluster and Cisco Unity server. If they are different, change the Cisco Unity server to match the Cisco Unified CallManager cluster.
Answer: BE
8. A company has migrated to a Cisco Unified CallManager IP Telephony system and is now replacing the existing voice-mail system with a Cisco Unity voice- mail system. A small group of users has been established to test the new voice mail system. The users were able to initialize their mailboxes and record greetings; however, during testing the callers were sometimes unable to leave voice-mail messages for Cisco Unity users.
Which two issues could cause this problem? (Choose two.)
Select 2 response(s).
A. There is a mismatch in the number of ports configured in Cisco Unified CallManager and Cisco Unity.
B. There is a mismatch in the MWI on/off numbers configured in Cisco Unified CallManager and Cisco Unity.
C. The call transfer call handlers are not configured correctly.
D. Cisco Unity is in a G.729 region and has not been configured to support G.729.
E. The hunt group is hunting to Cisco Unity ports that have been dedicated for message notification.
Answer: AE
9. Which Cisco Unity troubleshooting tool would be used to diagnose problems with skinny and MWI messages?
Select the best response.
A. Cisco Unity Performance Information and Diagnostics
B. Unity Diagnostic Tool
C. Integration Monitor
D. SysCheck
Answer: B
10. The following is a partial configuration of an access layer switch:mls qos map cos-dscp 0 8 12 16 28 32 40 48mls qos!
Voice bearer traffic will be set to use which per-hop behavior?
Select the best response.
A. EF
B. CS4
C. AF32
D. AF12
E. BE
Answer: B

1. While examining the output of a show run command on the Cisco MDS 9000 Series, you notice that the statement interface GigabitEthernet2/1.2 appears in the output. What does this mean?
Select the best response.
A. It refers to the second FCIP tunnel that is configured on port GigabitEthernet2/1.
B. It refers to a VLAN subinterface on port GigabitEthernet2/1.
C. It means that port GigabitEthernet2/1 is assigned to VSAN 2.
D. It is a mistake in the interface configuration.
Answer: B
2. The HBA on your storage server only supports the NL_Port mode. Which interface type on the Cisco MDS 9000 Series fabric switches can support this HBA?
Select the best response.
A. F
B. TE
C. FL
D. N
E. E
Answer: C
3. For purposes of granting restricted access to statically configure iSCSI virtual targets, which three of these can be used to identify iSCSI initiators? (Choose three.)
Select 3 response(s).
A. iSCSI node name
B. host name
C. IPv4 address and subnet
D. MAC address
E. IPv6 address
F. iSCSI WWN
Answer: ACE
4. What is a benefit of enhanced zoning?
Select the best response.
A. fabric locked during configuration changes
B. larger zoning database size
C. database rollback in case of failure
D. zones allowed to span VSANs
Answer: A
5. How many ports are addressable on a fabric arbitrated loop?
Select the best response.
A. 126
B. 127
C. 255
D. 256
Answer: B
6. Which three of the following are possible reasons why a line card module does not come online? (Choose three.)
Select 3 response(s).
A. Port indexes have been taken offline.
B. Available port indexes are noncontiguous.
C. Not enough power is available in the chassis.
D. An invalid interoperability mode has been configured.
E. Unsupported SFPs have been installed.
F. Not enough port indexes are available.
Answer: BCF
7. Which of the following tools would you use to view SCSI error count statistics?
Select the best response.
A. Cisco Performance Manager
B. RMON
C. Cisco Traffic Analyzer
D. Cisco Fabric Analyzer
Answer: C

http://www.test4actual.com/642-359.html

8. Why would you use the fcanalyzer command?
Select the best response.
A. to ensure that Fibre Channel configuration settings are synchronized across all switches in the fabric
B. to identify common configuration errors in the fabric
C. to nondisruptively capture and decode Fibre Channel control frames
D. to decode and analyze Fibre Channel frames and ordered sets on a link
Answer: C
9. Which two features help you verify connectivity between host and storage devices? (Choose two.)
Select 2 response(s).
A. fcanalyzer
B. Cisco Traffic Analyzer
C. End-to-End Connectivity Analysis
D. Zone Merge Analysis
E. fcping
Answer: CE
10. Which feature detects hardware faults and attempts recovery actions?
Select the best response.
A. Switch Health Analysis
B. Fabric Configuration Analysis
C. Online Health Management System
D. End-to-End Connectivity Analysis
E. Cisco Fabric Services
Answer: C
11. A customer has reported performance degradation in the SAN. The system administrator would like to track read-write I/O and LUN use on several devices. The devices are directly connected to various switches and belong to different VSANs. The administrator wants to gather information for the last 72 hours.
Which of the following Cisco MDS 9000 Series tools is needed to track SCSI I/O and LUN statistics?
Select the best response.
A. Cisco Fabric Manager
B. Cisco Traffic Analyzer and PAA
C. Cisco Performance Manager
D. Cisco Fabric Analyzer
Answer: B
12. Which services are supported by a Cisco NX-OS AAA configuration?
Select the best response.
A. Telnet, SSH, FM and DM logins
B. Console login, FC-SP authentication, FTP
C. FC-SP authentication, FM and DM logins, TFTP
D. iSCSI authentication, FTP, FC-SP authentication
Answer: A
13. Which two Cisco MDS 9000 Series Switches are used in small- and medium-sized SAN topologies? (Choose two.)
Select 2 response(s).
A. Cisco MDS 9124
B. Cisco MDS 9222i
C. Cisco MDS 9506
D. Cisco MDS 9509
E. Cisco MDS 9513
Answer: AB
14. Which second-generation Fibre Channel module offers a full 4Gb/s line rate on all ports?
Select the best response.
A. 12-port 1/2/4 Gb/s Fibre Channel module
B. 24-port 1/2/4 Gb/s Fibre Channel module
C. 24-port 1/2/4/8 Gb/s Fibre Channel module
D. 48-port 1/2/4 Gb/s Fibre Channel module
Answer: A
15. Which Cisco MDS 9000 Series Switch has non-field-replaceable fans?
Select the best response.
A. Cisco MDS 9124
B. Cisco MDS 9134
C. Cisco MDS 9222i
D. Cisco MDS 9506
Answer: A

642-357,one of the most important cisco exams updated by Test4actual,will help you pass this exam,and it’s very useful for your career.

1. Which three Fibre Channel switch features are unique to Cisco’s MDS 9000 Series switches? (Choose three.)
Select 3 response(s).
A. LUN Zoning
B. Read-Only Zones
C. Internet-Switch Link
D. Fibre Channel Congestion Control
E. FC Link Aggregation
F. FSPF
Answer: ABD
2. Which Cisco MDS 9500 Series feature addresses the customer requirement for five nines (99.999-percent) availability?
Select the best response.
A. active and standby FC line cards
B. virtual output queuing (VOQ)
C. SSM card is installed in the switch
D. nondisruptive software upgrades
E. redundant fan cards
Answer: D
3. Which statement is true concerning the Cisco MDS switch when operating in native interop mode?
Select the best response.
A. The MDS switch can interoperate with Non-MDS switches that are certified by SNIA.
B. The MDS switch can interoperate with Non-MDS switches that support “MDS Native” mode.
C. The MDS switch can interoperate with Non-MDS switches that properly adhere to Fibre Channel switch standards.
D. The MDS switch cannot interoperate with Non-MDS switches.
Answer: C
4. Which are two characteristics of the Cisco MDS Series fan modules? (Choose two.)
Select 2 response(s).
A. Supervisor modules shut down the fan modules when the air temperature is below a preset threshold.
B. If the Fan Status LED turns red, a fan has failed and the module must be replaced.
C. Fan modules monitor air temperature and shut down if the temperature exceeds a preset threshold.
D. Fan modules do not require the switch to be powered off in order to be replaced.
Answer: BD
5. Your customer has implemented an IPS-8 for FCIP connectivity to remote sites. How can this customer prevent unauthorized hosts from connecting to the Cisco MDS 9000 fabric through the FCIP interfaces?
Select the best response.
A. Configure RADIUS authentication
B. Configure IPSec encryption on the IPS-8
C. Configure IP ACLs on the IPS-8
D. Configure fabric binding on the IPS-8
Answer: C

http://www.test4actual.com/642-357.html

6. What are two ways of preventing unauthorized hosts from connecting to the management interface of a Cisco MDS 9000 Family switch? (Choose two.)
Select 2 response(s).
A. use SNMPv3 only
B. configure IP ACLs
C. configure management VSANs
D. use digital certificates
E. implement RBAC
Answer: BD
7. Your customer has implemented an IPS-8 for iSCSI connectivity to workgroup servers. How can this customer prevent unauthorized hosts from connecting to the Cisco MDS 9000 fabric through the iSCSI interfaces?
Select the best response.
A. Configure RADIUS authentication
B. Configure IPSec encryption on the IPS-8
C. Configure IP ACLs on the IPS-8
D. Configure fabric binding on the IPS-8
Answer: C
8. What is the principal cost advantage of a collapsed core SAN design compared to a core-edge design if each connects the same number of host and storage ports?
Select the best response.
A. fewer hops for a given exchange
B. fewer long-wave SFPs
C. fewer ISL connections
D. fewer domains on the domain list
E. fewer director-class switches
Answer: C
9. What is the best mechanism to use to isolate backup traffic from other mission-critical traffic?
Select the best response.
A. VSANs
B. zones
C. QoS
D. IVR
Answer: A
10. Which of these provides fabric-based virtualization for multiple independent software vendors?
Select the best response.
A. Storage Services Module (SSM)
B. Cisco MDS 9000 32-port 1/2-Gbps Fibre Channel module
C. Multiprotocol Services module
D. Cisco MDS 9513 Supervisor 2
Answer: A

Product Description
Exam Number/Code: 642-062
Exam Name: Routing and Switching Solutions for System Engineers
Questions and Answers:59Q&A
Update Time:2009-11-5
Price:$129.00
Exam Details
The exam is the qualifying exam available to candidates pursuing a single-exam option for the Cisco Certified Network Associate certification. The (642-062) exam will test materials from the new Interconnection Cisco Network Devices (ICND) course as well as the new Introduction to Cisco Networking Technologies (INTRO) course. The exam will certify that the successful candidate has important knowledge and skills necessary to select, connect, configure, and troubleshoot the various Cisco networking devices. The exam covers topics on Extending Switched Networks with VLANS, Determining IP Routes, Managing IP traffic with Access Lists, Establishing Point-to-Point connections, and Establishing Frame Relay Connections.

With the complete collection of questions and answers, Test4actual has assembled to take you through 233 Q&A to your 640-816 exam preparation. In the 640-816 exam resources, you will cover every field and category in CCNA helping to ready you for your successful Cisco Certification.

FREE 640-816 DEMO download:http://exam.test4actual.com/640-816.pdf

Product Description
Exam Number/Code: 640-553
Exam Name: IINS Implementing Cisco IOS Network Security
Questions and Answers:75Q&A
Update Time:2009-8-21
Price:$99.00
1.Which consideration is important when implementing Syslogging in your network?
A.Use SSH to access your Syslog information.
B.Enable the highest level of Syslogging available to ensure you log all possible event messages.
C.Log all messages to the system buffer so that they can be displayed when accessing the router.
D.Syncronize clocks on the network with a protocol such as Network Time Protocol.
Answer:D
2.Which statement is true when you have generated RSA keys on your Cisco router to prepare for secure device management?
A.You must then zeroize the keys to reset secure shell before configuring other parameters.
B.The SSH protocol is automatically enabled.
C.You must then specify the general-purpose key size used for authentication with the crypto key generate rsa general-keys modulus command.
D.All vty ports are automatically enabled for SSH to provide secure management.
Answer:B
3.What does level 5 in the following enable secret global configuration mode command indicate? router#enable secret level 5 password
A.The enable secret password is hashed using MD5.
B.The enable secret password is hashed using SHA.
C.The enable secret password is encrypted using Cisco proprietary level 5 encryption.
D.Set the enable secret command to privilege level 5.
E.The enable secret password is for accessing exec privilege level 5.
Answer:E
4.Which of these correctly matches the CLI command(s) to the equivalent SDM wizard that performs similar configuration functions?
A.Cisco Common Classification Policy Language configuration commands and the SDM Site-to-Site VPN wizard
B.auto secure exec command and the SDM One-Step Lockdown wizard
C.setup exec command and the SDM Security Audit wizard
D.class-maps, policy-maps, and service-policy configuration commands and the SDM IPS wizard
E.aaa configuration commands and the SDM Basic Firewall wizard
Answer:B
5.What is the key difference between host-based and network-based intrusion prevention?
A.Network-based IPS is better suited for inspection of SSL and TLS encrypted data flows.
B.Network-based IPS provides better protection against OS kernel-level attacks against hosts and servers.
C.Network-based IPS can provide protection to desktops and servers without the need of installing specialized software on the end hosts and servers.
D.Host-based IPS can work in promiscuous mode or inline mode.
E.Host-based IPS is more scalable then network-based IPS.
F.Host-based IPS deployment requires less planning than network-based IPS.
Answer:C

 http://www.test4actual.com/640-553.html

6.Refer to the exhibit. You are a network manager for your organization. You are looking at your Syslog server reports. Based on the Syslog message shown,which two statements are true? (Choose two.)
A.Service timestamps have been globally enabled.
B.This is a normal system-generated information message and does not require further investigation.
C.This message is unimportant and can be ignored.
D.This message is a level 5 notification message.
Answer:A D
7.You suspect an attacker in your network has configured a rogue layer 2 device to intercept traffic from multiple VLANS, thereby allowing the attacker to capture potentially sensitive data. Which two methods will help to mitigate this type of activity? (Choose two.)
A.Turn off all trunk ports and manually configure each VLAN as required on each port
B.Disable DTP on ports that require trunking
C.Secure the native VLAN, VLAN 1 with encryption
D.Set the native VLAN on the trunk ports to an unused VLAN
E.Place unused active ports in an unused VLAN
Answer:B D
8.Which three statements about SSL-based VPNs are true? (Choose three.)
A.Asymmetric algorithms are used for authentication and key exchange.
B.SSL VPNs and IPsec VPNs cannot be configured concurrently on the same router.
C.Symmetric algorithms are used for bulk encryption.
D.The authentication process uses hashing technologies.
E.SSL VPNs require special-purpose client software to be installed on the client machine.
F.You can also use the application programming interface to extensively modify the SSL client software for use in special applications.
Answer:A C D
9.When configuring AAA login authentication on Cisco routers, which two authentication methods should be used as the final method to ensure that the administrator can still log in to the router in case the external AAA server fails?
(Choose two.)
A.group RADIUS
B.group TACACS+
C.local
D.krb5
E.enable
F.if-authenticated
Answer:C E
10.What is a result of securing the Cisco IOS image using the Cisco IOS image resilience feature?
A.The show version command will not show the Cisco IOS image file location.
B.The Cisco IOS image file will not be visible in the output from the show flash command.
C.When the router boots up, the Cisco IOS image will be loaded from a secured FTP location.
D.The running Cisco IOS image will be encrypted and then automatically backed up to the NVRAM.
E.The running Cisco IOS image will be encrypted and then automatically backed up to a TFTP server.
Answer:B