648-375

Leading the way in IT testing and certification tools, www.examkiller.com

Section: 150 Questions QUESTION NO: 1 Which of these is a benefit of an integrated security management system? A. It provides configuration, monitoring, and troubleshooting capabilities across a wide range of security products. B. It leverages existing network management systems such as HP OpenView to lower the cost of implementation. C. It integrates security management capabilities into the router or switch. D. It integrates security device management products and collects events on an "as needed" basis to reduce management overhead. E. It provides a single point of contact for all security configuration tasks thereby enhancing the return on investment. Answer: A QUESTION NO: 2 DRAG DROP


Answer:

QUESTION NO: 3 Which service component within the prepare phase recommends the appropriate technology strategy to address a business requirement of the customer? A. identifying what a customer requires from a proposed solution B. determining what end-user training a customer requires C. analyzes the customer's business requirements and recommends the appropriate Cisco technologies to meet business requirements D. addressing a customer's physical requirements Answer: C QUESTION NO: 4 What are two important approaches to communicate when identifying a customer's security risks?


(Choose two.) A. Security should be a continuous process. B. Security solutions should come from multiple vendors to make it easier to coordinate security events from the point of origin. C. The designated security expert should report to the IT department, since that is where the solution will be implemented. D. Business strategy should directly relate to the security policy and budget. E. Smaller companies are at less risk than larger enterprises, so their security needs are not as great. Answer: A,D QUESTION NO: 5 Which of the following best describe the customer benefit of creating a systems acceptance test plan in the design phase? A. reduce operating costs and limit change-related incidents by providing a consistent and efficient set of processes B. improve the return on investment and hasten migration by identifying and planning for necessary infrastructure changes and resource additions, as well as reduce deployment costs by analyzing gaps early in the planning process to determine what is needed to support the system C. improve its ability to make sound financial decisions by developing a business case based on its business requirements and establishing a basis for developing a technology strategy D. reduce unnecessary disruption, delays, rework, and other problems by establishing test cases for use in verifying that the system meets operational, functional, and interface requirements Answer: D QUESTION NO: 6 A Cisco Catalyst switch can belong to how many VTP domains? A. 2 B. 1 to 4,096


C. 1 D. 1 to 1,005 E. no limit Answer: C QUESTION NO: 7 The Cisco ASA Security Appliance can offer the benefit of integrating which three security services into one device? (Choose three.) A. PIX firewall B. VPN Concentrator C. IPS D. DDoS Anomaly Guard and Detector E. CSA MC F. ACS server Answer: A,B,C QUESTION NO: 8 A customer has deployed a wireless core feature set using autonomous access points and now wants to include a satellite building 4,500 feet away from the main campus. The customer also wants to provide wireless access to a courtyard for wireless clients in close proximity to the antenna mounting position. Which Cisco Aironet product is the most applicable solution? A. Cisco Aironet 1000 Series B. Cisco Aironet 1300 Series C. Cisco Aironet 1100 Series D. Cisco Aironet 1400 Series E. Cisco Aironet 1200 Series


Answer: B QUESTION NO: 9 What is one benefit of the Cisco anti-X defense strategy? A. virtual firewall protection B. malware, virus, and worm mitigation C. applications security D. security events correlation for proactive response Answer: B QUESTION NO: 10 Which two of these statements best describe the benefits of Cisco's wireless IDS functionality? (Choose two.) A. Autonomous APs must be dedicated IDS sensors while lightweight APs can combine client traffic and RF monitoring. B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor both 802.11 and non-802.11 RF interference. D. APs only monitor the RF channels that are servicing the clients. E. AirDefense for wireless IDS is required by autonomous APs. Answer: B,C QUESTION NO: 11 Which component of Cisco ASDM provides administrators with a complete system overview and device health statistics at a glance? A. Cisco ASDM Launcher B. AIP SSM C. Resource Manager


D. Dashboard Answer: D QUESTION NO: 12 What are three benefits of the Cisco Adaptive Threat Defense strategy? (Choose three.) A. virtual firewall B. using QoS techniques such as Traffic Policing to rate limit suspected traffic to prevent DoS attacks C. automatic reconfigurations of the security devices based on current security threats D. containment and control of security threats E. application security F. anti-x defense Answer: D,E,F QUESTION NO: 13 Which CiscoWorks component would most help you locate end-station connections at the access switch level quickly? A. Campus Manager B. Resource Manager Essentials C. Device Fault Manager D. CiscoView Answer: A QUESTION NO: 14 Which of these is the best definition of the Cisco Lifecycle Services approach? A. It determines how best to price Cisco products.


B. It consists of these phases: plan, deploy, support, and troubleshoot. C. It defines the minimum set of services required to successfully deploy and operate a set of Cisco technologies. D. It provides partners with a useful way to leverage Cisco resources. Answer: C QUESTION NO: 15 The PIX Security Appliance feature set is a subset of the ASA Security Appliance feature set. Which two of these features are only supported by an ASA Security Appliance? (Choose two.) A. WebVPN B. low latency queuing C. AIP-SSM intrusion prevention D. Active/Active failover E. security contexts F. transparent firewall Answer: A,C QUESTION NO: 16 Which two of these statements best describe fast secure roaming for the wireless core feature set using autonomous access points? (Choose two.) A. It is compatible with all wireless clients. B. It is enabled through WLSE deployment. C. Roaming occurs without reauthentication through a centralized RADIUS server. D. It reduces roaming latency through reduced client RF channel scanning enhancements. E. It reduces roaming latency to targeted times of less than 75ms. Answer: C,D


QUESTION NO: 17 Your company has two primary divisions: Products and Services. The Products division is on network 150.10.64.0/21. The Services division is on network 150.10.72.0/21. You want to summarize both networks into one routing statement. Which IP address and subnet mask combination would most efficiently accomplish this? A. 150.10.0.0./16 B. 150.10.64.0/20 C. 150.10.64.0/22 D. 150.10.64.0/21 Answer: B QUESTION NO: 18 At which stage of the Cisco Lifecycle Services approach would you recommend supporting and troubleshooting the system? A. Implementation B. Optimization C. Design D. Operation E. Planning F. Preparation Answer: D QUESTION NO: 19 List three benefits of implementing an integrated security solution based on the Cisco Self-Defending Network strategy? (Choose three.) A. collaborative security system B. programmable security ASICs


C. integrated security D. Cisco IOS-based security E. self provisioning F. Adaptive Threat Defense Answer: A,C,F QUESTION NO: 20 Which two of these statements best describe fast secure roaming? (Choose two.) A. available only in autonomous APs B. a feature of WDS in lightweight APs C. available in autonomous and lightweight APs D. a feature of WDS in autonomous APs E. requires at least one AP and one Wireless LAN Services Module Answer: C,D QUESTION NO: 21 Which network management solution performs configuration, monitoring, and management of Cisco Firewall, VPN router, and IPS devices as well as maintains network device inventory and software distribution features? A. Adaptive Security Device Manager (ASDM) B. CiscoWorks Security Device Management Center (SD/MC) C. Security Device Manager (SDM) D. CiscoWorks VMS/Management Center (VMS/MC) Answer: D


QUESTION NO: 22 Which three of these service components are in the design phase? (Choose three.) A. Staging Plan Development B. Site Readiness Assessment C. Staff Training D. Detailed Design Development E. Account Qualification and Planning F. Systems Acceptance Test Plan Development Answer: A,D,F QUESTION NO: 23 DRAG DROP

Answer:

648-375

Documents

security events

security needs

security solutions

security policy

customers security risks

security configuration

designated security

business strategy