cisco 648-375 questions & answers - testing engine€¦ · b. cisco or ccx compatible client...

28
Cisco 648-375 Questions & Answers - Testing Engine Number : 648-375 Passing Score : 800 Time Limit : 120 min File Version : 23.5 http://www.gratisexam.com/ Cisco 648-375 Questions & Answers - Testing Engine Exam Name: Cisco Express Foundation for Systems Engineers (CXFS) For Full Set of Questions please visit: http://www.certdumps.com/648-375.html

Upload: others

Post on 27-Jun-2020

8 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Cisco 648-375 Questions & Answers - Testing Engine

Number: 648-375Passing Score: 800Time Limit: 120 minFile Version: 23.5

http://www.gratisexam.com/

Cisco 648-375 Questions & Answers - Testing Engine

Exam Name: Cisco Express Foundation for Systems Engineers (CXFS)

For Full Set of Questions please visit: http://www.certdumps.com/648-375.html

Page 2: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Certdumps

QUESTION 1Which of these is a benefit of an integrated security management system?

A. It provides configuration, monitoring, and troubleshooting capabilities across a wide range of securityproducts.

B. It leverages existing network management systems such as HP OpenView to lower the cost ofimplementation.

C. It integrates security management capabilities into the router or switch.D. It integrates security device management products and collects events on an "as needed" basis to reduce

management overhead.E. It provides a single point of contact for all security configuration tasks thereby enhancing the return on

investment.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 2DRAG DROP

A.B.C.D.

Correct Answer: Section: (none)Explanation

Explanation/Reference:

QUESTION 3Which service component within the prepare phase recommends the appropriate technology strategy toaddress a business requirement of the customer?

A. identifying what a customer requires from a proposed solutionB. determining what end-user training a customer requiresC. analyzes the customer's business requirements and recommends the appropriate Cisco technologies to

meet business requirementsD. addressing a customer's physical requirements

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 4Which of the following best describe the customer benefit of creating a systems acceptance test plan in the

Page 3: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

design phase?

A. reduce operating costs and limit change-related incidents by providing a consistent and efficient set ofprocesses

B. improve the return on investment and hasten migration by identifying and planning for necessaryinfrastructure changes and resource additions, as well as reduce deployment costs by analyzing gaps earlyin the planning process to determine what is needed to support the system

C. improve its ability to make sound financial decisions by developing a business case based on its businessrequirements and establishing a basis for developing a technology strategy

D. reduce unnecessary disruption, delays, rework, and other problems by establishing test cases for use inverifying that the system meets operational, functional, and interface requirements

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 5A Cisco Catalyst switch can belong to how many VTP domains?

A. 2B. 1 to 4,096C. 1D. 1 to 1,005E. no limit

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 6A customer has deployed a wireless core feature set using autonomous access points and now wants toinclude a satellite building 4,500 feet away from the main campus. The customer also wants to provide wirelessaccess to a courtyard for wireless clients in close proximity to the antenna mounting position. Which CiscoAironet product is the most applicable solution?

A. Cisco Aironet 1000 SeriesB. Cisco Aironet 1300 SeriesC. Cisco Aironet 1100 SeriesD. Cisco Aironet 1400 SeriesE. Cisco Aironet 1200 Series

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 7Which two of these statements best describe the benefits of Cisco's wireless IDS functionality? (Choose two.)

Page 4: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

http://www.gratisexam.com/

A. Autonomous APs must be dedicated IDS sensors while lightweight APs can combine client traffic and RFmonitoring.

B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs.C. 2.4GHz RF management can monitor both 802.11 and non-802.11 RF interference.D. APs only monitor the RF channels that are servicing the clients.E. AirDefense for wireless IDS is required by autonomous APs.

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 8What are three benefits of the Cisco Adaptive Threat Defense strategy? (Choose three.)

A. virtual firewallB. using QoS techniques such as Traffic Policing to rate limit suspected traffic to prevent DoS attacksC. automatic reconfigurations of the security devices based on current security threatsD. containment and control of security threatsE. application securityF. anti-x defense

Correct Answer: DEFSection: (none)Explanation

Explanation/Reference:

QUESTION 9Which CiscoWorks component would most help you locate end-station connections at the access switch levelquickly?

A. Campus ManagerB. Resource Manager EssentialsC. Device Fault ManagerD. CiscoView

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

Page 5: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

QUESTION 10Your company has two primary divisions: Products and Services. The Products division is on network150.10.64.0/21. The Services division is on network 150.10.72.0/21. You want to summarize both networks intoone routing statement.Which IP address and subnet mask combination would most efficiently accomplish this?

A. 150.10.0.0./16B. 150.10.64.0/20C. 150.10.64.0/22D. 150.10.64.0/21

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 11At which stage of the Cisco Lifecycle Services approach would you recommend supporting and troubleshootingthe system?www.Yesuse.com

A. ImplementationB. OptimizationC. DesignD. OperationE. PlanningF. Preparation

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 12List three benefits of implementing an integrated security solution based on the Cisco Self-Defending Networkstrategy? (Choose three.)

A. collaborative security systemB. programmable security ASICsC. integrated securityD. Cisco IOS-based securityE. self provisioningF. Adaptive Threat Defense

Correct Answer: ACFSection: (none)Explanation

Explanation/Reference:

Page 6: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

QUESTION 13Which three of these service components are in the design phase? (Choose three.)

A. Staging Plan DevelopmentB. Site Readiness AssessmentC. Staff TrainingD. Detailed Design DevelopmentE. Account Qualification and PlanningF. Systems Acceptance Test Plan Development

Correct Answer: ADFSection: (none)Explanation

Explanation/Reference:

QUESTION 14Which of these statements about CiscoWorks is true?

A. CiscoWorks does not require TCP reliability.B. The LMS interface can manage a maximum of four CiscoWorks servers.C. CiscoWorks SNMS supports integration with HPOV.D. CiscoWorks Restricted is the recommended choice for large enterprise.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 15Which tools on Cisco.com could you use to plan for correct Cisco IOS images to support a customer's securitydesign and requirements? (Choose two.)

A. Cisco IOS Matrix NavigatorB. Cisco IOS Package PlannerC. Cisco Dynamic Configuration ToolD. Cisco Feature NavigatorE. Cisco IOS Security Planner

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 16A customer is considering purchasing either a Cisco Catalyst 2960 or Cisco Catalyst Express 500. Which

feature can only be found on the Catalyst 2960?

Page 7: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

A. Fast Ethernet and Gigabit Ethernet connectivityB. standalone fixed-configuration Layer 2 switchingC. 48 Ethernet 10/100 portsD. dual-purpose copper or fiber uplinks

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 17The Cisco Lifecycle Services approach is primarily applicable to which type of companies?

A. the large enterprise with a global presenceB. the large enterprise with a single campusC. All companies, regardless of sizeD. the small- or medium-sized business

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 18What is one reason you might recommend a solution using only autonomous access points to a customer?

A. The customer requires immediate wireline integration with a Catalyst 6500 switch.B. The customer needs an outdoor-ready access point.C. The customer requires Layer 3 roaming.D. The customer wants the option to migrate to LWAPP.

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 19At which stage of the Cisco Lifecycle Services approach should customer education presentations occur?

A. OperationB. ImplementationC. OptimizationD. DesignE. Planning

Correct Answer: ESection: (none)Explanation

Page 8: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Explanation/Reference:

QUESTION 20Which VMS Security Monitor tool allows you to monitor data for patterns of attacks from one machine to a list oftargets?

A. Advanced Correlation EngineB. Management Center for CSAC. CiscoWorks DashboardD. Advanced Notification Engine

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 21Deploying ISRs with integrated security services can help lower the total cost of ownership. Which of theseCisco ISR Routers features illustrate this point?

A. using the USB port to perform fast Cisco IOS image upgradeB. using the high performance AIM to increase the Cisco IOS Firewall performanceC. using built-in on-board VPN acceleration to reduce the amount of VPN configuration tasksD. using the SDM configuration tool to reduce training costsE. using the security audit feature to implement inline Intrusion Prevention System

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 22In the plan phase, network readiness assessment addresses which customer need?

A. an assessment of the preparedness of the customer's existing system infrastructure to support a proposedsolution

B. the optimal technologies for supporting its business requirements and objectivesC. an in-depth assessment of the operational environment required to support the operation of both the current

and planned solutionsD. a comprehensive design that has been customized based on the operations processes, network

management processes, and tools of its system

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 23Which statement concerning the Active/Active failover feature is correct?

Page 9: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

A. If an active security context within the primary security appliance "fails", the status of the primary securityappliance unit changes to "failed" while the secondary failover security appliance unit transitions to "active."

B. ASA Security Appliance failover pair must have either an Unrestricted and UR license or a UR and FO-A/Alicense to be able to support Active/Active failover.

C. Active/Active failover is supported in "multiple mode" configuration only.D. Active/Active failover supports site-to-site IPSec VPN stateful failover.

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 24What is one key objective of the operations readiness assessment performed in the plan phase?

A. evaluate the readiness of a customer's current operations and network management infrastructure tosupport a new technology

B. align business requirements with technical requirementsC. create a plan to recycle used equipmentD. install and test system components in a non-production environment

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 25Which three of these items can a wireless assisted site survey optimize? (Choose three.)

A. IPS auto-response settingsB. IDS settingsC. channel selectionD. beacon intervalE. security selectionF. radio transmit power setting

Correct Answer: CDFSection: (none)Explanation

Explanation/Reference:

QUESTION 26In the design phase, which service component provides the customer with a comprehensive design?

A. High-Level DesignB. Staging PlanC. Detailed Design DevelopmentD. Implementation Plan

Page 10: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

E. Project Kick-off

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 27DRAG DROP

A.B.C.D.

Correct Answer: Section: (none)Explanation

Explanation/Reference:

QUESTION 28Refer the exhibit. Which two methods enable a PC connected to the PartnerNet to connect to a server onDMZ1 but deny it access to both DMZ2 and the Inside network? (Choose two.)

A. Disable NAT control on DMZ2 and the Inside interfaces only.B. Enable static NAT translation for the DMZ1 server, and then use an ACL to permit the PartnerNet PC traffic

to the DMZ1 server.C. Lower the security level of the DMZ2 interface to 30.D. Enable port address translation for traffic sourced from the PartnerNet PC to the DMZ1 server.E. Disable NAT control on the DMZ1 interface only.F. Raise the security level of the PartnerNet interface to 55.

Correct Answer: BFSection: (none)Explanation

Explanation/Reference:

QUESTION 29Which of these statements regarding Cisco's WebVPN support is correct?

A. Cisco security appliances act as a proxy between the end user and the target web server.B. Cisco's WebVPN solution supports both TCP and UDP port forwarding for legacy application support.C. Cisco ISR Routers with the Enhanced Security Bundles support WebVPN.D. Cisco PIX Security Appliances (running release 7.0) and Adaptive Security Appliances both support

WebVPN.

Correct Answer: ASection: (none)Explanation

Page 11: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Explanation/Reference:

QUESTION 30In which of these phases is a customer's network assessed to determine its system readiness?

A. operateB. planC. implementD. design

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 31What is one thing you should be aware of when conducting a wireless site survey?

A. 2.4 GHz equipment will not be able to penetrate through walls as well as 5 GHz equipment.B. 5 GHz equipment will not be able to penetrate through walls as well as 2.4 GHz equipment.C. When determining coverage, you should begin measuring attenuation from the middle of the room.D. Mounting antennas near metal objects will slightly amplify the signal.

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 32Which Cisco security tool can best determine if a Cisco ISR router is properly secured?

A. Cisco Security Agent MCB. Cisco Security IntelliShieldC. Cisco Security MARSD. Cisco SDM Security AuditE. CAN

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 33Refer to the exhibit. Deploying integrated services on the Cisco ISR Router can help reduce network cost andcomplexity by integrating which four of these features on the ISR? (Choose four.)

A. firewall and VPN

Page 12: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

B. IP telephony and voice mailC. Anomaly Guard and DetectionD. Secure Access Control ServerE. LAN switching and Wireless LANF. IPS

Correct Answer: ABEFSection: (none)Explanation

Explanation/Reference:

QUESTION 34Conducting a project kick-off in the plan phase provides which of the following customer benefits?

A. reduce the risk of downtime due to facilities-related problemsB. confirm project roles and responsibilities, as well as milestone datesC. ensure that it receives detailed network diagramsD. ensure end-user support immediately after the launch of a new system

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 35Refer to the exhibit. What are two Cisco IOS commands that would verify connectivity between routers R1 andR2? (Choose two.)

A. show ip routeB. show frame-relay lmiC. show cdp neighborD. show running-configE. show controllers serial

Correct Answer: ACSection: (none)Explanation

Explanation/Reference:

QUESTION 36Cisco ISR Routers offer which three of these security benefits? (Choose three.)

A. events correlation and proactive responseB. onboard VPN acceleratorC. high-performance AIM VPN modulesD. Cisco IOS Firewall and IOS IPSE. transparent firewallF. virtual firewall

Page 13: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Correct Answer: BCDSection: (none)Explanation

Explanation/Reference:

QUESTION 37Which item is a feature of Cisco Compatible Extensions, Version 3?

A. full WPAv2 complianceB. NACC. wireless IDSD. full 802.11e compliance

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 38You are about to upgrade a router with a newer IOS version, but you would like to check for known bugs first.Which tool will allow you to do this most easily?

A. Dynamic Configuration ToolB. Cisco.com Search functionalityC. Cisco Bug MatrixD. Cisco Bug Toolkit

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 39Which two of these statements describe important aspects of performing a wireless site survey? (Choose two.)

A. Surveys should be done after hours in an office building or during reduced inventory levels in warehouses.B. Channel power during testing starts at the default minimum and gradually increases to the maximum.C. An 802.11g access point with a variety of antennas can be used in all standard site surveys.D. Site surveys can be performed manually or through assisted site survey.E. Overlapping access points can create performance problems.

Correct Answer: DESection: (none)Explanation

Explanation/Reference:

QUESTION 40

Page 14: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

When you explain the benefits of an effective network design to one of your clients, which two characteristic willyou talk about? (Choose two)

A. unpredictabilityB. scalabilityC. predictabilityD. changeabilityE. unexpected changesF. adaptability

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 41What is the benefit of using the Cisco Easy VPN Server feature along with the Cisco software VPN client forimplementing remote-access VPNs?

A. The Cisco Easy VPN Server feature allows the Cisco software VPN client to receive its security policiesfrom the central site VPN device. This minimizes the configuration requirements at the remote location forlarge remote access VPN deployments.

B. The Cisco Easy VPN Server feature and the Cisco software VPN client enable scalable remote-accessVPNs deployment by using a thick client/thin server model where the central site VPN router can handlethousands of incoming VPN connections.

C. The Cisco Easy VPN Server feature and the Cisco software VPN client use the same GUI configuration toolto simplify remote-access VPN configurations.

D. The Cisco Easy VPN Server feature and the Cisco software VPN client use hardware-based encryption toreduce the CPU overhead of the central site VPN router.

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 42In the plan phase, network readiness assessment addresses an assessment of the preparedness of thecustomer's existing system infrastructure to support a proposed solution.

A. TRUEB. FALSE

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 43Wi-Fi Protected Access was an interim step on the way to the more secure WPA2. What was added in WPA2to make it more secure?

Page 15: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

A. PEAPB. EAP-FASTC. AES encryptionD. Rivest Cipher 4 encryption

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 44In the plan phase, network readiness assessment addresses an in-depth assessment of the operationalenvironment required to support the operation of both the current and planned solutions

A. TRUEB. FALSE

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 45A customer is deploying a wireless core feature set using autonomous access points and requires Layer 2roaming. What is a requirement when deploying this solution?

A. a minimum of one Cisco 4100 Series WLAN ControllerB. one WDS per subnetC. a minimum of one Wireless LAN Services ModuleD. all clients using Cisco Aironet Wireless LAN Adapters

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 46Which is not the benefit of implementing an integrated security solution based on the Cisco Self-DefendingNetwork strategy?

A. integrated securityB. collaborative security systemC. self provisioningD. Adaptive Threat Defense

Correct Answer: CSection: (none)Explanation

Page 16: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Explanation/Reference:

QUESTION 47Cisco Lifecycle Services approach is a methodology for introducing new technologies

A. TRUEB. FALSE

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 48Which two of these statements best describe the benefits of WPAvl? (Choose two.)

A. SSID broadcast preventionB. improved mutual authenticationC. improved encryption through AESD. improved protection against sniffing initialization vectors

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 49Your company wants to deploy a wireless advanced feature set using lightweight access points. A site surveyshows that the customer will need 34 APs to cover the facility. Assuming that the customer will not need toinstall more APs, only two devices can be used for wireless functionality. Which two? (Choose two.)

A. 2000 Series WLAN ControllerB. 4100 Series WLAN ControllerC. 4400 Series WLAN ControllerD. Wireless LAN Solution Engine

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 50Which is a key benefit of Cisco IOS IPS?

A. it mitigates network attacks via SDEE.B. It utilizes the latest versions of Cisco IOS software to obtain the latest signature definition fileC. It leverages existing Cisco router infrastructure.

Page 17: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

D. It configures the router to shun malicious activity via dynamically created access control lists

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 51CORRECT TEXT

Refer to the exhibit. A company wants to connect two new offices to their main office. One building is 2 milesaway from the headquarters and the other is 12 miles away. The angle between the buildings is 80 degrees.Which antenna is the best to use in this situation? A 12 dBi omni

A. 10 dBiyagiB. 14 dBi sectorC. 21 dBi dish

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 52What is a key technical advantage of configuring all switches in the enterprise network to VTP transparentmode?

A. ensures consistency between VLAN numbering for all switches in the networkB. prevents the network administrator from accidentally deleting VLANinformation from all switchesC. allows for a more rapid deployment of VLAN information throughout the enterpriseD. reduces the total number of VLANs required in the enterprise

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 53You are Cisco Express Foundation Design Specialist in a company. Which type of customers should yousuggest Cisco Lifecycle Services approach?

A. customers from large enterprise with a global presenceB. customers from the large enterprise with a single campusC. customers from small-or medium-sized businessD. any type customer, regardless of size

Correct Answer: DSection: (none)Explanation

Page 18: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Explanation/Reference:

QUESTION 54Cisco PIX Security Appliances (running release 7.0) and Adaptive Security Appliances both support WebVPN

A. TRUEB. FALSE

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 55Cisco's WebVPN solution supports both TCP and UDP port forwarding for legacy application support

A. TRUEB. FALSE

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 56A wireless assisted site survey cannot optimize_____.

A. radio transmit power settingB. security selectionC. beacon intervalD. channel selection

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 57Cisco Lifecycle Services approach is a methodology for proactively updating equipment before it reaches theend of its life

A. TRUEB. FALSE

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

Page 19: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

QUESTION 58What are two Cisco IOS commands that would verify connectivity between routers R1 and R2? (Choose two.)

A. show cdp neighborB. show running configureC. show frame-relayD. show ip route

Correct Answer: ADSection: (none)Explanation

Explanation/Reference:

QUESTION 59Which two of these data encryption AIM modes are found on the 3800 family of Cisco ISR Routers? (Choosetwo.)

A. BPHB. BPII-PIUSC. EPll-PlusD. HPII-PIUS

Correct Answer: CDSection: (none)Explanation

Explanation/Reference:

QUESTION 60You are working with a company that has an infrastructure based on lightweight access points using theadvanced feature set. A new security requirement demands real-time asset tracking for 800 assets.Which product or solution will provide this function?

A. Wireless Control SystemB. Wireless Location ApplianceC. Wireless LAN Solution EngineD. Wireless LAN Services Module

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 61Cisco Lifecycle Services approach is a methodology for proactively updating equipment before it reaches theend of its life

A. TRUEB. FALSE

Page 20: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 62Which two of these statements best describe the benefits of WPAv2? (Choose two.)

A. SSID broadcast preventionB. man-in-the-middle attack protectionC. cost reduction through software upgrades in all existing hardwareD. dynamic key generation

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 63Which of these is an administrative time saving benefit of dynamic signature definition files on a Cisco routerrunning Cisco IOS IPS?

A. dynamically learns new signatures in real timeB. dynamically updates signatures from Cisco.comC. dynamically configures IPS signature parametersD. dynamically chooses which signatures to activate based upon network traffic seen

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 64What are three components of the wireless core feature set using autonomous access points? (Choose three.)

A. CiscoWorksWLSEB. Wireless LAH ControllerC. 802.1X authentication serverD. Cisco autonomous access points running WDS

Correct Answer: ACDSection: (none)Explanation

Explanation/Reference:

QUESTION 65When conducting a wireless site survey, you should take notice_____

Page 21: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

A. 5 GHz equipment cannot penetrate through walls as well as 2.4 GHz equipment.B. 2.4 GHz equipment cannot penetrate through walls as well as 5 GHz equipment.C. Mounting antennas near metal objects will slightly amplify the signal.D. When determining coverage, you should begin measuring attenuation from the middle of the room

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 66A customer needs approximately 15 to 20 wireless APs for RF coverage. Given that the customer is going touse the 1010 lightweight AP with the advanced feature set, what other product is required to complete thisoperational functionality?

A. 2700B. WLSEC. 4124D. 2006

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 67What are three advantages of the Cisco Integrated Services Router product family? (Choose three.)

A. provides advanced security such as hardware encryption accelerationB. provides investment protection through increased modularityC. contains integrated wireless access using the 802.11 g/b standardD. contains integrated web-based management tools for easy configuration and maintenance

Correct Answer: ACDSection: (none)Explanation

Explanation/Reference:

QUESTION 68You are Cisco Express Foundation Design Specialist in a company. Your company two primary divisions:Sales and Financial. The Sales division is on network 140.10.64.0/21. The Financial division is on network140.10.72.0/21. You want to summarize both networks into one routing statement. Which IP address andsubnet mask combination would most efficiently accomplish this?

A. 140.10.64.0/21B. 140.10.64.0/22C. 140.10.64.0/20D. 140.10.0.0./16

Page 22: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 69Which Cisco PIX and ASA feature provides reliable, comprehensive security against virus and wormpropagation, as well as data theft?

A. WebVPN for SSLB. iPSecC. AIMD. stateful packet inspection

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 70A potential client wants inexpensive remote access and fast deployment of new sites. Which two options wouldyou focus on? (Choose two)

A. ACL managementB. cable and DSL route modelsC. Cisco AnyConnect and SSL VPND. CBACE. remote security

Correct Answer: BCSection: (none)Explanation

Explanation/Reference:

QUESTION 71When should you run multiple protocols?

A. when you want to decrease the complexity of the networkB. when you want easier optimizationC. when you migrate from an old IGP to a new IGPD. when you want higher efficiency

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

Page 23: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

QUESTION 72What is used to avoid power drops and running power to access points?

A. Cisco Aironet 1140 seriesB. End-point PSEC. Midspan PSED. PoE-enabled switches

Correct Answer: DSection: (none)Explanation

Explanation/Reference:

QUESTION 73How does the Cisco Small Business Pro Service differ from the Cisco Small Business Pro Warranty?

A. Access to Cisco Small Business Support CommunityB. device-level warrantyC. Cisco Small Business Pro products onlyD. speed of hardware replacement

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 74Which pre-sales SMART design documents are available to help you implement and install a solution? (Choosethree)

A. Quick Quoting toolB. Small Business Product GuideC. Smart Business Communications systemD. Solution ProfileE. Overview presentationF. Cisco Configuration Assistant

Correct Answer: BDESection: (none)Explanation

Explanation/Reference:

QUESTION 75A client needs a solution of a challenging RF environment. The situation requires the antenna versatility that isassociated with connected antennas, a rugged metal enclosure, and a broad operating temperature range.Which access point would you recommend?

A. Cisco Aironet 1240AG SeriesB. Cisco Aironet 1230AG Series

Page 24: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

C. Cisco Aironet 1140 SeriesD. Cisco Aironet 1130AG Series

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 76What should you do if a customer wants to provide certain areas within wireless coverage at a specific datarate?

A. Perform a single surveyB. Find out where the coverage pool is for one data rate, and calculate the rest based on that informationC. Map out higher data rate cells onlyD. Find out how much throughput the user will require

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 77What are two of the four key benefits of the ISR platforms? (Choose two)

A. monitoring, analysis, and responseB. investment protectionC. guest accessD. voice and mobility readyE. storage virtualization

Correct Answer: BDSection: (none)Explanation

Explanation/Reference:

QUESTION 78Which three Cisco Configuration Professional features might prompt a client to consider an upgrade? (Choosethree)

A. association of QoS policies with router interfacesB. VPN and WAN connection testingC. role-based accessD. security auditE. WAN and VPN troubleshootingF. Cisco Configuration Professional ExpressG. AAA

Page 25: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

Correct Answer: CDESection: (none)Explanation

Explanation/Reference:

QUESTION 79After you have established a sales plan with a customer and have established an initial solution thatincorporates the specific infrastructure considerations of the customer, which stage of the Steps to Successprogram do you move to next?

A. Pre-saleB. PlanC. DesignD. ImplementE. Operate

Correct Answer: CSection: (none)Explanation

Explanation/Reference:

QUESTION 80How can you mitigate threats in WLANS when static WEP keys are used?

A. Use SSID to provide securityB. Assign matching keys to the client and the access pointC. Provide different keys to the client and the access pointD. Use standard 802.11 WEP keys, which are very secure

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

QUESTION 81When you need to secure traffic across network, which three elements would you review? (Choose three)

A. packet flowsB. other networks in rangeC. connectionsD. storageE. statesF. VPNs

Correct Answer: ACFSection: (none)Explanation

Explanation/Reference:

Page 26: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

QUESTION 82Upgrading customer switches provides a variety of opportunities, which two factors are worth discussing withyour customers? (Choose two)

A. Gigabit Ethernet supportB. need for a complete equipment upgradeC. savings on reduced cablingD. smaller chassis footprintE. advantage of dual core over single point

Correct Answer: AESection: (none)Explanation

Explanation/Reference:

QUESTION 83What should you keep in mind when using a midspan PSE?

A. It can be used to deliver PoE over 100BASE-T connectionsB. It can implement power delivery only over the spare wires of the copper cablingC. It defines terminology to describe a port that acts as a PSE to a powered deviceD. It states that power can be delivered by an end-point PSE

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 84Which three are integrated Smart Applications included with the Cisco Unified Communications 500 Series?(Choose three)

A. Smart Business SuiteB. Connected Data ProtectorC. TimeCard ViewD. Cisco Unified CallConnectorE. Cisco WebEx PhoneConnectF. VoiceView Express

Correct Answer: ADFSection: (none)Explanation

Explanation/Reference:

QUESTION 85The Cisco SA 500 Series Security Appliances are built specifically for businesses with less than 100employees. What are three important benefits of this device? (Choose three)

Page 27: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

A. business-grade firewallB. premium support via SMARTnetC. site-to-site VPN for remote officesD. Cisco IOS software-basedE. email securityF. XML support

Correct Answer: ACDSection: (none)Explanation

Explanation/Reference:

QUESTION 86Which IPsec protocol would you use to provide authentication, integrity checking, and confidentiality to IPpackets?

A. AHB. ESPC. IKED. ISAKMP

Correct Answer: BSection: (none)Explanation

Explanation/Reference:

QUESTION 87When you are about to configure VTP, which two characteristics should you keep in mind? (Choose two)

A. A VTP password must be configured on all switchesB. VTP should be set to server modeC. The server mode cannot delete VLANsD. VTP can run only version 1E. The VTP domain is restricted to building switch blocksF. Switches in a VTP domain can run different VTP versions

Correct Answer: AESection: (none)Explanation

Explanation/Reference:

QUESTION 88You need to address issues of bandwidth contention and consumption across a trunk link and on VLAN 1.What should you do?

A. Deny any single, range, or group of VLANs to traverse the trunk linkB. Permit only those VLANs that are required for Layer 2 access and connectivity to traverse the trunk link

Page 28: Cisco 648-375 Questions & Answers - Testing Engine€¦ · B. Cisco or CCX compatible client cards can extend the RF IDS service for autonomous APs. C. 2.4GHz RF management can monitor

C. Permit any single, range, or group of VLANs to traverse the trunk linkD. Permit any number of VLANs to traverse the trunk link

Correct Answer: ASection: (none)Explanation

Explanation/Reference:

http://www.gratisexam.com/