CISCO 642-522 SNPA
Visited 862 times, 1 so far today
Securing Networks with PIX and ASA Exam
Last day to test 10/13/2007
Exam Number: 642-522
Associated Certifications: CCSP, Cisco Firewall Specialist
Duration: 90 minutes (60-70 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions
Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Securing Networks with PIX and ASA exam is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taking the SNPA v4.0 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA security appliance products.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Install and configure a security appliance for basic network connectivity
Describe the Security Appliance hardware and software architecture
Determine the Security Appliance hardware and software configuration and verify if it is correct
Use setup or the CLI to configure basic network settings, including interface configurations
Use appropriate show commands to verify initial configurations
Configure NAT and global addressing to meet user requirements
Configure DHCP client option
Set default route
Configure logging options
Describe the firewall technology
Explain the information contained in syslog files
Configure static address translations
Configure Network Address Translations: PAT
Configure static port redirection
Configure a net static
Set embryonic and connection limits on the security appliance
Verify network address translation operation
Configure a security appliance to restrict inbound traffic from untrusted sources
Configure access-lists to filter traffic based on address, time, and protocols
Configure object-groups to optimize access-list processing
Configure Network Address Translations: Nat0
Configure Network Address Translations: Policy NAT
Configure java/activeX filtering
Configure URL filtering
Verify inbound traffic restrictions
Configure a security appliance to provide secure connectivity using site-to-site VPNs
Explain certificates, certificate authorities and how they are used
Explain the basic functionality of IPSec
Configure IKE with preshared keys
Configure IKE to use certificates
Differentiate between the types of encryption
Configure IPSec parameters
Configure crypto-maps and ACLs
Configure a security appliance to provide secure connectivity using remote access VPNs
Explain the functions of EasyVPN
Configure IPSec using EasyVPN Server/Client
Configure the Cisco Secure VPN client
Explain the purpose of WebVPN
Configure WebVPN services: Server/Client
Verify VPN operations
Configure transparent firewall, virtual firewall, and high availability firewall features on a security appliance
Explain differences between L2 and L3 operating modes
Configure security appliance for transparent mode (L2)
Explain purpose of virtual firewalls
Configure security appliance to support virtual firewall
Monitor and maintain virtual firewall
Explain the types, purpose and operation of fail-over
Install appropriate topology to support cable-based or LAN-based fail-over
Explain the hardware, software and licensing requirements for high-availability
Configure the SA for active/standby fail-over
Configure the SA for stateful fail-over
Configure the SA for active-active fail-over
Verify fail-over operation
Recover from a fail-over
Configure AAA services for access through a security appliance
Configure ACS for security appliance support
Configure security appliance to use AAA feature
Configure authentication using both local and external databases
Configure authorization using an external database
Configure the ACS server for downloadable ACLs
Configure accounting of connection start/stop
Verify AAA operation
Configure routing and switching on a security appliance
Enable DHCP server and relay functionality
Configure VLANs on a security appliance interface
Configure routing functionality of security appliance including OSPF, RIP
Configure security appliance to pass multi-cast traffic
Configure ICMP on the security appliance
Configure a modular policy on a security appliance
Configure a class-map
Configure a policy-map
Configure a service-policy
Configure a ftp-map
Configure a http-map
Configure an inspection protocol
Explain the function of protocol inspection
Explain DNS guard feature
Describe the AIP-SSM HW and SW
Load IPS SW on the AIP-SSM
Verify AIP-SSM
Configure an IPS modular policy
Monitor and manage an installed security appliance
Obtain and apply OS updates
Backup and restore configurations and software
Explain the security appliance file management system
Perform password/lockout recovery procedures
Obtain and upgrade license keys
Configure passwords for various access methods: Telnet, serial, enable, SSH
Configure various access methods: Telnet, SSH, PDM
Configure command authorization and privilege levels
Configure local username database
Verify access control methods
Enable ASDM functionality
Verify a security appliance configuration via ASDM
Verify the licensing available on a security appliance
Recommended Training
Securing Networks with PIX and ASA (SNPA) is the recommended training for this exam.
Courses listed are offered by Cisco Learning Partners, the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the Global Learning Partner Locator for a Cisco Learning Partner near you.
Additional Resources
A variety of Cisco Press titles may be available for this exam. These titles can be purchased through the Cisco Marketplace Bookstore, directly from Cisco Press.
TestInside 642-522
Cisco 642-522
PassGuide offers free demo for Certification Exams You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products. Download links:http://demo.passguide.com/downloadSecuring Networks with PIX and ASA Exam(SNPA)
Q&A DEMO
English: www.TestInside.com BIG5: www.Testinside.net GB: www.testking.name
TestInside,help you pass any IT exam!
TestInside 642-522
1.Drag Drop question
Drag and drop question. Drag the items to the proper locations.
Correct Answers:
2.What is displayed as a result of entering the command syntax show aaa-server group1 host 192.168.30.60 in the
security appliance?
A: aaa-server configuration for a particular host in server group group1
B: aaa-server statistics for a particular host in server group group1
C: aaa-server configuration for server group group1
D: aaa-server statistics for the host group1 at IP address 192.168.30.60
Correct Answers: B
TestInside 642-522
3.What are the two purposes of the network area subcommand? (Choose two.)
A:It defines the interfaces on which OSPF runs. B:It defines the interfaces on which RIP runs.
C:It defines the OSPF area the interface belongs to. D:It separates the public area from the private area. E:It defines the OSPF area type.
Correct Answers: A, C
4.Refer to the exhibit. Users on the DMZ are complaining that they cannot gain access to the insidehost via HTTP. What did the network administrator determine after reviewing the network diagram and partial configuration?
A: The static (inside,dmz) command is not configured correctly.
B: The global (dmz) command is not configured correctly. C: The nat (dmz) command is missing.
D: The dmzin access list is not configured correctly.
Correct Answers: D
TestInside 642-522
5.Refer to the exhibit. An administrator is configuring the failover link on the secondary unit, pix2 and needs to
configure the IP addresses of the failover link. At pix2, which of these additional commands should be entered?
A: pix2(config)# failover lan ip 172.17.2.1 255.255.255.0 standby 172.17.2.7
B: pix2(config)# failover link 172.17.2.7 255.255.255.0 standby 172.17.2.1
C: pix2(config)# failover interface ip LANFAIL 172.17.2.1 255.255.255.0 standby 172.17.2.7
D: pix2(config)# interface ethernet3
pix2(config-if)# failover ip address 172.17.2.7 255.255.255.0 standby 172.17.2.1
Correct Answers: C
6.In the Cisco ASA 5500 series, what is the flash keyword aliased to? A: Disk0
B: Disk1
C: both Disk0 and Disk1
D: Flash0
E: Flash1
Correct Answers: A
TestInside 642-522
7.Refer to the exhibit. In the network diagram there are four servers on the DMZ-two web servers and two FTP
servers. According to the group configuration in the ny_acs server, when a remote user accesses the security appliance and is authenticated, the user is authorized to perform which two actions? (Choose 2.)
A:access any server on the DMZ
B:access any FTP server
C:access FTP1 server only
D:utilize FTP and HTTP protocol to attach to the server E:utilize HTTP protocol only to attach to the server F:utilize FTP protocol only to attach to the server Correct Answers: C, F
8.Refer to the exhibit. An administrator wants to add a comment about access-list aclin line 2. What command should the administrator enter to accomplish this addition?
TestInside 642-522
A: pix1(config)# access-list aclin line 1 remark partner server http access
B: pix1(config)# access-list aclin line 2 remark partner server http access
C: pix1(config)# access-list aclin line 1 comment partner server http access D: pix1(config)# access-list aclin line 2 comment partner server http access Correct Answers: B
9.Which is a hybrid protocol that provides utility services for IPSec, including authentication of the IPSec peers, negotiation of IKE and IPSec SAs, and establishment of keys for encryption algorithms?
A: 3DES B: ESP
C: IKE D: MD5
Correct Answers: C
10.During failover, which security appliance attribute does not change? A: failover unit status-active and standby
B: active and standby interfaces-IP address
C: failover unit type-primary and secondary
D: active and standby interfaces-MAC address
Correct Answers: C
Interactive Testing Engine Included!
116 Questions
Updated : 03/07/2008
Price : $87.99 $79.99
Preparing for the 642-522 exam? Searching 642-522 Test Questions, 642-522 Practice Exam, 642-522 BrainDumps? Testking 642-522 is written to coincide with the real test by the experienced IT experts and specialists. With the complete collection of Testking Questions and Answers, Testking 642-522 is high enough to help the candidates to pass this exam easily without any other study materials and no need to attend the expensive training class.
Why choose Testking 642-522 braindumps
Quality and Value for the 642-522 Exam
100% Guarantee to Pass Your 642-522 Exam
Practice Test Questions accompanied by exhibits
Testking 642-522 Exam Features
Downloadable, Testking Interactive 642-522 Testing engines
Testking Cisco 642-522 Downloadable, Printable Exams (in PDF vce format)
Our Exam 642-522 Preparation Material Lbas provides you everything you will need to take your 642-522 exams. The 642-522 study guide Exam details Tutorials are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.
Free download?testking ccsp 642-522
Free download?pass4sure ccsp 642-522
Dowload PassGuide Practice Test Questions
10 Comments on “CISCO 642-522 SNPA”