The files are group by the exam number. You can also see the full list of files.

Exam Title Files
350-001 CCIE Routing and Switching Written Exam 6
350-018 CCIE Routing and Switching Written Exam 4
350-020 CCIE Service Provider Optical Recertification Exam 0
350-021 CCIE Service Provider Cable Recertification Exam 1
350-023 CCIE Service Provider WAN Switching Recertification Exam 2
350-026 CCIE SP Content Networking Recertification Exam 1
350-029 CCIE Service Provider Written Exam 1
350-030 CCIE Voice Written Exam 4
350-040 CCIE Storage Networking Written Exam 1
352-001 Cisco Certified Design Expert Qualification Exam 0
640-802 CCNA – Cisco Certified Network Associate Exam 7
640-816 ICND2 – Interconnecting Cisco Networking Devices Part 2 1
640-822 ICND1 – Interconnecting Cisco Networking Devices Part 1 3
640-863 DESGN – Designing for Cisco Internetwork Solutions Exam 1
640-905 MCAST+QOS – Multicast + QoS Exam 2
642-061 RSSSE – Routing and Switching Solutions for System Engineers 1
642-066 ARSFE – Advanced Routing and Switching for Field Engineers 1
642-072 CUDN – Cisco Unity Design and Networking Exam 1
642-091 CRMI – CRM Express Integration 1
642-104 UCSE – Unified Communication for System Engineers Exam 1
642-105 IUM – Implementing Cisco Unified Messaging 2
642-144 IPTX – IP Telephony Express Exam 1
642-164 UCCX – Unified Communications Contact Center Express Implementation 0
642-176 SMBE – SMB Engineer 1
642-241 UCCED – Unified Contact Center Enterprise Design 1
642-242 UCCEI – Unified Contact Center Enterprise Implementation 1
642-355 CSSDS – Cisco Storage Networking Solutions Design Specialist 1
642-356 CSSSS – Cisco Storage Networking Solutions Support Specialist 1
642-371 FOUNDSE – Cisco Express Foundation for Systems Engineers 1
642-372 CXFS – Cisco Express Foundation for Systems Engineers 1
642-382 CXFF – Cisco Express Foundation for Field Engineers 1
642-415 UCAD – Unified Communications Architecture and Design Exam 0
642-426 TUC – Troubleshooting Unified Communications 1
642-432 CVOICE – Cisco Voice Over IP Exam 6
642-436 CVOICE – Cisco Voice over IP Exam 2
642-444 CIPT-4.x – Cisco IP Telephony for Release 4.x 2
642-445 Cisco IP Telephony for Release 5.x 1
642-446 CIPT1 – Implementing Cisco Unified Communications IP Telephony Part 1 1
642-453 GWGK – Gateway Gatekeeper Exam 2
642-456 CIPT2 – Implementing Cisco Unified Communications IP Telephony Part 2 1
642-481 CRMC – Cisco Rich Media Communications Exam 1
642-503 SNRS – Securing Networks with Cisco Routers and Switches Exam 1
642-513 HIPS – Securing Hosts Using Cisco Security Agent Exam 1
642-523 SNPA – Securing Networks with PIX and ASA Exam 1
642-533 IPS – Implementing Cisco Intrusion Prevention Systems 1
642-544 MARS – Implementing Cisco Security Monitoring, Analysis and Response System 2
642-552 SND – Securing Cisco Network Devices Exam 1
642-565 SSSE – Security Solutions for Systems Engineers Exam 1
642-586 AWLANSE – Cisco Advanced Wireless LAN for System Engineers Exam 1
642-587 AWLANFE – Cisco Advanced Wireless LAN for Field Engineers Exam 3
642-591 CANAC – Implementing Cisco NAC Appliance 1
642-611 MPLS – Implementing Cisco MPLS Exam 1
642-642 QOS – Quality of Service Exam 4
642-651 WAASSE – Wide Area Application Services for System Engineers 1
642-652 WAASFE – Wide Area Application Services for Field Engineers 1
642-661 BGP – Configuring BGP on Cisco Routers Exam 2
642-691 BGP + MPLS Exam 2
642-812 BCMSN – Building Converged Cisco Multilayer Switched Networks 4
642-825 ISCW – Implementing Secure Converged Wide Area Networks 2
642-845 ONT – Optimizing Converged Cisco Networks 1
642-873 ARCH – Designing Cisco Network Service Architectures Exam 1
642-892 Composite Exam 1
642-901 BSCI – Building Scalable Cisco Internetworks 3
642-961 CDCNID – Cisco Data Center Networking Infrastructure Design 0
642-964 CDCNIS – Cisco Data Center Networking Infrastructure Support 1
646-003 ARSAM – Advanced Routing and Switching for Account Managers 1
646-011 CSSS – Cisco Storage Sales Specialist Exam 1
646-096 CRMAM – CRM Express for Account Managers 1
646-171 SMBAM – SMB Account Managers 1
646-203 CSE – Cisco Sales Expert Exam 2
646-204 CSE – Cisco Sales Expert Exam 1
646-222 IPCXAM – IP Communications Express Account Manager Exam 1
646-223 UCCX – Unified Communications Express AM 0
646-229 IPCAAM – IP Communications Advanced Account Manager Exam 1
646-230 AUCAM – Advanced Unified Communications AM 0
646-362 CXFA – Cisco Express Foundation for Account Managers 1
646-562 ASAM – Advanced Security for Account Managers 1
646-588 AWLANAM – Advanced Wireless LAN for Account Managers Exam 2
646-653 WAASAM – Wide Area Application Services for Account Managers 1
646-967 CDCNSS – Cisco Data Center Networking Sales Specialist 1
650-059 LCSARS – Lifecycle Services Advanced Routing and Switching 1
650-173 SBCSAM – Smart Business Communication Systems for Account Managers 0
650-178 SBCSEN – Smart Business Communication Systems for Engineers 0
650-251 LCSAUC – Cisco Lifecycle Services for Advanced Unified Communications 1
650-393 LCSE – Cisco Lifecycle Services Express 0
650-575 LCSAS – Lifecycle Services Advanced Security 0
650-621 LCSAWLAN – Lifecycle Services for Advanced Wireless LAN 0
Retired Exams

Exam Title Files
350-024 CCIE Service Provider IP Telephony Exam 1
640-025 CID – Cisco Internetworking Design 3.0 3
640-410 CCNA WAN Switching Exam 1
640-441 DCN – Designing Cisco Networks Exam 1
640-442 MCNS – Managing Cisco Network Security Exam 1
640-503 RTING – Routing Exam 1
640-504 SWTCH – Switching Exam 1
640-505 RMTAC – Remote Access Exam 1
640-506 SUPRT – Support Exam 1
640-603 RTING – Routing Exam 1
640-604 SWTCH – Switching Exam 3
640-605 RMTAC – Remote Access Exam 3
640-606 SUPRT – Support Exam 3
640-607 CCNA – Cisco Certified Network Associate Exam 4
640-801 CCNA – Cisco Certified Network Associate Exam 24
640-811 ICND – Interconnecting Cisco Networking Devices Exam 4
640-821 INTRO – Introduction to Cisco Networking Technologies Exam 2
640-861 DESGN – Designing for Cisco Internetwork Solutions Exam 8
640-901 BSCI – Building Scalable Cisco Internetworks Exam 3
640-910 MPLS – Implementing Cisco 1
642-052 RSS/FE – Routing and Switching SE/FE Exam 1
642-071 CUDN Cisco Unity Design and Networking Exam 1
642-142 CCME – Call Manager Express Exam 1
642-291 NM – Network Management Exam 1
642-321 SDH – Cisco Optical SDH Exam 1
642-381 FOUNDFE – Foundation Express for Field Engineers Exam 1
642-414 IPTD – IP Telephony Design Exam 1
642-425 IPTT – IP Telephony Troubleshooting Exam 6
642-452 GWGK – Gateway Gatekeeper Exam 1
642-501 SECUR – Securing Cisco IOS Networks 6
642-502 SNRS – Securing Networks with Cisco Routers and Switches Exam 3
642-511 CSVPN – Cisco Secure Virtual Private Networks 3
642-521 CSPFA – Cisco Secure PIX Firewall Exam 5
642-522 SNPA – Securing Networks with PIX and ASA Exam 4
642-531 CSIDS – Cisco Secure Intrusion Detection Systems Exam 4
642-532 IPS – Securing Networks Using Intrusion Prevention Systems Exam 2
642-541 CSI – Cisco SAFE Implementation Exam 4
642-551 SND – Securing Cisco Network Devices Exam 4
642-564 SSSE – Security Solutions for Systems Engineers Exam 1
642-567 ASFE – Advanced Security for Field Engineers Exam 3
642-577 WLANSE – Wireless LAN for System Engineers 4
642-582 WLANFE – Wireless LAN for Field Engineers Exam 3
642-641 QOS – Quality of Service Exam 1
642-801 BSCI – Building Scalable Cisco Internetworks Exam 7
642-811 BCMSN – Building Cisco Multilayer Switched Exam 5
642-821 BCRAN – Building Cisco Remote Access Networks Exam 2
642-831 CIT – Internet Troubleshooting Support Exam 3
642-871 ARCH – Designing Cisco Network Service Architectures Exam 6
642-891 Composite Exam 4
644-101 UCSE – Unified Communications for Systems Engineer 1
646-058 LCSARS – Cisco Lifecycle Services Advanced Routing and Switching 1
646-102 WLANAM – Wireless LAN for Account Managers Exam 1
646-201 CSE – Cisco Sales Expert Exam 1
646-202 CSE – Cisco Sales Expert Exam 1
646-227 LCSAIPC – Cisco Lifecycle Services Advanced IP Communications Exam 3
646-301 VPNS – VPN/Security Exam 2
646-391 LCSE – Cisco Lifecycle Services Express Exam 3
646-392 LCSE – Cisco Lifecycle Services Express Exam 3
646-401 WLAN – Wireless LAN AM Exam 1
646-521 RSS – Routing & Switching Exam 3
646-573 LCSAS – Cisco Lifecycle Services Advanced Security Exam 1
646-589 LCSAWLAN – Cisco Lifecycle Services Advanced Wireless Exam 1
9E0-100 CSIDS – Cisco Secure Intrusion Detection Systems Exam 1
9E0-111 CSPFA – Cisco Secure PIX Firewall Advanced Exam 1
9E0-121 CSVPN – Cisco Secure VPN Exam 1
9E0-131 CSI – Cisco SAFE Implementation Exam 1
9E0-411 EVODD – Enterprise Voice Over Data Design Exam 2
9E0-421 IPTT – IP Telephony Troubleshooting Exam 2
9E0-422 IPTT – IP Telephony Troubleshooting Exam 2
9E0-423 CVOICE – Voice Over Frame Relay, ATM, and IP Exam 2
9E0-431 CVOICE – Cisco Voice Over IP Exam 2
9E0-441 CIPT – IP Telephony Exam 2
9E0-541 RSS – Routing and Switching Exam 2
9E0-571 CSPFA – Secure PIX Firewall Advanced Exam 1
9E0-572 Intrusion Detection System with Policy Manager Exam 1
9E0-576 WLANSE – Wireless LAN for System Engineers 2
9E0-581 WLANSE – Wireless LAN for Field Engineers 2
9E0-601 DQOS – Deploying Quality of Service in Enterprise Networks Exam 1
9E0-805 UNITY – Unity Engineer Exam 2
9E0-851 CRS – Customer Response Solution 3.0 Exam 1
Cisco

You can also see this list grouped by exam number.

Exam Description Exam Topics Recommended Training Additional Resources

Exam DescriptionThe Implementing Cisco Security Monitoring, Analysis and Response System exam is associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the Implementing Cisco Security Monitoring, Analysis and Response System course. This exam tests a candidate’s knowledge of the Cisco Security Monitoring, Analysis and Response System.

Exam TopicsThe following topics are general guidelines for the content likely to be included. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Install and configure the Cisco Security MARS product
Describe, configure and verify features and functions of the Cisco Security MARS appliance
Describe, configure and verify the installation of the Cisco Security MARS appliance
Add supported Cisco reporting devices to the Cisco Security MARS appliance and verify the operations
Add supported third-party reporting devices to the Cisco Security MARS appliance and verify the operations
Perform incident investigation and mitigation from the Cisco Security MARS appliance
Configure the Cisco Security MARS appliance to send alerts and notifications
Generate queries and reports on the Cisco Security MARS appliance
Describe, configure and verify rules to detect interesting patterns of network activity and other anomalous network behavior
Use the Management options in the Cisco Security MARS appliance user interface to configure and verify Event, IP, Service, and User information
Describe and perform Cisco Security MARS appliance maintenance activities
Describe Cisco Security MARS Global Controller functionalities

CCSP 642-545 Transcender Torrent
CCSP 642-545 P4S
CCSP 642-545 Study Guide
CCSP 642-545 Exams
CCSP 642-545 Braindumps
CCSP 642-545 Pass4sure
CCSP 642-545 Real Exams
CCSP 642-545 Exam
CCSP 642-545 Actual Tests
CCSP 642-545 Pdf

CCSP 642-545 also gives new editions of Real Exams CCSP 642-545 for enhancing professional skills and knowledge. These Testking Real Practice Questions CCSP 642-545 are useful for understanding CCSP 642-545 exam terminologies and these brain dumps also very useful for enhancing people brain power. These Testking Real Practice Questions CCSP 642-545 are prepare by highly qualified and CCSP 642-545 professionals. CCSP 642-545 Certification experts’ teams always try to give you real exam environment in these 4shared training materials links.
About CCSP
CCSP

Exam Number:642-504
Exam Name:SUN Certification – Sun Certified Security Administrator for the Solaris 10 OS

Where can you buy the 642-504 exam online?
We recommend Testking642-504 Testing Engine which will help you pass the 642-504 exam.

Testking Demo 642-504 Exam Details

* Comprehensive questions with complete details about Testking 642-504 exam
* Tested by many real exams before publishing
* Verified Testking 642-504 Answers Researched by Industry Experts
* Testking 642-504 exam questions accompanied by exhibits
* Drag and Drop questions as experienced in the Real Testking 642-504 vce Exams

642-504 Audio Exam
642-504 Study Guide
642-504 Preparation Lab
642-504 Brindumps
642-504 pdf
642-504 download
642-504 torrent

How to prepare for 642-504 exam?

We designed Testking 642-504 Simulation kit to help you get certified effortlessly. Now you don’t need to spend your time and money searching for Testking 642-504 certification materials, books, etc., Testking642-504exam simulation contains everything you need to get certified. Just follow the instructions, focus on the study material and getting certified will be easy.
Securing Networks with Cisco Routers and Switches Exam
Exam Number: 642-504
Associated Certifications: CCSP
Duration: 90 minutes (60 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description
The Securing Networks with Cisco Routers and Switches exam (SNRS 642-504) is one of the exams associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the SNRS course. This exam includes simulations and tests a candidate’s knowledge and ability to secure networks using Cisco routers and switches.

Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.

Implement Cisco Layer 2 security

* Utilize Cisco IOS commands to mitigate Layer 2 attacks
* Implement Cisco Identity-Based Networking Services on Cisco Catalyst Switches
* Implement Identity Management using ACS as the Authentication Server

Configure Cisco IOS Firewalls to mitigate network threats

* Identify and describe the advanced capabilities of the IOS firewall feature set
* Configure Classic IOS Firewall (CBAC) and NAT to dynamically mitigate identified threats to the network
* Verify Classic IOS Firewall (CBAC) configuration and operation
* Configure IOS Zone-Based Firewalls including advanced application inspections and URL filtering
* Verify Zone-Based Firewall operations

Configure Cisco IOS-IPS to identify and mitigate threats to network resources

* Identify and describe the advanced capabilities of the Cisco IOS-IPS feature set including Signature Event Action Processing
* Configure Cisco IOS-IPS features to identify threats and dynamically block them from entering the network
* Verify Cisco IOS-IPS operations
* Maintain, update and tune Cisco IOS-IPS signatures

Configure Cisco VPNs to provide secure connectivity for site-to-site and remote access communications

* Describe IPsec features and functionality
* Describe GRE/IPsec features and functionality
* Configure secure connectivity for site-to-site VPN using certificate authorities
* Describe DMVPN features and functionality
* Configure secure connectivity for site-to-site VPN using DMVPN
* Verify secure site-to-site VPN operations
* Implement IOS SSL VPN
* Configure Cisco IOS Easy VPN Server with Dynamic Virtual Tunnel Interface (DVTI)
* Configure Cisco IOS Easy VPN remote using both router and VPN software clients
* Verify Cisco IOS Easy VPN implementations
* Implement IOS GET VPN operations
* Describe High Availability IPsec VPNs

Implement Network Foundation Protection using the CLI

* Describe NFP features and functionality
* Secure the management plane using Cisco IOS security features
* Secure the data plane using Cisco IOS security features
* Secure the control plane using Cisco IOS security features

Free down:pass4sure 642-504
Free down:testking 642-504

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description

The Cisco SAFE Implementation 642-542 CSI exam provides a recertification assessment for those candidates who currently hold a CCSP certification. This exam tests the knowledge and skills needed to use the principles and axioms presented in the SAFE SMR, Enterprise, IP Telephony and Wireless LAN White Papers, and to implement them on specific security devices. The primary focus is on the labs, which allows the student to build complete end-to-end security solutions using SAFE White Papers as the blueprint. The configuration and functionality of the following devices in a SAFE SMR network are described in detail: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Security Agent and the Cisco VPN Client. Basic implementation of a SAFE wireless LAN is also covered.
Exam Topics

The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Security Fundamentals

* Need for network security
* Components of a complete security policy
* Primary network threats and attacks
* Common attacks and recommended mitigation techniques
* Security issues implicit in common management protocols

SAFE Blueprint Overview

* SAFE Blueprint Overview
* Design Fundamentals
* SAFE Axioms

The Cisco Security Portfolio

* Cisco Security Portfolio Overview
* Secure Connectivity-Cisco VPN 3000 Concentrator and Cisco VPN Optimized IOS
* Perimeter Security Firewalls-Cisco PIX Firewall and Cisco IOS Firewall
* Intrusion Protection-IDS
* Identity-CSACS
* Security Management-VMS
* Cisco AVVID

SAFE Small Network Design

* Small Network Design Overview
* Small Network Corporate Internet Module
* Small Network Campus Module
* Implementation-ISP Router
* Implementation-Cisco IOS Firewall
* Implementation-PIX Firewall
* Implementation-CSA

SAFE Midsize Network Design

* Midsize Network Design
* Midsize Network Corporate Internet Module Design Guidelines
* Midsize Network Campus Module
* Midsize Network Campus Module Design Guidelines
* Midsize Network WAN Module
* Implementation-ISP Router and Edge Router
* Implementation-Network IPS
* Implementation-VPN 3000 Concentrator
* Implementation-Layer 3 Switch

SAFE Remote Network Design

* Remote-User Network Overview
* Key Devices and Threat Mitigation
* Software Client Option
* Remote Site Firewall Option
* VPN 3002 Hardware Client Option
* Remote Site Router Option

SAFE Enterprise Network Design

* Enterprise Network Design Overview
* Enterprise Campus
* Enterprise Network Edge

SAFE IP Telephony Design

* IP Telephony Concepts, Caveats and Axioms
* IP Telephony Product Portfolio
* IP Telephony Design Considerations
* IP Telephony Design for Small, Medium and Large Network

SAFE Wireless LAN Design

* Wireless LAN Security Concepts, Caveats and Axioms
* WLAN Security Extensions
* Cisco WLAN Product Portfolio
* WLAN Design Approach
* Standard WLAN Design
* WLAN Design for Small, Medium, Enterprise and Remote Network
* WLAN Implementation

Recommended Training
1.What is the definition of a strong password?
A. at least eight characters long; contains uppercase letters, lowercase letters, numbers, and special characters
B. at least ten characters long and should contain cryptographic characters
C. at least eight characters long; contains uppercase letters, lowercase letters, numbers, and should not contain
special characters
D. defined by each company depending on the product being used

Answer:A

2.When allowing syslog access from devices outside a firewall, what filtering at the perimeter router should you
implement?
A. no filtering should be implemented since it will block the syslog traffic
B. RFC 1918
C. RFC 2827
D. RFC 1281
E. RFC 1642

Answer:C

3.Which type of attack is characterized by exploitation of well-known weaknesses, use of ports that are allowed
through a firewall, and can never be completely eliminated?
A. network reconnaissance
B. application layer
C. man-in-the-middle
D. trust exploitation

Answer:B

4.What are two characteristics of a packet sniffer designed for attack purposes? Choose two.
A. captures first 300 to 400 bytes
B. typically captures login sessions
C. captures the last 300 to 400 bytes
D. deciphers encrypted passwords
E. unable to capture UDP packets

Answer:AB

5.Which two general IP spoofing techniques does a hacker use? Choose two.
A. an IP address within the range of trusted IP addresses
B. an unknown IP address which cannot be traced
C. an RFC 1918 address
D. an authorized external IP address that is trusted
Answer:AD

5.What method helps mitigate the threat of IP spoofing?
A. access control
B. logging
C. SNMP polling
D. Layer 2 switching

Answer:A

6.Which method will always compute the password if it is made up of the character set you selected to test?
A. brute force computation
B. strong password computation
C. password reassemble
D. brute force mechanism

Answer:A

7.Which type of attack is usually implemented using packet sniffers?
A. man-in-the-middle
B. DoS
C. brute force
D. IP spoofing

Answer:A

8.What is an example of a trust model?
A. NTFS
B. NFS
C. NTP
D. NOS

Answer:B

9.What is the primary method of mitigating port redirection attacks?
A. keep firewalls up to date with the latest patches and fixes
B. do not allow trust models
C. keep OS and applications up to date with the latest patches and fixes
D. use proper trust models

Answer:D
10.What is not a specific type of attack, but refers to most attacks that occur today?
A. DoS
B. brute force password
C. IP spoofing
D. unauthorized access

Answer:D
CCSP DUMPS
tk ccsp 642-542 Interactive Testing Engine Included!
253 Questions
Updated : 09/18/2008
Price : $87.99 $79.99

Preparing for the 642-542 exam? Searching 642-542 Test Questions, 642-542 Practice Exam, 642-542 BrainDumps? Testking 642-542 is written to coincide with the real test by the experienced IT experts and specialists. With the complete collection of Testking Questions and Answers, Testking 642-542 is high enough to help the candidates to pass this exam easily without any other study materials and no need to attend the expensive training class.

Why choose Testking 642-542 braindumps

Quality and Value for the 642-542 Exam
100% Guarantee to Pass Your 642-542 Exam
Practice Test Questions accompanied by exhibits

Testking 642-542 Exam Features

Downloadable, Testking Interactive 642-542 Testing engines

Testking Cisco 642-542 Downloadable, Printable Exams (in PDF vce format)

Our Exam 642-542 Preparation Material Lbas provides you everything you will need to take your 642-542 exams. The 642-542 study guide Exam details Tutorials are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

Free down:Pass4sure 642-542
Free down:Testking 642-542

Testking 642-502 Securing Networks with Cisco Routers and Switches Exam(SNRS)
Testking 642-522 Securing Networks with PIX and ASA Exam(SNPA)
Testking 642-532 Securing Networks Using Intrusion Prevention Systems Exam (IPS)
Testking 642-513 Securing Hosts Using Cisco Security Agent Exam (HIPS)
Testking 642-551 Securing Cisco Network Devices Exam(SND)
Testking 642-521 Cisco Secure PIX Firewall Advanced
Testking 642-542 Cisco SAFE Implementation Exam
Testking 642-552 Securing Cisco Networking Devices (SND)
Testking 642-503 Securing Networks with Cisco Routers and Switches
Testking 642-523 Securing Networks with PIX and ASA
Testking 642-533 Implementing Cisco Intrusion Prevention System (IPS

Exam Description
The Securing Networks with ASA Foundation exam is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taking the SNAF course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco ASA Security Appliance product.

Exam Topics
The following topics are general guidelines for the content likely to be included. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Configure Security Appliances for secured network connectivity

* Configure and verify network and interface settings using ASDM and CLI
* Configure and verify NAT globals, statics, NAT exemption, and Identity NAT using ASDM
* Configure and verify access-lists with or without object groups using ASDM

Configure and verify routing and switching on Security Appliances

* Describe the routing capabilities of the Security Appliance
* Use ASDM to configure VLANs on a Security Appliance interface
* Use ASDM to configure the passive RIP routing functionality of the Security Appliance

Configure and verify Authentication, Authorization, & Accounting services for Security Appliances

* Configure ACS for Security Appliance support
* Use ASDM to configure the Security Appliance AAA features
* Configure and verify Auth-Proxy (cut-through proxy) using ASDM

Configure and verify Layer 3 & 4 protocol inspection, Modular Policy Framework, and threat detection for Security Appliances

* Configure and verify Layer 3 and Layer 4 protocol inspection using ASDM
* Configure and verify Modular Policy Framework using ASDM
* Use ASDM to configure and verify threat detection

Configure and verify secure connectivity using VPNs

* Configure and verify remote access VPNs using ASDM
* Configure and verify IPsec VPN clients with preshared keys using ASDM
* Configure and verify site-to-site VPNs with preshared keys using ASDM
* Verify IKE and IPsec using ASDM and CLI
* Configure and verify clientless SSL VPN using ASDM

Configure and verify active/standby and active/active failover features on Security Appliances

* Configure and verify active/standby failover using ASDM
* Configure and verify active/active failover using ASDM
* Configure and verify redundant Interface using ASDM

Configure transparent firewall and virtual firewall features on a Security Appliance

* Explain the purpose of virtual & transparent firewalls
* Configure and verify the transparent firewall feature of the Security Appliance using CLI
* Configure and verify the virtual firewall feature of the Security Appliance using ASDM

Monitor and manage installed Security Appliances

* Update, backup, and restore configurations and software images using ASDM and CLI
* Install and verify Licensing using ASDM
* Configure and verify Console and SSH/Telnet access
* Configure and utilize Logging using ASDM

When we first started offering the 642-524 exam questions and answers and exam simulator, we never dreamed we would be making the claims that we do now in the form of our unbelievable guarantee. TestKing.com GUARANTEES that you will pass your 642-524 exam on your first attempt after using one of our 642-524 training products. That’s right, with the 100% pass rate, the exam tools that we have created for you are so good – we can’t help but guarantee your results.

Known also as the Cisco TK’s IP Telephony Troubleshooting (642-524), this exam plays an integral role in obtaining your certification. All Cisco certification exams are extremely detailed and cover many different technological areas. We designed the 642-524 questions and answers for this very purpose, to prepare you for the unexpected. Beyond the testing center, the skills you learn and the knowledge you confirm using the 642-524 practice exams and exam simulators will translate directly into your daily work environment.

When available, take advantage of the TestKing 642-524 Value Pack and save time and money while developing your skills to pass your ‘TK’s IP Telephony Troubleshooting Exam’ and grab that Cisco certification.
Preparing for the 642-524 exam? Searching 642-524 Test Questions, 642-524 Practice Exam, 642-524 BrainDumps? Testking 642-524 is written to coincide with the real test by the experienced IT experts and specialists. With the complete collection of Testking Questions and Answers, Testking 642-524 is high enough to help the candidates to pass this exam easily without any other study materials and no need to attend the expensive training class.

Why choose Testking 642-524 braindumps

Quality and Value for the 642-524 Exam
100% Guarantee to Pass Your 642-524 Exam
Practice Test Questions accompanied by exhibits

Testking 642-524 Exam Features

Downloadable, Testking Interactive 642-524 Testing engines

Testking Cisco 642-524 Downloadable, Printable Exams (in PDF vce format)

Our Exam 642-524 Preparation Material Lbas provides you everything you will need to take your 642-524 exams. The 642-524 study guide Exam details Tutorials are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

Free down:Testking ccsp 642-524

pass4sure 642-524

Exam Description
The Securing Networks with ASA Advanced exam is one of the exams associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the SNAA course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco ASA Security Appliance product.

Exam Topics
The following topics are general guidelines for the content likely to be included. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Configure and verify NAT, dynamic routing, and switching on Security Appliances

* Configure and verify VLANS using ASDM
* Configure and verify dynamic routing protocols and route redistribution using ASDM
* Configure and verify policy NAT using ASDM

Configure and verify application layer protocol inspection and Modular Policy Framework for Security Appliances

* Describe the Layer 7 advanced protocol handling capabilities of the Security Appliance
* Configure and verify Layer 7 application layer protocol inspection using ASDM
* Configure and verify Modular Policy Framework using ASDM

Configure and verify secure connectivity using IPsec VPNs

* Describe the features and capabilities of digital certificates
* Describe how to use digital certificate enrollment with the Security Appliance and Cisco VPN client
* Configure and verify remote access VPNs with digital certificates using ASDM
* Configure and verify IPsec VPN clients with digital certificates using ASDM
* Configure and verify site-to-site VPNs with digital certificates using ASDM
* Configure and verify advanced remote access features using ASDM
* Configure and verify the ASA 5505 as a remote access client using ASDM
* Configure and verify QoS for tunnel traffic using ASDM

Configure and verify secure connectivity using SSL VPNs

* Describe the features and capabilities of SSL VPNs
* Configure and verify the local certificate authority using ASDM
* Configure and verify clientless access including smart tunnels, plug-ins and bookmarks using ASDM
* Configure and verify port forwarding using ASDM
* Configure the Security Appliance for SSL VPN client access using ASDM
* Configure and verify the AnyConnect VPN client
* Configure and verify CSD using ASDM
* Configure and verify DAP using ASDM

Configure and verify AIP-SSM and CSC-SSM modules

* Explain the function that AIP-SSM and CSC-SSM perform within a network
* Configure and verify AIP-SSM
* Configure and verify CSC-SSM

642-515 Exam Q&As PDF download
We provide peofessional Cisco Others 642-515 Exam information and free demo for Others 642-515 certification exam’s PDF. It is the best and the lastest Cisco Practice Exams. Download our 642-515 PDF,
We are committed to you ongoing success. Free Testking 642-515 exam and 642-515 Q&As are constantly being updated and compared to industry standards.642-515 PDF download
Cisco Data Center Application Services Implementation
Exam Number: 642-515 Exam
Associated Certifications: Cisco Data Center Application Services Implementation
Duration: 165 Q&As
Free 642-515 Exams’s PDF Download

Free Testking offers free demo for 642-515 PDF(Cisco Data Center Application Services Implementation). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Cisco Data Center Application Services Implementation.

642-515 PDF download 642-515 exam
Recommended Training about 642-515 exam PDF

* The following courses are the recommended training for 642-515 exam PDF. 642-515 Q & A with Explanations
* 642-515 Audio Exam
* 642-515 Study Guide
* 642-515 Preparation Lab

642-515 Exam Preparation from Freetestking with FULL explanations include:

* Comprehensive questions with complete details
* Detailed explanations of all the questions
* Questions accompanied by exhibits
* Verified Answers Researched by Industry Experts
* Drag and Drop questions as experienced in the Actual Exams
* Questions updated on regular basis
* These questions and answers are backed by our GUARANTEE.
* Like actual certification exams our product is in multiple-choice questions (MCQs).

642-515 Exam: Freetestking’s Cisco Securing Networks with ASA Advanced

The Cisco Data Center Application Services Implementation PDF for preparing for the 642-515 exam – Freetestking’s Cisco Data Center Application Services Implementation. Freetestking is your premier source for practice tests, and true testing environment. Nothing will prepare you for your next exam like a Freetestking. You find it all here at testking.name .

Preparing for the 642-515 exam? Searching 642-515 Test Questions, 642-515 Practice Exam, 642-515 BrainDumps? Testking 642-515 is written to coincide with the real test by the experienced IT experts and specialists. With the complete collection of Testking Questions and Answers, Testking 642-515 is high enough to help the candidates to pass this exam easily without any other study materials and no need to attend the expensive training class.

Why choose Testking 642-515 braindumps

Quality and Value for the 642-515 Exam
100% Guarantee to Pass Your 642-515 Exam
Practice Test Questions accompanied by exhibits

Testking 642-515 Exam Features

Downloadable, Testking Interactive 642-515 Testing engines

Testking Cisco 642-515 Downloadable, Printable Exams (in PDF vce format)

Our Exam 642-515 Preparation Material Lbas provides you everything you will need to take your 642-515 exams. The 642-515 study guide Exam details Tutorials are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

Free down:Testking ccsp 642-515

pass4sure 642-515

Exam Number: 642-591
Associated Certifications: CCSP/ Cisco Network Admission Control Specialist
Duration: 75 minutes (60 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The 642-591 CANAC Implementing Cisco NAC Appliance exam is associated with both the Cisco Certified Security Professional and the Cisco Network Admission Control Specialist certifications. Candidates can prepare for this exam by taking the Implementing Cisco NAC Appliance course. This exam tests a candidate’s knowledge of the Cisco NAC Appliance solution.

Exam Topics
The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Implement Cisco NAC Appliance
Identify the components and features used for Cisco NAC Appliance
Configure and verify NAM and NAS to support the Cisco NAC Appliance In-Band server solutions
Configure and verify NAM and NAS to support the Cisco NAC appliance Out-of-Band server solutions
Configure Single Sign on
Configure and verify Cisco Switches as network access devices
Configure and verify user roles
Implement and verify rule based policies
Configure Cisco NAC Appliance network scanning
Configure NAM to implement NAA on user devices
Implement and verify an HA solution
Administer and monitor a Cisco NAC Appliance solution
Recommended Training
Implementing Cisco NAC Appliance (CANAC) is the recommended training for the 642-591 CANAC Exam

Courses listed are offered by Cisco Learning Partners, the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the List of Learning Partners for a Cisco Learning Partner near you.

Additional Resources
A variety of Cisco Press titles may be available for this exam. These titles can be purchased through the Cisco Marketplace Bookstore, directly from Cisco Press

TestInside 642-591

Cisco 642-591

Implementing Cisco NAC Appliance

Q&A Demo

English: www.TestInside.com BIG5: www.Testinside.net GB: www.testking.name

TestInside,help you pass any IT exam!

TestInside 642-591

1. The NAS is configured to autogenerate an IP address pool of 30 subnets with a netmask of /30, beginning at

address 192.168.10.0. Which IP address is leased to the end-user host on the second subnet? A. 192.168.10.4
B. 192.168.10.5

C. 192.168.10.6

D. 192.168.10.7

Answer: C

2. Which default administrator group has delete permissions? A. admin
B. help-desk

C. add-edit

D. full-control

Answer: D

3. What is the result when the condition statement in a Cisco NAA check for required software evaluates to false

on a client machine?

A. The required software is automatically downloaded to the user device. B. The required software is made available after the user is quarantined.
C. The user is put in the unauthenticated role and the software is considered missing. D. The user is placed in the temporary role and the software is made available. Answer: B

4. Which three components comprise a Cisco NAC Appliance solution? (Choose three.) A. a NAC-enabled Cisco router
B. a Linux server for in-band or out-of-band network admission control

C. a Linux server for centralized management of network admission servers

D. a Cisco router to provide VPN services

E. a read-only client operating on an endpoint device

F. a NAC-enabled Cisco switch

Answer: BCE

TestInside 642-591

5. When configuring the Cisco NAM to implement Cisco NAA requirement checking on client machines, what is

the next step after configuring checks and rules? A. retrieve updates
B. require the use of the Cisco NAA

C. configure session timeout and traffic policies

D. map rules to requirement E. configure requirements Answer: E

6. Refer to the exhibit. When logging in to a Cisco NAC Appliance solution, an end user is prompted for a username, password, and provider. What should be entered in the Provider drop-down field shown in the exhibit?

A. the authenticating NAS B. the authorizing NAM
C. the name of the ISP

D. the external authenticating server

Answer: D

7. What are the two types of traffic policies that apply to user roles? (Choose two.) A. IP-based
B. peer-based

C. host-based

D. manager-based

E. server-based

TestInside 642-591

F. VLAN-based

Answer: AC

8. After you implement a network scan and view the report, you notice that a plug-in did not access any of its dependent plug-ins. What did you forget to do?
A. enable the Dependent Plug-in check box on the General Tab form

B. configure dependent plug-in support when you mapped the Nessus scan check to the Nessus plug-in rule

C. install dependent plug-ins when you updated the Cisco NAC Appliance plug-in library

D. load the dependent plug-ins for that plug-in in the Plug-in Updates form

Answer: D

9. A client has a network with wireless and wired users. The wired users run mission-critical bandwidth-sensitive applications. The wireless users access web-based support portals within the central office.

Given only this information, which Cisco NAC Appliance solution would provide the most fault-tolerant option for this client?
A. one Cisco NAM and one in-band highly available Cisco NAS cluster

B. one load-balanced highly available Cisco NAM cluster and one out-of-band highly available Cisco NAS cluster

C. one highly available Cisco NAM cluster, one out-of-band highly available Cisco NAS cluster, and one in-band

Cisco NAS

D. one highly available Cisco NAM cluster and one in-band highly available Cisco NAS cluster

Answer: C
10. Based on the Boolean order of precedence, how would Cisco NAC Appliance evaluate the following rule? AdAwareLogRecent&(NorAVProcessIsActiveymAVProcessIsActive)

A. (The Norton Antivirus is active and there is a recent Ad Aware log entry) or (the Symantec antivirus process is active).
B. There is a recent Ad Aware log entry, the Norton Antivirus is active, and the Symantec antivirus process is active.
C. (Either the Norton Antivirus or the Symantec antivirus process is active) and (there is a recent Ad Aware log

TestInside 642-591

entry).

D. There is a recent Ad Aware log entry or the Norton Antivirus is active, or the Symantec antivirus process is active.
Answer: C

11. How do you ensure that the Cisco NAS has the most recent version of the Cisco NAA to install on user devices?
A. Each time the Cisco NAA is upgraded, the Cisco NAM automatically downloads the new version of Cisco

NAA to all Cisco NAS servers.

B. From the Cisco NAS Web Admin Console, enable Cisco NAA autoupdate on the Administration > Software

Update form.

C. The Cisco NAA is upgraded directly to each Cisco NAS using the Upgrade Server form available on the Cisco

NAM web console GUI.

D. Configure the Cisco NAS by selecting which Cisco NAA to upgrade in the Cisco NAA Upgrade form. Answer: A

12. A search of available switches has been performed and a list of switches is presented. Which two SNMP attributes need to match what is configured in the Cisco switch profile for a listed switch to be added to the Cisco NAM? (Choose two.)
A. SNMP read community string B. SNMP write community string C. SNMP read version
D. SNMP write version

E. SNMP trap

Answer: AC

13. In a Cisco NAC Appliance Windows Active Directory SSO deployment, what are the cached credentials and

Kerberos TGT from the client-machine Windows login used for? A. They are used to validate the user with the Cisco NAS.
B. They are used to validate the user authentication with the backend Windows Active Directory server.

C. They are used to validate user access with the Cisco NAA.

TestInside 642-591

D. They are used to validate the user authentication and access with the Cisco NAM.

Answer: B

14. What must you check on the switches for an out-of-band Cisco NAC Appliance deployment?

A. The Cisco or non-Cisco switch must support port security and SNMPv2 or SNMPv3. B. The Cisco switch must support VACL (VLAN ACL).
C. If you have stacked Cisco Catalyst 3750 Series Switches, you are using Cisco IOS Release 12.1(25)SEC or above.
D. The Cisco switch must use at least the minimum supported version of Cisco IOS or Catalyst OS supporting mac-notification or linkup-linkdown SNMP traps.
Answer: D

15. Drop

Answer:

TestInside 642-591

Interactive Testing Engine Included!
60 Questions
Updated : 03/15/2008
Price : $87.99 $79.99
Free download?testking ccsp 642-591
Free download?pass4sure ccsp 642-591

Last day to test 01/31/07
Exam Number: 642-551
Associated Certifications: CCSP, Cisco Firewall, Cisco IPS, and Cisco VPN Specialist
Duration: 90 minutes (60-70 questions)
Available Languages: English
Click Here to Register: Pearson VUE or Prometric
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Securing Cisco Network Devices 642-551 SND exam forms the foundation of the Cisco Certified Security Professional, Cisco Firewall Specialist, Cisco IPS Specialist, and Cisco VPN Specialist certifications. Candidates can prepare for this exam by taking the SND course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, and verify basic security features of Cisco Layer 2 devices, Cisco Routers, Cisco IDS/IPS Sensors, Cisco VPN 3000 Concentrators, and Cisco PIX Security Appliances.

Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.

Describe the products in the Cisco security portfolio and explain how they mitigate security threats to a network
Identify the appropriate devices to secure a network
Identify the appropriate device feature to secure a network
Describe the difference in functionality and capabilities of the different security devices
Identify security issues with common management protocols
Describe threats to a network and network devices
Identify different techniques to deal with security threats

Describe the security features available for a Cisco Layer 2 device in a secure network
Identify security features on a Layer 2 device
Describe basic security feature configurations on a Layer 2 device

Implement security on a Cisco IOS Router
Identify mitigation techniques for common physical router security threats
Configure router for secure administrative access
Implement basic AAA for router administrative authentication
Configure AutoSecure to harden Cisco routers
Configure router access lists to secure networks
Configure security for router services and interfaces
Implement Syslog logging
Identify major components of the SDM

Describe and configure Cisco IPS and HIPS
Configure user accounts
Describe and configure Network Access lists
Describe how the sensor device is secure by default
Install the sensor on the network
Describe the methods used to access a sensor
Describe the process for displaying the sensor configuration
Identify major components of IDM
Describe basic sensor operations
Describe the process of using alarms to identify network attacks
Identify the appropriate platform required to install the CSA MC
Configure the default group
Describe the process of agent kit deployment and verifying management of the agent
Describe key features and concepts of VMS
Describe the interoperability of the components of VMS
Describe the hardware and software requirements of VMS

Configure and verify basic remote access on a Cisco VPN 3000 Concentrator
Perform an initial configuration
Configure users and groups
Configure VPN clients
Verify IPSec tunnel establishment

Implement a Cisco PIX security appliance
Describe basic PIX security appliance hardware and software architecture
Identify appropriate PIX security appliance hardware and software configuration
Configure basic network settings using CLI
Configure basic interface features on a PIX security appliance
Verify initial configurations
Identify major components of the PDM
Configure static address translation
Configure Network Address Translation
Configure firewall to secure inbound traffic
Verify inbound traffic restrictions
Describe basic IPSec topologies
Define the services provided by IPSec
Describe the IPSec protocol framework
Describe the IPSec algorithm framework
Describe the concepts of split tunneling
Describe the various authentication methods
Describe how the PIX security appliance uses IPSec to secure networks

Recommended Training
Securing Cisco Network Devices (SND) is the recommended training for this exam.

Courses listed are offered by Cisco Learning Partners, the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the List of Learning Partners for a Cisco Learning Partner near you.

Additional Resources
A variety of Cisco Press titles may be available for this exam. These titles can be purchased through the Cisco Marketplace Bookstore, directly from Cisco Press.

CNSS 4011 Training Standard

TestInside 642-551

Cisco 642-551

Securing Cisco Network Devices Exam(SND)

Q&A DEMO

English: www.TestInside.com BIG5: www.Testinside.net GB: www.testking.name

TestInside,help you pass any IT exam!

TestInside 642-551

1.Drag Drop question

Drag and drop question. Drag the items to the proper locations.

Correct Answers:

2.Drag Drop question

Drag and drop question. Drag the items to the proper locations.

Correct Answers:

3.What are the three common types of user accounts on the Cisco IDS/IPS? (Choose three.)

A:administrator B:guest C:operator D:viewer E:privileged

TestInside 642-551

F:executive

Correct Answers: A, C, D

4.Which authentication method is based on the 802.1x authentication framework, and mitigates several of the weaknesses by using dynamic WEP and sophisticated key management on a per-packet basis?
A: PAP B: CHAP C: LEAP D: ARAP
Correct Answers: C

5.Which command sets the minimum length of all Cisco IOS passwords? A: password min-length length
B: min-length security length

C: enable secret min-length

D: security passwords min-length length

Correct Answers: D

6.Which command would be used on the Cisco PIX Security Appliance to show the pool of addresses to be translated?

A: show nat

B: show xlate C: show global D: show conn
Correct Answers: C

7.In which version did NTP begin to support cryptographic authentication? A: version 5
B: version 4

C: version 3

D: version 2

Correct Answers: C

8.During which phase of an attack does the attacker attempt to identify targets? A: penetrate
B: propagate

C: persist

D: probe

E: paralyze

Correct Answers: D

9.Which command is used to encrypt passwords in the router configuration file? A: service password-encryption
B: password-encryption

C: enable password encryption

D: encrypt password

Correct Answers: A

TestInside 642-551

10.What are the four critical services of IPSec functions? (Choose four.)

A:replay protection B:confidentiality C:data integrity D:data mining
E:origin authentication

F:anti-replay protection

Correct Answers: B, C, E, F

Interactive Testing Engine Included!
62 Questions
Updated : 03/03/2008
Price : $87.99 $79.99

Preparing for the 642-551 exam? Searching 642-551 Test Questions, 642-551 Practice Exam, 642-551 BrainDumps? Testking 642-551 is written to coincide with the real test by the experienced IT experts and specialists. With the complete collection of Testking Questions and Answers, Testking 642-551 is high enough to help the candidates to pass this exam easily without any other study materials and no need to attend the expensive training class.

Why choose Testking 642-551 braindumps

Quality and Value for the 642-551 Exam
100% Guarantee to Pass Your 642-551 Exam
Practice Test Questions accompanied by exhibits

Testking 642-551 Exam Features

Downloadable, Testking Interactive 642-551 Testing engines

Testking Cisco 642-551 Downloadable, Printable Exams (in PDF vce format)

Our Exam 642-551 Preparation Material Lbas provides you everything you will need to take your 642-551 exams. The 642-551 study guide Exam details Tutorials are researched and produced by Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get questions from different web sites or books, but logic is the key. Our Product will help you not only pass in the first try, but also save your valuable time.

Free download?testking ccsp 642-551
Free download?pass4sure ccsp 642-551

Retired
Exam Number: 642-541
Associated Certifications: CCSP
Duration: 90 minutes (60-70 questions)
Available Languages: English
Click Here to Register: Pearson VUE or Prometric
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Cisco SAFE Implementation exam tests the knowledge and skills needed to use the principles and axioms presented in the SAFE SMR, Enterprise, IP Telephony and Wireless LAN White Papers, and to implement them on specific security devices. The primary focus is on the labs, which allows the students to build complete end-to-end security solutions using SAFE White Papers as the blueprint. The configuration and functionality of the following devices in a SAFE SMR network are described in detail: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Security Agent and the Cisco VPN Client. Basic implementation of a SAFE wireless LAN is also covered.

The SAFE White Papers can be downloaded for free.

Exam Topics
The following information provides general guidelines for the content likely to be included on this exam. However, other related topics may also appear on any specific delivery of the exam.

Security Fundamentals
Need for network security
Components of a complete security policy
Primary network threats and attacks
Common attacks and recommended mitigation techniques
Security issues implicit in common management protocols

SAFE Blueprint Overview
SAFE Blueprint Overview
Design Fundamentals
SAFE Axioms

The Cisco Security Portfolio
Cisco Security Portfolio Overview
Secure Connectivity-Cisco VPN 3000 Concentrator and Cisco VPN Optimized IOS
Perimeter Security Firewalls-Cisco PIX Firewall and Cisco IOS Firewall
Intrusion Protection-IDS
Identity-CSACS
Security Management-VMS
Cisco AVVID

SAFE Small Network Design
Small Network Design Overview
Small Network Corporate Internet Module
Small Network Campus Module
Implementation-ISP Router
Implementation-Cisco IOS Firewall
Implementation-PIX Firewall
Implementation-CSA

SAFE Midsize Network Design
Midsize Network Design
Midsize Network Corporate Internet Module Design Guidelines
Midsize Network Campus Module
Midsize Network Campus Module Design Guidelines
Midsize Network WAN Module
Implementation-ISP Router and Edge Router
Implementation-Network IPS
Implementation-VPN 3000 Concentrator
Implementation-Layer 3 Switch

SAFE Remote Network Design
Remote-User Network Overview
Key Devices and Threat Mitigation
Software Client Option
Remote Site Firewall Option
VPN 3002 Hardware Client Option
Remote Site Router Option

SAFE Enterprise Network Design
Enterprise Network Design Overview
Enterprise Campus
Enterprise Network Edge

SAFE IP Telephony Design
IP Telephony Concepts, Caveats and Axioms
IP Telephony Product Portfolio
IP Telephony Design Considerations
IP Telephony Design for Small, Medium and Large Network

SAFE Wireless LAN Design
Wireless LAN Security Concepts, Caveats and Axioms
WLAN Security Extensions
Cisco WLAN Product Portfolio
WLAN Design Approach
Standard WLAN Design
WLAN Design for Small, Medium, Enterprise and Remote Network
WLAN Implementation
Recommended Training
Cisco SAFE Implementation (CSI) is the recommended training for this exam.

Courses listed are offered by Cisco Learning Partners