pass4sure ccnp 642-825 2.85

Exam Number/Code: 642-825
Exam Name: ISCW – Implementing Secure Converged Wide Area Networks
VUE Code: 642-825
Questions Type: Single choice,
Exam Language(s): English

“ISCW – Implementing Secure Converged Wide Area Networks”, also known as 642-825 exam, is a Cisco certification.
Preparing for the 642-825 exam? Searching 642-825 Test Questions, 642-825 Practice Exam, 642-825 Dumps?

With the complete collection of questions and answers, Pass4sure has assembled to take you through 172 Q&As to your 642-825 Exam preparation. In the 642-825 exam resources, you will cover every field and category in CCNP helping to ready you for your successful Cisco Certification.

The Implementing Secure Converged Wide Area Networks (ISCW 642-825) is a qualifying exam for the Cisco Certified Network Professional CCNP? The ISCW 642-825 exam will certify that the successful candidate has important knowledge and skills necessary to secure and expand the reach of an enterprise network to teleworkers and remote sites with focus on securing remote access and VPN client configuration. The exam covers topics on Cisco hierarchical network model as it pertains to the WAN, teleworker configuration and access, frame mode MPLS, site-to-site IPSEC VPN, Cisco EZVPN, strategies used to mitigate network attacks, Cisco device hardening and IOS firewall features

642-825 ISCW
Implementing Secure Converged Wide Area Networks
Exam Number:             642-825
Associated Certifications:     CCNP
Duration:     90 minutes
Available Languages:     English
Click Here to Register:     Pearson VUE
Exam Policies:     Read current policies and requirements
Exam Tutorial:     Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description

The Implementing Secure Converged Wide Area Networks (ISCW 642-825) is a qualifying exam for the Cisco Certified Network Professional CCNP®. The ISCW 642-825 exam will certify that the successful candidate has important knowledge and skills necessary to secure and expand the reach of an enterprise network to teleworkers and remote sites with focus on securing remote access and VPN client configuration. The exam covers topics on Cisco hierarchical network model as it pertains to the WAN, teleworker configuration and access, frame mode MPLS, site-to-site IPSEC VPN, Cisco EZVPN, strategies used to mitigate network attacks, Cisco device hardening and IOS firewall features.
Exam Topics

The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Implement basic teleworker services.

* Describe Cable (HFC) technologies.
* Describe xDSL technologies.
* Configure ADSL (i.e., PPPoE or PPPoA).
* Verify basic teleworker configurations.

Implement Frame-Mode MPLS.

* Describe the components and operation of Frame-Mode MPLS (e.g., packet-based MPLS VPNs).
* Configure and verify Frame-Mode MPLS.

Implement a site-to-site IPSec VPN

* Describe the components and operations of IPSec VPNs and GRE Tunnels.
* Configure a site-to-site IPSec VPN/GRE Tunnel with SDM (i.e., preshared key).
* Verify IPSec/GRE Tunnel configurations (i.e., IOS CLI configurations).
* Describe, configure, and verify VPN backup interfaces.
* Describe and configure Cisco Easy VPN solutions using SDM.

Describe network security strategies.

* Describe and mitigate common network attacks (i.e., Reconnaissance, Access, and Denial of Service).
* Describe and mitigate Worm, Virus, and Trojan Horse attacks.
* Describe and mitigate application-layer attacks (e.g., management protocols).

Implement Cisco Device Hardening

* Describe, Configure, and verify AutoSecure/One-Step Lockdown implementations (i.e., CLI and SDM).
* Describe, configure, and verify AAA for Cisco Routers.
* Describe and configure threat and attack mitigation using ACLs.
* Describe and configure IOS secure management features (e.g., SSH, SNMP, SYSLOG, NTP, Role-Based CLI, etc.)

Implement Cisco IOS firewall.

* Describe the functions and operations of Cisco IOS Firewall (e.g., Stateful Firewall, CBAC, etc.).
* Configure Cisco IOS Firewall with SDM.
* Verify Cisco IOS Firewall configurations (i.e., IOS CLI configurations, SDM Monitor).

Describe and configure Cisco IOS IPS.

* Describe the functions and operations of IDS and IPS systems (e.g., IDS/IPS signatures, IPS Alarms, etc.)
* Configure Cisco IOS IPS using SDM.

Free PassGuide Practice Engine Demo Download Pass4sure offers free demos for each certification exam, including all IT vendors. You can check out the testing engine software, or pdf file question quality and usability of our practice exams before you decide to buy it. We are the only one site that offers demos for almost all IT certification exams.If you want to try p4s exam practice engine demo. http://demo.passguide.com/download

QUESTION 33:
The Cisco VPN client was installed on a Certkiller laptop as shown below:
Based on the diagram shown above, what does the “Allow Local LAN Access”
option enable a Cisco software VPN client to do?
A. It allows local traffic from trusted resources to pass through the VPN connection
B. It allows a user to access the resources on the local LAN when connected through a
secure gateway to a central-site VPN device
C. It allows secured remote clients to access local LAN resources through the VPN
connection
D. It allows remote connections from trusted clients to access local resources
E. None of the above
Answer: B
Explanation:
In a multiple-network interface card (NIC) configuration, local LAN access pertains only
to network traffic on the interface on which the tunnel was established. The Allow Local
LAN Access parameter gives you access to the resources on your local LAN (printer, fax,
shared files, or other systems) when you are connected through a secure gateway to a
central-site VPN device. When this parameter is enabled and your central site is
configured to permit it, you can access local resources while connected. When this
parameter is disabled, all traffic from your client system goes through the IPsec
connection to the secure gateway. To enable this feature, check the Allow Local LAN
Access check box; to disable it, uncheck the check box. If the local LAN that you are
using is not secure, you should disable this feature. For example, you would disable this
feature when you are using a local LAN in a hotel or airport. A network administrator at
the central site configures a list of networks at the client side that you can access. You
can access up to 10 networks when this feature is enabled. When the Allow Local LAN
Access feature is enabled and you are connected to a central site, all traffic from your
system goes through the IPsec tunnel except traffic to the networks excluded from doing
so (in the network list). When this feature is enabled and configured on the VPN Client
and permitted on the central-site VPN device, you can see a list of the local LANs
available by looking at the routing table.
QUESTION 34:
The following VPN Client Statistics exhibit was seen on a Certkiller laptop:
A new VPN Connection Entry was made on this laptop as shown below:
Which two statements are true about the information that is shown above from
theCisco VPN client screens on this Certkiller laptop? (Select two)
A. The 10.10.32.32 network entry in the Route Details screen represents the IP address of
the server end of the encrypted tunnel.
B. The 10.10.32.32 network entry in the Route Details screen represents an IP address
that will be accessed without traversing the VPN.
C. Selecting IPSec over TCP on the connection entry on the right allows Local LAN
Routes to be available on the Route Details on the left screen.
D. Selecting Enable Transparent Tunneling on the connection entry on the right allows
Local LAN Routes to be available on the Route Details on the left screen.
E. Selecting Allow Local LAN Access on the connection entry on the right allows Local
LAN Routes to be available on the Route Details on the left screen.
Answer: B, E
Explanation:
Transparent tunneling allows secure transmission between the VPN Client and a secure gateway
through a router serving as a firewall, which may also be performing Network Address
Translation (NAT) or Port Address Translation (PAT). Transparent tunneling encapsulates
Protocol 50 (Encapsulating Security Payload, or ESP) traffic within UDP packets and can allow
both Internet Security Association and Key Management Protocol (ISAKMP) and Protocol 50 to
be encapsulated in TCP packets before they are sent through the NAT or PAT devices or
firewalls. The most common application for transparent tunneling is behind a home router
performing PAT.
QUESTION 35:
You need to set up the Cisco VPN client software on a new Certkiller laptop. When
configuring the Cisco VPN Client with transparent tunneling, what is true about the
IPSec over TCP option?
A. The port number is negotiated automatically.
B. Clients will have access to the secured tunnel and local resources.
C. Packets are encapsulated using Protocol 50 (Encapsulating Security Payload, or ESP).
D. The port number must match the configuration on the secure gateway.
E. None of the above
Answer: D

Free download:pass4sure ccnp 642-825
Free download:testking ccnp 642-825
more info:www.ciscoexams.org

PassGuide provides high-quality test materials, for example, Cisco CCNA CCNP CCIE, Comptia A + NETWORK + Security +, Juniper jncia, jncis, Vmware VCP-410,certification practice exams and so on.We are committed to give full refund to candidates if they fail the exam with use of our products.And we are confident to make such a guarantee. Buy Best Practice Exam,high-quality ,100% Guarantee ,Pls contact me,Mail:Sales@passguide.com

P4S Free Downloads

Type	Exam Braindumps	New Questions & Answers	Latest Updated	Available link
	All Pass4sure's Exam Pack	858	1 days ago	Download Free Testing Engines