P4S Cisco CCSP Exam 642-552 v2.73

Securing Cisco Networking Devices (SND) : 642-552 Exam The Securing Cisco Network Devices 642-552 SND is the exam associated with the Cisco Certified Security Professional, Cisco Firewall Specialist, Cisco IPS Specialist, and Cisco VPN Specialist certifications. Candidates can prepare for this exam by taking the Securing Cisco Network Devices v2.0 (SND) course. This exam tests a candidate’s knowledge of securing Cisco routers and switches and their associated networks. Topics covered include; Security threats facing modern network infrastructures, Securing Cisco routers, Implementing basic AAA, Using ACLs to mitigate router and network threats, Implementing secure management and reporting, Mitigating common Layer 2 attacks, and Implementing Cisco IOS Firewall features, Cisco IOS IPS features, and IPsec VPN features using Cisco Security Device Manager
642-552 SND
Securing Cisco Network Devices Exam
Last day to test November 17, 2008
Exam Number: 642-552
Associated Certifications: CCSP/Cisco Firewall Specialist/Cisco IPS Specialist/Cisco VPN Specialist
Duration: 75 minutes
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description

The Securing Cisco Network Devices 642-552 SND is the exam associated with the Cisco Certified Security Professional, Cisco Firewall Specialist, Cisco IPS Specialist, and Cisco VPN Specialist certifications. Candidates can prepare for this exam by taking the Securing Cisco Network Devices v2.0 (SND) course. This exam tests a candidate’s knowledge of securing Cisco routers and switches and their associated networks. Topics covered include; Security threats facing modern network infrastructures, Securing Cisco routers, Implementing basic AAA, Using ACLs to mitigate router and network threats, Implementing secure management and reporting, Mitigating common Layer 2 attacks, and Implementing Cisco IOS Firewall features, Cisco IOS IPS features, and IPsec VPN features using Cisco Security Device Manager
Exam Topics

The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Describe the security threats facing modern network infrastructures

* Describe and mitigate the common threats to the physical installation
* Describe and list mitigation methods for common network attacks
* Describe and list mitigation methods for Worm, Virus, and Trojan Horse attacks
* Describe the main activities in each phase of a secure network lifecycle
* Explain how to meet the security needs of a typical enterprise with a comprehensive security policy
* Describe the Cisco Self Defending Network architecture

Secure Cisco routers

* Secure Cisco routers using the SDM Security Audit feature
* Use the One-Step Lockdown feature in SDM to secure a Cisco router
* Secure administrative access to Cisco routers by setting strong encrypted passwords, exec timeout, login failure rate and using IOS login enhancements
* Secure administrative access to Cisco routers by configuring multiple privilege levels
* Secure administrative access to Cisco routers by configuring role based CLI
* Secure the Cisco IOS image and configuration file

Implement basic AAA using Cisco routers

* Explain the functions and importance of AAA
* Describe the features of TACACS+ and RADIUS AAA protocols
* Describe the methods of authentication that are used to provide access through a router (packet mode) and to provide access to the router (character mode)

Mitigate threats to Cisco routers and networks using ACLs

* Explain the functionality of standard, extended, and named IP ACLs used by routers to filter packets
* Configure and verify IP ACLs to mitigate given threats (filter IP traffic destined for Telnet, SNMP, and DDoS attacks) in a network using CLI
* Configure IP ACLs to prevent IP address spoofing using CLI
* Discuss the caveats to be considered when building ACLs

Implement secure network management and reporting

* Describe the factors to be considered when planning for secure management and reporting of network devices
* Use CLI to configure SSH on Cisco routers to enable secured management access
* Use CLI to configure Cisco routers to send Syslog messages to a Syslog server
* Describe SNMPv3 and NTPv3

Mitigate common Layer 2 attacks

* Describe the common Layer 2 attacks and how to mitigate them (VLAN hopping, STP attacks, ARP spoofing, MAC spoofing, CAM overflow)
* Describe the function and benefit of the security features in Cisco Catalyst switches (IBNS, PVLAN, SPAN port)
* Describe common threats to WLANs
* Describe the security features of the 802.11 protocol

Implement the Cisco IOS firewall feature set using SDM

Free PassGuide Practice Engine Demo Download Pass4sure offers free demos for each certification exam, including all IT vendors. You can check out the testing engine software, or pdf file question quality and usability of our practice exams before you decide to buy it. We are the only one site that offers demos for almost all IT certification exams.If you want to try p4s exam practice engine demo. http://demo.passguide.com/download

* Describe the operational strengths and weaknesses of the different firewall technologies
* Explain stateful firewall operations and the function of the state table
* Explain the types of NAT that can be implemented in a firewall
* Configure and verify basic and advanced firewall on a Cisco router using SDM

Implement the Cisco IOS IPS feature set using SDM

* Define network based vs. host based intrusion detection and prevention
* Explain IPS technologies, attack responses, and monitoring options
* Enable and verify Cisco IOS IPS operations using SDM

Implement IPsec VPN on Cisco routers using SDM

* Explain IKE protocol functionality and phases
* Describe the building blocks of IPsec and the security functions it provides
* Explain hash-based message authentication code (HMAC) operations
* Explain the different methods of encryption
* Explain the purpose of the Diffie-Hellman key agreement protocol
* Describe how IPsec establishes origin authentication
* Describe the PKI environment at a high level
* Describe the different types of IPsec VPN implementations
* Configure and verify an IPsec site-to-site VPN with pre-shared key authentication using SDM
* Explain Cisco Easy VPN Server and Cisco Easy VPN Remote
* Configure and verify remote access VPNs using the Cisco Easy VPN Server feature of Cisco SDM

Exam Number/Code: 642-552
Exam Name: Securing Cisco Networking Devices (SND)
VUE Code: 642-552
Questions Type: Single choice,
Exam Language(s): English

“Securing Cisco Networking Devices (SND)”, also known as 642-552 exam, is a Cisco certification.
Preparing for the 642-552 exam? Searching 642-552 Test Questions, 642-552 Practice Exam, 642-552 Dumps?

With the complete collection of questions and answers, Pass4sure has assembled to take you through 60 Q&A to your 642-552 Exam preparation. In the 642-552 exam resources, you will cover every field and category in CCSP helping to ready you for your successful Cisco Certification.

QUESTION 24:
Which SDM feature(s) can be used to audit and secure a Cisco router?
A. AutoSecure and AAA Wizards
B. AutoSecure or SDM Express Wizards
C. Security Audit Wizard or One-Step Lockdown
D. AAA or SDM Express Wizard
E. IPS Wizard
Answer: C
Explanation:
The CiscoSDMExpress windows guide you through basic configuration of the router.
After you complete the basic configuration, the router is available on the LAN, has a
WAN connection, and has a firewall.
QUESTION 25:
In the Cisco SDM Security Audit Wizard screen shown in the figure, which Fix it
action should be selected to prevent IP spoofing attack?
A. IP Proxy ARP is enabled
B. Unicast RPF is not enabled in all the outside interfaces
C. IP Mask Reply is enabled
D. IP Directed Broadcast is enabled
E. IP Unreachables is enabled
F. IP Redirects is enabled
Answer: B
Explanation:
Enable IP Unicast Reverse-Path Forwarding (RPF) on the outside interface-IP Unicast
RPF is a feature that causes the router to check the source address of any packet against
the interface through which the packet entered the router. If the input interface is not a
feasible path to the source address according to the routing table, the packet will be
dropped. This source address verification is used to defeat IP spoofing.
QUESTION 26:
The figure contains a sample configuration using Cisco IOS commands. Which
Cisco IOS command or setting does the configuration need to get SSH to work?
A. add the transport input telnet ssh Cisco IOS command after the line vty 0 4 Cisco IOS
command
B. add the transport output ssh Cisco IOS command after the line vty 0 4 Cisco IOS
command
C. set the SSH timeout value using the ip ssh timeout 60 Cisco IOS command
D. add the crypto key generate rsa general-keys modulus 1024 Cisco IOS command
E. set the SSH retries value using the ip ssh authentication-retries 3 Cisco IOS command
Answer: D

Questions and Answers : 60 Q&A
Updated: 2008-3-18
Market Price: $125.99
Member Price: $79.99

Free download:pass4sure CCSP 642-552
Free download:testking CCSP 642-552
more info:www.ciscoexams.org

PassGuide provides high-quality test materials, for example, Cisco CCNA CCNP CCIE, Comptia A + NETWORK + Security +, Juniper jncia, jncis, Vmware VCP-410,certification practice exams and so on.We are committed to give full refund to candidates if they fail the exam with use of our products.And we are confident to make such a guarantee. Buy Best Practice Exam,high-quality ,100% Guarantee ,Pls contact me,Mail:Sales@passguide.com

P4S Free Downloads

Type	Exam Braindumps	New Questions & Answers	Latest Updated	Available link
	All Pass4sure's Exam Pack	858	1 days ago	Download Free Testing Engines