VPN and Security Cisco SAFE Implementation Exam (CSI) : 642-541 Exam 

The Cisco SAFE Implementation exam tests the knowledge and skills needed to use the principles and axioms presented in the SAFE SMR, Enterprise, IP Telephony and Wireless LAN White Papers, and to implement them on specific security devices. The primary focus is on the labs, which allows the students to build complete end-to-end security solutions using SAFE White Papers as the blueprint. The configuration and functionality of the following devices in a SAFE SMR network are described in detail: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Security Agent and the Cisco VPN Client. Basic implementation of a SAFE wireless LAN is also covered.

The SAFE White Papers can be downloaded for free.

Exam Number/Code: 642-541
Exam Name: VPN and Security Cisco SAFE Implementation Exam (CSI)
VUE Code: 642-541
Questions Type: Single choice,
Real Exam Question Numbers: 60-70 questions
Exam Language(s): English

642-541 CSI
Cisco SAFE Implementation Exam
Retired
Exam Number: 642-541
Associated Certifications: CCSP
Duration: 90 minutes (60-70 questions)
Available Languages: English
Click Here to Register: Pearson VUE or Prometric
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description

The Cisco SAFE Implementation exam tests the knowledge and skills needed to use the principles and axioms presented in the SAFE SMR, Enterprise, IP Telephony and Wireless LAN White Papers, and to implement them on specific security devices. The primary focus is on the labs, which allows the students to build complete end-to-end security solutions using SAFE White Papers as the blueprint. The configuration and functionality of the following devices in a SAFE SMR network are described in detail: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Security Agent and the Cisco VPN Client. Basic implementation of a SAFE wireless LAN is also covered.

The SAFE White Papers can be downloaded for free.
Exam Topics

The following information provides general guidelines for the content likely to be included on this exam. However, other related topics may also appear on any specific delivery of the exam.
Security Fundamentals

* Need for network security
* Components of a complete security policy
* Primary network threats and attacks
* Common attacks and recommended mitigation techniques
* Security issues implicit in common management protocols

SAFE Blueprint Overview

* SAFE Blueprint Overview
* Design Fundamentals
* SAFE Axioms

The Cisco Security Portfolio

* Cisco Security Portfolio Overview
* Secure Connectivity-Cisco VPN 3000 Concentrator and Cisco VPN Optimized IOS
* Perimeter Security Firewalls-Cisco PIX Firewall and Cisco IOS Firewall
* Intrusion Protection-IDS
* Identity-CSACS
* Security Management-VMS
* Cisco AVVID

SAFE Small Network Design

* Small Network Design Overview
* Small Network Corporate Internet Module
* Small Network Campus Module
* Implementation-ISP Router
* Implementation-Cisco IOS Firewall
* Implementation-PIX Firewall
* Implementation-CSA

SAFE Midsize Network Design

* Midsize Network Design
* Midsize Network Corporate Internet Module Design Guidelines
* Midsize Network Campus Module
* Midsize Network Campus Module Design Guidelines
* Midsize Network WAN Module
* Implementation-ISP Router and Edge Router
* Implementation-Network IPS
* Implementation-VPN 3000 Concentrator
* Implementation-Layer 3 Switch

SAFE Remote Network Design

* Remote-User Network Overview
* Key Devices and Threat Mitigation
* Software Client Option
* Remote Site Firewall Option
* VPN 3002 Hardware Client Option
* Remote Site Router Option

SAFE Enterprise Network Design

Free PassGuide Practice Engine Demo Download Pass4sure offers free demos for each certification exam, including all IT vendors. You can check out the testing engine software, or pdf file question quality and usability of our practice exams before you decide to buy it. We are the only one site that offers demos for almost all IT certification exams.If you want to try p4s exam practice engine demo. http://demo.passguide.com/download

* Enterprise Network Design Overview
* Enterprise Campus
* Enterprise Network Edge

SAFE IP Telephony Design

* IP Telephony Concepts, Caveats and Axioms
* IP Telephony Product Portfolio
* IP Telephony Design Considerations
* IP Telephony Design for Small, Medium and Large Network

SAFE Wireless LAN Design

* Wireless LAN Security Concepts, Caveats and Axioms
* WLAN Security Extensions
* Cisco WLAN Product Portfolio
* WLAN Design Approach
* Standard WLAN Design
* WLAN Design for Small, Medium, Enterprise and Remote Network
* WLAN Implementation

“VPN and Security Cisco SAFE Implementation Exam (CSI)”, also known as 642-541 exam, is a Cisco certification.
Preparing for the 642-541 exam? Searching 642-541 Test Questions, 642-541 Practice Exam, 642-541 Dumps?

With the complete collection of questions and answers, Pass4sure has assembled to take you through 228 questions to your 642-541 Exam preparation. In the 642-541 exam resources, you will cover every field and category in VPN and Security helping to ready you for your successful Cisco Certification.

QUESTION 24:
James the security administrator is working on cryptographic authentication.
What is the earliest version of NTP that supports a cryptographic authentication
mechanism between peers?
A. The earliest version is 5
B. The earliest version is 4
C. The earliest version is 3
D. The earliest version is 2
E. The earliest version is 1
Answer: C
Explanation:
Version 3 and above of NTP supports a cryptographic authentication mechanism between
peers.
Reference: SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User
Networks
QUESTION 25:
You are the administrator at Certkiller Inc. and you need to mitigate threats to the
network. How do you mitigate the threats presented when using TFTP?
A. TFTP traffic should use peer authentication for each session.
B. IP packet inspection should be enabled on all routers.
C. TFTP traffic should be encrypted within an IPSec tunnel.
D. IP verify reverse path should be enabled on all routers.
Answer: C
Explanation:
Where possible, TFTP traffic should be encrypted within an IPSec tunnel in order
to mitigate the chance of its being intercepted.
Ref: Safe White papers; Page 72
SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks
QUESTION 26:
You are the administrator at Certkiller Inc. and you need to checkout syslogs for
information. How do you check syslog information to ensure that it has not been altered
in transit?
A. Packets use CRC to ensure data has not been altered in transit.
B. Syslog has no checking to ensure that the packet contents have not been altered in
transit.
C. Host IDS inspects the packet to ensure time stamps are concurrent.
D. The firewall inspects the packet to ensure time stamps are concurrent.
E. IPSec inspects the packet to ensure time stamps are concurrent.
Answer: B

Questions and Answers : 228 questions
Updated: 2008-2-6
Market Price: $69.99
Member Price: $59.99

Free download:pass4sure CCSP 642-541
Free download:testking CCSP 642-541
more info:www.ciscoexams.org

PassGuide provides high-quality test materials, for example, Cisco CCNA CCNP CCIE, Comptia A + NETWORK + Security +, Juniper jncia, jncis, Vmware VCP-410,certification practice exams and so on.We are committed to give full refund to candidates if they fail the exam with use of our products.And we are confident to make such a guarantee. Buy Best Practice Exam,high-quality ,100% Guarantee ,Pls contact me,Mail:Sales@passguide.com

P4S Free Downloads

Type	Exam Braindumps	New Questions & Answers	Latest Updated	Available link
	All Pass4sure's Exam Pack	858	1 days ago	Download Free Testing Engines

PassGuide Braindumps-Free Test king Help You Quick Pass Any it Certifications Exams

Click links: www.testking.la/braindumps/free/down/crack/all/testking