pass4sure ccsp 642-503 v2.73

it’s p4s latest version for ccsp Securing Networks with Cisco Routers and Switches : 642-503 Exam

Exam Number/Code: 642-503
Exam Name: Securing Networks with Cisco Routers and Switches
642-503 SNRS
Securing Networks with Cisco Routers and Switches Exam
Exam Number: 642-503
Associated Certifications: CCSP
Duration: 75 minutes (53 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description

The Securing Networks With Cisco Routers and Switches exam (SNRS 642-503) is one of the exams associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the SNRS v2.0 course. This exam includes simulations and tests a candidate’s knowledge and ability to secure networks using Cisco routers and switches.
Exam Topics

The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Implement Cisco Layer 2 security

* Utilize Cisco IOS commands to mitigate Layer 2 attacks
* Implement Cisco Identity-Based Networking Services on Cisco Catalyst Switches
* Implement Identity Management using ACS as the Authentication Server

Configure Cisco IOS Firewalls to mitigate network threats using the CLI

* Identify and describe the advanced capabilities of the IOS firewall feature set
* Configure IOS Firewall to dynamically mitigate identified threats to the network
* Verify and troubleshoot IOS Firewall configuration and operation.
* Configure authentication proxy to apply security policies on a per-user basis
* Verify and troubleshoot authentication proxy configuration and operation
* Configure IOS zone-based Firewalls
* Troubleshoot Zone-based Firewalls
* Configure APPFW application Firewalls
* Configure Granular Protocol Inspection

Configure Cisco IOS IPS to identify and mitigate threats to network resources using the CLI

* Identify and describe the advanced capabilities of the IOS-IPS feature
* Configure the IPS features to identify threats and dynamically block them from entering the network
* Verify and troubleshoot IPS operation

Configure Cisco VPNs to provide secure connectivity for site-to-site and remote access communications using the CLI

* Describe IPSec features and functionality
* Configure secure connectivity for site-to-site IPSec VPN using pre-shared keys
* Describe GRE features and functionality
* Configure secure connectivity for site-to-site VPN using certificate authorities
* Describe DMVPN features and functionality
* Configure secure connectivity for site-to-site VPN using DMVPN
* Verify and troubleshoot secure site-to-site connectivity operations
* Implement Clientless IOS SSL VPN
* Verify Clientless IOS SSL VPNs
* Configure Easy VPN server with pre-shared keys

Configure Authentication, Authorization, and Accounting to provide basic secure access control for networks

* Configure administrative access to the CSACS server
* Configure CSACS system settings
* Configure AAA clients on the CSACS
* Configure users, groups and access rights
* Configure shared profile components in CSACS
* Configure network access profiles in CSACS
* Configure NADS to enable AAA to use a Radius Server
* Verify and troubleshoot AAA operation

Implement Network Foundation Protection using the CLI

* Describe NFP features and functionality
* Secure the management plane using Cisco IOS security features
* Secure the data plane using Cisco IOS security features
* Secure the control plane using Cisco IOS security features

“Securing Networks with Cisco Routers and Switches”, also known as 642-503 exam, is a Cisco certification.
Preparing for the 642-503 exam? Searching 642-503 Test Questions, 642-503 Practice Exam, 642-503 Dumps?

Free PassGuide Practice Engine Demo Download Pass4sure offers free demos for each certification exam, including all IT vendors. You can check out the testing engine software, or pdf file question quality and usability of our practice exams before you decide to buy it. We are the only one site that offers demos for almost all IT certification exams.If you want to try p4s exam practice engine demo. http://demo.passguide.com/download

With the complete collection of questions and answers, Pass4sure has assembled to take you through 53 Q&As to your 642-503 Exam preparation. In the 642-503 exam resources, you will cover every field and category in CCSP helping to ready you for your successful Cisco Certification.

1. Which two statements are true regarding classic Cisco IOS Firewall configurations? (Choose two.)
A. You can apply the IP inspection rule in the inbound direction on the trusted interface.
B. You can apply the IP inspection rule in the outbound direction on the untrusted interface.
C. For temporary openings to be created dynamically by Cisco IOS Firewall, the access list for the returning
traffic must be a standard ACL.
D. For temporary openings to be created dynamically by Cisco IOS Firewall, you must apply the IP inspection
rule to the trusted interface.
E. For temporary openings to be created dynamically by Cisco IOS Firewall, the inbound access list on the trusted
interface must be an extended ACL.
Answer: AB

4. Which three configurations are required to enable the Cisco IOS Firewall to inspect a user-defined application
which uses TCP ports 8000 and 8001? (Choose three.)
A. access-list 101 permit tcp any any eq 8000
access-list 101 permit tcp any any eq 8001
class-map user-10
match access-group 101
B. policy-map user-10
class user-10
inspect
C. ip port-map user-10 port tcp 8000 8001 description “TEST PROTOCOL”
D. ip inspect name test appfw user-10
E. ip inspect name test user-10
F. int {type|number}
ip inpsect name test in

Answer: CEF

5. What are two benefits of using an IPsec GRE tunnel? (Choose two.)
A. It allows dynamic routing protocol to run over the tunnel interface.
B. It has less overhead than running IPsec in tunnel mode.
C. It allows IP multicast traffic.
D. It requires a more restrictive crypto ACL to provide finer security control.
E. It supports the use of dynamic crypto maps to reduce configuration complexity.
Answer: AC

6. Referring to a DMVPN hub router tunnel interface configuration, what can happen if the ip nhrp map multicast
dynamic command is missing on the tunnel interface?
A. The NHRP request and response between the spoke router and hub router will fail.
B. The GRE tunnel between the hub router and the spoke router will be down.
C. The IPsec peering between the hub router and the spoke router will fail.
D. The dynamic routing protocol between the hub router and the spoke router will fail.
E. The NHRP mappings at the spoke routers will be incorrect.
F. The NHRP mappings at the hub router will be incorrect.
Answer: D

8. Which three of these statements are correct regarding DMVPN configuration? (Choose three.)
A. If running EIGRP over DMVPN, the hub router tunnel interface must have “next hop self” enabled: ip
next-hop-self eigrp AS-Number
B. If running EIGRP over DMVPN, the hub router tunnel interface must have split horizon disabled: no ip
split-horizon eigrp AS-Number
C. The spoke routers must be configured as the NHRP servers: ip nhrp nhs spoke-tunnel-ip-address
D. At the spoke routers, static NHRP mapping to the hub router is required: ip nhrp map hub-tunnel-ip-address
hub-physical-ip-address
E. The GRE tunnel mode must be set to point-to-point mode: tunnel mode gre point-to-point
F. The GRE tunnel must be associated with an IPsec profile: tunnel protection ipsec profile profile-name
Answer: BDF

9. When you configure Cisco IOS WebVPN, you can use the port-forward command to enable which function?
A. web-enabled applications
B. Cisco Secure Desktop
C. full-tunnel client
D. thin client
E. CIFS
F. OWA
Answer: D

Questons and Answers : 53 Q&As
Updated: 2007-12-10

Free download:pass4sure ccsp 642-503
Free download:testking ccsp 642-503
more info:www.ciscoexams.org

PassGuide provides high-quality test materials, for example, Cisco CCNA CCNP CCIE, Comptia A + NETWORK + Security +, Juniper jncia, jncis, Vmware VCP-410,certification practice exams and so on.We are committed to give full refund to candidates if they fail the exam with use of our products.And we are confident to make such a guarantee. Buy Best Practice Exam,high-quality ,100% Guarantee ,Pls contact me,Mail:Sales@passguide.com

P4S Free Downloads

Type	Exam Braindumps	New Questions & Answers	Latest Updated	Available link
	All Pass4sure's Exam Pack	858	1 days ago	Download Free Testing Engines