pass4sure ccsp 642-522 v2.73

Securing Networks with PIX and ASA Exam(SNPA) : 642-522 Exam

Exam Number/Code: 642-522
Exam Name: Securing Networks with PIX and ASA Exam(SNPA)
VUE Code: 642-522
Questions Type: Single choice,
Real Exam Question Numbers: 60-70 questions
Exam Language(s): English

642-522 SNPA
Securing Networks with PIX and ASA Exam
Last day to test 10/13/2007
Exam Number: 642-522
Associated Certifications: CCSP, Cisco Firewall Specialist
Duration: 90 minutes (60-70 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description

The Securing Networks with PIX and ASA exam is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taking the SNPA v4.0 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA security appliance products.
Exam Topics

The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Install and configure a security appliance for basic network connectivity

* Describe the Security Appliance hardware and software architecture
* Determine the Security Appliance hardware and software configuration and verify if it is correct
* Use setup or the CLI to configure basic network settings, including interface configurations
* Use appropriate show commands to verify initial configurations
* Configure NAT and global addressing to meet user requirements
* Configure DHCP client option
* Set default route
* Configure logging options
* Describe the firewall technology
* Explain the information contained in syslog files
* Configure static address translations
* Configure Network Address Translations: PAT
* Configure static port redirection
* Configure a net static
* Set embryonic and connection limits on the security appliance
* Verify network address translation operation

Configure a security appliance to restrict inbound traffic from untrusted sources

* Configure access-lists to filter traffic based on address, time, and protocols
* Configure object-groups to optimize access-list processing
* Configure Network Address Translations: Nat0
* Configure Network Address Translations: Policy NAT
* Configure java/activeX filtering
* Configure URL filtering
* Verify inbound traffic restrictions

Configure a security appliance to provide secure connectivity using site-to-site VPNs

* Explain certificates, certificate authorities and how they are used
* Explain the basic functionality of IPSec
* Configure IKE with preshared keys
* Configure IKE to use certificates
* Differentiate between the types of encryption
* Configure IPSec parameters
* Configure crypto-maps and ACLs

Configure a security appliance to provide secure connectivity using remote access VPNs

* Explain the functions of EasyVPN
* Configure IPSec using EasyVPN Server/Client
* Configure the Cisco Secure VPN client
* Explain the purpose of WebVPN
* Configure WebVPN services: Server/Client
* Verify VPN operations

Configure transparent firewall, virtual firewall, and high availability firewall features on a security appliance

* Explain differences between L2 and L3 operating modes
* Configure security appliance for transparent mode (L2)
* Explain purpose of virtual firewalls
* Configure security appliance to support virtual firewall
* Monitor and maintain virtual firewall
* Explain the types, purpose and operation of fail-over
* Install appropriate topology to support cable-based or LAN-based fail-over
* Explain the hardware, software and licensing requirements for high-availability
* Configure the SA for active/standby fail-over
* Configure the SA for stateful fail-over
* Configure the SA for active-active fail-over
* Verify fail-over operation
* Recover from a fail-over

Configure AAA services for access through a security appliance

* Configure ACS for security appliance support
* Configure security appliance to use AAA feature
* Configure authentication using both local and external databases
* Configure authorization using an external database
* Configure the ACS server for downloadable ACLs
* Configure accounting of connection start/stop
* Verify AAA operation

Configure routing and switching on a security appliance

* Enable DHCP server and relay functionality
* Configure VLANs on a security appliance interface
* Configure routing functionality of security appliance including OSPF, RIP
* Configure security appliance to pass multi-cast traffic
* Configure ICMP on the security appliance

Free PassGuide Practice Engine Demo Download Pass4sure offers free demos for each certification exam, including all IT vendors. You can check out the testing engine software, or pdf file question quality and usability of our practice exams before you decide to buy it. We are the only one site that offers demos for almost all IT certification exams.If you want to try p4s exam practice engine demo. http://demo.passguide.com/download

Configure a modular policy on a security appliance

* Configure a class-map
* Configure a policy-map
* Configure a service-policy
* Configure a ftp-map
* Configure a http-map
* Configure an inspection protocol
* Explain the function of protocol inspection
* Explain DNS guard feature
* Describe the AIP-SSM HW and SW
* Load IPS SW on the AIP-SSM
* Verify AIP-SSM
* Configure an IPS modular policy

Monitor and manage an installed security appliance

* Obtain and apply OS updates
* Backup and restore configurations and software
* Explain the security appliance file management system
* Perform password/lockout recovery procedures
* Obtain and upgrade license keys
* Configure passwords for various access methods: Telnet, serial, enable, SSH
* Configure various access methods: Telnet, SSH, PDM
* Configure command authorization and privilege levels
* Configure local username database
* Verify access control methods
* Enable ASDM functionality
* Verify a security appliance configuration via ASDM
* Verify the licensing available on a security appliance

“Securing Networks with PIX and ASA Exam(SNPA)”, also known as 642-522 exam, is a Cisco certification.
Preparing for the 642-522 exam? Searching 642-522 Test Questions, 642-522 Practice Exam, 642-522 Dumps?

With the complete collection of questions and answers, Pass4sure has assembled to take you through 63 Q&A we offer correct answers for simulate questions. to your 642-522 Exam preparation. In the 642-522 exam resources, you will cover every field and category in CCSP helping to ready you for your successful Cisco Certification.

QUESTION 27
The Certkiller network has a complex security policy configured on their firewalls.
Which PIX Firewall feature should you configure to minimize the number of ACLs
needed to implement your policy?
A. You should configure the ASA
B. You should configure the packet capture
C. You should configure the object grouping
D. You should configure the turbo ACLs
E. You should configure the IP helper
Answer: C
Explanation:
To simplify the task of creating and applying ACLs, you can group network objects such
as hosts and services such as FTP and HTTP. This reduces the number of ACLs required
to implement complex security policies.
Reference: Cisco Secure PIX Firewall Advanced 3.1, Chapter 8, Page 3.
QUESTION 28
A Certkiller PIX used for a VPN has been configured with the “nat 0″ command.
What is the purpose of the “nat 0″ command when used in conjunction with IPSec?
A. It instructs the security appliance not to use Network Address Translation for any
traffic deemed interesting traffic for IPSec.
B. It instructs the security appliance to use Network Address Translation for any traffic
deemed interesting traffic for IPSec.
C. It disables Network Address Translation control on the security appliance.
D. It enables Network Address Translation Traversal for any traffic deemed interesting
for IPSec.
E. None of the above
Answer: A
Explanation:
The nat 0 command bypasses NAT for the packets destined over the IPsec tunnel in a
PIX firewall. In the following example, access list 140 is used to specify the networks
that are not to be translated over the IPSec tunnel.
Example:
CKPIX# Nat (inside) 0 access-list 140
QUESTION 29
The Certkiller network is shown in the following diagram:
Refer to the exhibit above. The Certkiller administrator wants a user on the inside
network to access two sites on the Internet and present two different source IP
addresses. When the user is accessing Company A’s web servers, the source IP
address is translated to 192.168.0.9. When the user is accessing Company B’s web
servers, the source address is translated to 192.168.0.21.
Which of these can the security appliance administrator configure to accomplish
this application?
A. Inside NAT
B. Identity NAT
C. Static
D. Policy NAT
E. None of the above
Answer: D

Questons and Answers : 63 Q&A we offer correct answers for simulate questions.
Updated: 2007-11-18

Free download:pass4sure CCSP 642-522
Free download:testking CCSP 642-522
more info:www.ciscoexams.org

PassGuide provides high-quality test materials, for example, Cisco CCNA CCNP CCIE, Comptia A + NETWORK + Security +, Juniper jncia, jncis, Vmware VCP-410,certification practice exams and so on.We are committed to give full refund to candidates if they fail the exam with use of our products.And we are confident to make such a guarantee. Buy Best Practice Exam,high-quality ,100% Guarantee ,Pls contact me,Mail:Sales@passguide.com

P4S Free Downloads

Type	Exam Braindumps	New Questions & Answers	Latest Updated	Available link
	All Pass4sure's Exam Pack	858	1 days ago	Download Free Testing Engines