Testking Cisco CCSP 642-503 Exam
Testking ccsp Interactive Testing Engine Included!
202 Questions
Updated : 07/11/2008
Price : $87.99 $79.99
Cisco Easy VPN Server pushes parameters such as the client internal IP address, DHCP
server IP address, and WINS server IP address to the Cisco Easy VPN Remote client during
which of these phases?
A. IKE mode configuration
B. IKE XAUTH
C. IKE Phase 1 first message exchange
D. IKE quick mode
E. IKE Phase 2 last message exchange
Answer: A
The PHDF stored in the router flash memory is required for which of these applications to
function?
A. PAM
B. Zone-Based Firewall
C. CPPr
D. CoPP
E. NBAR
F. FPM
Answer: F
Which three of these statements are correct regarding DMVPN configuration? (Choose
three.)
A. The GRE tunnel mode must be set to point-to-point mode: tunnel mode gre
point-to-point
B. The GRE tunnel must be associated with an IPsec profile: tunnel protection ipsec
profile profile-name
C. At the spoke routers, static NHRP mapping to the hub router is required: ip nhrp map
hub-tunnel-ip-address hub-physical-ip-address
D. The spoke routers must be configured as the NHRP servers: ip nhrp nhs
spoke-tunnel-ip-address
E. If running EIGRP over DMVPN, the hub router tunnel interface must have “next hop
self” enabled: ip next-hop-self eigrp AS-Number
F. If running EIGRP over DMVPN, the hub router tunnel interface must have split
horizon disabled: no ip split-horizon eigrp AS-Number
Answer: B,C,F
Which of these statements is correct regarding user setup on ACS 4.0?
A. In the case of conflicting settings, the settings at the group level override the settings
configured at the user level.
B. The ACS PAP password cannot be used as the CHAP password also. C.
By default, users are assigned to the default group.
D. The username can contain characters such as “#” and “?”. E.
A user can belong to more than one group.
Answer: C
QUESTION 10:
What are two benefits of using an IPsec GRE tunnel? (Choose two.)
A. It has less overhead than running IPsec in tunnel mode.
7
B. It supports the use of dynamic crypto maps to reduce configuration complexity. C.
It requires a more restrictive crypto ACL to provide finer security control.
D. It allows dynamic routing protocol to run over the tunnel interface.
E. It allows IP multicast traffic.
Answer: D,E
Free Down:Testking Cisco CCSP 642-503
password:www.testking.name
Recent Comments