Testking Cisco CCSP 642-523 Exam
Exam 642-523: Securing Networks with PIX and ASA (SNPA)
Related Certifications: CCSP and Cisco Firewall Specialist
Number of Questions: 63
Duration: 90 minutes
Exam Topics Include:
1. Install and configure a Security Appliance for basic network connectivity
2. Configure a Security Appliance to restrict inbound traffic from non trusted sources
3. Configure a Security Appliance to provide secure connectivity using site-to-site VPNs
4. Configure an ASA to provide secure connectivity using remote access VPNs
5. Configure transparent firewall, virtual firewall, and high availability firewall features on a Security Appliance
6. Configure AAA services for the ASA
7. Configure routing and switching on an ASA
8. Configure Security Appliance advanced application layer and modular policy features
9. Monitor and manage an installed Adaptive Security Appliance
The Securing Networks with PIX and ASA exam (SNPA 642-523) is one of the core exams associated with the Cisco Certified Security Professional (CCSP) certification. In all, you will need to pass five separate exams to become CCSP certified. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA Security Appliance products.
Let TestKing help you to become CCSP or Cisco firewall specialist certified. The TestKing 642-523 exam products are designed to maximize your learning productivity and focus only on the important aspects that will help you to pass your exam, the first time. We will provide you with exam questions and verified answers, with detailed explanations, that reflect the actual exam. These questions and answers provide you with the experience of taking the actual test. Our exam guides are not just questions and answers. Our questions have detailed explanations provided by our certified industry experts, ensuring that you fully understand the questions and the concept behind the questions.
Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. syslog community string
B. message.text
C. triggering packet copy
D. logging device ip
E. default ASA gateway
F. logging level
Answer: B,D,F
An Administrator wants to protect a DMZ web server from SYN Flood attacks. Which
three of these commands, used individually would allow the administrator to place limits
on the number of embryonic connections? (choose three.)
A. http redirect
B. nat
C. http-proxy
D. static
E. set connection
F. access-list
Answer: B,D,E
QUESTION 4
Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. triggering packet copy
B. message.text
C. syslog community string
D. logging level
E. default ASA gateway
F. logging device ip
Answer: B,D,F
Which these commands displays the status of the CSC SSM on the Cisco ASA?
A. show module 1 CSC details
B. show hw 1 details
C. show module 1 details
D. show interface GigabitEthernet 1/0
Answer: C
Which command both verifies that NAT is working properly and displays active NAT
translations?
A. show nat translation
B. show running-confugration nat
C. show ip nat all
D. show xlate
Answer: D
QUESTION 9
The Cisco VPN Client supports which three of these tunneling protocols and methods?
(Choose three.)
A. AH
B. LZS
C. IPSec over TCP
D. IPSec over UDP
E. SCEP
F. ESP
Answer: C,D,F
What does the nat 0 command do?
A. The nat 0 command, followed by an access list, specifies the addresses that are not to
be translated
B. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that
are to be translated using network address translations
C. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that
are to be translated when used for IPSec
D. The nat 0 command, followed by an access list, specifies the addresses that are to be
used in translations only once
Answer: A
Testking cisco ccsp Interactive Testing Engine Included!
181 Questions
Updated : 03/06/2008
Price : $87.99 $79.99
Free Down:Testking Cisco CCSP 642-523
password:www.certbible.org
Recent Comments