Online Access Free 642-566 Practice Test

Which two methods can be used to perform IPSec peer authentication? (Choose two.)

• A.Digital Certificate
• B.One-time Password
• C.AAA
• D.Pre-shared key

In multi-tier applications and multi-tier firewall designs, which additional security control can be used to force an attacker to compromise the exposed server before the attacker attempts to penetrate the more protected domains?

• A.Make exposed servers in the DMZs dual homed.
• B.At each tier, implement a transparent proxy component within the firewall system.
• C.Implement host IPS on the exposed servers in the DMZs.
• D.Implement in-band network admission control at the first tier.

Which is the primary benefit that DTLS offers over TLS?

• A.Uses TCP instead of UDP to provide a reliable Transport mechanism
• B.Provides low latency for real-time applications
• C.Both the application and TLS can retransmit loss packets
• D.Improves security

Match each IKE component to its supported option.
1.IKE authentication
2.IKE encryption
3.IKE data authentication/integrity
4.IKE key negotiation
a.3DES or AES b.MD5 or SHA-1
c.pre-shared key or digital certificates d.DH Group 1,2,or5

• A.a-2, b-3, c-4, d-1
• B.a-2, b-3, c-1, d-4
• C.a-2, b-1, c-3, d-4
• D.a-1, b-2, c-3, d-4

Select the advantage of the Cisco ASA phone proxy feature:

• A.Allows businesses to configure granular policies for SCCP traffic, such as enforcing only registered phone calls to send traffic through the Cisco ASA security appliance and filtering to message IDs to allow or disallow specific messages
• B.Enables inspection of the RTSP protocols that are used to control communications between the client and server for streaming applications
• C.Allows telecommuters to connect their IP phones to the corporate IP telephony network securely over the Internet, without the need to connect over a VPN tunnel
• D.Enables advanced H.323 inspection services that support H.323 versions 1 along with Direct Call Signaling (DCS) and Gatekeeper-Routed Call Signaling (GKRCS) to provide flexible security integration in a variety of H.323-driven VoIP environments