Online Access Free 642-584 Practice Test

Which two components are 802.1X components? (Choose two.)

• A.Authentication server
• B.Client
• C.User?
• D.Accounting server
• E.Authenticator

Which statement about wireless intrusion prevention and rogue access point detection is true?

• A.A local mode access point provides power to wireless clients.
• B.A monitor mode access point performs background scanning in order to detect rogue access points.
• C.A monitor mode access point can distribute a white list of all known access points.
• D.Any access point that broadcasts the same RF group name or is part of the same mobility group is considered to be a rogue access point.
• E.A monitor mode access point is dedicated to scanning (listen-only).

Which two configurations are performed on Cisco IOS routers when using Cisco AutoSecure?
(Choose two.)

• A.Proxy ARP is disabled on all interfaces.
• B.Directed broadcasts are globally disabled.
• C.Source routing is globally disabled.
• D.ICMP is globally disabled.

Which two statements about Cisco IPS are true? (Choose two.)

• A.Cisco standalone IPS functionality can be virtualized.
• B.Cisco IPS global correlation is performed before Cisco IPS reputation filters.
• C.The Cisco IPS reputation filter is based on Cisco SIO and allows packets that are received from known malicious sources to be dropped before performing signature-based inspection.
• D.Cisco ASA-integrated IPS and standalone IPS offer the same features.

What is not a security concern that is specific to virtualized environments?

• A.Separation of compliant and non-compliant systems
• B.Lack of denial-of-service mitigation features
• C.Lack of VM visibility, accountability, and consistency
• D.Policy enforcement for VMs in motion