Cisco 642-584 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Threat Defense and Endpoint Security | 20% | - Advanced Malware Protection (AMP) - Endpoint security and posture assessment - Threat intelligence and monitoring |
| Network Security Solutions | 25% | - Intrusion Prevention System (IPS/IDS) - Firewall and next-generation firewall technologies - VPN and secure remote access |
| Cloud and Web Security | 15% | - Web security and content filtering - Cloud security integration - Secure hybrid architecture |
| Identity and Access Management | 20% | - Cisco Identity Services Engine (ISE) - Authentication, authorization, and accounting - Secure guest and wireless access |
| Security Architecture and Design Principles | 20% | - Defense-in-depth and layered security models - Enterprise security framework and risk assessment - Secure network topology and segmentation |
Cisco Security Solutions for Systems Engineers Sample Questions:
1. What are two advantages of IKEv2 and Cisco FlexVPN? (Choose two.)
A) IKEv2 uses IP protocol numbers 50 and 51.
B) The anticlogging cookie feature from IKEv1 has been improved.
C) IKEv2 is backwards compatible with IKEv1.
D) IKEv2 consolidates several VPN key management features and standards into one new standard.
E) Cisco FlexVPN supports interoperability, dynamic routing, direct spoke-to-spoke communication, remote access, source failover, per-peer QoS, and Full AAA management.
2. Which three are valid Cisco email security deployment options? (Choose three.)
A) Client-based email security
B) Hosted email security
C) Email security on BYOD devices
D) Managed appliances email security
E) Hybrid hosted email security
3. Which statement about MACsec is true?
A) 802.1X protection includes the CMD field, which is used to carry the security group tag value.
B) MACsec does not work between any MACsec-capable supplicant and authenticator.
C) Cisco AnyConnect Release 3.0 supports both roles: supplicant and authenticator?
D) MACsec provides Layer 2 hop-by-hop encryption, based on the 802.1AE standard.
4. Which two features are available with Cisco Secure ACS? (Choose two.)
A) MAC-based authorization
B) Guest access services, including user account delivery via print, email, or SMS
C) Accounting
D) Authorization based on identity and time
E) Authorization based on identity and access type
5. Which statement about the Cisco IOS Zone-Based Policy Firewall is true?
A) Only virtual interfaces can be added to a Cisco IOS Zone-Based Policy Firewall zone.
B) The Cisco IOS Zone-Based Policy Firewall applies firewall policies to traffic traversing zones.
C) Cisco IOS Zone-Based Policy Firewall policies are not unidirectional.
D) A Cisco IOS Zone-Based Policy Firewall zone is a set of VLANs that share a certain trust level.
Solutions:
| Question # 1 Answer: D,E | Question # 2 Answer: B,D,E | Question # 3 Answer: D | Question # 4 Answer: D,E | Question # 5 Answer: B |
1045 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
