Certification Exam

Exam CISCO 642-382 Demo

1.IFEE S. IHEDORO Foundation Express for Field Engineers 01:03:21Question of Question 59 of 59
 
1.This question is not scored, answer it or not will not effect your score. So we dont provide answers for it.

Drag and drop question. Drag the items to the proper locations.
Correct Answers:
 
2.An 802.11b telephone is receiving an audio signal from an access point, but cannot send audio. What is a possible cause?

A: The RSSI value on the telephone is greater than 35.
B: The access point is set to receive only at 802.11g data rates.
C: The security settings in the telephone do not match the settings in the access point.
D: The transmit power in the telephone is significantly lower than the transmit power in the access point.
Correct Answers:  D642-066

3.Refer to the exhibit. Switches A and C are running PVST+ STP, and Switch B is running 802.1Q STP. If the BPDU of the root in VLAN 1 is better than the BPDU of the root in VLAN 2, then there is no blocking port in the VLAN 2 topology. The BPDU of VLAN 2 never makes a "full circle" around the topology; it is replaced by the VLAN 1 BPDU on the B-C link, because B runs only one STP merged with VLAN 1 STP of PVST+. Thus, there is a forwarding loop. What does PVST+ do to correct this?
 
A: Switch A sends PVST+ BPDUs of VLAN 2 (to the SSTP address that is flooded by Switch B) towards Switch C. Switch C will put port C-B into a type-inconsistent state, which prevents the loop.
B: Switch B sends PVST+ BPDUs of VLAN 1 (to the SSTP address that is flooded by Switch A) towards Switch C. Switch C will put port C-B into a type-inconsistent state, which prevents the loop.
C: Switch C sends PVST+ BPDUs of VLAN 2 (to the SSTP address that is flooded by Switch B) towards Switch C. Switch A will put port C-B into a type-inconsistent state, which prevents the loop.
D: Switch A sends PVST+ BPDUs of VLAN 1 (to the SSTP address that is flooded by Switch B) towards Switch B. Switch A will put port C-B into a type-inconsistent state, which prevents the loop.
Correct Answers:  A

4.When will you need to enable the transparent tunneling feature on the Cisco VPN Client software?

A: to enable DMVPN
B: to enable dynamic routing over the IPSec tunnel using GRE
C: to enable V3PN
D: if the IPSec-protected traffic is going through a router that is performing NAT or PAT
E: if IPSec is using tunnel mode instead of transport mode
Correct Answers:  D642-143

5.Which two statements best describe the wireless core feature set using autonomous access points when implementing Wireless Domain Services? (Choose two.)

A:The primary Layer 2 WDS server address is configured via the infrastructure access point GUI.
B:The primary Layer 2 WDS server address is automatically discovered by the infrastructure access points through multicast.
C:The primary Layer 2 WDS is selected by the highest MAC address, followed by priority number.
D:The primary Layer 2 WDS is selected by the highest priority number, followed by MAC address.
E:The primary Layer 2 WDS is selected by the highest IP address, followed by MAC address.
Correct Answers:  B, D

6.You have just configured and enabled the Cisco IOS Firewall feature set from a remote location using the Cisco Router and Security Device Manager (SDM) Firewall wizard. You later want to double-check your configuration using Cisco SDM. However, you find that you can no longer connect to the Cisco IOS Firewall using Cisco SDM. What is the probable cause of this failure?

A: You must additionally specify the Cisco SDM management port number to gain access when the configuration has been applied.
B: You have not generated an RSA key pair between the host and device to allow secure access via Cisco SDM.
C: You have been locked out via access lists that have been applied to the router as a result of your Cisco SDM configuration.
D: You must specify the host IP address of Cisco SDM in the Configuration panel for allowed management connections.
Correct Answers:  C

7.Refer to the exhibit. A host on the Sales subnet (10.0.2.0/24) is not able to initiate a web connection to an outside website. According to the network diagram and the partial Cisco Adaptive Security Device Manager configuration shown in the exhibit, what is the cause of the problem?
 
A: The dynamic NAT global pool is not configured correctly.
B: The source networks for static NAT are not configured correctly.
C: The administrator needs to add an access list and static command for the return web traffic.
D: The source network for dynamic NAT is not configured correctly.
Correct Answers:  D

8.When implementing an integrated network-security management design, which critical issue should you account for?642-372

A: that management stations intercommunicate and can correlate events
B: that full syslogging of all events is enabled
C: that all network devices are time synchronized
D: that SNMP community read-write strings are configured to allow for total management access
Correct Answers:  C

9.What is the default authentication method when using HTTP to access the Cisco Router and Security Device Manager (SDM), assuming that you are not using the default configuration file (sdmconfig-xxxx.cfg) that comes with Cisco SDM?

A: none
B: local database
C: aaa
D: enable password
E: line console password
F: line vty password
Correct Answers:  D

10.Which two items have the most influence on an outdoor wireless antenna bridge-path installation? (Choose two.)

A:snow
B:Earth's curvature
C:lightning
D:Fresnel zone
E:rain
Correct Answers:  B, D

The Microsoft Certified Systems Engineer (MCSE) credential is the premier certification for professionals who analyze the business requirements and design and implement the infrastructure for business solutions based on the Microsoft Windows 2000 platform and Microsoft Windows Server System. Implementation responsibilities include installing, configuring, and troubleshooting network systems. Learn more about MCSE job functions by reading the MCSE Job Task Analysis (Microsoft Word 925 KB).

Read about the significant changes Microsoft has made to the MCSE certification to retain its validity and value, and to meet the technical needs of competitive organizations. Or, visit the Microsoft PressPass site to learn about how Microsoft has raised the bar on the certification.

The MCSE certification is appropriate for:

•	Systems engineers
•	Technical support engineers
•	Systems analysts
•	Network analysts
•	Technical consultants

The MCSE credential is one of the most widely recognized technical certifications in the industry. By earning the premier MCSE credential, individuals are demonstrating that they have the skills necessary to lead organizations in the successful design, implementation, and administration of the most advanced Windows operating system and Microsoft Windows Server System.

The Typical Computing Environment of an MCSE

The Windows 2000 track of the MCSE credential is designed for information technology (IT) professionals working in the typically complex computing environment of medium to large organizations.

An MCSE candidate should have at least one year of experience implementing and administering a network operating system in environments with the following characteristics:

•	200 to 26,000 supported users
•	Five to 150 physical locations
•	Typical network services and applications including file and print, database, messaging, proxy server or firewall, dial-in server, desktop management, and Web hosting
•	Connectivity needs including connecting individual offices and users at remote locations to the corporate network and connecting corporate networks to the Internet

In addition, an MCSE candidate should have at least one year of experience in the following areas:

•	Implementing and administering a desktop operating system
•	Designing a network infrastructure

For more information on additional requirements to earn the MCSE credential, see the MCSE Certification Requirements.

3.What are three functions of Cisco Security Agent? (Choose three.)70-630  70-281

A:spyware and adware protection
B:device-based registry scans
C:malicious mobile code protection
D:local shunning
E:protection against buffer overflows
F:flexibility against new attacks through customizable signatures "on the fly"
Correct Answers:  A, C, E70-631  642-831

4.How is Cisco IOS Control Plane Policing achieved?

A: by adding a service-policy to virtual terminal lines and the console port
B: by applying a QoS policy in control plane configuration mode
C: by disabling unused services
D: by rate-limiting the exchange of routing protocol updates
E: by using AutoQoS to rate-limit the control plane traffic
Correct Answers:  B646-573  642-551

5.Self-Defending Network is the Cisco vision for security systems. What is the purpose of the Cisco Secure ACS server?

A: anomaly detection
B: identity management
C: secure connectivity
D: security management
Correct Answers:  B 1z0-101  050-692

6.Which three Cisco security products help to prevent application misuse and abuse? (Choose three.)

A:Cisco ASA 5500 Series Adaptive Security Appliances
B:NAC Appliance (Cisco Clean Access)
C:Cisco Traffic Anomaly Detector
D:Cisco Security Agent
E:Cisco Trust Agent
F:Cisco IOS FW and IPS
Correct Answers:  A, D, F HP0-764  000-636

7.Which statement is true about the built-in hardware-based encryption that is included with Cisco Integrated Services Routers?

A: It supports SRTP.
B: It supports 256-bit AES encryption.
C: It is two times faster than previous modules.
D: It stores VPN credentials.
Correct Answers:  B MB5-198  MB3-234

8.What are three advantages of Cisco Security MARS? (Choose three.)

A:performs automatic mitigation on Layer 2 devices
B:ensures that the user device is not vulnerable
C:fixes vulnerable and infected devices automatically
D:provides rapid profile-based provisioning capabilities
E:is network topology aware
F:contains scalable, distributed event analysis architecture
Correct Answers:  A, E, F MB4-161  MB3-412

9.Which two components should be included in a detailed design document? (Choose two.)

A:data source
B:existing network infrastructure
C:organizational chart
D:proof of concept
E:vendor availability
Correct Answers:  B, DMB6-291  MB3-006  MB2-421 

10.What are two functions of Cisco Security Agent? (Choose two.)MCSE

A:authentication
B:control of executable content
C:resource protection
D:spam filtering
E:user tracking
Correct Answers:  B, C70-630  70-281

7.You are the administrator of a Windows 2000 Advanced Server cluster. The cluster consists of two nodes that are designated NodeA and NodeB. You configure several groups and resources, but you cannot bring any of the Network Name resources online. Windows 2000 is installed in the default location on both NodeA and NodeB, and the Quorum resource is located on logical drive Q in the default path. You want to be able to review as much detail of the cluster activity as possible so that you can identify the problem. What should you do?70-223 70-547

A: Run nbtstat RR on both nodes.
B: Review the Q:MSCSquolog.log file for entries that are associated with name resolution.
C: Review the file C:winntclustercluster.log on NodeA and NodeB for entries that are associated with name resolution.
D: Review the files in C:winntsystem32logfiles on NodeA and NodeB for entries that are associated with name resolution.
Correct Answers:  C70-224 70-235 70-282
8.You are the administrator of two Windows 2000 Advanced Server computers named Server1 and Server2. You need to install the Cluster service on the servers. You install a SCSI array controller in each server.

Next, you connect the array controllers to an external storage subsystem by using SCSI cables. You need to install at least one SCSI terminator in the external storage subsystem at one or more of the locations shown in the exhibit. (Click the Exhibit button.) 70-305 70-350 70-500


Where should you install a SCSI terminator or SCSI terminators? (Choose all that apply.)
 
A:Install a SCSI terminator at location 1.
B:Install a SCSI terminator at location 2.
C:Install a SCSI terminator at location 3.
D:Install a SCSI terminator at location 4.
E:Install a SCSI terminator at location 5.
Correct Answers:  A, E70-552 74-132 74-139

9.You are the administrator of a Windows 2000 Advanced Server cluster. The cluster nodes are two member servers that are designated NodeA and NodeB.

The sales department wants to run a new application named Sales Tracker on the cluster. The Sales Tracker application is cluster unaware. You want to run the application on a virtual server named Sales2.

You take the following actions:

     Install Sales Tracker on NodeA and NodeB.
     Create a new resource group named Sales App.
     Create a new Network Name resource named Sales2. Specify SALES2 as the network name property.
Create a new Generic Application resource named Sales Tracker. Specify the complete path and the executable filename for the Sales Tracker application. Configure the Sales Tracker resource to be dependent on the Sales2 Network Name resource. 70-123  70-217  70-219 
The resources in the Sales App resource group are shown in the following screen.
 
9.When you attempt to bring the Sales Tracker application resource online, the Sales2 resource fails, and the application does not come online.

What should you do?70-228  70-291  70-310 


A: Configure NodeA and NodeB as possible owners of the Sales2 resource.
B: Rename the Sales2 resource to be different from the SALES2 network name itself.
C: Configure the Sales2 resource to be dependent on a new IP Address resource in the Sales App group.
D: Configure the Sales2 resource to be dependent on a new Physical Disk resource that contains the Sales Tracker executable file.
Correct Answers:  C

10.You are the administrator of a file cluster that has been stable for several months. The cluster configuration is shown in the exhibit. (Click the Exhibit button.) 70-330  70-340  70-443

You need to perform hardware maintenance on Ncf02b. From your computer, you use the Cluster Administrator to move all of the groups to Ncf02a. Next, you turn off Ncf02b. During the move, you mistakenly take the default Cluster group offline, and you immediately lose connection to the cluster. Using the Cluster Administrator, you attempt to reconnect to the cluster by the name of cf-blv02. The reconnection is unsuccessful, and you receive the following message.
 
10.You click Yes and then receive the following error message.
 
10.You want to use the Cluster Administrator to establish a connection, allowing you to bring the Cluster group resources back online. What should you do?70-621  70-622  70-630
 
A: Use the Cluster Administrator to connect to the cluster by using the name Ncf02a.
B: Restart Ncf02b, and connect to the Cluster Administrator by using the name cf-blv02.
C: Use the Cluster Administrator to connect to the cluster by using IP address 192.168.5.100.
D: Stop and then start the Cluster service on Ncf02a. Connect to the Cluster Administrator by using the name cf-blv02.
Correct Answers:  A

pass4sure.com is your best choice for the 642-587 test. With our Cisco 642-587 Exam Guides, you will acquire 70 Q&As with explaintion completely of answers, and pass your Wireless LAN 642-587 Exam on your first attempt very easily. In addition, we constantly updating our 642-587 Exam Guides, and assure what you get is the latest Wireless LAN 642-587 braindump.

 1.Look at the picture.
 
Drag and drop question. Drag the items to the proper locations.
Correct Answers:
 
2.The IOS of a North American Cisco Aironet 1230 Series access point has become corrupt, necessitating the need for a TFTP firmware reload. Before you press and hold the MODE button, what must the file be named in order for the reload to occur?

A: c1200-k9w7-tar.boot
B: c1200-k9w7-tar.default
C: c1200-k9w7-tar.recover
D: c1200-k9w7-tar.123-7.JA1.tar
Correct Answers:  B646-589 640-861 642-355 642-426
3.Which of the following show commands would be used on the WDS to display the access points participating in fast secure roaming?

A: router# show wlccp cckm
B: router# show wlccp wds ap
C: router# show wlccp ap
D: router# show wlccp wds cckm
Correct Answers:  B642-453 642-533 642-542


4.When configuring QoS on a wireless controller, the per-user, real-time bandwidth contract is enforced for which of the following protocols?

A: IP
B: IPX
C: UDP
D: TCP
Correct Answers:  C642-651 646-011 646-102

5.Your client has deployed a Cisco Wireless Location Appliance within their warehouse environment. They have been experiencing problems with tracking objects using active RFID tags. The RFID beacon rate is 10 seconds. You have discovered an issue with the RFID timeout value. How should this value be changed?

A: Change the value on the Cisco WCS to 95 seconds.
B: Change the value on the Cisco WCS to 45 seconds.
C: Change the value on the wireless controller to 95 seconds.
D: Change the value on the wireless controller to 45 seconds.
Correct Answers:  C646-301 646-653642-071  642-321

6.A blinking green power LED indicates which of the following conditions on a Cisco Series 1000 lightweight access point?

A: startup
B: site survey mode
C: duplicate IP address
D: lost connection to the controller
Correct Answers:  B 642-591  642-691  642-871

7.Your client has deployed a Cisco Wireless Location Appliance within their warehouse environment. They have been experiencing problems with tracking objects using active RFID tags. The RFID tag data is not being collected. On which device would you verify that RFID status has been enabled?

A: Cisco WCS
B: access point
C: location manager
D: wireless controller
Correct Answers:  D 642-502  642-513  642-577

8.Client exclusion policies are used to mitigate which of the following attacks?

A: dictionary
B: MAC spoofing
C: man-in-the-middle
D: bit-flip and replay
Correct Answers:  A

9.A wireless controller can reside in how many mobility groups?

A: one
B: two
C: three
D: four
Correct Answers:  A642-831  642-352

10.Which of the following commands configures the Cisco 3845 Integrated Services Router to allow EAP-FAST authentication using WDS?

A: router (config)# wlccp authentication-server client eap Group_1
B: router (config)# wlccp authentication-server client eap-fast Group_1
C: router (config)# wlccp authentication-server infrastructure eap Group_1
D: router (config)# wlccp authentication-server infrastructure eap-fast Group_1
Correct Answers:  A642-551