Certification Exam

3.What are three functions of Cisco Security Agent? (Choose three.)70-630  70-281

A:spyware and adware protection
B:device-based registry scans
C:malicious mobile code protection
D:local shunning
E:protection against buffer overflows
F:flexibility against new attacks through customizable signatures "on the fly"
Correct Answers:  A, C, E70-631  642-831

4.How is Cisco IOS Control Plane Policing achieved?

A: by adding a service-policy to virtual terminal lines and the console port
B: by applying a QoS policy in control plane configuration mode
C: by disabling unused services
D: by rate-limiting the exchange of routing protocol updates
E: by using AutoQoS to rate-limit the control plane traffic
Correct Answers:  B646-573  642-551

5.Self-Defending Network is the Cisco vision for security systems. What is the purpose of the Cisco Secure ACS server?

A: anomaly detection
B: identity management
C: secure connectivity
D: security management
Correct Answers:  B 1z0-101  050-692

6.Which three Cisco security products help to prevent application misuse and abuse? (Choose three.)

A:Cisco ASA 5500 Series Adaptive Security Appliances
B:NAC Appliance (Cisco Clean Access)
C:Cisco Traffic Anomaly Detector
D:Cisco Security Agent
E:Cisco Trust Agent
F:Cisco IOS FW and IPS
Correct Answers:  A, D, F HP0-764  000-636

7.Which statement is true about the built-in hardware-based encryption that is included with Cisco Integrated Services Routers?

A: It supports SRTP.
B: It supports 256-bit AES encryption.
C: It is two times faster than previous modules.
D: It stores VPN credentials.
Correct Answers:  B MB5-198  MB3-234

8.What are three advantages of Cisco Security MARS? (Choose three.)

A:performs automatic mitigation on Layer 2 devices
B:ensures that the user device is not vulnerable
C:fixes vulnerable and infected devices automatically
D:provides rapid profile-based provisioning capabilities
E:is network topology aware
F:contains scalable, distributed event analysis architecture
Correct Answers:  A, E, F MB4-161  MB3-412

9.Which two components should be included in a detailed design document? (Choose two.)

A:data source
B:existing network infrastructure
C:organizational chart
D:proof of concept
E:vendor availability
Correct Answers:  B, DMB6-291  MB3-006  MB2-421 

10.What are two functions of Cisco Security Agent? (Choose two.)MCSE

A:authentication
B:control of executable content
C:resource protection
D:spam filtering
E:user tracking
Correct Answers:  B, C70-630  70-281

pass4sure.com is your best choice for the 642-587 test. With our Cisco 642-587 Exam Guides, you will acquire 70 Q&As with explaintion completely of answers, and pass your Wireless LAN 642-587 Exam on your first attempt very easily. In addition, we constantly updating our 642-587 Exam Guides, and assure what you get is the latest Wireless LAN 642-587 braindump.

 1.Look at the picture.
 
Drag and drop question. Drag the items to the proper locations.
Correct Answers:
 
2.The IOS of a North American Cisco Aironet 1230 Series access point has become corrupt, necessitating the need for a TFTP firmware reload. Before you press and hold the MODE button, what must the file be named in order for the reload to occur?

A: c1200-k9w7-tar.boot
B: c1200-k9w7-tar.default
C: c1200-k9w7-tar.recover
D: c1200-k9w7-tar.123-7.JA1.tar
Correct Answers:  B646-589 640-861 642-355 642-426
3.Which of the following show commands would be used on the WDS to display the access points participating in fast secure roaming?

A: router# show wlccp cckm
B: router# show wlccp wds ap
C: router# show wlccp ap
D: router# show wlccp wds cckm
Correct Answers:  B642-453 642-533 642-542


4.When configuring QoS on a wireless controller, the per-user, real-time bandwidth contract is enforced for which of the following protocols?

A: IP
B: IPX
C: UDP
D: TCP
Correct Answers:  C642-651 646-011 646-102

5.Your client has deployed a Cisco Wireless Location Appliance within their warehouse environment. They have been experiencing problems with tracking objects using active RFID tags. The RFID beacon rate is 10 seconds. You have discovered an issue with the RFID timeout value. How should this value be changed?

A: Change the value on the Cisco WCS to 95 seconds.
B: Change the value on the Cisco WCS to 45 seconds.
C: Change the value on the wireless controller to 95 seconds.
D: Change the value on the wireless controller to 45 seconds.
Correct Answers:  C646-301 646-653642-071  642-321

6.A blinking green power LED indicates which of the following conditions on a Cisco Series 1000 lightweight access point?

A: startup
B: site survey mode
C: duplicate IP address
D: lost connection to the controller
Correct Answers:  B 642-591  642-691  642-871

7.Your client has deployed a Cisco Wireless Location Appliance within their warehouse environment. They have been experiencing problems with tracking objects using active RFID tags. The RFID tag data is not being collected. On which device would you verify that RFID status has been enabled?

A: Cisco WCS
B: access point
C: location manager
D: wireless controller
Correct Answers:  D 642-502  642-513  642-577

8.Client exclusion policies are used to mitigate which of the following attacks?

A: dictionary
B: MAC spoofing
C: man-in-the-middle
D: bit-flip and replay
Correct Answers:  A

9.A wireless controller can reside in how many mobility groups?

A: one
B: two
C: three
D: four
Correct Answers:  A642-831  642-352

10.Which of the following commands configures the Cisco 3845 Integrated Services Router to allow EAP-FAST authentication using WDS?

A: router (config)# wlccp authentication-server client eap Group_1
B: router (config)# wlccp authentication-server client eap-fast Group_1
C: router (config)# wlccp authentication-server infrastructure eap Group_1
D: router (config)# wlccp authentication-server infrastructure eap-fast Group_1
Correct Answers:  A642-551