Security Solutions for Systems Engineers Exam (642-566) Free Practice Test

Question 1

Which functions can be provided by Cisco SSL VPN solution by use of the Cisco Secure Desktop? (Select All that apply.)

A. Secure Vault

B. Advanced Endpoint Assessment

C. Pre-login assessment

D. Cache Cleaner

Correct Answer: A,B,C,D

Question 2

______________ are needed for a device to join a certificate-authenticated network?

A. The certificates of the certificate authority and the device

B. The certificates of the certificate authority, the device and the peer

C. The certificates of the certificate authority and the peer

D. The certificates of the device and its peer

Correct Answer: A

Question 3

Which two statements are true about symmetric key encryption? (Choose two.)

A. It uses secret-key cryptography

B. RSA is an example of symmetric key encryption

C. Encryption and decryption use different keys

D. The key exchange can take place via anonsecure channel

E. It is typically used to encrypt the content of a message

Correct Answer: A,E

Question 4

Cisco Security Agent is the first endpoint security solution that combines zero-update attack protection, data loss prevention and signature-based antivirus in a single agent. This unique blend of capabilities defends servers and desktops against sophisticated day-zero attacks and enforces acceptable-use and compliance policies within a simple management infrastructure. What are three functions of CSA in helping to secure customer environments?

A. Application Control

B. Control of executable content

C. System hardening

D. Identification of vulnerabilities

Correct Answer: A,B,C

Question 5

Which statement best describes the Cisco ASA encrypted voice inspection capability?

A. TLS proxy applies to the encryption layer and is configured by using a Layer 3/4 inspection policy on the Cisco ASA.

B. The Cisco ASA decrypts, inspects, then re-encrypts voice-signaling traffic; all of the existing VoIP inspection functions for SCCP and SIP protocols are preserved.

C. The Cisco ASA does not support PAT and NAT for SCCP inspection.

D. The Cisco ASA serves as a proxy for both client and server, with the Cisco IP Phone and the Session Border Controller.

Correct Answer: B

Question 6

Which one of the following platforms could support the highest number of SSL sessions?

A. Cisco 7200 NPE-GE+VAM2+

B. Cisco ASR 1000-5G

C. Cisco 6500/7600 + VPN SPA

D. Cisco ASA 5580

Correct Answer: D

Question 7

Your company, wants to implement the PCI Data Security Standard to protect sensitive cardholder information. They are planning to use RSA to ensure data privacy, integrity and origin authentication. Which two of these statements describe features of the RSA keys? (Choose two.)

A. The public key only encrypts

B. The private key only decrypts

C. The public key only decrypts

D. The private key both encrypts and decrypts

E. The public key both encrypts and decrypts

F. The private key only encrypts

Correct Answer: D,E

Question 8

You are the network consultant from Company.com. Please point out three technologies address ISO 17799 requirements for unauthorized access prevention.

A. 802.1X

B. VPN

C. Network Admission Control

D. Cisco Secure Access Control Server

Correct Answer: A,C,D

Welcome to TestSimulate

Cisco Security Solutions for Systems Engineers (642-566) Free Practice Test