Exambible is your source for the 642-381 exam. With our 642-381 Exam Resources, you can be rest assured that you will be fully prepared to take on your 642-381 Exam. Our Exams are written and formatted by Top senior IT Professionals working in today s prospering companies and data centers. 642-381 is a challenging exam, with our 642-381 study guide, you can feel safe with our question and answer explanations that will help you in obtaining your successful completion of your 642-381 exam.

Exambible also provide free 642-381 Demo, examinees can download and use before buying 642-381 Q&As, then decide if they need to purchase.

Other Cisco Exams

1 When using Cisco Router and Security Device Manager (SDM) to
configure IPS, what must you do first before you can select Configure
> Signature to edit any signatures?
A. Select Configure > Global Settings to enable IPS globally on the router.
B. Select Configure > Global Settings to disable the Failed Closed option.
C. Select Configure > Global Settings to point Cisco SDM to the ips.tar file in the router Flash memory.
D. Select Configure > Rules to create the inbound and/or outbound filter to determine which traffic will be scanned by IPS.
E. Select Configure > Rules to enable an interface for inbound and/or outbound IPS.
Answer: E

2 Which two features are only supported when using the Cisco Router
and Security Device Manager (SDM) Advanced Firewall wizard and not
supported when using the Cisco SDM Basic Firewall wizard? (Choose two.)
A. deep-packet inspections
B. IP unicast Reverse Path Forwarding on the outside (untrusted) interface
C. DMZ services
D. custom inspection rules
E. proxy authentication
Answer: CD

3 When will you need to enable the transparent tunneling feature on the Cisco VPN Client software?
A. to enable DMVPN
B. to enable dynamic routing over the IPSec tunnel using GRE
C. to enable V3PN
D. if the IPSec-protected traffic is going through a router that is performing NAT or PAT
E. if IPSec is using tunnel mode instead of transport mode
Answer: D

4 When using the Site to Site VPN wizard in Cisco Router and Security
Device Manager, why would you need to create an access list using the
Add a Rule screen?
A. to open holes on the firewall to permit ISAKMP, ESP, and AH traffic
B. to define the traffic that will be protected by IPSec
C. to specify a range of IP addresses on the inside interface
D. to specify the remote-peer IP address range
E. to enable split tunneling
Answer: B

5 When using Cisco Router and Security Device Manager to configure AAA
login authentication policies, which four methods are available?
(Choose four.)
A. group RADIUS: use a list of RADIUS hosts
B. group TACACS+: use a list of TACACS+ hosts
C. enable: use enable password
D. otp: use one-time password
E. local: use local database
F. default: use line password
Answer: ABCE

6 Which four features can be configured using Cisco Router and Security Device Manager version 2.1.1? (Choose four.)
A. IP multicast routing (PIM)
B. IPS
C. Easy VPN Remote and Easy VPN Server
D. static routes and IGP routing protocols (OSPF, RIP, EIGRP)
E. SSL VPN (WebVPN)
F. AAA
Answer: BCDF

7 Refer to the exhibit. According to the Cisco VPN Client software
outputs shown, which two statements are correct about the connection
entry named isr? (Choose two.)
A. HMAC-SHA1 is used to authenticate the remote users.
B. Preshared key is used to authenticate the remote peer.
C. AES is used to provide data confidentiality.
D. The Cisco VPN Client software is assigned an internal IP address of 192.168.1.1.
E. The PC that is running the Cisco VPN Client software will not have
access to the local LAN once the PC is connected into the VPN.
Answer: BE

8 Which type of security will allow businesses to focus on achieving business goals?
A. point-product security
B. endpoint security
C. network infrastructure security
D. secure access and threat defense
Answer: C

9 After performing a security audit in Cisco Router and Security
Device Manager (SDM), you receive this as one of the results: Enable
Unicast RPF on all outside interfaces – Not Passed
Which Cisco SDM configuration wizard can be use to resolve this?
A. Easy VPN Server
B. Basic Firewall
C. Edit Interface/Connection
D. Site to Site VPN
E. Routing
F. NAT
Answer: B