• 首頁
• 考題分類
• 如何購買

Foundation Express for Systems Engineers(FOUNDSE)

Others 642-371考試題庫由KillTest認證題庫網資深IT認證講師和Others產品專家結合PROMETRIC或VUE的真實642-371考試環境最新原題傾心打造。

題庫覆蓋了當前最新的真實考題，並且全部附有正確答案，我們承諾題庫對Others 642-371(Foundation Express for Systems Engineers(FOUNDSE))考試原題完整覆蓋。642-371題庫助您輕鬆通過認證考試，一次不過全額退款。

Others 642-371(Foundation Express for Systems Engineers(FOUNDSE))考題由我們的資深IT認證講師和Others產品專家精心打造，包括了當前最新的真實642-371考題，全部附有正確答案。

所有購買KillTest 642-371 題庫的客戶都將得到60天的免費升級服務，保證了客戶的一次通過率。KillTest IT認證題庫網助您一次通過Others 642-371考試。

1、本題庫源自合作考試中心的真實考試原題，截屏后由我們的專業團隊匯總整理，再經過合作培訓中心資深IT認證講師對考題校對，保證了認證考試題庫的專業品質，題庫試題正確率100%，對642-371認證考試考題覆蓋率96％以上。您只需在參加Others 642-371認證前整體學習下本題庫，必定可以輕鬆完成考試，一次通過認證。

2、KillTest 實行“一次不過全額退款”承諾。如果您購買了我們的《642-371 Exam》考題，只要不是首次通過，憑蓋有PROMETRIC或VUE考試中心鋼印的考試成績單，我們將退還您購買642-371題庫的全部費用，絕對保證您的利益不受到任何的損失。(全額退款詳情)

3、作為亞太地區最專業的IT認證試題題庫供應商，我們提供完善的售後服務，我們對所有購買題庫的客戶提供跟蹤服務，在您購買考題后的60天內，享受免費升級考題服務，如果在這期間，認證考試中心對642-371考題做出修改或變題，我們會在第一時間更新相關題庫，并免費提供給您更新下載。

Foundation Express for Systems Engineers(FOUNDSE)(642-371 Exam)屬於Others認證考試中的一門，如果需要取得Others證書，您可能還需要參加其他相關考試，詳情可訪問Others認證專題，在那裡，你將看到所有Others認證相關考試科目。

642-371:下载642-371考试题库演示部分（PDF格式）

642-371题库部分演示（DEMO）

1.How does the Cisco IOS IPS feature set monitor the network for malicious activity?
A.passive "bird-on-a-wire" packet inspection
B.deep inline packet inspection
C.Security Device Event Exchange (SDEE) packet inspection
D.out-of-band (OOB) packet inspection
Correct:B
2.What are three benefits that companies gain with intelligent networking based on Cisco IOS network infrastructure? (Choose three.)
A.a fully integrated network
B.a network requiring fewer networking devices
C.an adaptive network
D.a more resilient network
E.a completely fault-tolerant network
Correct:A C D
3.Your customer has a basic stateful firewall setup that only permits incoming traffic from the Internet to an internal web server. What are the security risks if the firewall being used does not perform advanced application inspection and control like the ASA Security Appliance does? (Choose two.)
A.Allowing all return traffic from the internal web server back out to the Internet may increase the risk of worm propagation.
B.Peer-to-peer or instant messaging traffic using port 80 may exhaust the network capacity.
C.Not validating port 80 traffic content may increase the risk of malware infection.
D.Denial of service attacks launched against port 80 of the internal web server can bring down the web server.
E.If the firewall cannot perform deep packet inspection, the firewall cannot properly classify the HTTP and HTTPS traffic. This may lead to connectivity issues from the Internet to the internal web server.
Correct:B C
4.Refer to the exhibit. Deploying integrated services on the Cisco ISR Router can help reduce network cost and complexity by integrating which four of these features on the ISR? (Choose four.)

A.firewall and VPN
B.IP telephony and voice mail
C.Secure Access Control Server
D.LAN switching and Wireless LAN
E.IPS
F.Anomaly Guard and Detection
Correct:A B C E
5.Which two of these statements best describe fast secure roaming for the wireless core feature set using autonomous access points? (Choose two.)
A.It is compatible with all wireless clients.
B.It reduces roaming latency through reduced client RF channel scanning enhancements.
C.It reduces roaming latency to targeted times of less than 75ms.
D.Roaming occurs without reauthentication through a centralized RADIUS server.
E.It is enabled through WLSE deployment.
Correct:B D
6.LAB

Correct:
7.A customer is deploying a wireless core feature set using autonomous access points and requires Layer 2 roaming. What is a requirement when deploying this solution?
A.a minimum of one Cisco 4100 Series WLAN Controller
B.one WDS per subnet
C.a minimum of one Wireless LAN Services Module
D.all clients using Cisco Aironet Wireless LAN Adapters
Correct:B
8.Which of these is the Cisco IOS Firewall feature that creates specific security policies for each user with LAN-based, dynamic, per-user authentication and authorization?
A.DDoS Mitigation
B.Cisco Security Agent
C.Intrusion Prevention System
D.Authentication Proxy
E.Context-based Access Control
F.Monitoring, Analysis and Response System
Correct:D
9.What are three components of the wireless core feature set using autonomous access points? (Choose three.)
A.CiscoWorks WLSE
B.Wireless LAN Controller
C.lightweight access points
D.802.1X authentication server
E.Wireless Control System
F.Cisco autonomous access points running WDS
Correct:A D F
10.A customer plans to implement a wireless core feature set using autonomous access points. When choosing the access points, what is required for the customer to implement WDS?
A.Client cards must be using Cisco's LEAP authentication.
B.All Aps must support 802.1X for registration with WDS.
C.WDS must be enabled on all Aps in the WLAN.
D.The customer must have a WLSM blade in their Cisco Catalyst 6000.
Correct:B
11.What is the benefit of the parallel signature scanning feature in Cisco IOS IPS software?
A.scans multiple patterns within a Signature Micro Engine at any given time
B.scans traffic patterns serially and correlates the events in parallel
C.dynamically runs detection scanning rules in parallel within a Signature Micro Engine to increase IPS performance
D.runs currently configured scanning rules in parallel while updating new signature definition files to reduce the risk of day-zero attacks
Correct:A
12.Drag Drop question

Correct:
Green choice1---->Yellow Choice1
Green choice3---->Yellow Choice2
Green choice2---->Yellow Choice3
Green choice4---->Yellow Choice4
13.A customer has deployed a wireless core feature set using autonomous access points and now wants to include a satellite building 4,500 feet away from the main campus. The customer also wants to provide wireless access to a courtyard for wireless clients in close proximity to the antenna mounting position. Which Cisco Aironet product is the most applicable solution?
A.Cisco Aironet 1000 Series
B.Cisco Aironet 1100 Series
C.Cisco Aironet 1200 Series
D.Cisco Aironet 1300 Series
E.Cisco Aironet 1400 Series
Correct:D
14.Which two of these statements describe important aspects of performing a wireless site survey? (Choose two.)
A.An 802.11g access point with a variety of antennas can be used in all standard site surveys.
B.Site surveys can be performed manually or through assisted site survey.
C.Channel power during testing starts at the default minimum and gradually increases to the maximum.
D.Overlapping access points can create performance problems.
E.Surveys should be done after hours in an office building or during reduced inventory levels in warehouses.
Correct:B D
15.What are three advantages of the Cisco Integrated Services Router product family? (Choose three.)
A.provides advanced security such as hardware encryption acceleration
B.provides investment protection through increased modularity
C.comes equipped with at least one 1000-based TX interface
D.contains integrated wireless access using the 802.11 g/b standard
E.contains integrated web-based management tools for easy configuration and maintenance
Correct:A D E
16.A customer needs approximately 15 to 20 wireless Aps for RF coverage. Given that the customer is going to use the 1010 lightweight AP with the advanced feature set, what other product is required to complete this operational functionality?
A.2700
B.WLSE
C.4124
D.2006
E.4112
Correct:C
17.Which two of these statements best describe the benefits of Cisco's wireless IDS functionality? (Choose two.)
A.AirDefense for wireless IDS is required by autonomous Aps.
B.2.4GHz RF management can monitor both 802.11 and non-802.11 RF interference.
C.Aps only monitor the RF channels that are servicing the clients.
D.Cisco or CCX compatible client cards can extend the RF IDS service for autonomous Aps.
E.Autonomous Aps must be dedicated IDS sensors while lightweight Aps can combine client traffic and RF monitoring.
Correct:B D
18.Which Cisco Catalyst Series switch is designed for enterprise LAN access, branch offices, Layer 3 distribution points, small- and medium-sized businesses, and metropolitan Ethernet deployments?
A.2900
B.3550
C.4500
D.6500
E.8800
Correct:C
19.Drag Drop question

Correct:
Green choice5---->Yellow Choice1
Green choice2---->Yellow Choice2
Green choice1---->Yellow Choice3
Green choice6---->Yellow Choice4
20.Which item is a feature of Cisco Compatible Extensions, Version 3?
A.full 802.11e compliance
B.full WPAv2 compliance
C.wireless IDS
D.NAC
Correct:B
21.Drag Drop question

Correct:
Green choice3---->Yellow Choice1
Green choice1---->Yellow Choice2
Green choice4---->Yellow Choice3
Green choice2---->Yellow Choice4
22.Which of these is the Cisco IOS security feature that enhances perimeter firewall protection by taking appropriate actions on packets and flows that violate the security policy or represent malicious network activity?
A.DDoS Mitigation (DDoS)
B.Cisco Security Agent (CSA)
C.Intrusion Prevention System (IPS)
D.Authentication Proxy (Auth Proxy)
E.Context-based Access Control (CBAC)
F.Monitoring, Analysis and Response System (MARS)
Correct:C
23.Drag Drop question

Correct:
Green choice2---->Yellow Choice1
Green choice3---->Yellow Choice2
Green choice1---->Yellow Choice3
Green choice4---->Yellow Choice4
24.Deploying ISRs with integrated security services can help lower the total cost of ownership. Which of these Cisco ISR Routers features illustrate this point?
A.using built-in on-board VPN acceleration to reduce the amount of VPN configuration tasks
B.using the USB port to perform fast Cisco IOS image upgrade
C.using the security audit feature to implement inline Intrusion Prevention System
D.using the SDM configuration tool to reduce training costs
E.using the high performance AIM to increase the Cisco IOS Firewall performance
Correct:D
25.A customer wants to deploy a wireless advanced feature set using lightweight access points. A site survey shows that the customer will need 34 Aps to cover the facility. Assuming that the customer will not need to install more Aps, only two devices can be used for wireless functionality. Which two? (Choose two.)
A.2000 Series WLAN Controller
B.4100 Series WLAN Controller
C.4400 Series WLAN Controller
D.Wireless LAN Solution Engine
E.Wireless LAN Services Module
Correct:B C
26.Drag Drop question

Correct:
Green choice2---->Yellow Choice1
Green choice3---->Yellow Choice2
Green choice4---->Yellow Choice3
27.Which Cisco security tool can determine if a Cisco ISR Router is properly secured?
A.Cisco Security MARS
B.SDM security audit
C.CSA
D.CSA MC
E.VMS
Correct:B
28.Regarding the performance (in kilo packets per second for a 64 byte packet) of the 3800 family of Cisco ISR Routers, which two of these are correct? (Choose two.)
A.The 3825 is rated at 175 kpps.
B.The 3825 is rated at 350 kpps.
C.The 3825 is rated at 500 kpps.
D.The 3845 is rated at 350 kpps.
E.The 3845 is rated at 500 kpps.
F.The 3845 is rated at 675 kpps.
Correct:B E
29.Which program enables administrators to install the Cisco Aironet wireless configuration utility on multiple PCs across a network?
A.ACU
B.ADU
C.ACAU
D.ASTU
E.AireWave Director
Correct:C
30.Your customer is concerned that adding firewall-based security will require major hardware changes. Which Cisco IOS Firewall benefit would you highlight?
A.Cisco IOS Firewall is available for a wide variety of router platforms. It scales to meet the bandwidth and performance requirements of any network.
B.Integrating firewall functions into a multiprotocol router takes advantage of an existing router investment, without the cost and learning curve associated with a new platform.
C.Because it is installed on a Cisco router, Cisco IOS Firewall is an all-in-one, scalable solution that performs multiprotocol routing, perimeter security, intrusion prevention, VPN functions, and per-user authentication and authorization.
D.Combining the Cisco CNS 2100 Series Intelligence Engine and the Cisco IOS Software Extensible Markup Language application helps a network administrator deploy any Cisco router with little or no preconfiguration to a given destination.
Correct:C

KillTest IT認證題庫網專業提供Others 642-371最新題庫下載，完全覆蓋642-371考試原題。642-371:Others 642-371 Questions and Answers,Foundation Express for Systems Engineers(FOUNDSE)

全部考試

640-802,000-514,310-065

密碼：

注冊賬號