642-825 CCNP Braindump ExamSoon 642-825 Exams Cisco Implementing Secure Converged Wide Area Networks O rder : 642-825 Exam Practice Exam: 642-825 Exam Number/Code: 642-825 Exam Name: Implementing Secure Converged Wide Area Networks Questions and Answers: 134 Q&As Free 642-825 Braindumps Exam : Cisco 642-825 Title : Implementing Secure Converged Wide Area Networks 1. Which two statements about the Cisco AutoSecure feature are true? (Choose two.) A. All passwords entered during the AutoSecure configuration must be a minimum of 8 characters in length. B. Cisco123 would be a valid password for both the enable password and the enable secret commands. C. The auto secure command can be used to secure the router login as well as the NTP and SSH protocols. D. For an interactive full session of AutoSecure, the auto secure login command should be used. E. If the SSH server was configured, the 1024 bit RSA keys are generated after the auto secure command is enabled. Answer: CE 2. Which two statements about common network attacks are true? (Choose two.) A. Access attacks can consist of password attacks, trust exploitation, port redirection, and man-in-the-middle attacks. B. Access attacks can consist of password attacks, ping sweeps, port scans, and man-in-the-middle attacks. C. Access attacks can consist of packet sniffers, ping sweeps, port scans, and man-in-the-middle attacks. D. Reconnaissance attacks can consist of password attacks, trust exploitation, port redirection and Internet information queries. E. Reconnaissance attacks can consist of packet sniffers, port scans, ping sweeps, and Internet information queries. F. Reconnaissance attacks can consist of ping sweeps, port scans, man-in-middle attacks and Internet information queries. Answer: AE 3. Refer to the exhibit. What statement is true about the interface S1/0 on router R1? A. Labeled packets can be sent over an interface. B. MPLS Layer 2 negotiations have occurred. C. IP label switching has been disabled on this interface. D. None of the MPLS protocols have been configured on the interface. Answer: D 4. Which two statements are true about broadband cable (HFC) systems? (Choose two.) A. Cable modems only operate at Layer 1 of the OSI model. B. Cable modems operate at Layers 1 and 2 of the OSI model. C. Cable modems operate at Layers 1, 2, and 3 of the OSI model. D. A function of the cable modem termination system (CMTS) is to convert the modulated signal from the cable modem into a digital signal. E. A function of the cable modem termination system is to convert the digital data stream from the end user host into a modulated RF signal for transmission onto the cable system. Answer: BD 5. What are the two main features of Cisco IOS Firewall? (Choose two.) A. TACACS+ B. AAA C. Cisco Secure Access Control Server D. Intrusion Prevention System E. Authentication Proxy Answer: DE 6. Which two Network Time Protocol (NTP) statements are true? (Choose two.) A. A stratum 0 time server is required for NTP operation. B. NTP is enabled on all interfaces by default, and all interfaces receive NTP packets. C. NTP operates on IP networks using User Datagram Protocol (UDP) port 123. D. The ntp server global configuration is used to configure the NTP master clock to which other peers synchronize themselves. E. The show ntp status command displays detailed association information of all NTP peers. F. Whenever possible, configure NTP version 5 because it automatically provides authentication and encryption services. Answer: BC 7. Refer to the exhibit. Which two statements about the AAA configuration are true? (Choose two.) A. A good security practice is to have the none parameter configured as the final method used to ensure that no other authentication method will be used. B. If a TACACS+ server is not available, then a user connecting via the console port would not be able to gain access since no other authentication method has been defined. C. If a TACACS+ server is not available, then the user Bob could be able to enter privileged mode as long as the proper enable password is entered. D. The aaa new-model command forces the router to override every other authentication method previously configured for the router lines. E. To increase security, group radius should be used instead of group tacacs+. F. Two authentication options are prescribed by the displayed aaa authentication command. Answer: DF 8. Which two statements describe the functions and operations of IDS and IPS systems? (Choose two.) A. A network administrator entering a wrong password would generate a true-negative alarm. B. A false positive alarm is generated when an IDS/IPS signature is correctly identified. C. An IDS is significantly more advanced over IPS because of its ability to prevent network attacks. D. Cisco IDS works inline and stops attacks before they enter the network. E. Cisco IPS taps the network traffic and responds after an attack. F. Profile-based intrusion detection is also known as "anomaly detection". Answer: BF 9. Which two statements about packet sniffers or packet sniffing are true? (Choose two.) A. To reduce the risk of packet sniffing, traffic rate limiting and RFC 2827 filtering should be used. B. Packet sniffers can only work in a switched Ethernet environment. C. To reduce the risk of packet sniffing, cryptographic protocols such as Secure Shell Protocol (SSH) and Secure Sockets Layer (SSL) should be used. D. To reduce the risk of packet sniffing, strong authentication, such as one time passwords, should be used. Answer: CD 10. Which two network attack statements are true? (Choose two.) A. Access attacks can consist of password attacks, trust exploitation, port redirection, and man-in-the-middle attacks. B. Access attacks can consist of UDP and TCP SYN flooding, ICMP echo-request floods, and ICMP directed broadcasts. C. DoS attacks can be reduced through the use of access control configuration, encryption, and RFC 2827 filtering. D. DoS attacks can consist of IP spoofing and DDoS attacks. E. IP spoofing can be reduced through the use of policy-based routing. F. IP spoofing exploits known vulnerabilities in authentication services, FTP services, and web services to gain entry to web accounts, confidential databases, and other sensitive information. Answer: AD 11. Refer to the exhibit. On the basis of the partial configuration, which two statements are true? (Choose two.) A. A CBAC inspection rule is configured on router RTA. B. A named ACL called SDM_LOW is configured on router RTA. C. A QoS policy has been applied on interfaces Serial 0/0 and FastEthernet 0/1. D. Interface Fa0/0 should be the inside interface and interface Fa0/1 should be the outside interface. E. On interface Fa0/0, the ip inspect statement should be incoming. F. The interface commands ip inspect SDM_LOW in allow CBAC to monitor multiple protocols. Answer: AF 12. Which form of DSL technology is typically used as a replacement for T1 lines? A. VDSL B. HDSL C. ADSL D. SDSL E. G.SHDSL F. IDSL Answer: B 13. Which three statements are correct about MPLS-based VPNs? (Choose three.) A. Route Targets (RTs) are attributes attached to a VPNv4 BGP route to indicate its VPN membership. B. Scalability becomes challenging for a very large, fully meshed deployment. C. Authentication is done using a digital certificate or pre-shared key. D. A VPN client is required for client-initiated deployments. E. A VPN client is not required for users to interact with the network. F. An MPLS-based VPN is highly scalable because no site-to-site peering is required. Answer: AEF 14. Which three techniques should be used to secure management protocols? (Choose three.) A. Configure SNMP with only read-only community strings. B. Encrypt TFTP and syslog traffic in an IPSec tunnel. C. Implement RFC 3704 filtering at the perimeter router when allowing syslog access from devices on the outside of a firewall. D. Synchronize the NTP master clock with an Internet atomic clock. E. Use SNMP version 2. F. Use TFTP version 3 or above because these versions support a cryptographic authentication mechanism between peers. Answer: ABC 15. Which IOS command would display IPS default values that may not be displayed using the show running-config command? A. show ip ips configuration B. show ip ips interface C. show ip ips statistics D. show ip ips session Answer: A More 642-825 Braindumps Information Exam Description 1. ExamSoon offer free update service for three month. After you purchase our product, we will offer free update in time for three month. 2. High quality and Value for the 642-825 Exam. ExamSoon Practice Exams for 642-825 are written to the highest standards of technical accuracy, provided by our certified subject matter experts and published authors for development. 3. 100% Guarantee to Pass Your CCNP exam and get your CCNP Certification. We guarantee your success in the first attempt. If you do not pass the CCNP "642-825" (Implementing Secure Converged Wide Area Networks on your first attempt, send us the official result. We will give you a FULLY REFUND of your purchasing fee and send you another same value product for free. 4. ExamSoon CCNP 642-825 Exam Downloadable. Our PDF or Testing Engine Preparation Material of CCNP 642-825 exam provides everything which you need to pass your exam. The CCNP Certification details are researched and produced by our Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get "642-825 exam" questions from different websites or books, but logic is the key. Our Product will help you not only pass in the first Implementing Secure Converged Wide Area Networks( CCNP ) exam try, but also save your valuable time. Comprehensive questions with complete details about 642-825 exam. 642-825 exam questions accompanied by exhibits. Verified Answers Researched by Industry Experts and almost 100% correct. Drag and Drop questions as experienced in the Real CCNP exam. 642-825 exam questions updated on regular basis. Like actual CCNP Certification exams, 642-825 exam preparation is in multiple-choice questions (MCQs). Tested by many real CCNP exams before publishing. Try free CCNP exam demo before you decide to buy it in http://www.ExamSoon.com High quality and Valued for the 642-825 Exam: 100% Guarantee to Pass Your 642-825 exam and get your CCNP Certification. Come to http://www.ExamSoon.com The easiest and quickest way to get your CCNP Certification. ExamSoon professional provides CCNP 642-825 the newest Q&A, completely covers 642-825 test original topic. With our completed CCNP resources, you will minimize your CCNP cost and be ready to pass your 642-825 test on Your First Try, 100% Money Back Guarantee included! 642-825 Exam Study Guide 642-825 exam is regarded as one of the most favourite CCNP Certifications. Many IT professionals prefer to add 642 825 exam among their credentials. ExamSoon not only caters you all the information regarding the 642-825 exam but also provides you the excellent 642-825 study guide which makes the certification exam easy for you. ExamSoon Engine Features Comprehensive questions and answers about 642-825 exam 642-825 exam questions accompanied by exhibits Verified Answers Researched by Industry Experts and almost 100% correct 642-825 exam questions updated on regular basis Same type as the certification exams, 642-825 exam preparation is in multiple-choice questions (MCQs). Tested by multiple times before publishing Try free 642-825 exam demo before you decide to buy it in ExamSoon.com ExamSoon Help You Pass Any IT Exam ExamSoon.com offers incredib le career enhancing opportunities. We are a team of IT professionals that focus on providing our customers with the most up to date material for any IT certification exam. This material is so effective that we Guarantee you will pass the exam or your money back. 642-825 Implementing Secure Converged Wide Area Networks 642-892 Composite Exam 642-812 Building Cisco Multilayer Switched Networks 642-901 Building Scalab le Cisco Internetworks 642-845 Optimizing Converged Cisco Networks 642-891 Composite Exam 642-811 Building Cisco Multilayer Switched Networks (BCMSN) 642-801 Building Scalab le Cisco Internetworks(BSCI) 642-821 Building Cisco Remote Access Networks (BCRAN) 642-831 Cisco Internetwork Troubleshooting (CIT) 642-813 implementing cisco switched networks 642-902 implementing cisco ip routing 642-832 Troubleshooting and maintaing cisco ip networks 642-746 Implementing Cisco Unified Wireless Mobility Services Related 642-825 Exams Other Cisco Exams 350-018- LAB 642-446 650-178 646-391 642-983 640-553 642-591 642-062 642-523 640-811 642-891 352-001 350-023 642-811 642-067 642-143 642-054 650-059 640-816 642-532