642-513 CCSP Braindump ExamSoon 642-513 Exams Cisco Securing Hosts Using Cisco Security Agent Exam (HIPS) O rder : 642-513 Exam Practice Exam: 642-513 Exam Number/Code: 642-513 Exam Name: Securing Hosts Using Cisco Security Agent Exam (HIPS) Questions and Answers: 69 Q&As Free 642-513 Braindumps Exam : Cisco 642-513 Title : Securing Hosts Using Cisco Security Agent Exam (HIPS) 1. Which action must be taken before a host can enforce rules when it has been moved to a new group? A. save B. generate rules C. deploy D. clone Answer: B 2. Which information is logged for file access control? A. port and direction B. registry key C. process path D. PROGID/CLSID Answer: C 3. What is the purpose of the Compare tool? A. to save data that has been configured B. to compare individual rules C. to compare individual rule modules D. to compare and merge configurations Answer: D 4. Which of these is a reason for using groups to administer Agents? A. to link similar devices together B. to complete configuration changes on groups instead of hosts C. to complete the same configuration on like items D. to apply the same policy to hosts with similar security requirements Answer: D 5. Which one of the five phases of an attack attempts to become resident on a target? A. probe phase B. penetrate phase C. persist phase D. propagate phase E. paralyze phase Answer: C 6. In which type of rules are network address sets used? A. COM component access control rules B. connection rate limit rules C. network access control rules D. file control rules E. file access control rules Answer: C 7. Which three items make up rules? (Choose three.) A. variables B. applications C. application classes D. rule modules E. policies F. actions Answer: ACF 8. What is the maximum number of characters that a policy name can contain? A. 24 B. 32 C. 48 D. 64 Answer: D 9. Which three of these does the buffer overflow rule detect on a UNIX operating system, based on the type of memory space involved? (Choose three.) A. location space B. stack space C. slot space D. data space E. heap space F. file space Answer: BDE 10. Which systems with specific operating systems are automatically placed into mandatory groups containing rules for that operating system? (Choose three.) A. OS2 B. HPUX C. Solaris D. Mac OS E. Linux F. Windows Answer: CEF 11. Which protocol should never be disabled on the CSA MC? A. SSH B. Telnet C. IPSec D. SSL Answer: D 12. What is the purpose of network access control rules? A. to control access to network services B. to control access to network addresses C. to control access to both network services and network addresses D. to control access to networks Answer: C 13. If a Solaris or Windows system is not rebooted after CSA installation, which three rules are only enforced when new files are opened, new processes are invoked, or new socket connections are made? (Choose three.) A. COM component access rules B. network shield rules C. buffer overflow rules D. network access control rules E. file access control rules F. demand memory access rules Answer: CDE 14. What information is logged for registry access control? A. port and direction B. registry key C. registry access events D. PROGID/CLSID Answer: B 15. Which action do you take when you are ready to deploy your CSA configuration to systems? A. select B. clone C. deploy D. generate rules Answer: D 16. What is the purpose of the Audit Trail function? A. to generate a report listing events matching certain criteria, sorted by event severity B. to generate a report listing events matching certain criteria, sorted by group C. to generate a report showing detailed information for selected groups D. to display a detailed history of configuration changes Answer: D 17. What is a benefit of putting hosts into groups? A. There is no need to configure rules. B. There is no need to configure rule modules. C. The administrator can deploy rules in test mode. D. The administrator does not have to deploy rules in test mode. Answer: C 18. When should you use preconfigured application classes for application deployment investigation? A. never B. always C. only for specific applications D. only when applications require detailed analysis Answer: A 19. For which operating system is the network shield rule available? A. OS2 B. Windows C. Linux D. Solaris Answer: D More 642-513 Braindumps Information Exam Description 1. ExamSoon offer free update service for three month. After you purchase our product, we will offer free update in time for three month. 2. High quality and Value for the 642-513 Exam. ExamSoon Practice Exams for 642-513 are written to the highest standards of technical accuracy, provided by our certified subject matter experts and published authors for development. 3. 100% Guarantee to Pass Your CCSP exam and get your CCSP Certification. We guarantee your success in the first attempt. If you do not pass the CCSP "642-513" (Securing Hosts Using Cisco Security Agent Exam (HIPS) on your first attempt, send us the official result. We will give you a FULLY REFUND of your purchasing fee and send you another same value product for free. 4. ExamSoon CCSP 642-513 Exam Downloadable. Our PDF or Testing Engine Preparation Material of CCSP 642-513 exam provides everything which you need to pass your exam. The CCSP Certification details are researched and produced by our Professional Certification Experts who are constantly using industry experience to produce precise, and logical. You may get "642-513 exam" questions from different websites or books, but logic is the key. Our Product will help you not only pass in the first Securing Hosts Using Cisco Security Agent Exam (HIPS)( CCSP ) exam try, but also save your valuable time. Comprehensive questions with complete details about 642-513 exam. 642-513 exam questions accompanied by exhibits. Verified Answers Researched by Industry Experts and almost 100% correct. Drag and Drop questions as experienced in the Real CCSP exam. 642-513 exam questions updated on regular basis. Like actual CCSP Certification exams, 642-513 exam preparation is in multiple-choice questions (MCQs). Tested by many real CCSP exams before publishing. Try free CCSP exam demo before you decide to buy it in http://www.ExamSoon.com High quality and Valued for the 642-513 Exam: 100% Guarantee to Pass Your 642-513 exam and get your CCSP Certification. Come to http://www.ExamSoon.com The easiest and quickest way to get your CCSP Certification. ExamSoon professional provides CCSP 642-513 the newest Q&A, completely covers 642-513 test original topic. With our completed CCSP resources, you will minimize your CCSP cost and be ready to pass your 642-513 test on Your First Try, 100% Money Back Guarantee included! 642-513 Exam Study Guide 642-513 exam is regarded as one of the most favourite CCSP Certifications. Many IT professionals prefer to add 642 513 exam among their credentials. ExamSoon not only caters you all the information regarding the 642-513 exam but also provides you the excellent 642-513 study guide which makes the certification exam easy for you. ExamSoon Engine Features Comprehensive questions and answers about 642-513 exam 642-513 exam questions accompanied by exhibits Verified Answers Researched by Industry Experts and almost 100% correct 642-513 exam questions updated on regular basis Same type as the certification exams, 642-513 exam preparation is in multiple-choice questions (MCQs). Tested by multiple times before publishing Try free 642-513 exam demo before you decide to buy it in ExamSoon.com ExamSoon Help You Pass Any IT Exam ExamSoon.com offers incredib le career enhancing opportunities. We are a team of IT professionals that focus on providing our customers with the most up to date material for any IT certification exam. This material is so effective that we Guarantee you will pass the exam or your money back. 642-515 Securing Networks with ASA Advanced 642-542 Cisco SAFE Implementation Exam 642-545 Implementing Cisco Security Monitoring, Analysis and Response System 642-552 Securing Cisco Network Devices Exam 642-513 Securing Hosts Using Cisco Security Agent Exam (HIPS) 642-503 Securing Networks with Cisco Routers and Switches 642-502 Securing Networks with Cisco Routers and Switches Exam(SNRS) 642-522 Securing Networks with PIX and ASA Exam(SNPA) 642-523 Securing Networks with PIX and ASA 642-521 Cisco Secure PIX Firewall Advanced 642-532 Securing Networks Using Intrusion Prevention Systems Exam (IPS) 642-551 Securing Cisco Network Devices Exam(SND) Related 642-513 Exams Other Cisco Exams 642-801 642-631 642-982 646-222 642-654 646-561 350-001- LAB 646-976 642-426 642-691 640-811 642-062 642-243 646-562 646-011 640-816 642-321 642-357 640-821 642-342