Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
Exam
: Cisco 642-381
Title
: Cisco® FoundFE
Foundation Express for
Field Engineers
Version : Demo
Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
1.Refer to the exhibit. According to the Cisco VPN Client software outputs shown, which two statements are
correct about the connection entry named isr? (Choose two.)
A. HMAC-SHA1 is used to authenticate the remote users.
B. Preshared key is used to authenticate the remote peer.
C. AES is used to provide data confidentiality.
D. The Cisco VPN Client software is assigned an internal IP address of 192.168.1.1.
E. The PC that is running the Cisco VPN Client software will not have access to the local LAN once the PC
is connected into the VPN.
Answer: BE
2.Which two features are only supported when using the Cisco Router and Security Device Manager (SDM)
Advanced Firewall wizard and not supported when using the Cisco SDM Basic Firewall wizard? (Choose
two.)
A. deep-packet inspections
B. IP unicast Reverse Path Forwarding on the outside (untrusted) interface
C. DMZ services
D. custom inspection rules
E. proxy authentication
Answer: CD
3.When using Cisco Router and Security Device Manager to configure AAA login authentication policies,
which four methods are available? (Choose four.)
A. group RADIUS: use a list of RADIUS hosts
B. group TACACS+: use a list of TACACS+ hosts
C. enable: use enable password
D. otp: use one-time password
E. local: use local database
F. default: use line password
Answer: ABCE
Exam1pass
Easiest way to pass IT exams
Exam1pass Help You Pass Any IT Exam
http://www.exam1pass.com
4.After performing a security audit in Cisco Router and Security Device Manager (SDM), you receive this as
one of the results: Enable Unicast RPF on all outside interfaces - Not Passed
Which Cisco SDM configuration wizard can be use to resolve this?
A. Easy VPN Server
B. Basic Firewall
C. Edit Interface/Connection
D. Site to Site V