642-381 Exam

This braindumps needs pre order, and we will make this product for you within 2~3 weeks.

642-381 Exam Description

It is well known that latest 642-381 exam test is the hot exam of Cisco certification. Just4braindumps.info offer you all the Q&A of the 642-381 real test . It is the examination of the perfect combination and it will help you pass 642-381 exam at the first time!

　
　
Exam : Cisco 642-381
Title : Cisco(r) FoundFE Foundation Express for Field Engineers


1. Which two features are only supported when using the Cisco Router and Security Device Manager (SDM) Advanced Firewall wizard and not supported when using the Cisco SDM Basic Firewall wizard? (Choose two.)
A. deep-packet inspections
B. IP unicast Reverse Path Forwarding on the outside (untrusted) interface
C. DMZ services
D. custom inspection rules
E. proxy authentication
Answer: CD

2. When using the Site to Site VPN wizard in Cisco Router and Security Device Manager, why would you need to create an access list using the Add a Rule screen?
A. to open holes on the firewall to permit ISAKMP, ESP, and AH traffic
B. to define the traffic that will be protected by IPSec
C. to specify a range of IP addresses on the inside interface
D. to specify the remote-peer IP address range
E. to enable split tunneling
Answer: B

3. When using Cisco Router and Security Device Manager to configure AAA login authentication policies, which four methods are available? (Choose four.)
A. group RADIUS: use a list of RADIUS hosts
B. group TACACS+: use a list of TACACS+ hosts
C. enable: use enable password
D. otp: use one-time password
E. local: use local database
F. default: use line password
Answer: ABCE

4. Refer to the exhibit. According to the Cisco VPN Client software outputs shown, which two statements are correct about the connection entry named isr? (Choose two.)
A. HMAC-SHA1 is used to authenticate the remote users.
B. Preshared key is used to authenticate the remote peer.
C. AES is used to provide data confidentiality.
D. The Cisco VPN Client software is assigned an internal IP address of 192.168.1.1.
E. The PC that is running the Cisco VPN Client software will not have access to the local LAN once the PC is connected into the VPN.
Answer: BE

5. After performing a security audit in Cisco Router and Security Device Manager (SDM), you receive this as one of the results: Enable Unicast RPF on all outside interfaces - Not Passed
Which Cisco SDM configuration wizard can be use to resolve this?
A. Easy VPN Server
B. Basic Firewall
C. Edit Interface/Connection
D. Site to Site VPN
E. Routing
F. NAT
Answer: B