Pass4sure Cisco Certification

Securing Networks with PIX and ASA

Exam Number: 642-523
Associated Certifications: CCSP/Cisco Firewall Specialist
Duration: 90 minutes (63 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Securing Networks with PIX and ASA exam is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taking the SNPA v5.0 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA Security Appliance products.

Exam Topics
The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Install and configure a Security Appliance for basic network connectivity
Describe the Security Appliance hardware and software architecture
Determine the Security Appliance hardware and software configuration and verify if it is correct
Use setup or the CLI to configure basic network settings, including interface configurations
Use appropriate show commands to verify initial configurations
Configure NAT and global addressing to meet user requirements
Configure DHCP client option
Set default route
Configure logging options
Describe the firewall technology
Explain the information contained in syslog files
Configure static address translations
Configure Network Address Translations: PAT
Verify network address translation operation

Configure a Security Appliance to restrict inbound traffic from untrusted sources
Configure access-lists to filter traffic based on address, time, and protocols
Configure object-groups to optimize access-list processing
Configure Network Address Translations: Nat0
Configure Network Address Translations: Policy NAT
Configure java/activeX filtering
Configure URL filtering
Verify inbound traffic restrictions
Configure static port redirection
Configure a net static
Set embryonic and connection limits on the Security Appliance

Configure a Security Appliance to provide secure connectivity using site-to-site VPNs
Explain the basic functionality of IPsec
Configure IKE with preshared keys
Differentiate between the types of encryption
Configure IPsec parameters
Configure crypto-maps and ACLs

Configure a Security Appliance to provide secure connectivity using remote access VPNs
Explain the functions of EasyVPN
Configure IPsec using EasyVPN Server/Client
Configure the Cisco Secure VPN client
Explain the purpose of SSL VPN
Configure WebVPN services: Server/Client
Verify VPN operations
Install and Configure SVCs
Install and Configure Cisco Secure Desktop

Configure transparent firewall, virtual firewall, and high availability firewall features on a Security Appliance
Explain differences between L2 and L3 operating modes
Configure Security Appliance for transparent mode (L2)
Explain purpose of virtual firewalls
Configure Security Appliance to support virtual firewall
Monitor and maintain virtual firewall
Explain the types, purpose and operation of fail-over
Install appropriate topology to support cable-based or LAN-based fail-over
Explain the hardware, software and licensing requirements for high-availability
Configure the Security Appliance for active/standby fail-over
Configure the Security Appliance for stateful fail-over
Configure the Security Appliance for active-active fail-over
Verify fail-over operation
Recover from a fail-over
Allocate resources to virtual firewalls

Configure AAA services for the Security Appliance
Configure ACS for Security Appliance support
Configure Security Appliance to use AAA feature
Configure authentication using both local and external databases
Configure authorization using an external database
Configure the ACS server for downloadable ACLs
Configure accounting of connection start/stop
Verify AAA operation

Configure routing and switching on a Security Appliance
Enable DHCP server and relay functionality
Configure VLANs on a Security Appliance interface
Configure Security Appliance to pass multi-cast traffic

Configure Security Appliance advanced application layer and modular policy features
Configure a class-map
Configure a policy-map
Configure a service-policy
Configure a ftp-map
Configure a http-map
Configure an inspection protocol
Explain the function of protocol inspection
Explain DNS guard feature
Describe the AIP-SSM HW and SW
Load IPS SW in the AIP-SSM
Verify AIP-SSM
Configure an IPS modular policy
Describe the CSC-SSM HW and SW
Configure a typed class map
Configure a typed policy map
Use typed policy maps to specify granular inspection parameters for a policy map
Configure regex class maps
Create regular expressions
Load CSC SW on the SSM
Verify the CSC-SSM
Divert traffic to the CSC-SSM
Initialize the CSC-SSM

Monitor and manage an installed Security Appliance
Obtain and apply OS updates
Backup and restore configurations and software
Explain the Security Appliance file management system
Perform password/lockout recovery procedures
Obtain and upgrade license keys
Configure passwords for various access methods: Telnet, serial, enable, SSH
Configure various access methods: Telnet, SSH, ASDM
Configure command authorization and privilege levels
Configure local username database
Verify access control methods
Enable ASDM functionality
Verify a Security Appliance configuration via ASDM
Verify the licensing available on a Security Appliance
Add, delete, and modify syslog messages
Question: 1
Which of these commands enables the DHCP server on the DMZ interface of the Cisco ASAwith an address pool of 10.0.1.100-10.0.1.108 and a DNS server of 192.168.1.2?

A – dhcpd address 10.0.1.100-10.0.1.108 DMZ dhcpd dns 192.168.1.2 dhcpd enable DMZ
B – dhcpd range 10.0.1.100-10.0.1.108DMZ dhcpd dns server 192.168.1.2 dhcpd DMZ
C – dhcpd address range 10.0.1.100-10.0.1.108 dhcpd dns 192.168.1.2 dhcpd enable
D – dhcpd address range 10.0.1.100-10.0.1.108 dhcpd dns server 192.168.1.2 dhcpd enable
DMZ
Answer: A Question: 2
Based on this output

Which of the following statements is true?

A – The ACLOUT access list has been designed to allow the IP address with the network address of 192.168.6.0 to have unrestricted access to the web server at lP address
192.168.1.11.
B – The ACLIN access list permits web access from host 192.168.6.10 to all hosts behind the
Cisco ASA.
C – The ICMPDMZ access list denies all ICMP traffic bound for the bastion host except echo replies
D – The ACLOUT access list has been designed to deny the IP address 192.168.1.11 web access to the host with a network address of 192.168.6.0.
Answer: A Question: 3
Which mode of operation must you enter in order to recover the Cisco ASA password?

A – unprivileged
B – privileged C – configure D – monitor

Answer: D

TK

Exam Name: Securing Networks with PIX and ASA
Exam Type: Cisco
Exam Code: 642-523 Total Questions: 66

Question: 4
Which command both verifies that NAT is working properly and displays active NAT transactions?

A – show running-configuration nat
B – show nat translation
C – showdate
D – show ip nat all
Answer: C Question: 5
The Cisco VPN Client supports which three of these tunneling protocols and methods? (Choose three.)

A – lPsec over TCP B – lPsec over TCP C – ESP
D – AH
E – SCEP F – LZS
Answer: A, B, C Question: 6
A network administrator wants to authenticate remote users who are accessing the WEB1 server from the Internet.

TK

Exam Name: Securing Networks with PIX and ASA
Exam Type: Cisco
Exam Code: 642-523 Total Questions: 66

When a remote user initiates a session to the WEB1 server, the ASA1 security appliance will
verify the user’s credentials with the TX_ACS AAA server via RADIUS. To accomplish this, the administrator must load and configure Cisco ACS software on the TX_ACS AAA server. During
the process, the administrator must correctly configure the AM client information in the Cisco ACS
network configuration window.

What must the administrator place in field A (AAA Client Hostname) and field B (AM Client IP
address)?

A – AX_ACS B?0.0.1.10
B – AEB1 B?72.16.1.2
C – Aave B?92.168.2.10
D – ASA1 B?0.0.1 .1
Answer: D Question: 7
When configuring a crypto ipsec transform-set command, how many unique transforms can a single transform set contain?
Free 642-523 Exams’s PDF Download
Free Testking offers free demo for 642-523 PDF(Securing Networks with PIX and ASA). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Securing Networks with PIX and ASA.

Recommended Training about 642-523 exam PDF
The following courses are the recommended training for 642-523 exam PDF.
642-523 Q & A with Explanations
642-523 Audio Exam
642-523 Study Guide
642-523 Preparation Lab

Exam Number/Code: 642-523
Exam Name: Securing Networks with PIX and ASA

“Securing Networks with PIX and ASA”, also known as 642-523 exam, is a Cisco certification.
Preparing for the 642-523 exam? Searching 642-523 Test Questions, 642-523 Practice Exam, 642-523 Dumps?

With the complete collection of questions and answers, Pass4sure has assembled to take you through 63 Q&As to your 642-523 Exam preparation. In the 642-523 exam resources, you will cover every field and category in CCSP helping to ready you for your successful Cisco Certification.

Questions and Answers : 63 Q&As
Updated: April 11th , 2008
Market Price: $125.99
Member Price: $99.99

Pass4sure 642-523 SNPA
Interactive Testing Engine Included!
181 Questions
Updated : 09/23/2008
Price : $87.99 $79.99

Free download?pass4sure 642-523 SNPA
Free download?testking 642-523 SNPA

PassGuide Braindumps: provides high quality Cisco exam practice questions and Training Materials.Hel you Pass Cisco Certifications

Download Free Latest Pass4sure P4S PassForsure Braindumps

1. Free Pass4sure 642-522 SNPA 2.93
2. Free Pass4sure 642-524 SNAF 2.83
3. Free pass4sure 642-515 SNAA 2.83
4. Free Pass4sure 642-591 CANAC 2.83
5. Free pass4sure cisco ccsp mars 642-545 v2.83
6. Free Pass4sure 642-532 IPS 2.83
7. Free Pass4sure 642-551 SND 2.83
8. Free Pass4sure 642-521 CSPFA 2.93
9. Free Pass4sure 642-552 SND 2.83
10. Free Pass4sure 642-565 SSSE 2.95