Flydumps has timely updated the Cisco 642-521 exam questions. With all the new questions and answers, you will pass the Cisco 642-521 exam easily. If you want to get more Cisco 642-521 exam dumps, you can free download the new version VCE test engine from Flydumps. All Cisco 642-521 dumps are new updated and cover all aspect of the examination.
Exam A
QUESTION 1
Your primary PIX Firewall is currently the active unit in your failover topology. What will happen to the current IP addresses on the primary PIX Firewall if it fails?
A. They become those of the standby PIX Firewall.
B. The ones on the primary PIX Firewall remain the same, but the current IP addresses of the secondary become the virtual IP addresses you configured.
C. They are deleted.
D. The ones on both the primary and secondary PIX Firewalls are deleted and both assume the failover IP addresses you configured.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 2
What is the default port number that the PIX Firewall uses to contact the AUS?
A. 25
B. 110
C. 443
D. 444
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 3
Which statements about the PIX Firewall’s DHCP capabilities are true? Choose two.
A. It can be a DHCP server.
B. It cannot be a DHCP client.
C. You must remove a configured domain name.
D. It can be a DHCP server and client simultaneously.
E. It cannot pass configuration parameters it receives from another DHCP server to its own DHCP clients.
F. The PIX Firewall’s DHCP server can be configured to distribute the IP addresses of up to four DNS servers to its clients.
Correct Answer: AD Section: (none) Explanation
Explanation/Reference:
QUESTION 4
You already created an ACL named ACLIN to permit traffic from certain Internet hosts to the web server on your DMZ. How do you make the ACL work? Choose two.
A. bind the ACL to the DMZ interface
B. bind the ACL to the inside interface
C. bind the ACL to the outside interface
D. create a static mapping for the DMZ interface
E. create a static mapping for the web server
F. create a conduit mapping for the web server
Correct Answer: CE Section: (none) Explanation
Explanation/Reference:
QUESTION 5
If the FTP protocol fixup is not enabled for a given port, which statements are true? Choose two.
A. Outbound standard FTP will work properly on that port.
B. Outbound passive FTP will not work properly on that port.
C. Outbound standard FTP will not work properly on that port.
D. Outbound standard FTP will work properly on that port if outbound traffic is not explicitly disallowed.
E. Inbound standard FTP will not work properly on that port even if a conduit to the inside server exists.
F. Outbound passive FTP will work properly on that port as long as outbound traffic is not explicitly disallowed.
Correct Answer: CF Section: (none) Explanation
Explanation/Reference:
QUESTION 6
While entering a list of host addresses to an ACL, the administrator left out an ACE for host 192.168.0.9. The administrator wants to add an access control entry for 192.168.0.9 between line 3 and line 4 of the existing access-list. What command should be entered to accomplish this addition?
A. pix1(config)# access-list aclin line 4 permit tcp any host 192.168.0.9 eq www
B. pix1(config)# access-list aclin line 3 permit tcp any host 192.168.0.9 eq www
C. pix1(config)# access-list aclin add-line 4 permit tcp any host 192.168.0.9 eq www
D. pix1(config)# access-list aclin add-line 3 permit tcp any host 192.168.0.9 eq www
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 7
If you configure a VPN between a Cisco VPN Client and the PIX Firewall using pre-shared keys for authentication, which should you do? Choose two.
A. Use pre-shared keys for authentication.
B. Use digital certificates for authentication instead of pre-shared keys.
C. Do not use digital certificates for authentication.
D. Ensure that the password on the VPN client matches the vpngroup password on the PIX Firewall.
E. Ensure that the group name differs from the VPN group name on the PIX Firewall.
F. Ensure that the group name on the VPN Client matches the vpngroup name on the PIX Firewall.
Correct Answer: DF Section: (none) Explanation
Explanation/Reference:
QUESTION 8
Type the command that reboots the PIX Firewall
A.
B.
C.
D.
Correct Answer: Section: (none) Explanation
Explanation/Reference:
Answer: Check certifyme eEngine, Download from Member Center
QUESTION 9
What is the function of the support tool in the PIX MC?
A. to allow technical support to remotely administer the PIX MC
B. to show available support options for the PIX MC
C. to create a file that captures information about the PIX MC
D. to place the PIX MC in safe mode so you can troubleshoot it
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 10
Which command enables IKE on the outside interface?
A. ike enable outside
B. ipsec enable outside
C. isakmp enable outside D. ike enable (outbound)
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 11
A company just completed the rollout of IP/TV. The first inside network MC client to use the new feature claims they can not access the service. After viewing the above PIX Firewall configuration and network diagram again, the administrator was able to determine the following:
A. The PIX multicast configuration is correct, the configuration problem exists in the MC client’s PC.
B. The igmp forward command was not correct, it should be changed to the following: pix1(config-multicast)# igmp forward interface inside
C. The igmp access-group command was not correct, it should be changed to the following: pix1(config-multicast)# igmp object-group 120.
D. The access-list command was not correct, it should be changed to the following: pix1(config)# access-list 120 permit udp any host 224.0.1.50
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 12
For added security, the network manager wants PCs on the inside network at the remote office to authenticate with an ACS server, ACS1, at the central site before allowing these individuals PCs to access a VPN tunnel. As the network administrator, at which location and what commands should they enter to force remote PC users to authenticate before allowing them access to a VPN tunnel? (Choose two.)
A. vpngroup oxford user-authenticationvpngroup oxford authentication-server ACS1
B. Configured at PIX1
C. Configured at PIX2
D. vpngroup oxford individual-user-authentication ACS1
E. vpngroup oxford mode network-extension-modevpngroup oxford authentication-server ACS1
Correct Answer: AC Section: (none) Explanation
Explanation/Reference:
QUESTION 13
Which statement about the PIX Firewall and virtual HTTP is true?
A. The PIX Firewall enables web browsers to work correctly with its HTTP authentication. The PIX Firewall redirects the web browser’s initial connection to an IP address which resides within the PIX Firewall, authenticates the user, and then redirects the browser back to the URL the user originally requested.
B. The PIX Firewall supports virtual Telnet, but not virtual HTTP.
C. The PIX Firewall enables RADIUS authorization by redirecting the web browser’s initial connection to an IP address which resides on a web server you specify, authorizing the user, and then redirecting the browser back to the URL the user originally requested.
D. The PIX Firewall enables you to access URLs from its console.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 14
What does the PIX Firewall license determine? Choose three.
A. its ability to provide cut-through proxy services
B. whether it can be managed by PDM
C. number of interfaces supported by the platform
D. amount fo RAM supported by the platform
E. the software image that can be installed
F. failover support
Correct Answer: CDF Section: (none) Explanation
Explanation/Reference:
QUESTION 15
You have installed a FWSM in your Catalyst 6500 switch, initialized it in the switch, configured switch VLANs, and configured the module interfaces; however, you are unable to establish outbound connections. You check your configuration and find that you have correctly configured the six basic commands (nameif, interface, ip address, nat, global, and route). What could be the cause of the problem?
A. You have not configured a switch VLAN for the inside interface.
B. You need an ACL for the outside interface.
C. The MSFC is configured as a connected router only on the outside interface.
D. You need an ACL for the inside interface.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 16
What is the default polling period that the PIX Firewall uses to check for updates on the AUS?
A. 1440 seconds
B. 720 minutes
C. 1440 minutes
D. 2880 minutes
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
Cisco 642-521 contains a powerful new testing engine that allows you to focus on individual topic areas or take complete, timed exams from Cisco 642-521.The assessment engine also tracks your performance and presents feedback on a module-by-module basis, providing question-by-question Cisco 642-521 to the text and laying out a complete study plan for review.Cisco 642-521 also includes a wealth of hands-on practice exercises and a copy of the Cisco 642-521 network simulation software that allows you to practice your Cisco 642-521 hands-on skills in a virtual lab environment.The Cisco 642-521 supporting website keeps you fully informed of any exam changes
The post Newest PDF And VCE Cisco 642-521 With New Added Questions Of Flydumps For Free Download appeared first on IT Certification Success Guaranteed, The Easy Way!.