Testinside – Best IT certification material provider

Exam Number: 642-515
Associated Certifications: CCSP
Duration: 90 minutes (60 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description
The Securing Networks with ASA Advanced exam is one of the exams associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the SNAA course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco ASA Security Appliance product.

Exam Topics
The following topics are general guidelines for the content likely to be included. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Configure and verify NAT, dynamic routing, and switching on Security Appliances

* Configure and verify VLANS using ASDM
* Configure and verify dynamic routing protocols and route redistribution using ASDM
* Configure and verify policy NAT using ASDM

Configure and verify application layer protocol inspection and Modular Policy Framework for Security Appliances

* Describe the Layer 7 advanced protocol handling capabilities of the Security Appliance
* Configure and verify Layer 7 application layer protocol inspection using ASDM
* Configure and verify Modular Policy Framework using ASDM

Configure and verify secure connectivity using IPsec VPNs

* Describe the features and capabilities of digital certificates
* Describe how to use digital certificate enrollment with the Security Appliance and Cisco VPN client
* Configure and verify remote access VPNs with digital certificates using ASDM
* Configure and verify IPsec VPN clients with digital certificates using ASDM
* Configure and verify site-to-site VPNs with digital certificates using ASDM
* Configure and verify advanced remote access features using ASDM
* Configure and verify the ASA 5505 as a remote access client using ASDM
* Configure and verify QoS for tunnel traffic using ASDM

Configure and verify secure connectivity using SSL VPNs

* Describe the features and capabilities of SSL VPNs
* Configure and verify the local certificate authority using ASDM
* Configure and verify clientless access including smart tunnels, plug-ins and bookmarks using ASDM
* Configure and verify port forwarding using ASDM
* Configure the Security Appliance for SSL VPN client access using ASDM
* Configure and verify the AnyConnect VPN client
* Configure and verify CSD using ASDM
* Configure and verify DAP using ASDM

Configure and verify AIP-SSM and CSC-SSM modules

* Explain the function that AIP-SSM and CSC-SSM perform within a network
* Configure and verify AIP-SSM
* Configure and verify CSC-SSM

QUESTION 27
An agent kid was built on a Certkiller CSA, MC. How can this Agent kit be sent out
to host machines?
A. Via a URL that is e-mailed to clients
B. Via a TFTP server
C. Via an FTP server
D. Via a Telnet server
E. None of the above
Answer: A
Reference:
Once you build an agent kit on CSA MC, you deliver the generated URL, via email for
example, to end users so that they can download and install the Cisco Security Agent.
They access the URL to download and then install the kit. This is the recommended
method of agent kit distribution. But you may also point users to a URL for the
CiscoWorks system. This URL will allow them to see all kits that are available. That
URL is:
https:///csamc50/kits
If you are pointing users to the “kits” URL and you have multiple agent kits listed here,
be sure to tell users which kits to download.
Reference:

http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_installation_guide_chapter09186a00805ae

b
QUESTION 28
A new group has been created in which some Certkiller hosts need to be moved to.
Which action must be taken before a host can enforce rules when it has been moved
to a new group?
A. Save
B. Generate rules
C. Deploy
D. Clone
E. Write to memory
Answer: B
Explanation:
Once you have configured a policy and attached it to a new group, you need to distribute
the policy to the agents that are part of this new group. We do this by first generating our
rule programs.
Click Generate rules in the bottom frame of CSA MC. All pending database changes
ready for distribution appear.
If everything looks okay, you can click the Generate button that now appears in the
bottom frame. This distributes your policy to the agents.
Reference:

http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_installation_guide_chapter09186a00805ae

b
QUESTION 29
The Certkiller CSA administrator is building agent kits for distribution. Which two
items make up Agent kits? (Choose two)
A. Groups
B. Hosts
C. Policies
D. Rules
E. Network shim
Answer: A, C

Free download?pass4sure ccsp 642-515
Free download?testking ccsp 642-515

Download Free Latest Testinside Certification Braindumps

1. Free Testinside 642-524 SNAF Securing Networks with ASA Foundation
2. Free Testinside Testinside CCSP 642-515
3. Free Testinside Testinside CCSP 642-524
4. Free Testinside Testinside CCSP 642-523
5. Free Testinside Testinside CCSP 642-503
6. Free Testinside Testinside CCSP 642-513
7. Free Testinside Testinside CCNA 640-553
8. Free Testinside testinside ccnp iscw 642-825 v3.68
9. Free Testinside free testking ccna 640-721 exam
10. Free Testinside free latest testking for ccna 640-802 v13