Cisco SAFE Implementation Exam : 642-542 Exam
Exam Number/Code: 642-542
Exam Name:Cisco SAFE Implementation Exam
“Cisco SAFE Implementation Exam”, also known as 642-542 exam, is a Cisco certification.
Preparing for the 642-542 exam? Searching 642-542 Test Questions, 642-542 Practice Exam, 642-542 Dumps?
Free 642-542 Demo Download
TestInside offers free demo for 642-542 exam ( Cisco SAFE Implementation Exam). You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products.
642-542 CSI
Cisco SAFE Implementation Exam
Exam Number: 642-542
Associated Certifications: CCSP
Duration: 105 minutes (70-80 questions)
Available Languages: English
Click Here to Register: Pearson VUE or Prometric
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions
Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Cisco SAFE Implementation 642-542 CSI exam provides a recertification assessment for those candidates who currently hold a CCSP certification. This exam tests the knowledge and skills needed to use the principles and axioms presented in the SAFE SMR, Enterprise, IP Telephony and Wireless LAN White Papers, and to implement them on specific security devices. The primary focus is on the labs, which allows the student to build complete end-to-end security solutions using SAFE White Papers as the blueprint. The configuration and functionality of the following devices in a SAFE SMR network are described in detail: IOS routers, PIX Firewalls, VPN Concentrators, Cisco IDS Sensors, Cisco Security Agent and the Cisco VPN Client. Basic implementation of a SAFE wireless LAN is also covered.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Security Fundamentals
Need for network security
Components of a complete security policy
Primary network threats and attacks
Common attacks and recommended mitigation techniques
Security issues implicit in common management protocols
SAFE Blueprint Overview
SAFE Blueprint Overview
Design Fundamentals
SAFE Axioms
The Cisco Security Portfolio
Cisco Security Portfolio Overview
Secure Connectivity-Cisco VPN 3000 Concentrator and Cisco VPN Optimized IOS
Perimeter Security Firewalls-Cisco PIX Firewall and Cisco IOS Firewall
Intrusion Protection-IDS
Identity-CSACS
Security Management-VMS
Cisco AVVID
SAFE Small Network Design
Small Network Design Overview
Small Network Corporate Internet Module
Small Network Campus Module
Implementation-ISP Router
Implementation-Cisco IOS Firewall
Implementation-PIX Firewall
Implementation-CSA
SAFE Midsize Network Design
Midsize Network Design
Midsize Network Corporate Internet Module Design Guidelines
Midsize Network Campus Module
Midsize Network Campus Module Design Guidelines
Midsize Network WAN Module
Implementation-ISP Router and Edge Router
Implementation-Network IPS
Implementation-VPN 3000 Concentrator
Implementation-Layer 3 Switch
SAFE Remote Network Design
Remote-User Network Overview
Key Devices and Threat Mitigation
Software Client Option
Remote Site Firewall Option
VPN 3002 Hardware Client Option
Remote Site Router Option
SAFE Enterprise Network Design
Enterprise Network Design Overview
Enterprise Campus
Enterprise Network Edge
SAFE IP Telephony Design
IP Telephony Concepts, Caveats and Axioms
IP Telephony Product Portfolio
IP Telephony Design Considerations
IP Telephony Design for Small, Medium and Large Network
SAFE Wireless LAN Design
Wireless LAN Security Concepts, Caveats and Axioms
WLAN Security Extensions
Cisco WLAN Product Portfolio
WLAN Design Approach
Standard WLAN Design
WLAN Design for Small, Medium, Enterprise and Remote Network
WLAN Implementation
QUESTION 27:
If you permit syslog access from devices on the outside of a firewall, what type of
filtering at the egress router should be implemented?
A. RFC 1771
B. RFC 1918
C. RFC 1305
D. SAFE design mandates no filtering at this point.
E. RFC 2827
Answer: E
Explanation: When allowing syslog access from devices on the outside of a firewall,
RFC 2827 filtering at the egress router should be implemented.
REF;Safe white papers;page 72
SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks
QUESTION 28:
When allowing syslog access from devices outside a firewall, what filtering at the
perimeter router should you implement?
A. No filtering should be implemented since it will block the syslog traffic.
B. RFC 1918
C. RFC 2827
D. RFC 1281
E. RFC 1642
Answer: C
Explanation: When allowing syslog access from devices on the outside of a
firewall, RFC 2827 filtering at the egress router should be implemented.
REF;Safe white papers;page 72
SAFE: Extending the Security Blueprint to Small, Midsize, and Remote-User Networks
QUESTION 29:
Many IP services are commonly used by hackers and should be disabled for security
reasons. One of these services is Cisco Discovery Protocol which should be disabled in
configuration mode.
What is the command that you use for this purpose?
A. no cdp enable
B. no cdp run
C. no ip cdp enable
D. cdp disable
Answer: B
Testinside CCSP 642-542 Questions and Answers : 224 Q&A
Updated: October 2nd , 2008
Price: $129.99 $89.99
Free download?pass4sure CCSP 642-542
Free download?testking CCSP 642-542
Download Free Latest Testinside Certification Braindumps
- Free Testinside free testinside cisco exam
- Free Testinside Testinside CCSP 642-523
- Free Testinside Testinside cisco ccsp 642-504
- Free Testinside Testinside CCSP 642-591
- Free Testinside free latest testking ccsp 642-552 exam
- Free Testinside Testinside ccsp 642-502 free down
- Free Testinside Testinside CCSP 642-524
- Free Testinside free Pass4sure Cisco Certification Exams
- Free Testinside Testinside CCSP 642-503
- Free Testinside Transcender cisco
