642-522

642-522 SNPA
Securing Networks with PIX and ASA Exam
Last day to test 10/13/2007
Exam Number: 642-522
Associated Certifications: CCSP, Cisco Firewall Specialist
Duration: 90 minutes (60-70 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Securing Networks with PIX and ASA exam is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taguide the SNPA v4.0 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA security appliance products.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.

Install and configure a security appliance for basic network connectivity
Describe the Security Appliance hardware and software architecture
Determine the Security Appliance hardware and software configuration and verify if it is correct
Use setup or the CLI to configure basic network settings, including interface configurations
Use appropriate show commands to verify initial configurations
Configure NAT and global addressing to meet user requirements
Configure DHCP client option
Set default route
Configure logging options
Describe the firewall technology
Explain the information contained in syslog files
Configure static address translations
Configure Network Address Translations: PAT
Configure static port redirection
Configure a net static
Set embryonic and connection limits on the security appliance
Verify network address translation operation

Configure a security appliance to restrict inbound traffic from untrusted sources
Configure access-lists to filter traffic based on address, time, and protocols
Configure object-groups to optimize access-list processing
Configure Network Address Translations: Nat0
Configure Network Address Translations: Policy NAT
Configure java/activeX filtering
Configure URL filtering
Verify inbound traffic restrictions

Configure a security appliance to provide secure connectivity using site-to-site VPNs
Explain certificates, certificate authorities and how they are used
Explain the basic functionality of IPSec
Configure IKE with preshared keys
Configure IKE to use certificates
Differentiate between the types of encryption
Configure IPSec parameters
Configure crypto-maps and ACLs

Configure a security appliance to provide secure connectivity using remote access VPNs
Explain the functions of EasyVPN
Configure IPSec using EasyVPN Server/Client
Configure the Cisco Secure VPN client
Explain the purpose of WebVPN
Configure WebVPN services: Server/Client
Verify VPN operations

Configure transparent firewall, virtual firewall, and high availability firewall features on a security appliance
Explain differences between L2 and L3 operating modes
Configure security appliance for transparent mode (L2)
Explain purpose of virtual firewalls
Configure security appliance to support virtual firewall
Monitor and maintain virtual firewall
Explain the types, purpose and operation of fail-over
Install appropriate topology to support cable-based or LAN-based fail-over
Explain the hardware, software and licensing requirements for high-availability
Configure the SA for active/standby fail-over
Configure the SA for stateful fail-over
Configure the SA for active-active fail-over
Verify fail-over operation
Recover from a fail-over

Donwload Free PassGuide Braindumps-The Most Realistic Practice Questions and Answers,Help You Pass any Exams

Configure AAA services for access through a security appliance
Configure ACS for security appliance support
Configure security appliance to use AAA feature
Configure authentication using both local and external databases
Configure authorization using an external database
Configure the ACS server for downloadable ACLs
Configure accounting of connection start/stop
Verify AAA operation

Configure routing and switching on a security appliance
Enable DHCP server and relay functionality
Configure VLANs on a security appliance interface
Configure routing functionality of security appliance including OSPF, RIP
Configure security appliance to pass multi-cast traffic
Configure ICMP on the security appliance

Configure a modular policy on a security appliance
Configure a class-map
Configure a policy-map
Configure a service-policy
Configure a ftp-map
Configure a http-map
Configure an inspection protocol
Explain the function of protocol inspection
Explain DNS guard feature
Describe the AIP-SSM HW and SW
Load IPS SW on the AIP-SSM
Verify AIP-SSM
Configure an IPS modular policy

Monitor and manage an installed security appliance
Obtain and apply OS updates
Backup and restore configurations and software
Explain the security appliance file management system
Perform password/lockout recovery procedures
Obtain and upgrade license keys
Configure passwords for various access methods: Telnet, serial, enable, SSH
Configure various access methods: Telnet, SSH, PDM
Configure command authorization and privilege levels
Configure local username database
Verify access control methods
Enable ASDM functionality
Verify a security appliance configuration via ASDM
Verify the licensing available on a security appliance
Recommended Training
Securing Networks with PIX and ASA (SNPA) is the recommended training for this exam.

Courses listed are offered by Cisco Learning Partners, the only authorized source for Cisco IT training delivered exclusively by Certified Cisco Instructors. Check the Global Learning Partner Locator for a Cisco Learning Partner near you.
The cisco 642-522 certificates give you possibility to work in any country of the world because they are acknowledged in all countries equally. This cisco 642-522 torrent certificate helps
not only to improve your knowledge and skills, but it also helps your career, gives a possibility for qualified usage of cisco 642-522 exam products under different conditions. The
majority of companies in the sphere of information technologies require the presence of cisco 642-522 exams for the work in the company, and that makes obtaining this cisco 642-522
certificate necessary. Many IT specialists were not able to obtain the real cisco 642-522 certificate from the first attempt, which was the result of poor preparation for the
examination, using preparatory cisco 642-522 study guide of poor quality.

certbible leader among the providers of cisco 642-522 preparatory materials is products such as cisco 642-522 vce pdf Braindumps, cisco 642-522 Tutorial, cisco 642-522 Exam Questions with Answers, cisco 642-522 a
Trainings, cisco 642-522 Test Online Simulations Course and free pl0-00a4 PDF. It obtained its leadership and trust of the users from the very beginning of its work on the cisco 642-522 training
materials market. All the cisco 642-522 value pack aids have been created by people who are personally familiar with actualtests cisco 642-522 Preparation Labs and who know all the
difficulties and popular mistakes made by those who take a cisco 642-522 . The entire material is logically composed in such a way that everything becomes easy to understand for
anyone. full download Many cisco 642-522 guides include audio and video material. It is really easy to acquire cisco 642-522 exams because of great variety of methods of payment.

PassGuide Passguide passguide P4S passguide passguide cisco 642-522 PassGuide Testinside rapidshare 4shared links

PassGuide Cisco Exams Questions & Training Materials

1. Free 642-523
2. Free Cisco CCSP Snaf 642-524
3. Free passguide Cisco CCSP 642-515 SNAA 2.93
4. Free Cisco CCSP 642-515 SNAA Securing Networks with ASA Advanced
5. Free 642-524
6. Free 642-515
7. Free Cisco Firewall Video Mentor
8. Free CCSP SNPA Official Exam Certification Guide, 3rd E
9. Free 642-551
10. Free [offer]Cisco NAC Appliance
11. Free 642-591
12. Free 642-552