Cisco CCSP Snaf 642-524
- Monday, September 1, 2008, 21:04
- Exam Topics
- 1,838 views
- 1 comment
642-524 SNAF
Securing Networks with ASA Foundation
Exam Number: 642-524
Associated Certifications: CCSP
Duration: 90 minutes (60 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions
Exam Description
The Securing Networks with ASA Foundation exam is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taguide the SNAF course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco ASA Security Appliance product.
Exam Topics
The following topics are general guidelines for the content likely to be included. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
Configure Security Appliances for secured network connectivity
* Configure and verify network and interface settings using ASDM and CLI
* Configure and verify NAT globals, statics, NAT exemption, and Identity NAT using ASDM
* Configure and verify access-lists with or without object groups using ASDM
Configure and verify routing and switching on Security Appliances
* Describe the routing capabilities of the Security Appliance
* Use ASDM to configure VLANs on a Security Appliance interface
* Use ASDM to configure the passive RIP routing functionality of the Security Appliance
Configure and verify Authentication, Authorization, & Accounting services for Security Appliances
* Configure ACS for Security Appliance support
* Use ASDM to configure the Security Appliance AAA features
* Configure and verify Auth-Proxy (cut-through proxy) using ASDM
Configure and verify Layer 3 & 4 protocol inspection, Modular Policy Framework, and threat detection for Security Appliances
* Configure and verify Layer 3 and Layer 4 protocol inspection using ASDM
* Configure and verify Modular Policy Framework using ASDM
* Use ASDM to configure and verify threat detection
Configure and verify secure connectivity using VPNs
* Configure and verify remote access VPNs using ASDM
* Configure and verify IPsec VPN clients with preshared keys using ASDM
* Configure and verify site-to-site VPNs with preshared keys using ASDM
* Verify IKE and IPsec using ASDM and CLI
* Configure and verify clientless SSL VPN using ASDM
Configure and verify active/standby and active/active failover features on Security Appliances
* Configure and verify active/standby failover using ASDM
* Configure and verify active/active failover using ASDM
* Configure and verify redundant Interface using ASDM
Configure transparent firewall and virtual firewall features on a Security Appliance
* Explain the purpose of virtual & transparent firewalls
* Configure and verify the transparent firewall feature of the Security Appliance using CLI
* Configure and verify the virtual firewall feature of the Security Appliance using ASDM
Monitor and manage installed Security Appliances
* Update, backup, and restore configurations and software images using ASDM and CLI
* Install and verify Licensing using ASDM
* Configure and verify Console and SSH/Telnet access
* Configure and utilize Logging using ASDM
QUESTION 44:
By default, adaptive security appliances configured for LAN-based failover will fail over
after approximately 15 seconds. Which two commands should an administrator configure
on the security appliance to detect a failure faster? (Choose two.)
A. Failover polltime interface
B. Failover polltime unit
C. Failover interface-police polltime
D. Failover unit-policy polltime
QUESTION 45:
You want to block a new instant messaging application. Which three of these are
mandatory for accomplishing this goal with your Cisco ASA? (Choose three.)
A. A regular expression
B. A Layer 3/4 Policy map
C. A regex class map
D. An HTTP inspection class map
E. An IM inspection policy map
F. An HTTP inspection Policy map
Questions and Answers : 80 Q&As Updated: October 29th , 2008 Price: $129.99 $89.99
Free download:passguide 642-524
Free download:passguide 642-524
PassGuide Cisco Exams Questions & Training Materials
- Free passguide Cisco CCSP 642-515 SNAA 2.93
- Free Cisco CCSP 642-515 SNAA Securing Networks with ASA Advanced
- Free 642-524
- Free CCSP SNPA Official Exam Certification Guide, 3rd E
- Free passguide cisco CCSP 642-522
- Free 642-515
- Free cbt Cisco CCSP Certification Package
- Free Training for Cisco CCSP Certification
- Free Cisco Firewall Video Mentor
- Free Cisco ccsp 642-504 snrs
- Free 642-523
- Free Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance
About the Author
One Comment on “Cisco CCSP Snaf 642-524”
Trackbacks
Write a Comment
Gravatars are small images that can show your personality. You can get your gravatar for free today!

