642-584 無料問題集「Cisco Security Solutions for Systems Engineers」

（A）Cisco ASA fits better to the core and data center.

（B）Cisco ASA CX provides better AAA support.

（C）Cisco ASA does not support multitenant deployments.

（D）Cisco ASA provides better application control.

（A）Cisco Mobile VPN

（B）Cisco GET Easy VPN Remote

（C）Cisco AnyConnect VPN

（D）Cisco Secure ACS

（E）Cisco SSL VPN

（A）VLAN attacks

（B）Spanning-tree attacks

（C）IP source routing

（D）DHCP-based IP redirection attacks

（E）MAC address floods

（A）Cisco AnyConnect Release 3.0 supports both roles: supplicant and authenticator?

（B）802.1X protection includes the CMD field, which is used to carry the security group tag value.

（C）MACsec does not work between any MACsec-capable supplicant and authenticator.

（D）MACsec provides Layer 2 hop-by-hop encryption, based on the 802.1AE standard.

（A）Cisco IPS global correlation is performed before Cisco IPS reputation filters.

（B）Cisco ASA-integrated IPS and standalone IPS offer the same features.

（C）Cisco standalone IPS functionality can be virtualized.

（D）The Cisco IPS reputation filter is based on Cisco SIO and allows packets that are received from known malicious sources to be dropped before performing signature-based inspection.