Cisco Security Solutions for Systems Engineers 認定 642-584 試験問題:

1. Which of these products is the best choice to prevent undesired content from being sent through a guest connection?

A) Personal firewall via ISE posture
B) IPS
C) Cisco ISR G2 or Cisco ASA and ScanSafe
D) Host IPS via Cisco ISE posture

2. Which statement best describes Cisco ScanSafe?

A) ScanSafe is a cloud-based web security service that provides web filtering and web security.
B) ScanSafe is a service that runs on the Cisco ASA CX.
C) ScanSafe is a centralized software-based web proxy that runs in the customer data center.
D) ScanSafe consists of a server and a client component; the server component is implemented in the data center, and the client component is part of the Cisco AnyConnect client.

3. Which statement best describes Cisco ISE?

A) Cisco ISE combines the capabilities of Cisco Secure ACS and Cisco Virtual Security Gateway into one product.
B) Cisco ISE consolidates user authentication with NAC components into one solution.
C) Cisco ISE consolidates user AAA, Security Group Access features, and ScanSafe functionality into one product.
D) Cisco ISE provides AAA features, guest provisioning, and device profiling features in the base feature set; link encryption policies, host posture, and security group access require the advanced feature set.

4. Which two statements about the Cisco IronPort WSA and Cisco ASA CX Context-Aware Security are true? (Choose two.)

A) The Cisco WSA operates on all TCP-based ports, while Cisco ASA CX inspects TCP port 80 only.
B) The Cisco WSA offers comprehensive web security, while Cisco ASA CX offers next-generation firewall features.
C) The Cisco WSA is available as a cloud service, while Cisco ASA CX performs on-site security services.
D) The Cisco WSA is a secure web proxy, while Cisco ASA CX is an inline device.
E) Cisco ASA CX provides better anti-malware scanning performance than the Cisco WSA.

5. Which four features are provided by the Cisco AnyConnect client for Windows? (Choose four.)

A) MACsec encryption
B) Cisco ScanSafe integration
C) Presence
D) Personal firewall
E) SSL VPN
F) IPsec VPN
G) Host intrusion prevention system
H) Antivirus

質問と回答：