Free Cheat-test Samples and Demo Questions Download
Adobe exams Adobe
Apple exams Apple
Avaya exams Avaya
Check Point exams Check Point
Cisco exams Cisco
Citrix exams Citrix
CIW exams CIW
CompTIA exams CompTIA
EC-Council exams EC-Council
EMC exams EMC
Exin exams Exin
Fortinet exams Fortinet
Hitachi exams Hitachi
HP exams HP
IBM exams IBM
Isaca exams Isaca
ISC exams ISC
Juniper exams Juniper
LPI exams LPI
McAfee exams McAfee
Microsoft exams Microsoft
Oracle exams Oracle
PMI exams PMI
Riverbed exams Riverbed
SNIA exams SAP
Sun exams SAS
Symantec exams Symantec
VMware exams VMware
All certification exams

Cisco 642-591 Exam -

Free 642-591 Sample Questions:

1.The NAS is configured to autogenerate an IP address pool of 30 subnets with a netmask of /30, beginning at address Which IP address is leased to the end­user host on the second subnet?
Answer: C

2.Which default administrator group has delete permissions?
Answer: D

3.What is the result when the condition statement in a Cisco NAA check for required software evaluates to false on a client machine?
A.The required software is automatically downloaded to the user device.
B.The required software is made available after the user is quarantined.
C.The user is put in the unauthenticated role and the software is considered missing.
D.The user is placed in the temporary role and the software is made available.
Answer: B

4.Which three components comprise a Cisco NAC Appliance solution? (Choose three.)
A.a NAC­enabled Cisco router
B.a Linux server for in­band or out­of­band network admission control
C.a Linux server for centralized management of network admission servers
D.a Cisco router to provide VPN services
E.a read­only client operating on an endpoint device
F.a NAC­enabled Cisco switch
Answer: B, C, E

5.When configuring a requirement, what does rule­to­requirement mapping accomplish? a rule set to the remediation steps that a user follows to comply with the requirement
B.ensures that Nessus scan­based requirements are satisfied before the user can log in to the network the rules for operating system­based checks to the requirement list the requirement to a normal user role
Answer: A

6.Why is it critically important to maintain clock synchronization between Cisco NAC Appliance components?
A.Log files will not show the actual time of system events.
B.Cisco NAC Appliance components communicate using SSL certificates, which rely on accurate time to function correctly.
C.Cisco switches that are being managed by SNMP messages need to be time synchronized to function.
D.Accurate time is required when performing vulnerability assessment and remediation.
Answer: B

7.When configuring the Cisco NAM to implement Cisco NAA requirement checking on client machines, what is the next step after configuring checks and rules?
A.retrieve updates
B.require the use of the Cisco NAA
C.configure session timeout and traffic policies rules to requirement E.configure requirements
Answer: E

8.Which Cisco NAC Appliance out­of­band solution statement is correct?
A.All client traffic flows through the CAS while access switch VLAN management is performed out of band.
B.Access switch to Cisco NAM configuration and status change messages are communicated via a proprietary protocol.
C.The switchport access and authentication VLAN information is sent to the access switch from the Cisco NAM.
D.As a laptop device accesses the Cisco NAC Appliance network, the access switch sends the device MAC address to the Cisco NAS.
Answer: C

9.What are the two types of traffic policies that apply to user roles? (Choose two.)
Answer: A, C

10.After you implement a network scan and view the report, you notice that a plug­in did not access any of its dependent plug­ins. What did you forget to do?
A.enable the Dependent Plug­in check box on the General Tab form
B.configure dependent plug­in support when you mapped the Nessus scan check to the Nessus plug­in rule
C.install dependent plug­ins when you updated the Cisco NAC Appliance plug­in library
D.load the dependent plug­ins for that plug­in in the Plug­in Updates form
Answer: D

11.A client has a network with wireless and wired users. The wired users run mission­critical bandwidth­sensitive applications. The wireless users access web­based support portals within the central office. Given only this information, which Cisco NAC Appliance solution would provide the most fault­tolerant option for this client? Cisco NAM and one in­band highly available Cisco NAS cluster load­balanced highly available Cisco NAM cluster and one out­of­band highly available Cisco NAS
cluster highly available Cisco NAM cluster, one out­of­band highly available Cisco NAS cluster, and one in­band Cisco NAS highly available Cisco NAM cluster and one in­band highly available Cisco NAS cluster
Answer: C

12.Based on the Boolean order of precedence, how would Cisco NAC Appliance evaluate the following rule? AdAwareLogRecent&(NorAVProcessIsActiveymAVProcessIsActive)
A.(The Norton Antivirus is active and there is a recent Ad Aware log entry) or (the Symantec antivirus process is active).
B.There is a recent Ad Aware log entry, the Norton Antivirus is active, and the Symantec antivirus process
is active.
C.(Either the Norton Antivirus or the Symantec antivirus process is active) and (there is a recent Ad Aware log entry).
D.There is a recent Ad Aware log entry or the Norton Antivirus is active, or the Symantec antivirus process
is active.
Answer: C

13.How do you ensure that the Cisco NAS has the most recent version of the Cisco NAA to install
on user devices?
A.Each time the Cisco NAA is upgraded, the Cisco NAM automatically downloads the new version of
Cisco NAA to all Cisco NAS servers.
B.From the Cisco NAS Web Admin Console, enable Cisco NAA autoupdate on the Administration > Software Update form.
C.The Cisco NAA is upgraded directly to each Cisco NAS using the Upgrade Server form available on the
Cisco NAM web console GUI.
D.Configure the Cisco NAS by selecting which Cisco NAA to upgrade in the Cisco NAA Upgrade form.
Answer: A

14.Which three steps are required when you are implementing an out­of­band virtual gateway deployment? (Choose three.)
A.enable VLAN mapping
B.configure a default route to managed subnets on the Layer 3 switch
C.enable SNMP between the switches and the Cisco NAM
D.enable the Cisco NAM to send SNMP trap notifications to the switch
E.configure switch and port profiles
F.enable the Cisco NAS for DHCP server mode
Answer: A, C, E

15.A search of available switches has been performed and a list of switches is presented. Which two SNMP attributes need to match what is configured in the Cisco switch profile for a listed switch to be added to the Cisco NAM? (Choose two.)
A.SNMP read community string
B.SNMP write community string
C.SNMP read version
D.SNMP write version
E.SNMP trap
Answer: A, C

16.In a Cisco NAC Appliance Windows Active Directory SSO deployment, what are the cached credentials and Kerberos TGT from the client­machine Windows login used for?
A.They are used to validate the user with the Cisco NAS.
B.They are used to validate the user authentication with the backend Windows Active Directory server.
C.They are used to validate user access with the Cisco NAA.
D.They are used to validate the user authentication and access with the Cisco NAM.
Answer: B

17.Which high­availability option is supported by a Cisco NAC Appliance solution?
A.Cisco NAM and Cisco NAS load balancing
B.Cisco NAM and Cisco NAS redundancy
C.Cisco NAA backup server
D.Cisco NAS backup network scanning
Answer: B

18.What must you check on the switches for an out­of­band Cisco NAC Appliance deployment?
A.The Cisco or non­Cisco switch must support port security and SNMPv2 or SNMPv3.
B.The Cisco switch must support VACL (VLAN ACL).
C.If you have stacked Cisco Catalyst 3750 Series Switches, you are using Cisco IOS Release 12.1(25)SEC or above.
D.The Cisco switch must use at least the minimum supported version of Cisco IOS or Catalyst OS supporting mac­notification or linkup­linkdown SNMP traps.
Answer: D

19.When using Windows Active Directory Single­Sign­ON (SSO), the Cisco NAA on the client machine will ask the client machine for a Service Ticket (ST) with which username to communicate with the Cisco NAS?
A.the Cisco NAA username
B.the Microsoft Windows Active Directory server username
C.the Cisco NAS username
D.the client username
Answer: C

20.A small public library wants to implement network admission control for their public wireless network and their internal wired network. Their network contains switches from a variety of vendors. Which Cisco NAC Appliance solution would best suit this client? out­of­band Cisco NAS deployment with a Cisco NAM cluster
B.a combination of an out­of­band and an in­band Cisco NAS deployment with a Cisco NAM cluster in­band Cisco NAS deployment and a Cisco NAM
D.a hybrid solution using in­band Cisco NAS for the wireless and out­of­band Cisco NAS for the wired deployment
Answer: C

21.You are implementing switch management in a Cisco NAM for out­of­band deployment. Once communication between the switch and the Cisco NAM has been verified, what is configured next?
A.configure group, switch, and port profiles on the Cisco NAM
B.configure the Cisco NAM SNMP receiver settings
C.configure the switches to use the appropriate SNMP settings
D.add the switches that you want to control to the Cisco NAM domain
Answer: C

22.When configuring an in­band central­deployment virtual gateway on the Cisco NAS, what must be configured to ensure that the interface traffic on the same Layer 2 switch does not create a loop? the Network form, select the passthrough VLAN ID option for the untrusted and trusted management
VLAN the VLAN Mapping form, map the untrusted interface VLAN ID to a trusted network VLAN ID the Managed Subnet form, enter the IP address that is assigned to the Cisco NAS to route the subnet, not the calculated network address
D.configure the first switch downstream of the Cisco NAS with spanning tree
Answer: B

23.Which Cisco NAC Appliance component performs network scanning?
A.Cisco NAC Appliance Manager
B.Cisco NAC Appliance Server
C.Cisco NAC Appliance Agent
D.Cisco NAC Trust Agent
Answer: B

24.How does the Cisco NAM determine the presence of vulnerability without using the Cisco NAA
on the client machine?
A.The end­user Cisco Trust Agent capability summary message does not match the defined role­based security policy requirement on the Cisco NAM.
B.The Cisco NAM receives a Cisco Security Agent vulnerability alert from the Cisco NAS.
C.The Nessus network scan report matches a defined role­based or OS­based vulnerability on the Cisco
D.The Cisco NAM will perform an agentless scan and interpret the results to determine if the client machine is vulnerable.
Answer: C

25.Which two functions can a Cisco NAC Appliance Agent be configured to perform? (Choose two.)
A.initiate periodic virus scans
B.check for up­to­date antivirus and antispam files
C.detect the presence of worms and viruses before permitting network access to an end user
D.perform registry, service, and application checks
E.quarantine an end user until the client machine complies with company policy
Answer: B, D

© 2014, All Rights Reserved