Cisco 642-637

Securing Networks with Cisco Routers and Switches (SECURE) v1.0

Version: Demo 14.20

Cisco 642-637 Exam QUESTION NO: 1 Refer to the exhibit. What can be determined from the output of this show command?

A. The switch port interface is enabled and operating as a community port. B. The interface is acting as an isolated switch port operating in VLAN 1. C. The interface is configured for Private VLAN Edge. D. The switch port interface is not a trusted port. Answer: D Explanation:

QUESTION NO: 2 Refer to the exhibit. Which two of these are most likely to have caused the issue with NHRP, given this output of the show command? (Choose two.)

A. There was a network ID mismatch. B. The spoke router has not yet sent a request via Tunnel0. C. The spoke router received a malformed NHRP packet. D. There was an authentication key mismatch. E. The registration request was expecting a return request ID of 1201, but received an ID of 120. Answer: A,D Explanation:

QUESTION NO: 3 DRAG DROP

Answer: Explanation: Spoke-to-hub GRE and IPSec tunnels are created NHRP mappings are created. All spoke traffic is forwarded to the hub.

"Ensure Success with Money back Guarantee" - Testinsides.com

Cisco 642-637 Exam QUESTION NO: 4 When Cisco IOS IPS signatures are being tuned, how is the Target Value Rating assigned? A. It is calculated from the Event Risk Rating. B. It is calculated from a combination of the Attack Severity Rating and Signature Fidelity Rating C. It is manually set by the administrator. D. It is set based upon SEAP functions. Answer: C Explanation:

QUESTION NO: 5 DRAG DROP

Answer: Explanation: Dynamic Inside NAT Dynamic Inside PAT Static Inside NAT Static Inside PAT

QUESTION NO: 6 HOTSPOT Scenario: To access the router console ports, refer to the exhibit and click router R1 or R2 for access. The ISP router will not need to be accessed. You will be placed directly into Cisco IOS enable mode. Using CLI show commands, answer the questions presented regarding GET VPN configurations. For this exercise, you will not be able to use show running-config or show start-conflg CLI commands. You may use other specific show run and global show commands to determine the correct answers. Not all Cisco IOS CU features are enabled for this simulation.

What is the Identity used to distinguish the GETVPNGROUP GDOI group?

Answer: "Ensure Success with Money back Guarantee" - Testinsides.com 3

Cisco 642-637 Exam Explanation:

QUESTION NO: 7 Which command will enable a SCEP interface when you are configuring a Cisco router to be a certificate server? A. seep enable (under interface configuration mode) B. crypto pki seep enable C. grant auto D. ip http server Answer: D Explanation:

QUESTION NO: 8 Which two of these are benefits of implementing a zone-based policy firewall in transparent mode? (Choose two.) A. Less firewall management is needed. B. It can be easily introduced into an existing network. C. IP readdressing is unnecessary. D. It adds the ability to statefully inspect non-IP traffic. E. It has less impact on data flows. Answer: B,C Explanation:

QUESTION NO: 9 Refer to the exhibit. What can be determined about the IPS category configuration shown?

A. All categories are disabled. B. All categories are retired. C. After all other categories were disabled, a custom category named "os ios" was created D. Only attacks on the Cisco IOS system result in preventative actions.

"Ensure Success with Money back Guarantee" - Testinsides.com

Cisco 642-637 Exam Answer: D Explanation:

QUESTION NO: 10 DRAG DROP

Answer: Explanation: Use static access ports Disable DTP Avoid trunk native VLAN on access ports

"Ensure Success with Money back Guarantee" - Testinsides.com