[Free] 2018(July) Dumps4cert VMware 2V0-642 Dumps with VCE and PDF Download 221-230

Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 July VMware Official New Released 2V0-642
100% Free Download! 100% Pass Guaranteed!

CCIE Security Exam (v4.1)

Question No: 221 – (Topic 4)

Which SSL protocol takes an application message to be transmitted, fragments the data into manageable blocks, optionally compresses the data, applies a MAC, encrypts, adds a header, and transmits the resulting unit in a TCP segment?

1. SSL Handshake Protocol

2. SSL Alert Protocol

3. SSL Record Protocol

4. SSL Change CipherSpec Protocol

Answer: C

Question No: 222 – (Topic 4)

Which three statements about IKEv2 are correct? (Choose three.)

1. INITIAL_CONTACT is used to synchronize state between peers.

2. The IKEv2 standard defines a method for fragmenting large messages.

3. The initial exchanges of IKEv2 consist of IKE_SA_INIT and IKE_AUTH.

4. Rekeying IKE and child SAs is facilitated by the IKEv2 CREATE_CHILD_SA exchange.

5. NAT-T is not supported.

6. Attribute policy push (via the configuration payload) is only supported in REQUEST/REPLY mode.

Answer: A,C,D

Question No: 223 – (Topic 4)

Refer to the exhibit.

To configure the Cisco ASA, what should you enter in the Name field, under the Group Authentication option for the IPSec VPN client?

1. group policy name

2. crypto map name

3. isakmp policy name

4. crypto ipsec transform-set name

5. tunnel group name

Answer: E

Question No: 224 – (Topic 4)

Which three authentication types does OSPF support? (Choose three.)

1. Null

2. Plaintext

3. MD5

4. PAP

5. PEAP

6. MS-CHAP

Answer: A,B,C

Question No: 225 – (Topic 4)

When routing is configured on ASA, which statement is true?

1. If the default route is not present, then the routing table is checked.

2. If the routing table has two matching entries, the packet is dropped.

3. If routing table has two matching entries with same prefix length, the first entry is used.

4. If routing table has two matching entries with different prefix lengths, the entry with the longer prefix length is used.

Answer: D

Question No: 226 – (Topic 4)

An internal DNS server requires a NAT on a Cisco IOS router that is dual-homed to separate ISPs using distinct CIDR blocks. Which NAT capability is required to allow hosts in each CIDR block to contact the DNS server via one translated address?

1. NAT overload

2. NAT extendable

3. NAT TCP load balancing

4. NAT service-type DNS

5. NAT port-to-application mapping

Answer: B

Question No: 227 – (Topic 4)

Refer to the exhibit.

Which three statements correctly describe the configuration? (Choose three).

1. The tunnel is not providing peer authentication

2. The tunnel encapsulates multicast traffic.

3. This is a point-to-point GRE tunnel.

4. The configuration is on the NHS.

5. The configuration is on the NHC.

6. The tunnel provides data confidentiality.

7. The tunnel IP address represents the NBMA address.

Answer: B,D,F

Question No: 228 – (Topic 4)

IPsec SAs can be applied as a security mechanism for which three options? (Choose three.)

1. Send

2. Mobile IPv6

3. site-to-site virtual interfaces

4. OSPFv3

5. CAPWAP

6. LWAPP

Answer: B,C,D

Question No: 229 – (Topic 4)

Which three statements about OCSP are correct? (Choose three.)

1. OCSP is defined in RFC2560.

2. OCSP uses only http as a transport.

3. OCSP responders can use RSA and DSA signatures to validate that responses are from trusted entities.

4. A response indicator may be good, revoked, or unknown.

5. OCSP is an updated version SCEP.

Answer: A,C,D

Question No: 230 – (Topic 4)

Which statement about Storm Control implementation on a switch is true?

1. Storm Control does not prevent disruption due to unicast traffic.

2. Storm Control is implemented as a global configuration.

3. Storm Control uses the bandwidth and rate at which a packet is received to measure the activity.

4. Storm Control uses the bandwidth and rate at which a packet is dispatched to measure the activity.

5. Storm Control is enabled by default.

Answer: C

100% Dumps4cert Free Download!
–Download Free Demo:2V0-642 Demo PDF
100% Dumps4cert Pass Guaranteed!
–2V0-642 Dumps

	Dumps4cert	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No