Actualtests CCSP 642-521
Cisco Secure PIX Firewall Advanced : 642-521 Exam
642-521 CSPFA
Cisco Secure PIX Firewall Exam
Retired
Exam Number: 642-521
Associated Certifications: CCSP, Cisco Firewall Specialist
Duration: 75 minutes (55-65 questions)
Available Languages: English
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions
Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Cisco Secure PIX Firewall Advanced exam (CSPFA 642-521) is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taking the CSPFA v3.2 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the PIX Firewall product family. CCNA or CCDA recertification candidates who pass the 642-521 CSPFA exam will be considered recertified at the CCNA or CCDA level.
Exam Topics
The following information provides general guidelines for the content likely to be included on this exam. However, other related topics may also appear on any specific delivery of the exam.
Cisco PIX Firewall Technology and Features
• Firewalls
• PIX Firewall models
Cisco PIX Firewall Family
• PIX Firewall models
• PIX services module
• PIX Firewall licensing
Getting Started with the Cisco PIX Firewall
• User interface
• Examining the PIX Firewall status
• ASA security levels
• Basic PIX Firewall configuration
• Syslog configuration
• DHCP server configuration
• PPPoE and the PIX Firewall
Translations and Connections
• Transport Protocols
• Network Address Translation
• Configuring DNS Support
• Port Address Translations
Access Control Lists and Content Filtering
• ACLS
• Converting Conduits to ACLS
• Using ACLS
Object Grouping
• Overview of object grouping
• Getting started with object groups
• Configuring object groups
• Nested object groups
Advanced Protocol Handling
• Advanced protocols
• Multimedia support
Attack Guards, Intrusion Detection, and Shunning
• Attack guards
• Intrusion detection
Authentication, Authorization, and Accounting
• Introduction
• Installation of CSACS for Windows NT
• Authentication configuration
• Downloadable ACLS
Failover
• Understanding failover
• Serial failover configuration
• LAN-based failover configuration
Virtual Private Networks
• PIX Firewall enables a secure VPN
• Prepare to configure VPN support
• Configure IKE parameter
• Configure IPSec parameters
• Test and verify VPN configuration
• Cisco VPN Client
• Scale PIX Firewall VPNs
System Maintenance
• Remote access
• Command authorization
Cisco PIX Device Manager
• PDM overview
• Prepare for PDM
• Using PDM to configure the PIX Firewall
• Using PDM to create a site-to-site VPN
• Using PDM to create a remote access VPN
Enterprise PIX Firewall Management
• Configuring access and translation rules
• Reporting, tools, and administration
Enterprise PIX Firewall Maintenance
• Introduction to the auto update server
• PIX Firewall and AUS communication settings
• Devices, images, and assignments
• Reports and administration
Firewall Services Module
• FWSM overview
• Using PDM with the FWSM
Exam Number/Code: 642-521
Exam Name:Cisco Secure PIX Firewall Advanced
“Cisco Secure PIX Firewall Advanced”, also known as 642-521 exam, is a Cisco certification. With the complete collection of questions and answers, Actualtests has assembled to take you through 192 Q&As to your 642-521 Exam preparation. In the 642-521 exam resources, you will cover every field and category in CCSP helping to ready you for your successful Cisco Certification.
Free Demo DownloadActualtests offers free demo for 642-521 exam (Cisco Secure PIX Firewall Advanced). You can check out the interface, question quality and usability of our practice exams before you decide to buy it.
Exam DetailsThe Cisco Secure PIX Firewall Advanced exam (CSPFA 642-521) is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taking the CSPFA v3.2 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the PIX Firewall product family. CCNA or CCDA recertification candidates who pass the 642-521 CSPFA exam will be considered recertified at the CCNA or CCDA level.
QUESTION 11:
What is the maximum number of interfaces the pix 535 can support?
642-521
Actualtests.com - The Power of Knowing
A. 6
B. 8
C. 9
D. 10
Answer: D
Explanation:
The 535 can support up to 10 different interfaces. The 525 can support 8 and the 515 and
520 can support up to 6.
QUESTION 12:
Which of the following pix models are unable to provide failover? Choose all that
apply.
A. 501
B. 506
C. 515
D. 520
Answer: A,B
Explanation:
All pix models including the FWSM can provide failover, except for the 501 and 506.
QUESTION 13:
Which of the following is a hardware card that can be installed on a pix to increase
vpn throughput?
A. pfs
B. ike
C. stp
D. vac
Answer: D
Explanation:
Pix firewall models 515, 525, and 535 support VPN Accelerator Cards (VAC’s) that
process encryption and decryption in hardware, relieving the pix cpu.
QUESTION 14:
How many available PCI slots does a pix 515 have?
642-521
Actualtests.com - The Power of Knowing
A. 0
B. 1
C. 2
D. 3
E. 4
F. 6
Answer: C
Explanation:
The pix 515 has two available pci slots for additional ethernet interfaces to be installed.
QUESTION 15:
How much flash memory does a pix 525 come standard with?
A. 8mb
B. 16mb
C. 32mb
D. 64mb
Answer: B
Explanation:
The 515, 520, 525, and 535 all come standard with 16mb of flash.
QUESTION 16:
What is the maximum amount of RAM the pix 535 supports?
A. 128mb
B. 512mb
C. 1gb
D. 2gb
E. 4gb
Answer: C
Explanation:
The pix 535 firewall can support up to 1024mb (1gb) of RAM memory.
QUESTION 17:
Which of the following ports are not on a pix? Choose all that apply.
A. RJ-45
642-521
Actualtests.com - The Power of Knowing
B. USB
C. Firewire
D. DB-15
Answer: C
Explanation:
No pix firewall has a firewire port, but they do have RJ-45 (ethernet), DB-15 (failover),
and USB (reserved for future use) ports.
QUESTION 18:
How many concurrent vpn peers can the pix 525 support?
A. 250
B. 750
C. 2000
D. 5500
Answer: C
Explanation:
The pix 535, 525, 520, and 515 support up to 2000 concurrent vpn peers.
QUESTION 19:
John the security administrator at Certkiller Inc. is working with FWSM. Which statement
about installing the FWSM in a Catalyst 6500 switch is true?
A. The true statement is it must be installed in slot 1.
B. The true statement is it must be installed in slot 5.
C. The true statement is it cannot be installed in slot 1 because slot 1 is reserved for the
Supervisor Module.
D. The true statement is it is best to avoid installing it in slots 1, 2, 3 or 4 because they
are used for Supervisor and Switch Fabric Modules.
Answer: C
Explanation:
The following is an example of the output of the show module command
Router#show module
Mod slot ports module type model sub status
1 1 2 1000basex supervisor ws-x6k-s2u-msfc2 yes ok
15 1 1 multilayer switch feature ws-f6k-msfc2 no ok
2 2 6 firewall service module ws-svc-fwm-1 no ok
Reference: Cisco Secure PIX Firewall Advanced 3.1 chap19 page 14
642-521
Actualtests.com - The Power of Knowing
QUESTION 20:
Which of the following supports FWSM installation? Choose all that apply.
A. 1720 router
B. 5500 access server
C. 6500 switch
D. 7600 router
Answer: C,D
Free download:pass4sure CCSP 642-521
Free download?testking CCSP 642-521
| Actualtests Free Downloads |
|
Type |
Exam Bible | NEW Questions & Answers |
Latest Updated |
Download link |
 |
All Actual-Test 's Exam Pack |
858 |
1 days ago | Download |
Related Posts
Visited 33 times, 1 so far today
