Cisco 642-533 answers

642-533 Exam
Implementing Cisco Intrusion Prevention System (IPS)
* Exam Number/Code : Testinside 642-533
* Exam Name : Implementing Cisco Intrusion Prevention System (IPS)
* Questions and Answers : 136 Q&As
* Update Time: 2010-05-26
* Price: $ 85.00

1. In Cisco IDM, the Configuration > Sensor Setup > SSH > Known Host Keys screen is used for what purpose?
A. to enable communications with the Master Blocking Sensor
B. to enable communications with a blocking device
C. to enable management hosts to access the Cisco IPS Sensor
D. to regenerate the Cisco IPS Sensor SSH host key
E. to regenerate the Cisco IPS Sensor SSL RSA key pair
Answer: B

2. In which three of these ways can you achieve better Cisco IPS Sensor performance? (Choose three.)
A. enable all anti-evasive measures to reduce noise
B. place the Cisco IPS Sensor behind a firewall
C. always enable unidirectional capture
D. disable unneeded signatures
E. have multiple Cisco IPS Sensors in the path and configure them to detect different types of events
F. enable selective packet capture using VLAN ACL on the Cisco IPS 4200 Series Sensors
Answer: BDE

3. A user with which user account role on a Cisco IPS Sensor can log into the native operating system shell for advanced troubleshooting purposes when directed to do so by Cisco TAC?
A. administrator
B. operator
C. viewer
D. service
E. root
F. super
Answer: D

All the Cisco VPN and Security 642-533 dumps aids have been created by people who are personally familiar with Cisco 642-533 exams and who know all the difficulties and popular mistakes made by those who take a Cisco 642-533 test. The entire material is logically composed in such a way that everything becomes easy to understand for anyone. Many Cisco 642-533 guides include audio and video material. It is really easy to acquire Testinside Cisco 642-533 exams becausy of great variety of methods of payment.

We at Testinside provide comprehensive 642-533 exam questions for your prompt success. Our 642-533 exam braindumps are prepared by industry Experts who bring the latest Study Materials. You always get the most accurate and updated 642-533 Study Materials. Your success is guaranteed with us.

As a part of our online Cisco 642-533 exam training program, we offer the latest Cisco 642-533 braindumps and a good range of Cisco 642-533 answers. Most of our study materials for your Cisco 642-533 exam is exclusively prepared by the best brains and highly skilled professionals from the IT domain to ensure 100% pass percentage in your Cisco 642-533 Exam.

Read More

What CXOs consistently fail to grasp about enterprise security

IT security is often a nagging thorn in the side of enterprises and those that lead them.  It is viewed as a technical issue that should just be fixed.  In this week’s lecture track on security that I delivered for Internet Evolution’s 60 Days of Executive Education I started off with three things that CXOs consistently fail to grasp about enterprise security.

Good security operations is not the same as good security.   Every organization that uses computers has to deal with the mundane daily tasks of identifying and blocking malware, keeping and reviewing logs, generating reports, and demonstrating compliance.  Many organizations that I talk with are great at the operational tasks. They have deployed technology that helps them patch and manage end points, generate reports, and keep the audit teams happy.  But, there is a lot more to being secure than doing these tasks well.  Let me start with defining good security. From my Focus Note on the subject:

1. A secure network assumes the host is hostile
It has been years since a firewall that enforces policies based only on source-destination-service has been sufficient.  Trusted end points harbor malware, are controlled by attackers, and are launching points for attacks.  Network security solutions must be in-line and inspect all the traffic that passes through them.  They must look for viruses, worms, exploit traffic, and even unusual behavior.  IDC dubs these solutions "complete content inspection" firewalls. Many vendors refer to them as UTM, Unified Threat Management

One aspect of a secure network that is often overlooked is that the computers on the inside of the network are often the danger.  It could be an infected computer brought in by an employee or contractor; it could be a poorly patched server that has been compromised by an outside attacker.  Even the smallest organizations have to invest in network security solutions to block attacks from devices on the inside of the network.  This is accomplished through network segmentation and deploying content inspection capabilities internally. As threats multiply watch for solutions that either sit on top of the access switch or incorporate the switch in their configuration.
2. A secure host assumes the network is hostile
This is another way of stating the requirement for a layered defense model. A laptop, desktop, or server cannot rely on the network to keep it safe.  AV, firewalls, and anti-spyware solutions have to be installed and up-to-date.  Patches for critical applications and OS have to be installed as quickly as possible.  Browsing shields should be turned on and Microsoft IE should not be used if at all possible.

3. Secure applications assume the user is hostile
This is where authentication and authorization come in to play.  One of the best deterrents of malicious behavior is the end user's awareness that their actions are associated with them (strong authentication) and logged (behavior monitoring).  Many online services have failed to protect themselves from their customers.  This applies to internal file sharing and community services as well.

Why security investments never end.

Extract from my ZDNet post on the topic:
I engaged a visitor to booth I was manning at a the Gartner ITExpo in conversation about network security and he lashed out with “you security vendors are always trying to sell us a new box, you are a money hole we keep spending on but we still get hacked”. This is one of my hot buttons. Pinning the blame on the security industry for all the different solutions that do not inter-operate is a favorite game played by industry pundits and CIOs.
As I was digging my heels in and getting my hackles up I finally read this guy’s name badge. He was CIO of a major branch of the US military. Well, here is my answer to him, thought up way too late to confront him face to face.
No sir, you have not spent enough on security. Look to your own operations. Have you enforced segmentation of your network? Have you put firewalls between you and the other agencies? Do you still allow telnet and ftp in unauthenticated clear text? Have you deployed user provisioning? What does your patch management look like? Do you have effective anti-spyware? Do you do security assessments of your entire network on a continuous basis? I know the answers to these questions as well as you do. Look to your latest computer security scores from FISMA. An F. You see that? An F!

Before you point fingers at a security industry that is constantly evaluating the threats and creating counter measures look to your own actions; or lack thereof. You sir have failed in your duty to protect the assets of the US Military. You have allowed foreign entities to overrun your networks. On your watch our digital homeland has been invaded.

Strong words perhaps but I cannot emphasize strongly enough the need for continuous investment in security.

Audit and compliance get in the way of good security

Please do not confuse compliance with security.  There are indeed many standardized ways to accomplish good security operations and audit reports.  But many times the resources needed to evaluate and counter new threats are completely absorbed in the compliance effort.  Government regulations and outside auditors have tremendously distracting effects on IT security people.  They got into security because they like the day to day battle with bad guys- the technical challenge of securing networks and applications. They did not sign up for endless meetings and paper work.  So be vigilant and monitor your compliance efforts to ensure that they do not get in the way of your security.

Here is the original post:
What CXOs consistently fail to grasp about enterprise security

Read More

642-504 questions and answers

642-504 Exam Description
The Securing Networks with Cisco Routers and Switches 642-504 exam is one of the exams associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the SNRS course. This exam includes simulations and tests a candidate's knowledge and ability to secure networks using Cisco routers and switches.

 

642-504 Exam Topics
The following topics are general guidelines for the content likely to be included on the 642-504 Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Implement Cisco Layer 2 security
Configure Cisco IOS Firewalls to mitigate network threats
Configure Cisco IOS-IPS to identify and mitigate threats to network resources
Configure Cisco VPNs to provide secure connectivity for site-to-site and remote access communications
Implement Network Foundation Protection using the CLI

Testinside 642-504 Exam
While talking about the Cisco Certification Training Exams, it is hard to neglect Testinside reliability and pass ratio. Cisco 642-504 exam is especially designed to maximize your productivity and only emphasis on main parts of the 642-504 Exam. The pass ratio of this exam executed on the globe is maximized to Testinside.

Our most popular Testinside 642-504 training product is the 642-504 questions and answers with a downloadable testing engine. Use the Testinside 642-504 exam simulator to prepare for your upcoming exam and pass it with confidence!

Cisco 642-504 exam dumps have already proved its uniqueness and accuracy through thousands of Testinside users who have passed their 642-504 exam quite easily using Testinside 642-504 exam material.

Testinside Cisco 642-504 guarantees you could pass your 642-504 certification exam! Testinside 642-504 is your ultimate source for 642-504 exam preparation. If you use our Testinside Cisco 642-504 study guide or 642-504 test engine simulator and fail the corresponding 642-504 exam once within 90 days of purchase or within 90 days of receipt of the 642-504 product, which ever occurs latter. Contact Testinside to claim this 642-504 guarantee, then the 642-504 study material can be returned for a full refund.

Read More

Apple Iphone: Questions and Answers

The launch of Apple iPhone has arisen many questions than it answers. From many questions here are the few which users are apprehensive of it.



First, what email systems does iPhone is equipped of?

Apple iPhone comes with array of popular email standards — IMAP and POP3. Well, it very depends upon the email provider. Moreover, iPhone works with most popular email services, including Google Gmail, AOL, Yahoo! Mail, and .Mac Mail. There is Yahoo! Mail that supports “push” email and can automatically deliver new email messages to your iPhone.



Second, what kind of security features does iPhone offer? That come as a primary concern.



There is options in the phone through which one can protect access to information on your iPhone with a four-digit password. It is worth mentioning, for secure Internet access, iPhone supports industry-standard Wi-Fi security and virtual private networking (VPN).



Third, How do I charge my new iPhone? A very common question.



Just like an iPod, one can charge iPhone charges using the included USB 2.0 cable connected to your computer or to the included USB Power Adapter.



Fourth, can I surf the web on iPhone without a Wi-Fi connection?



The answer to this question is – Yes. When a Wi-Fi connection is not available, you can access the Internet using AT&T’s EDGE data network.



Fifth, What is the procedure that iPhone follows to send and receive email?



Well, iPhone sends and receives email over Wi-Fi and EDGE wireless networks.



Sixth, can I send and receive email from more than one account?



There is no problem with it. You can send and receive email from multiple email accounts on your iPhone.



Seventh, what types of email attachments can I view on iPhone?



iPhone displays most picture attachments from JPEG, GIF, to TIFF in-line with the text in email messages. iPhone can also view PDF, Microsoft Word, and Microsoft Excel email attachments.


Can I “unlock” iPhone and use it with another wireless carrier?
Apple iPhone

Read More