Free Cisco 640-554 Exam Dumps Questions & Answers

Which two statements about SSL-based VPNs are true? (Choose two.)

• A.  Asymmetric algorithms are used for authentication and key exchange.
• B.  The authentication process uses hashing technologies.
• C.  The application programming interface can be used to modify extensively the SSL client software for use in special applications.
• D.  Both client and clientless SSL VPNs require special-purpose client software to be installed on the client machine.
• E.  SSL VPNs and IPsec VPNs cannot be configured concurrently on the same router.

Under which option do you create an AAA authentication policy in Cisco Configuration Professional?

• A.  AAA Servers and Groups
• B.  Authentication Policies
• C.  Authentication Policies - Login
• D.  AAA Summary

Which security measures can protect the control plane of a Cisco router? (Choose two.)

• A.  Port security
• B.  CCPr
• C.  Parser views
• D.  CoPP
• E.  Access control lists

Which characteristic is a potential security weakness of a traditional stateful firewall?

• A.  It cannot support UDP flows.
• B.  It cannot ensure each TCP connection follows a legitimate TCP three-way handshake.
• C.  It works only in promiscuous mode.
• D.  It has low performance due to the use of syn-cookies.
• E.  The status of TCP sessions is retained in the state table after the sessions terminate.
• F.  It cannot detect application-layer attacks.

Which tasks is the session management path responsible for? (Choose three.)

• A.  Performing session lookup
• B.  Checking packets against the access list
• C.  Verifying IP checksums
• D.  Checking TCP sequence numbers
• E.  Allocating NAT translations
• F.  Performing route lookup