Cisco 642-591 Exam - Certifyme.com

Free 642-591 Sample Questions:

1.The NAS is configured to autogenerate an IP address pool of 30 subnets with a netmask of /30, beginning at address 192.168.10.0. Which IP address is leased to the end*user host on the second subnet?
A.192.168.10.4
B.192.168.10.5
C.192.168.10.6
D.192.168.10.7
Answer: C

2.Which default administrator group has delete permissions?
A.admin
B.help*desk
C.add*edit
D.full*control
Answer: D

3.What is the result when the condition statement in a Cisco NAA check for required software evaluates to false on a client machine?
A.The required software is automatically downloaded to the user device.
B.The required software is made available after the user is quarantined.
C.The user is put in the unauthenticated role and the software is considered missing.
D.The user is placed in the temporary role and the software is made available.
Answer: B

4.Which three components comprise a Cisco NAC Appliance solution? (Choose three.)
A.a NAC*enabled Cisco router
B.a Linux server for in*band or out*of*band network admission control
C.a Linux server for centralized management of network admission servers
D.a Cisco router to provide VPN services
E.a read*only client operating on an endpoint device
F.a NAC*enabled Cisco switch
Answer: B, C, E

5.When configuring a requirement, what does rule*to*requirement mapping accomplish?
A.associates a rule set to the remediation steps that a user follows to comply with the requirement
B.ensures that Nessus scan*based requirements are satisfied before the user can log in to the network
C.associates the rules for operating system*based checks to the requirement list
D.associates the requirement to a normal user role
Answer: A

6.Why is it critically important to maintain clock synchronization between Cisco NAC Appliance components?
A.Log files will not show the actual time of system events.
B.Cisco NAC Appliance components communicate using SSL certificates, which rely on accurate time to function correctly.
C.Cisco switches that are being managed by SNMP messages need to be time synchronized to function.
D.Accurate time is required when performing vulnerability assessment and remediation.
Answer: B

7.When configuring the Cisco NAM to implement Cisco NAA requirement checking on client machines, what is the next step after configuring checks and rules?
A.retrieve updates
B.require the use of the Cisco NAA
C.configure session timeout and traffic policies
D.map rules to requirement E.configure requirements
Answer: E

8.Refer to the exhibit. When logging in to a Cisco NAC Appliance solution, an end user is prompted for a username, password, and provider. What should be entered in the Provider drop*down field shown in the exhibit?

A.the authenticating NAS
B.the authorizing NAM
C.the name of the ISP
D.the external authenticating server
Answer: D

9.What are the two types of traffic policies that apply to user roles? (Choose two.)
A.IP*based
B.peer*based
C.host*based
D.manager*based
E.server*based
F.VLAN*based
Answer: A, C

10.After you implement a network scan and view the report, you notice that a plug*in did not access any of its dependent plug*ins. What did you forget to do?
A.enable the Dependent Plug*in check box on the General Tab form
B.configure dependent plug*in support when you mapped the Nessus scan check to the Nessus plug*in rule
C.install dependent plug*ins when you updated the Cisco NAC Appliance plug*in library
D.load the dependent plug*ins for that plug*in in the Plug*in Updates form
Answer: D


PDF VERSION OF THE EXAM
http://www.certifyme.com/demos/642-591.zip

Official Page for the Exam
642-591 Braindumps 100% Pass Guaranteed at First Attempt - CertifyMe