Upload
vudung
View
220
Download
0
Embed Size (px)
Citation preview
Cisco Specialist 648-375 Exam
Vendor:Cisco
Exam Code: 648-375
Exam Name: Cisco Express Foundation for Systems Engineers (CXFS)
QUESTION 1
Which two capabilities dons Cisco SecureX give organizations for their BYOD solutions? (Choose
two.)
A. integration with unified policy
B. limited endpoint device choice
C. efficient security policy with disabled cloud-based services
D. persistent security tor traditional PCs and for mobile devices
E. use of wired and wireless access but not VPN access
Correct Answer: AD
QUESTION 2
Which three of the following protocols are firs-hop redundancy protocols? (Choose three.)
A. HSRP
B. VRRP
C. GSRP
D. GLBP
Correct Answer: ABD
QUESTION 3
Which of the following statements correctly describes the Cisco WAAS portfolio?
A. Cisco WAAS is available as WAAS Mobile, WAAS Express, WAAS ISR modules, WAAS appliances,
and vWAAS.
B. Cisco WAAS is available as WAAS Mobile, WAAS Express, WAAS ISR modules, WAAS on SRE for
ISR G2, WAAS appliances, vWAAS, and WAAS PC.
C. Cisco WAAS is available as WAAS Mobile, WAAS Express, WAAS ISR modules, WAAS on SRE for
ISR G2, WAAS appliances, vWAAS, WAAS PC, and WAAS Server.
D. Cisco WAAS is available as WAAS Mobile, WAAS Express, WAAS ISR modules, WAAS on SRE for
ISR G2, WAAS appliances, and vWAAS.
E. Cisco WAAS is available as WAAS Express, WAAS ISR modules, WAAS on SRE for ISR G2, WAAS
appliances, vWAAS, and WAAS PC.
Correct Answer: D
QUESTION 4
Which two of the following unique advantages of the PD/PSE Cisco Catalyst Compact Switches?
(Choose two.)
A. They support 16 PoE output ports.
B. They support PoE+ output.
C. Due to the fanless design, they can be placed in the workplace and drastically reduce in-house
cabling needs.
D. They diminish the power infrastructure by supporting PoE+ input and PoE output at the same
time.
Correct Answer: CD
QUESTION 5
Which three of items are components of the Cisco f time Infrastructure? (Choose three.)
A. Cisco Prime Time Security Manager
B. Cisco Prime Network Control System
C. Cisco Prime WAN Management Solution
D. Cisco Prime LAN Management Solution
E. Cisco Prime Assurance Manager
F. Cisco Prime Network Analysis Module
Correct Answer: BDE
QUESTION 6
Which three are the most important business-driven considerations regarding networking
equipment? (Choose three.)
A. The network has to support security and energy efficiency.
B. Social networking and video services do not drive decisions on networking equipment.
C. You should accept that networking innovation has ended.
D. The network is a source of innovation and one of the most strategic assets.
E. Virtualization and remote access solution should be considered as a Software as a Service
solution.
F. A next-generation network enables business benefits and customer engagement.
Correct Answer: AEF
QUESTION 7
Which three are advantages of Cisco Prime LMS? (Choose three.)
A. It comes fur free with any Cisco ISR G2 or Cisco ASR purchase.
B. It includes Cisco Smart Business Architecture (SBA) validated templates.
C. It provides complete life-cycle management.
D. It includes Cisco LAN sensor licenses.
E. It includes Cisco Borderless Networks service work centers.
Correct Answer: BCE
QUESTION 8
Which two statements correctly describe Cisco Validated Design and Smart Business Architectures?
(Choose two.)
A. CVD is technology-oriented, while SBA is market and solution-oriented.
B. SBA guides are available for enterprise deployments only.
C. SBA is a blueprint for delivering the three Cisco architectures in a modular approach.
D. Gold partners have access to a demo lab for each validated design.
Correct Answer: AC
QUESTION 9
Which two of the following features are not supported by Cisco WAAS Express? (Choose two.)
A. DRE with persistent cache
B. TFO
C. Application optimizers
D. Auto-discovery of end nodes
Correct Answer: AC
QUESTION 10
Which two questions should you ask when assessing an organization's security needs? (Choose
two.)
A. Are you using the latest hardware and software versions tor your security devices?
B. Are you exploring new cloud business models?
C. What are the operating hours of your security response team?
D. Are you enforcing the same security policies consistently across your organization?
E. Are you using single-vendor security equipment?
Correct Answer: BD
QUESTION 11
Which two of the following need to be considered when designing QoS in a Cisco Borderless
Network? (Choose two.)
A. RFC 4594 describes how to classify and mark traffic at the campus and branch LAN using 12
different classifications.
B. According to RFC 4594, voice and video traffic should be sent through two separate priority
queues.
C. In order to maintain DSCP values end-to-end, inbound traffic from the SP cloud needs to be
reclassified if it was sent through a tunnel.
D. In order to receive priority treatment for mission-critical traffic across the SP cloud, the higher
number of locally used classes of service have to be mapped to the fewer number service
classes that are usually offered by service providers.
Correct Answer: AD
QUESTION 12
Which two statements are correct concerning Cisco Validated Design? (Choose two.)
A. SmartNet provides access to a demonstration lab for each validated design.
B. Cisco Validated Design consists of systems that are designed, tested, and documented to
facilitate and improve customer deployments.
C. Cisco Validated Design incorporates a limited range of technologies and products into a
portfolio of solutions that have been developed to address the business needs of customers.
D. The design zone for security cannot offer validated designs for several categories.
Correct Answer: BD
QUESTION 13
Which two of the following statements correctly describe architecture and design? (Choose two.)
A. The architecture shows building blocks and abstract capabilities of a system and the relational
ship between the individual components.
B. The design shows concrete products, expected performance, and scalability options of a
solution.
C. The design is the basis for creating the architecture.
D. The architecture includes a description of the best possible solution.
Correct Answer: AB
QUESTION 14
The Cisco SecureX Architecture is built on which three foundational principles? (Choose three.)
A. Virtual office management
B. Context-aware policy
C. Network and global intelligence
D. Network management
E. Context-aware security enforcement
F. Content access control
Correct Answer: BCE
QUESTION 15
Which two of the following statements about the Cisco switching product portfolio are correct?
(Choose two.)
A. The Catalyst 2000 series support PoE and PoE+, but they do not support 60 W per port like the
Cisco Catalyst 3000 and Cisco Catalyst 4000 series.
B. The Cisco Catalyst 3750 v2 Cisco Catalyst 3750-X are stackable.
C. The Cisco Catalyst 3560 v2 Cisco Catalyst 3560-X are stackable.
D. The Cisco Catalyst 2000 series support 802.1X are MACsec encryption.
Correct Answer: AB
QUESTION 16
Which two security features are parts of the Cisco Catalyst Integrated Security Toolkit, which is
available on almost all Cisco Catalyst switches? (Choose two.)
A. DNS snooping
B. Port security
C. Static ARP inspection
D. IP source guard
E. SGACL
F. MACsec
Correct Answer: BD
QUESTION 17
Which statement about MACsec is true?
A. MACsec does not work between any MACsec-capable supplicant and authenticator.
B. MACsec provides Layer 2 hop-by-hop encryption, based on the 802.1AE standard.
C. 802.1X protection includes the CMD field, which is used to carry the security group tag value.
D. Cisco AnyConnect Release 3.0 supports both roles: supplicant and authenticator.
Correct Answer: B
QUESTION 18
Which two statements about CVD and SBA are true? (Choose two.)
A. CVD is technology-oriented, while SBA is market and solution-oriented.
B. CVD includes everything from rough designs to tested versions of software code.
C. SBA guides are available for enterprise deployments only.
D. Gold partners have access to a demo lab for each validated design.
Correct Answer: AB
QUESTION 19
About 50 percent of the installed bases of Cisco routers are reaching end of service or end of life.
As a result, about 4 million units are expected to be replaced. What are the four strongest
arguments to pre-empt competitive attacks? (Choose four.)
A. Price per unit
B. Ability to meet local service provider requirements
C. Transparency of solutions
D. Quality of Cisco software and support
E. Service integration
F. Long investment cycles
Correct Answer: BCDE
QUESTION 20
Which two examples best describes the challenges that customers face in networks of today?
(Choose two.)
A. How can we disable users from using their own devices?
B. Do we need to invest in the BYOD solution?
C. How do we control energy consumption of devices that are owned by employees?
D. How can we effectively support extensive collaboration requirements, including video?
E. Which type of firewall should we deploy?
Correct Answer: BD
QUESTION 21
Which three statements accurately describe the evolution of the workplace and the importance of
the network? (Choose three.)
A. Cloud service cause end-user location to shift.
B. Mobility causes location borders to shift.
C. IT consumerization causes devices borders to shift.
D. IT consumerization causes location borders to shift.
E. Cloud services cause application borders to shift.
Correct Answer: BCE
QUESTION 22
Which three services can be provided by Cisco ISR G2 access routers? (Choose three.)
A. Cisco WAAS engine
B. NX-based services
C. video control unit services
D. IP telephony with SIP trunking
E. zone-based firewalling
F. integrated video conferences
Correct Answer: DEF
QUESTION 23
A customer wants to use the Cisco ASA for a VPN to interconnect the central site and three
branches. Which type of VPN would you recommend?
A. IPsec remote access VPN
B. IPsec site-to-site VPN
C. SSL remote access VPN
D. SSL site-to-site VPN
Correct Answer: B
QUESTION 24
Which three of the following statements are true regarding the design of a technical solution?
(Choose three.)
A. CVDs provide proven design of solutions that include only Cisco products, which ensures
single-vendor solutions.
B. The technical solution has to be based on the previously defined architecture.
C. Examples of low-level design tools are the Cisco Power Calculator, the Cisco Rack Space
Calculator, and the Cisco DSP Calculator.
D. Numerous CVDs are available that provide all the information needed for a successful
deployment.
E. The SBA toolkit includes foundation design guides that focus on concepts as well as foundation
design guides that show detailed configurations
Correct Answer: BDE
QUESTION 25
Which three are valid Cisco VPN design options for teleworkers? (Choose three.)
A. Cisco GET Easy VPN Remote
B. Cisco SSL VPN
C. Cisco Mobile VPN
D. Cisco Secure ACS
E. Cisco AnyConnect VPN
Correct Answer: BCE
QUESTION 26
What are the two business benefits of a BYOD solution? (Choose two.)
A. less IT effort to support and secure different devices
B. increased productivity using own devices
C. simplification of network and security complexity
D. less IT effort to support and secure different operating systems
E. reduced OpEx
Correct Answer: BE
QUESTION 27
Which statement correctly describes the importance and role of business processes?
A. Changes in company strategy cause changes in business process and consequently, in
operations.
B. Tasks in business process require interaction of various users using the same type of device.
C. Business processes are built on company operations.
D. Operations and consequently, business processes define the company strategy.
Correct Answer: A
QUESTION 28
Which two good operations for selling Cisco WAAS during a router refresh at branches? (Choose
two.)
A. In order to optimize bandwidth, WAAS Express (running in Cisco ISR G2 IOS Software) is a cost-
effective solution for branches.
B. In the frame of IT consolidation, vWAAS would be a good solution when deployed on Cisco ISR
G2 at the branches.
C. Application acceleration can be achieved by using WAAS Mobile on end devices and WAAS
Server on Cisco ISR G2 at the branches.
D. In order to optimize application performance, Cisco WAAS on Cisco SRE (in Cisco ISR G2) is a
good solution for branches.
Correct Answer: AD
QUESTION 29
Which three solutions are parts of the Cisco SecureX Architecture? (Choose three.)
A. secure switches
B. secure servers
C. secure mobility
D. secure network
E. secure routers
F. secure email and web
Correct Answer: CDF
QUESTION 30
What are the benefits of the Cisco Unified Access solution? (Choose three.)
A. One network with a single network architecture
B. One vendor
C. One unified policy
D. One management for networking and mobility
E. One architecture
Correct Answer: ACD
QUESTION 31
Which two of the following statements correctly Cisco lOS Software? (Choose two.)
A. A universal Cisco IOS image includes all software features; additional software features are
then activated by license keys without changing Cisco IOS.
B. In order to obtain a license file, the product ID and serial number of the device are sent to the
representative Cisco Channel Partner, along with the purchased product activation key.
C. The Cisco ASR 1000 series features lOS-XE, a software architecture that consists of a platform
component, IOS-XE middleware, and the actual Cisco IOS software.
D. Cisco IOS 15 is available in two trains; T, which includes bug fixes and new features, and M,
which includes bug fixes only.
Correct Answer: AB
QUESTION 32
What are two driving factors for new security challenges? (Choose two.)
A. increasing number of attacks from inside the network
B. increasing number of security patches distributed by operating system vendors
C. increasing number of employee owned devices accessing the corporate network
D. adoption of virtualization and cloud services
E. increasing number of outdated encryption algorithms
Correct Answer: CD
QUESTION 33
Which two statements about the capabilities of all Cisco AnyConnect 3.0 Secure Mobility Client for
Windows are true? (Choose two.)
A. It supports always-on connectivity by automatically establishing a VPN connection as needed.
It multiple VPN gateways exist, load sharing occurs in a round-robin fashion.
B. The order of policy enforcement is as follows; dynamic access policy, use attributes tunnel
group, group policy attributes.
C. It supports session persistence after hibernation or standby.
D. Trusted Network Detection allows the connection to be established without any user
intervention (authentication), if the client is located inside the office.
E. It is exclusively configured by central policies; no local configuration is possible.
Correct Answer: CD
QUESTION 34
Which two options show the correct associations of use cases with VPN technologies? (Choose
two.)
A. SP or large enterprise: MPLS, VPLS, SSL, VPN
B. site-to-site VPN: GRE, DMVPN, FlexVPN, GET-VPN, IPsec
C. site-to-site VPN: OTV, DMVPN, GRE, GET-VPN, IPsec
D. client access: SSL VPN, EZ-VPN, FlexVPN, MPLS
E. SP or large enterprise: MPLS, VPLS, OTV
Correct Answer: BE
QUESTION 35
Which are the two benefits of the "one policy" approach in the Cisco Unified Access solution?
(Choose two.)
A. Context-based control
B. Comprehensive visibility
C. Resiliency and scalability
D. user-specific services
E. uncompromised experience
Correct Answer: AD
QUESTION 36
Which three are benefits of a Cisco Borderless Network that go beyond TCO calculation? (Choose
three.)
A. high availability
B. cost per port
C. lowest power consumption
D. enhanced security
E. integrated services
Correct Answer: ADE
QUESTION 37
Which three of the following statements correctly describe the benefits of Cisco routers as an
important part of the Cisco Borderless Network? (Choose three.)
A. MACsec is supported only on high-end routers.
B. Cisco router security features include MACsec, BPDU Guard, and host IPS functionality.
C. Cisco offers a number of scalable and easy-to-maintain VPN solutions, including GET VPN and
DMVPN.
D. Cisco routers support zero-touch deployment for simple and fast deployment of new remote
locations.
E. Cisco offers performance-based routing, which adapts routing decisions based on the
requirements of certain traffic flows.
Correct Answer: CDE
QUESTION 38
Which two of the following statements correctly describe service modules available for the 3560-
X and 3750-X switches? (Choose two.)
A. The C3KX-SM-10G service module provides flexible netflow.
B. The C3KX-SM-10G service module offers MACsec encryption at line rate.
C. The C3KX-NM-10GT service module offers two 10 Gigabit Ethernet SFTP+ ports.
D. The C3KX-NM-10G and the C3KX-NM-10GT service modules provides flexible netflow.
Correct Answer: AB
QUESTION 39
Which three of the following are recommended minimum required building blocks for a Cisco
midmarket BYOD solution? (Choose three.)
A. Cisco Aironet 1600 Series Access Point
B. Cisco virtual wireless LAN controller
C. Catalyst 4500-X Series Switch
D. Cisco ASR 100 Series Router
E. Cisco Business-Class Email
Correct Answer: ABE
QUESTION 40
Which two Cisco products can ensure the "one policy" platform in the Cisco Unified Access solution?
(Choose two.)
A. Cisco Mobility Service Engine
B. Cisco Identify Service Engine
C. Cisco AnyConnect
D. Cisco WLC
E. Cisco Security Manager
F. Catalyst 4500-X Series Switch
Correct Answer: BC
QUESTION 41
Which three of the following statements are correct regarding security features available on Cisco
Catalyst switches? (Choose three.)
A. Port security prevents MAC address flooding.
B. DHCP snooping prevents rogue DHCP servers from being placed on the network.
C. IP Source Guard prevents ARP spoofing attacks.
D. Private VLAN prevents client to client communication.
E. MACsec provides end-to-end encryption.
Correct Answer: ABD
QUESTION 42
Which three of these vendors are the strongest competitions to Cisco in the switching market?
(Choose three.)
A. Riverbed Technology
B. Extreme Networks
C. Juniper
D. Brocade
E. HP
F. IBM
Correct Answer: CDE
QUESTION 43
Which statement about Cisco Prime is true?
A. It provides simple and efficient management across architectures, networks and services.
B. It is an expert-level monitoring and troubleshooting tool based on Cisco SIO.
C. It provides simple and efficient management of security services.
D. It provides management services for all TrustSec products.
Correct Answer: A
QUESTION 44
Which three are challenges that are related to video deployments that are addressed by borderless
network services in Cisco routers and by Cisco MediaNet? (Choose three.)
A. bandwidth issues that are caused by centralized video mixing
B. lack of support for far-end camera control (FECC) at some video terminals
C. limited availability of high-speed video connections between sites
D. difficult configuring new video devices at all sites
E. difficult monitoring video performance and user experience
Correct Answer: CDE
QUESTION 45
Which two of these Catalyst switch series are typically deployed in commercial customer networks?
(Choose two.)
A. Catalyst 3750-C Series Switches
B. Catalyst 4500-X Series Switches
C. Catalyst 2960-C Series Switches
D. Catalyst 6500 Series Switches
E. Catalyst 3560-C Series Switches
Correct Answer: BD
QUESTION 46
Which three are the benefits of the Cisco SecureX architecture? (Choose three.)
A. Delivers granular visibility and control down to the user and device level.
B. Provides faster, more accurate protection from threats.
C. Increase operational efficiency with simplified polices, integrated security options, and
automatic security enforcement.
D. Improves network security in cooperation with trusted vendor, third-party ecosystem.
E. Provides partial security coverage over the network devices.
Correct Answer: ABC
QUESTION 47
Is MACsec supported on all Cisco Catalyst switches?
A. It is supported only on Catalyst 6500 Series Switches and Nexus switches.
B. It is supported only on Catalyst 3560-C Series Switches and above.
C. Yes, it is supported on all switches.
D. It is supported only on Catalyst 4500-X Series Switches and above.
Correct Answer: B
QUESTION 48
Which three best describe the Cisco Borderless Network Architecture? (Choose three.)
A. A Cisco Borderless Network Architecture providers borderless network services.
B. User services are not part of the Cisco Borderless Network Architecture.
C. Routers and switches provide transport services and operate at Layer 2 and Layer 3 of the Cisco
Borderless Network Architecture.
D. Infrastructure and network services are the basis for user services.
E. A Cisco Borderless Network is based on a common network infrastructure.
Correct Answer: ADE
QUESTION 49
Which three are main drivers for changing operations? (Choose three.)
A. change of market trends
B. change of competition
C. change of application software version
D. Change of relative strengths
E. migration to Cisco single-vendor networking solution
F. migration of the enterprise network to IPv6
Correct Answer: ABD
QUESTION 50
Which two items are services that are provided by Cisco Fabric Services? (Choose two.)
A. DPVM configuration distribution
B. Kerberos proxy distribution
C. VLAN database distribution
D. device alias distribution
E. RSA key pair distribution
Correct Answer: AD
QUESTION 51
Which statement about the Layer 3 card on the Cisco Nexus 5500 Series Switch is true?
A. BGP support is not provided, but RIP, EIGRP, and OSPF support is provided.
B. Up to two 4-port cards are supported with up to 160 Gb/s of Layer 3 forwarding capability.
C. Port channels cannot be configured as Layer 3 interfaces.
D. Up to 16 FEX connections are supported.
Correct Answer: D
QUESTION 52
Which three selections represent implementations of Cisco VN-Link technology? (Choose three.)
A. VMware PTS
B. Cisco Nexus 2000 FEX
C. Cisco Nexus 1000V
D. vMotion
E. Cisco VM-FEX
Correct Answer: ACD
QUESTION 53
Which two statements about Cisco Nexus 7000 line cards are true? (Choose two.)
A. The F2 line card must reside in the admin VDC.
B. F line cards are performance-oriented and likely connect northbound to the core Layer 3
connectivity.
C. M1, M2, and F1 cards are allowed in the same VDC.
D. M line cards are service-oriented and likely face the access layer and provide Layer 2
connectivity.
E. M line cards support Layer 2, Layer 3, and Layer 4 with large forwarding tables and a rich
feature set.
Correct Answer: CE
QUESTION 54
Which statement about scalability in Cisco OTV is true?
A. Unknown unicasts are handled by the authoritative edge device.
B. The control plane avoids flooding by exchanging MAC reachability.
C. Any encapsulation overhead is avoided by using IS-IS.
D. IP-based functionality provides Layer 3 extension over any transport.
Correct Answer: B
QUESTION 55
Which statement about electronic programmable logic device image upgrades?
A. You can execute an upgrade or downgrade only from the active supervisor module.
B. FPLD and ISSU image upgrades are nondisruptive.
C. Whether the module being upgraded is online or offline, only the EPLD images that have
different current and new versions are upgraded.
D. An EPLD upgrade must be performed during an ISSU system or kickstart upgrade.
Correct Answer: A
QUESTION 56
What mode is required on a Cisco Nexus 7000 32-port 10-GB module port group to allow equal
access to the 10-GB port controller?
A. Community
B. Shared
C. Dedicated
D. Assigned
Correct Answer: B
QUESTION 57
Correct Answer:
QUESTION 58
Which Cisco Nexus feature is best managed with DCNM SAN?
A. AAA
B. domain parameters
C. virtual switches
D. VSS
Correct Answer: C
QUESTION 59
Which two of traffic are carried over a vPC peer link when no failure scenarios are present? (Choose
two.)
A. Multicast data traffic
B. Unicast data traffic
C. Broadcast data traffic
D. vPC keep-alive messages
Correct Answer: AC
QUESTION 60
Correct Answer:
QUESTION 61
By default it will take 10 seconds for authentication to fail due to an unresponsive RADIUS server
before is Cisco Nexus series switch reverts to another RADIUS server or local authentication. What
is one efficient way to improve the reaction time to a RADIUS server failure?
A. Decrease the global RADIUS timeout interval to 5 seconds.
B. Configure the RADIUS retransmission count and timeout interval per server, versus globally.
C. Configure per server a test idle timer, along with a username and password.
D. Decrease the global RADIUS retransmission count to 1.
Correct Answer: C
QUESTION 62
Which four features are provided by the Cisco AnyConnect client for Windows? (Choose four.)
A. SSL VPN
B. IPsec VPN
C. host intrusion prevention system
D. presence
E. MACsec encryption
F. antivirus
G. personal firewall
H. Cisco ScanSafe integration
Correct Answer: ABEH
QUESTION 63
Which three of the following are major trends that fuel the demand for routing and switching?
(Choose three.)
A. Mobility
B. Video
C. Bandwidth optimization
D. Cloud
E. IT standardization
Correct Answer: ABD
QUESTION 64
Which two statements are true about CVD and SBA? (Choose two.)?
A. The SBA toolset includes Partner Enablement Assets and EcoPartner Guides.
B. SBA guides are available for enterprise deployments only.
C. CVDs are end-to-end designs which are well-tested and fully documented.
D. Gold partners have access to a demo lab for each validated design.
Correct Answer: AC
QUESTION 65
Which three of the following are successful examples of strategic IT investments improving
operational agility? (Choose three.)
A. A company offers mobile email to its employees, who can then react faster to requests.
B. A company implements collaboration solutions, which simplified information exchange.
C. A company changes its security strategy from "lock down" to "secure access from anywhere",
so that users are "always-on" and can easily work remotely.
D. A company implements EnergyWise solutions, which drastically reduce energy costs
E. A company provides support for a BYOD solution, which increases the investment and requires
network upgrades, but provides limited improvements compared to a well-known remote
access solution.
Correct Answer: ABC
QUESTION 66
Which three of the following statements correctly describe switching? (Choose three.)
A. A Layer 2 switch operates up to the data link layer of the OSI network model
B. A Layer 3 switch operates up to the transport layer of the OSI network model
C. A dual-layer switch operates at the transport and data link layers of the OSI network model.
D. A dual-layer switch operates at the data link and network layers of the OSI network model.
E. A multilayer switch operates up to Layer 4 of the OSI network model.
Correct Answer: ABE
QUESTION 67
Which three of the following statements about competitors to Cisco in the switching market are
true? (Choose three.)
A. Cisco has a market share of about 70% in the Layer 2 and Layer 3 managed switch market.
B. HP is one of the strongest competitors with a market share of about 20%.
C. Most of the competitors offer me-too point products only; they lack an overall solution
framework similar to the Cisco Borderless Network.
D. Juniper has a market share of less than 3%.
E. Competitors efficiently support the BYOD solution.
Correct Answer: ACD
QUESTION 68
Which three of the following are quantifiable savings that help compensate for the premium price
of a Cisco Catalyst switch compared to a competing product? (Choose three.)
A. Ease of deployment for video and security
B. Savings on energy enabled by EnergyWise
C. Platform longevity savings caused by extended refresh cycles
D. Savings on switch software
E. Savings on adding additional switch ports to the switch
Correct Answer: ABC
QUESTION 69
Which three of the following statements correctly describe the Cisco router portfolio? (Choose
three.)
A. All Cisco ISR G2 routers provide network automation, consolidated VPN, and security features.
B. The Cisco 800 and 1900 router series both offer entry-level application optimization features.
C. The Cisco 1900, 2900, and 3900 router series provide video and collaboration features.
D. The Cisco 2900 and 3900 router series support Cisco UCS Express.
E. The Cisco 1900 router series supports Cisco Unified Communications Manager Business
Edition 6000.
Correct Answer: ABD
QUESTION 70
Which of the following statements correctly describes the platform module slot evolution from
pre- ISR through ISR to ISR G2?
A. All three platforms support WIC, VWIC, and VIC.
B. NM and NME can be used in the ISR G2 via an adapter. NME-X is not supported on ISR G2.
C. All three platforms support AIM.
D. ISR and ISR G2 support PVDM2; no adapter is required in ISR G2.
Correct Answer: B
QUESTION 71
Which two configurations are performed on Cisco IOS routers when using Cisco AutoSecure?
(Choose two.)
A. ICMP is globally disabled.
B. Directed broadcasts are globally disabled.
C. Source routing is globally disabled.
D. Proxy ARP is disabled on all interfaces.
Correct Answer: CD
QUESTION 72
Which two of the following are components of Cisco MediaNet that simplify network assessment,
monitoring, and troubleshooting? (Choose two.)
A. MediaTrace
B. MediaPing, using real SSRC-ID
C. Traffic Simulator, based on IP SLA
D. Traffic Simulator, based on ping
Correct Answer: AC
QUESTION 73
Cisco MediaNet provides multimedia optimization services in a Cisco Borderless Network. Which
two of the following statements correctly describe Cisco MediaNet? (Choose two.)
A. Cisco MediaNet Performance Monitor collects performance metrics of video traffic as flexible
netflow records which can be processed by any netflow collector, such as Cisco Prime
Assurance Manager.
B. Cisco MediaNet supports only SNMP traps but not syslog messages.
C. When using PVDM3 on Cisco ISR G2, video streams of the same type can be locally mixed
within the router. Video transcoding services require a dedicated video MCU.
D. Cisco MediaNet Mediatrace allows real-time troubleshooting by providing details about every
hop of the end-to-end path of your mediastream.
Correct Answer: AD
QUESTION 74
Which two of the following statements correctly describe Cisco Prime features that help improve
operational efficiency? (Choose two.)
A. The Cisco Prime user interface is optimized for touchscreens.
B. All components of the Cisco Prime for Enterprise product portfolio provide a common look
and feel, which simplifies usability.
C. Integrated workflows and best practices enable quick and error-free deployment.
D. TrustSec, MediaNet, and EnergyWise services are only configured outside Work Centers in
Cisco Prime LMS.
Correct Answer: BC
QUESTION 75
Which two of the following statements correctly describe how Cisco Prime NCS simplifies
troubleshooting? (Choose two.)
A. It automatically configures a Cisco AnyConnect SSL tunnel, which allows Cisco TAC engineers
to connect to malfunctioning devices.
B. It enables network operators to open instant messaging conversations with Cisco TAC
engineers.
C. Cisco Smart Interactions allow network operators to open service requests to Cisco TAC in a
controlled manner. Relevant information such as current configuration, last configuration
changes, and events can be attached by a single mouse click.
D. It can collect crucial information such as associated devices and their current IP address and
status based on the user's name.
Correct Answer: CD
QUESTION 76
Which two capabilities does Cisco SecureX give organizations for their BYOD solutions? (Choose
two.)
A. limited endpoint device choice
B. integration with unified policy
C. use of wired and wireless access but not VPN access
D. persistent security for traditional PCs and for mobile devices
E. efficient security policy with disabled cloud-based services
Correct Answer: BD
QUESTION 77
Which four of the following are included in the SBA toolset? (Choose four.)
A. Partner enablement assets
B. Software release notes
C. Design guides
D. Foundation deployment guides
E. Command reference guides
F. Unified Communications Acceleration Guide
Correct Answer: ACDF
QUESTION 78
Which three of the following are valid steps when building an architectural roadmap for a customer?
(Choose three.)
A. Understand the business objectives, current environment, and pain points of the customer.
B. Assess the current infrastructure, financial data, and operational management capabilities.
C. Identify configuration flaws on individual devices.
D. Analyze collected data, identify potential savings, and develop TCO and ROI.
E. Deliver business case documentation, detailed technical solution scenarios, and TCO report.
Correct Answer: ABD
QUESTION 79
Which two of the following statements correctly describe Cisco WAAS Mobile? (Choose two.)
A. One Cisco WAAS Mobile server can serve up to 10,000 concurrent mobile users.
B. The Cisco WAAS Mobile client is optimized for smartphones with 3G or 4G connections.
C. The Cisco WAAS Mobile Server provides up to 1 Gb/s LAN throughput.
D. The Cisco WAAS Mobile Server is based on a UCS-C series server and provides up to 200 Mb/s
WAN throughput.
Correct Answer: AD
QUESTION 80
Which three statements correctly describe the Cisco router portfolio?
A. The Cisco 800 Series integrated services router family is a 1-RU solution for small offices.
B. The Cisco 1900 Series integrated services router family is a 1-RU solution for small offices.
C. The Cisco 1900 Series integrated services router family provides a modular solution for small
offices.
D. The Cisco 800 Series integrated services router family includes 3G WAN options.
E. The Cisco 2900 Series integrated services router family provides interactive media services and
service virtualization for midrange deployments.
F. The Cisco 2900 Series integrated services router family provides interactive media services,
including TelePresence.
Correct Answer: CDE
QUESTION 81
Which of the following is not a business benefit that is offered by a Cisco switching solution?
A. deliver a positive user experience
B. reduce energy costs and resource consumption by up to 55 percent
C. deliver superior investment protection
D. deliver superior access and service levels
Correct Answer: B
QUESTION 82
What is the role of Cisco AnyConnect in a borderless network?
A. Access control to switch ports is provided by Cisco AnyConnect.
B. Cisco AnyConnect is a host intrusion prevention application with an integrated personal
firewall.
C. Cisco AnyConnect enables secure connectivity of authorized devices.
D. Cisco AnyConnect filters malicious content from HTTP traffic.
Correct Answer: C
QUESTION 83
Which two of the following are driving factors for implementing an open and secure customer
network?
A. the need to access internet and cloud-based services from within the customer network
B. the need to decrease network downtime
C. the need to access corporate assets from remote locations
D. the need to access corporate assets from office desktops
E. the need for lower TCO
Correct Answer: AC
QUESTION 84
Which statement is true regard IPv6?
A. IPv6 support on network devices eliminates the need for additional security devices and
applications in the network.
B. IPv6 is applicable in service provider networks but is an overhead item in smaller networks.
C. All devices currently support IPv6 and IPv4.
D. The Cisco Transformative Networking initiative provides an analysis of the network regarding
the capabilities of devices to support IPv6.
Correct Answer: D
QUESTION 85
Which two are switch security features that enable a secure borderless network?
A. device profiling and profile-based selection of security policies
B. Cisco ASA Firewall
C. MACSec
D. Security Group Tagging
Correct Answer: CD
QUESTION 86
Which one of these actions is the best way to resolve security challenges in borderless networks?
A. Update existing security products to the latest hardware and software versions.
B. Identify the vulnerabilities of newly deployed services and protect them by the appropriate
point device.
C. Identify vulnerabilities of newly deployed entry points and deploy the appropriate security
solutions at the corresponding network access point.
D. Migrate to more architectural approach to security.
Correct Answer: D
QUESTION 87
What are the three elements of the Cisco Unified Access solution?
A. one policy
B. one switch
C. one management
D. one network
E. one architecture
Correct Answer: ACD
QUESTION 88
Which two statements are true about Cisco smart business of architecture? (Choose two.)
A. Cisco smart business architecture shifts the view from short term and tactical to long-term
and strategic.
B. Cisco smart business architecture protects IT investments by making sure that all spending is
linked to a long-term return on investment.
C. Cisco smart business architecture helps build a comprehensive, unified architecture that
matches current and future demands.
D. Cisco smart business architecture guides are interactive, allowing step by step creation of
designs that fit individual requirements. Imbedded Cisco smart business architecture maps are
available for download at each step.
E. Cisco smart business architecture framework supports enterprise network design without
remote locations.
Correct Answer: AC
QUESTION 89
Which four operational attributes applied to Cisco prime for enterprise? (choose four)
A. Optimized operations experience
B. Support for day zero attacks
C. Integrated Cisco best practices
D. Available as a physical and virtual appliance
E. Complete lifecycle management
F. Smart device support
Correct Answer: ACDE
QUESTION 90
What are two business values of Cisco validated design and Cisco smart business architecture?
(Choose two)
A. Cost reduction
B. Vision
C. agility
D. Redundancy
Correct Answer: AC
QUESTION 91
What two other architectures is the Cisco borderless network architecture linked to? (Choose two)
A. Cisco Media-Net Architecture
B. Cisco Security Architecture
C. Cisco TrustSec Architecture
D. Cisco Collaboration Architecture
Correct Answer: BD
QUESTION 92
Which statement does not correctly describe the impact of business video applications to the
network?
A. Video applications rapidly increase the traffic within the network.
B. In order to ensure business quality video, video traffic needs to be prioritized.
C. Various devices with different capabilities need to be able to join video conferences.
D. Video conferences reduce the network load by eliminating the need to exchange files over the
network in order to share information.
Correct Answer: D
QUESTION 93
Which of the following statements best describes the strategic importance of the network?
A. The network is most important for internal applications.
B. The network is most important for providing customers with access to company services.
C. The network supports business processes by integrating people and devices with applications.
D. The network integrates internal and external users and their devices.
Correct Answer: C
QUESTION 94
Which statement is true regarding TCO calculations?
A. Different stakeholders have the same expectations regarding the TCO calculation.
B. Cisco Capital financing offers is a youth service that provides simple budgeting services and
helps customers to convert OpEx to CapEx.
C. Business benefits that are beyond the TCO and cannot be measured exactly should not be part
of the TCO calculation and therefore should not be presented to the customer.
D. Account managers should emphasize strategic values of the Cisco SecureX by showing how
Cisco SecureX supports the main current market transitions (mobility, collaboration, cloud
services, and IT consumerization)
Correct Answer: D
QUESTION 95
Which three are important market drivers for WAN optimization? (Choose three.)
A. Eliminate the need for complex IPSLA implementation
B. Acceleration of applications
C. Optimization of bandwidth
D. Offer value added, optimized application services
E. Sufficient bandwidth availability
Correct Answer: BCD
QUESTION 96
Which one of the statements is true about Cisco EnergyWise Technology?
A. Cisco EnergyWise management is supported only via Cisco EnergyWise orchestrator.
B. Cisco EnergyWise domains are defined on the domain name system.
C. Cisco EnergyWise in points are managed by policies and monitored for energy usage.
D. Cisco EnergyWise is supported on catalyst 3560 series switches and higher.
Correct Answer: C
QUESTION 97
Which of the following Cisco catalyst switch families is typically deployed outside the wiring closet?
A. Cisco desktop switches
B. Cisco compact switches
C. Cisco catalyst 1000 series
D. Cisco catalyst 2000 series
Correct Answer: B
QUESTION 98
Which two statements applied to a collaboration architecture that is integrated with the Cisco
SecureX? (Choose two.)
A. Security Services are available at the network level
B. Security Services are available for collaboration appliances only
C. Security Services are available for collaboration services
D. Security Services are not available for client services
E. Cisco AnyConnect does not support secure connectivity to the enable access to collaborative
applications for mobile devices
Correct Answer: AC
QUESTION 99
Which three are challenges that are related to video deployments that are addressed by borderless
Network Services in Cisco routers and by Cisco MediaNet? (Choose three)
A. A bandwidth issues that are caused by centralized video mixing
B. Difficulty monitoring video performance in user experience
C. Difficulty configuring new video devices of all sites
D. Lack of support for far end camera control (FECC) at some video terminals
E. Limited availability of high speed video connections between sites
Correct Answer: ABC
QUESTION 100
What is the primary security requirements related to the social media and collaboration?
A. Protection of network edges
B. Securing cloud transition
C. Enabling BYOD transformation
D. Authorizing content use
Correct Answer: D
QUESTION 101
Which two Cisco Products can demonstrate the "one policy" approach in the Cisco unified access
solution? (Choose two.)
A. Cisco mobility services engine
B. Catalyst 6500 series switch
C. Cisco ISE
D. Cisco WLC
E. Cisco AnyConnect
Correct Answer: CE
QUESTION 102
What are four major solution areas of Cisco SecureX architecture? (Choose four)
A. Secure networking branch
B. Secure access
C. Secure mobility
D. Secure data center and cloud
E. Secure management
F. Secure WAN
Correct Answer: ABCD
QUESTION 103
Which two of these routers series on packet voice/data module slots? (Choose two)
A. Cisco 2900 series routers
B. Cisco 1900 series routers
C. Cisco 800 series routers
D. Cisco 3900 series routers
E. Cisco ASR 1000 series routers
Correct Answer: AD
QUESTION 104
Which two statements accurately described the impact of BYOD to the network? (Choose two)
A. TCO is reduced because employees use their privately owned devices.
B. BYOD increases productivity but IT must find ways to integrate the utilized devices seamlessly
with wired as well as Wireless Networks.
C. BYOD adds the requirement to support multiple operating systems.
D. Corporate users to expect the same look and feel when using their own devices.
Correct Answer: BC
QUESTION 105
Which of the statements about Cisco WAAS is true?
A. Cisco WAAS express as the same features as Cisco WAAS and differs only in performance.
B. Cisco WAAS express and run simultaneously with other Express Services on the same Cisco
Services ready engine.
C. Cisco WAAS express and run simultaneously on the same Cisco Service ready engine only with
Cisco unity express.
D. When Cisco WAAS express is not required, and other Express Service can run on the same
Cisco Services ready engine.
Correct Answer: D
QUESTION 106
Which of the following statements best describes total cost of ownership (TCO)?
A. TCO is the sum of all CapEx.
B. TCO consists of direct costs (CapEx) and indirect such as labor and training.
C. TCO Consists of direct costs (CapEx) and indirect costs that is training, user productivity, growth
potential, and so on.
D. TCO is relevant to the finance manager only.
Correct Answer: B
QUESTION 107
Which two statements describe the role of core technologies with regard to business processes?
(Choose two.)
A. An end-to-end borderless network architecture builds the foundation for integrating people
and tasks in changing market environments
B. Operational agility is important for businesses today a constant, stable core allows IT to focus
on the rapidly changing applications.
C. In order to react to market changes, operations and processes have to be modified as well.
The network infrastructure has to match the change requirements.
D. Requirements to core technologies are rather static and are therefore independent of market
changes.
Correct Answer: AC
QUESTION 108
Which two statements best describe the challenges that customers have to face when providing
services and the borderless world? (Choose two.)
A. How do you control energy consumption of devices that are owned by employees?
B. How can you support video in the whole network?
C. How can you integrate cloud services seamlessly into your network?
D. Which type of firewall should you deploy?
Correct Answer: BC
QUESTION 109
A company needs to provide site-to-site VPN, remote access VPN, and firewall protection. Which
device best supports all three functions?
A. Cisco PIX
B. Cisco ASA
C. Cisco Concentrator
D. Cisco Router and Security Device Manager
Correct Answer: B
QUESTION 110
What can be used to troubleshoot complex network and VPN connectively issues?
A. NAT
B. CCP
C. IPsec
D. NAC
Correct Answer: B
QUESTION 111
Which two statements best describe the wireless core feature set using autonomous access points
when implementing Wireless Domain Services? (Choose two)
A. The primary Layer 2 WDS server address is configured via the infrastructure access point GUI.
B. The primary Layer 2 WDS server address is automatically discovered by the infrastructure
access points through multicast.
C. The primary Layer 2 WDS is selected by the highest MAC address, followed by priority number.
D. The primary Layer 2 WDS is selected by the highest priority number, followed by MAC address.
E. The primary Layer 2 WDS is selected by the highest IP address, followed by MAC address.
Correct Answer: BD
QUESTION 112
Which companion switch is recommended to be installed with Cisco Smart Business
Communications System?
A. C2950
B. C3750
C. ESW 500
D. SRW224G4
Correct Answer: C
QUESTION 113
In which of these phase is a customer’s current network infrastructure assessed?
A. plan
B. design
C. implement
D. prepare
Correct Answer: A
QUESTION 114
What are two ways to secure traffic across a network? (Choose two)
A. Cisco ISR G2
B. Identify-management devices
C. ACLs
D. Firewalls
E. VPN connection
F. VLANs
Correct Answer: DE
QUESTION 115
You have just configured HSRP and need to determine which router is active. Which command
should you enter?
A. Show ip hsrp active
B. Show standby active
C. Show standby
D. Show active
Correct Answer: C
Ensurepass.com Members Features:
1. Verified Answers researched by industry experts.
2. Q&As are downloadable in PDF and VCE format.
3. 98% success Guarantee and Money Back Guarantee.
4. Free updates for 180 Days.
View list of All Exam provided:
http://www.ensurepass.com/certfications?index=A
To purchase Lifetime Full Access Membership click here:
http://www.ensurepass.com/user/register
Valid Discount Code for 2014: SFOH-FZA0-7Q2S
To purchase the HOT Exams:
Cisco CompTIA Oracle VMWare IBM
100-101 640-554 220-801 LX0-101 1Z0-051 VCAD510 C2170-011
200-120 640-802 220-802 N10-005 1Z0-052 VCP510 C2180-319
300-206 640-816 BR0-002 SG0-001 1Z0-053 VCP550 C4030-670
300-207 640-822 CAS-001 SG1-001 1Z0-060 VCAC510 C4040-221
300-208 640-864 CLO-001 SK0-002 1Z0-474 VCP5-DCV RedHat
350-018 642-467 ISS-001 SK0-003 1Z0-482 VCP510PSE EX200
352-001 642-813 JK0-010 SY0-101 1Z0-485 EX300
400-101 642-902 JK0-801 SY0-301 1Z0-580
640-461 700-302 1Z0-820