Free sharing of new updated Cisco https://www.leads4pass.com/642-532.html exam practice test. If you are looking to get certified in short possible time, better try Flydumps latest new version Cisco 642-532 with all new questions and answers added,visit Flydumps.com to free Cisco 642-532 download vce and pdf files.

QUESTION 36
Drag Drop question

A.

B.
C.
D.

Correct Answer: Section: (none) Explanation
Explanation/Reference:
QUESTION 37
Which two are necessary to take into consideration when preparing to tune your sensor? (Choose two.)
A. the security policy
B. the network topology
C. which outside addresses are statically assigned to the servers and which are DHCP addresses
D. the IP addresses of your inside gateway and outside gateway
E. which traffic the sensor denies by default
F. the current configuration for each virtual sensor

Correct Answer: AB Section: (none) Explanation
Explanation/Reference:
QUESTION 38
Which statement is true about automatic signature and service pack updates?
A. The sensor can automatically download service pack and signature updates from Cisco.com.
B. The sensor can download signature and service pack updates only from an FTP or HTTP server.
C. You must download service pack and signature updates from Cisco.com to a locally accessible server before they can be automatically applied to your sensor.
D. When you configure automatic updates, the sensor checks Cisco.com for updates hourly.
E. If multiple signature or service pack updates are available when the sensor checks for an update, the sensor installs the first update it detects.

Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 39
Which command resets all signature settings back to the factory defaults?
A. default signatures
B. reset signatures
C. default service signature-definition
D. reset signatures all
E. default service virtual-sensor
Correct Answer: C Section: (none)

Explanation Explanation/Reference:
QUESTION 40
Drag Drop question

A.
B.
C.
D.

Correct Answer: Section: (none) Explanation
Explanation/Reference:
QUESTION 41
Which command provides a snapshot of the current internal state of a sensor service, enabling you to check the status of automatic upgrades and NTP?
A. show settings
B. show statistics
C. show statistics host
D. show service statistics
E. show ntp
F. show inventory

Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 42
Which two statements accurately describe the software bypass mode? (Choose two.)
A. When it is set to on, all Cisco IPS processing subsystems are bypassed and traffic is allowed to flow between the inline port or VLAN pairs directly.
B. When it is set to on, traffic inspection ceases without impacting network traffic.
C. The default setting is off.
D. If power to the sensor is lost, network traffic is not interrupted.
E. It can be used for redundancy in the event of hardware failure.
F. When it is set to off, traffic stops flowing if the sensor is down.

Correct Answer: BF Section: (none) Explanation
Explanation/Reference:
QUESTION 43
In which scenario are an AIC engine and the Application Policy Enforcement feature needed?
A. You think some users with operator privileges have been misusing their privileges. You want the sensor to detect this activity and revoke authentication privileges.
B. You think users on your network are disguising the use of file-sharing applications by tunneling the traffic through port 80. You want your sensor to identify and stop this activity.
C. You have been experiencing attacks on your voice gateways. You want to implement advanced VoIP protection.
D. You believe that hackers are evading the Cisco IPS. You want the sensor to eradicate anomalies in the IP and TCP layers that allow an IPS to be evaded.

Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 44
Which user account role on a Cisco IPS sensor must you specifically create in order to allow special root access for troubleshooting purposes only?
A. Operator
B. Viewer
C. Service
D. Administrator

Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 45
When performing a signature update on a Cisco IDS Sensor, which three server types are supported for retrieving the new software? (Choose three.)
A. FTP
B. SCP
C. RCP
D. NFS
E. TFTP
F. HTTP

Correct Answer: ABF Section: (none) Explanation
Explanation/Reference:

Whenever Cisco candidates take a tour of sample questions of Cisco https://www.leads4pass.com/642-532.html exam they find their training to be matchless to great extent.Passing the Cisco 642-532 on your own can be a difficult task,but with Cisco 642-532 preparation products,many candidates who appeared online passed Cisco 642-532 easily.