[New Questions] Just Updated 100% Valid Cisco 640-554 New Questions

Hi, I just took 640-554 test and passed with a great score of 1000/1000 scores. All examcollection and securitytut dump are no longer valid anymore. I recommend studying Lead2pass 308q Premium VCE. I can confirm that all new questions appear on my test. Keep up the good work and good luck!

QUESTION 268
What is the transition order of STP states on a Layer 2 switch interface?

A.    listening, learning, blocking, forwarding, disabled
B.    listening, blocking, learning, forwarding, disabled
C.    blocking, listening, learning, forwarding, disabled
D.    forwarding, listening, learning, blocking, disabled

Answer: C

Explanation:
The ports on a switch with enabled Spanning Tree Protocol (STP) are in one of the following five port states.
Blocking
Listening
Learning
Forwarding
Disabled
A switch does not enter any of these port states immediately except the blocking state. When the Spanning Tree Protocol (STP) is enabled, every switch in the network starts in the blocking state and later changes to the listening and learning states.
Blocking State
The Switch Ports will go into a blocking state at the time of election process, when a switch receives a BPDU on a port that indicates a better path to the Root Switch (Root Bridge), and if a port is not a Root Port or a Designated Port.
A port in the blocking state does not participate in frame forwarding and also discards frames received from the attached network segment. During blocking state, the port is only listening to and processing BPDUs on its interfaces. After 20 seconds, the switch port changes from the blocking state to the listening state.
Listening State
After blocking state, a Root Port or a Designated Port will move to a listening state. All other ports will remain in a blocked state. During the listening state the port discards frames received from the attached network segment and it also discards frames switched from another port for forwarding. At this state, the port receives BPDUs from the network segment and directs them to the switch system module for processing. After 15 seconds, the switch port moves from the listening state to the learning state.
Learning State
A port changes to learning state after listening state. During the learning state, the port is listening for and processing BPDUs . In the listening state, the port begins to process user frames and start updating the MAC address table. But the user frames are not forwarded to the destination. After 15 seconds, the switch port moves from the learning state to the forwarding state.
Forwarding State
A port in the forwarding state forwards frames across the attached network segment. In a forwarding state, the port will process BPDUs , update its MAC Address table with frames that it receives, and forward user traffic through the port. Forwarding State is the normal state. Data and configuration messages are passed through the port, when it is in forwarding state.
Disabled State
A port in the disabled state does not participate in frame forwarding or the operation of STP because a port in the disabled state is considered non-operational.

QUESTION 269
Which sensor mode can deny attackers inline?

A.    IPS
B.    fail-close
C.    IDS
D.    fail-open

Answer: A

QUESTION 270
Which options are filtering options used to display SDEE message types?

A.    stop
B.    none
C.    error
D.    all

Answer: CD

QUESTION 271
When a company puts a security policy in place, what is the effect on the company’s business?

A.    Minimizing risk
B.    Minimizing total cost of ownership
C.    Minimizing liability
D.    Maximizing compliance

Answer: A

QUESTION 272
Which wildcard mask is associated with a subnet mask of /27?

A.    0.0.0.31
B.    0.0.0.27
C.    0.0.0.224
D.    0.0.0.255

Answer: A

QUESTION 273
Which statements about reflexive access lists are true?

A.    Reflexive access lists create a permanent ACE
B.    Reflexive access lists approximate session filtering using the established keyword
C.    Reflexive access lists can be attached to standard named IP ACLs
D.    Reflexive access lists support UDP sessions
E.    Reflexive access lists can be attached to extended named IP ACLs
F.    Reflexive access lists support TCP sessions

Answer: DEF

QUESTION 274
Which actions can a promiscuous IPS take to mitigate an attack?

A.    modifying packets
B.    requesting connection blocking
C.    denying packets
D.    resetting the TCP connection
E.    requesting host blocking
F.    denying frames

Answer: BDE
Explanation:
Promiscuous Mode Event Actions
The following event actions can be deployed in Promiscuous mode. These actions are in affect for a user- configurable default time of 30 minutes. Because the IPS sensor must send the request to another device or craft a packet, latency is associated with these actions and could allow some attacks to be successful.
Blocking through usage of the Attack Response Controller (ARC) has the potential benefit of being able to perform to the network edge or at multiple places within the network.
Request block host: This event action will send an ARC request to block the host for a specified time frame, preventing any further communication. This is a severe action that is most appropriate when there is minimal chance of a false alarm or spoofing.
Request block connection: This action will send an ARC response to block the specific connection. This action is appropriate when there is potential for false alarms or spoofing.
Reset TCP connection: This action is TCP specific, and in instances where the attack requires several TCP packets, this can be a successful action. However, in some cases where the attack only needs one packet it may not work as well. Additionally, TCP resets are not very effective with protocols such as SMTP that consistently try to establish new connections, nor are they effective if the reset cannot reach the destination host in time.
Event actions can be specified on a per signature basis, or as an event action override (based on risk rating values ?event action override only). In the case of event action override, specific event actions are performed when specific risk rating value conditions are met. Event action overrides offer consistent and simplified management. IPS version 6.0 contains a default event action override with a deny-packet-inline action for events with a risk rating between 90 and 100. For this action to occur, the device must be deployed in Inline mode.
Protection from unintended automated action responses
Automated event actions can have unintended consequences when not carefully deployed. The most severe consequence can be a self denial of service (DoS) of a host or network. The majority of these unintended consequences can be avoided through the use of Event Action Filters, Never Block Addresses, Network spoofing protections, and device tuning. The following provides an overview of methods used to prevent unintended consequences from occurring.
Using Event Action Filters and Never Block
By using these capabilities, administrators may prevent a miscreant from spoofing critical IP addresses, causing a self inflicted DoS condition on these critical IP addresses. Note that Never Block capabilities only apply to ARC actions. Actions that are performed inline will still be performed as well as rate limiting if they are configured.
Minimize spoofing
Administrators can minimize spoofed packets that enter the network through the use of Unicast Reverse Path Forwarding. Administrators can minimize spoofing within their network through the use of IP Source Guard. The white paper titled Understanding Unicast Reverse Path Forwarding provides details on configuration of this feature. More information on IP Source Guard is available in the document titled Configuring DHCP Features and IP Source Guard.
Careful Use of Event Actions
By judicious use of event actions that block unwanted traffic, such as using the high signature fidelity rating, and not using automated actions on signatures that are easily spoofed, administrators can reduce the probability of an unintended result. For an event to have a high risk rating, it must have a high signature fidelity rating unless the risk rating is artificially increased through the use of Target Value Rating or Watch List Rating, which are IP specific increases.
Tuning
By tuning the signature set to minimize false positive events, administrators can reduce the chance of an event action that has an unintended consequence.
High Base Risk Rating Events
In most cases, events with a high base risk rating or a high signature fidelity rating are strong candidates for automated event actions. Care should be taken with protocols that are easily spoofed in order to prevent self DoS conditions.

QUESTION 275
Which Cisco Security Manager application collects information about device status and uses it to generate notifications and alerts?

A.    FlexConfig
B.    Device Manager
C.    Report Manager
D.    Health and Performance Monitor

Answer: D
Explanation:
“Report Manager – Collects, displays and exports network usage and security information for ASA and IPS devices, and for remote-access IPsec and SSL VPNs. These reports aggregate security data such as top sources, destinations, attackers, victims, as well as security information such as top bandwidth, duration, and throughput users. Data is also aggregated for hourly, daily, and monthly periods.” and
“Health and Performance Monitor (HPM) ?Monitors and displays key health, performance and VPN data for ASA and IPS devices in your network. This information includes critical and non-critical issues, such as memory usage, interface status, dropped packets, tunnel status, and so on. You also can categorize devices for normal or priority monitoring, and set different alert rules for the priority devices.”

QUESTION 276
Which command is needed to enable SSH support on a Cisco Router?

A.    crypto key lock rsa
B.    crypto key generate rsa
C.    crypto key zeroize rsa
D.    crypto key unlock rsa

Answer: B

QUESTION 277
Which protocol provides security to Secure Copy?

A.    IPsec
B.    SSH
C.    HTTPS
D.    ESP

Answer: B

QUESTION 281
Which address block is reserved for locally assigned unique local addresses?

A.    2002::/16
B.    FD00::/8
C.    2001::/32
D.    FB00::/8

Answer: B

QUESTION 282
What is a possible reason for the error message?

Router(config)#aaa server?% Unrecognized command

A.    The command syntax requires a space after the word “server”
B.    The command is invalid on the target device
C.    The router is already running the latest operating system
D.    The router is a new device on which the aaa new-model command must be applied before continuing

Answer: D

QUESTION 283
Which statements about smart tunnels on a Cisco firewall are true? (Choose two.)

A.    Smart tunnels can be used by clients that do not have administrator privileges
B.    Smart tunnels support all operating systems
C.    Smart tunnels offer better performance than port forwarding
D.    Smart tunnels require the client to have the application installed locally

Answer: AD
Explanation:
Smart Tunnel is also used to provide remote access to web applications that are difficult to rewrite, such as proprietary, non-standards-based Java, Java Script, or Flash animations.
Smart Tunnel also supports Single Sign-On to web applications that require either form-based POST parameters, http basic, FTP, or NTLM authentication
Smart Tunnel can also co-exist with a Full-Tunnel VPN Client. For example, an employee can connect to the company network by using Full-Tunnel VPN Client, while simultaneously connecting to a vendor network by using Smart Tunnel.
Smart Tunnel Advantages over Port-Forwarding, Plug-ins
Smart Tunnel offers better performance than browser plug-ins.
Port forwarding is the legacy technology for supporting TCP-based applications over a Clientless SSL VPN connection. Unlike port forwarding, Smart Tunnel simplifies the user experience by not requiring the user connection of the local application to the local port.
Smart Tunnel does not require users to have administrator privileges.
Smart Tunnel does not require the administrator to know application port numbers in advance.

See more new questions please visit http://www.lead2pass.com/640-554.html

Why Choose Lead2pass?