NO.1 Under which higher-level policy is a VPN security policy categorized?
A. application policy
B. DLP policy
C. remote access policy
D. compliance policy
E. corporate WAN policy
Answer: C

Cisco questions   640-554 practice test   640-554 exam prep   640-554 original questions
Explanation:
http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security
_manager/4.0/user/guide/ravpnpag.html
Remote Access VPN Policy Reference The Remote Access VPN policy pages are used to configure
remote access VPNs on Cisco IOS security routers, PIX Firewalls, Catalyst 6500 /7600 devices, and
Adaptive Security Appliance (ASA) devices.

NO.2 Which two protocols enable Cisco Configuration Professional to pull IPS alerts from a Cisco ISR
router? (Choose two.)
A. syslog
B. SDEE
C. FTP
D. TFTP
E. SSH
F. HTTPS
Answer: B,F

Cisco Dumps PDF   640-554 braindump   640-554 Exam Prep   640-554 Exam Tests
Explanation:
http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6634/prod_white_paper09
00aecd805c4ea8.html
Step 4: Enabling IOS IPS
The fourth step is to configure IOS IPS using the following sequence of steps:
Step 4.1: Create a rule name (This will be used on an interface to enable IPS)
ip ips name <rule name> < optional ACL>
router#configure terminal router(config)# ip ips name iosips
You can specify an optional extended or standard access control list (ACL) to filter the traffic that
will be scanned by this rule name. All traffic that is permitted by the ACL is subject to inspection by
the IPS. Traffic that is denied by the ACL is not inspected by the IPS.
router(config)#ip ips name ips list ?
<1-199> Numbered access list
WORD Named access list
Step 4.2: Configure IPS signature storage location, this is the directory `ips' created in Step 2
ip ips config location flash:<directory name>
router(config)#ip ips config location flash:ips
Step 4.3: Enable IPS SDEE event notification
ip ips notify sdee router(config)#ip ips notify sdee
To use SDEE, the HTTP server must be enabled (via the `ip http server' command). If the HTTP
server is not enabled, the router cannot respond to the SDEE clients because it cannot see the
requests. SDEE notification is disabled by default and must be explicitly enabled.

NO.3 What are three features of IPsec tunnel mode? (Choose three.)
A. IPsec tunnel mode supports multicast.
B. IPsec tunnel mode is used between gateways.
C. IPsec tunnel mode is used between end stations.
D. IPsec tunnel mode supports unicast traffic.
E. IPsec tunnel mode encrypts only the payload.
F. IPsec tunnel mode encrypts the entire packet.
Answer: B,D,F

Cisco Exam Dumps   640-554   640-554 Test Questions   640-554 dumps

NO.4 Which statement about Control Plane Policing is true?
A. Control Plane Policing allows QoS filtering to protect the control plane against DoS attacks.
B. Control Plane Policing classifies traffic into three categories to intercept malicious traffic.
C. Control Plane Policing allows ACL-based filtering to protect the control plane against DoS attacks.
D. Control Plane Policing intercepts and classifies all traffic.
Answer: A

Cisco Actual Test   640-554 certification training   640-554 test questions
Explanation:
The Control Plane Policing feature allows you to configure a quality of service (QoS) filter that
manages the traffic flow of control plane packets to protect the control plane of routers and switches
against reconnaissance and denial-of-service (DoS) attacks. In this way, the control plane (CP) can
help maintain packet forwarding and protocol states despite an attack or heavy traffic load on the
router or switch.
Reference: http://www.cisco.com/c/en/us/td/docs/ios-
xml/ios/qos_plcshp/configuration/xe3s/asr1000/qos-plcshp-xe-3s-asr-1000-book/qos-plcshp-ctrl-pln-
plc.html

NO.5 You suspect that an attacker in your network has configured a rogue Layer 2 device to intercept
traffic from multiple VLANs, which allows the attacker to capture potentially sensitive data.
Which two methods will help to mitigate this type of activity? (Choose two.)
A. Turn off all trunk ports and manually configure each VLAN as required on each port.
B. Place unused active ports in an unused VLAN.
C. Secure the native VLAN, VLAN 1, with encryption.
D. Set the native VLAN on the trunk ports to an unused VLAN.
E. Disable DTP on ports that require trunking.
Answer: D,E

Cisco Actual Test   640-554   640-554 certification   640-554 Exam Questions

NO.6 DRAG DROP
Answer:
Explanation:

NO.7 Which option describes a function of a virtual VLAN?
A. A virtual VLAN creates a logically partitioned LAN to place switch ports in a separate broadcast
domain.
B. A virtual VLAN creates trunks and links two switches together.
C. A virtual VLAN adds every port on a switch to its own collision domain.
D. A virtual VLAN connects many hubs together.
Answer: A

Cisco   640-554 test questions   640-554 Exam PDF   640-554

NO.8 Refer to the exhibit.
Which statement about the aaa configurations is true?
A. The authentication method list used by the console port is named test.
B. The authentication method list used by the vty port is named test.
C. If the TACACS+ AAA server is not available, no users will be able to establish a Telnet session with
the router.
D. If the TACACS+ AAA server is not available, console access to the router can be authenticated using
the local database.
E. The local database is checked first when authenticating console and vty access to the router.
Answer: B

Cisco   640-554 VCE Dumps   640-554 Study Guide
Explanation:
http://www.cisco.com/en/US/products/sw/iosswrel/ps1818/products_configuration_example09186
a 0080204528.shtml Configure AAA Authentication for Login To enable authentication, authorization,
and accounting (AAA) authentication for logins, use the login authentication command in line
configuration mode. AAA services must also be configured.
Configuration Procedure In this example, the router is configured to retrieve users' passwords from a
TACACS+ server when users attempt to connect to the router.
From the privileged EXEC (or "enable") prompt, enter configuration mode and enter the commands
to configure the router to use AAA services for authentication: router#configure terminal Enter
configuration commands, one per line. End with CNTL/Z. router(config)#aaa new-model
router(config)#aaa authentication login my-auth-list tacacs+ router(config)#tacacs-server host
192.168.1.101 router(config)#tacacs-server key letmein Switch to line configuration mode using the
following commands. Notice that the prompt changes to reflect the current mode.
router(config)#line 1 8 router(config-line)# Configure password checking at login. router(config-
line)#login authentication my-auth-list Exit configuration mode. router(config-line)#end router#
%SYS-5-CONFIG_I: Configured from console by console

Perhaps you have also seen the related training tools about Cisco certification 640-554 exam on other websites, but our ITbraindumps has a pivotal position in the field of IT certification exam. ITbraindumps research materials can 100% guarantee you to pass the exam. With ITbraindumps your career will change and you can promote yourself successfully in the IT area. When you select ITbraindumps you'll really know that you are ready to pass Cisco certification 640-554 exam. We not only can help you pass the exam successfully, but also will provide you with a year of free service.

You just need to get ITbraindumps's Cisco certification 640-554 exam exercises and answers to do simulation test, you can pass the Cisco certification 640-554 exam successfully. If you have a Cisco 640-554 the authentication certificate, your professional level will be higher than many people, and you can get a good opportunity of promoting job. Add ITbraindumps's products to cart right now! ITbraindumps can provide you with 24 hours online customer service.

ITbraindumps is a website to improve the pass rate of Cisco certification 640-554 exam. Senior IT experts in the ITbraindumps constantly developed a variety of successful programs of passing Cisco certification 640-554 exam, so the results of their research can 100% guarantee you Cisco certification 640-554 exam for one time. ITbraindumps's training tools are very effective and many people who have passed a number of IT certification exams used the practice questions and answers provided by ITbraindumps. Some of them who have passed the Cisco certification 640-554 exam also use ITbraindumps's products. Selecting ITbraindumps means choosing a success

Related study materials proved that to pass the Cisco 640-554 exam certification is very difficult. But do not be afraid, ITbraindumps have many IT experts who have plentiful experience. After years of hard work they have created the most advanced Cisco 640-554 exam training materials. ITbraindumps have the best resource provided for you to pass the exam. Does not require much effort, you can get a high score. Choose the ITbraindumps's Cisco 640-554 exam training materials for your exam is very helpful.

Since Cisco 640-554 certification is so popular and our ITbraindumps can not only do our best to help you pass the exam, but also will provide you with one year free update service, so to choose ITbraindumps to help you achieve your dream. For tomorrow's success, is right to choose ITbraindumps. Selecting ITbraindumps, you will be an IT talent.

Exam Code: 640-554
Exam Name: Implementing Cisco IOS Network Security (IINS v2.0)
One year free update, No help, Full refund!
640-554 Braindumps Total Q&A: 246 Questions and Answers
Last Update: 06-11,2015

640-554 Real Questions Detail : Click Here

ITbraindumps offer the latest DC0-260 exam material and high-quality C_TSCM52_66 pdf questions & answers. Our C2040-417 VCE testing engine and 250-315 study guide can help you pass the real exam. High-quality APM-001 dumps training materials can 100% guarantee you pass the exam faster and easier. Pass the exam to obtain certification is so simple.