 |
Cisco 642-522 SNPA Certification Exam |
 |
|
Securing Networks with PIX and ASA Exam 642-522... Continue Below To CCSP Exam Information and Cisco Articles. The real Cisco CCSP 642-522 SNRS Exam has a duration of 90 minutes and 60 -70 questions to complete.
The Cisco Securing Networks with PIX and ASA 642-522 exam is one of the exams associated with the Cisco Certified Security Professional (CCSP) and the Cisco Firewall Specialist certifications. Candidates can prepare for the Cisco SNPA 642-522 exam by taking the SNPA v4.0 course. The Cisco SNPA 642-522 exam includes simulations and tests a candidate's knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA security appliance products. All these objectives are designated from the Cisco.com website. Please note that the SNPA 642-522 exam topics and objectives may change without notice, since technologies are always changing.
CCSP 642-522 Exam Objectives:
Configure transparent firewall, virtual firewall, and high availability firewall features on a security appliance
- Explain differences between L2 and L3 operating modes
- Configure security appliance for transparent mode (L2)
- Explain purpose of virtual firewalls
- Configure security appliance to support virtual firewall
- Monitor and maintain virtual firewall
- Explain the types, purpose and operation of fail-over
- Install appropriate topology to support cable-based or LAN-based fail-over
- Explain the hardware, software and licensing requirements for high-availability
- Configure the SA for active/standby fail-over
- Configure the SA for stateful fail-over
- Configure the SA for active-active fail-over
- Verify fail-over operation
- Recover from a fail-over
Configure AAA services for access through a security appliance
- Configure ACS for security appliance support
- Configure security appliance to use AAA feature
- Configure authentication using both local and external databases
- Configure authorization using an external database
- Configure the ACS server for downloadable ACLs
- Configure accounting of connection start/stop
- Verify AAA operation
Configure routing and switching on a security appliance
- Enable DHCP server and relay functionality
- Configure VLANs on a security appliance interface
- Configure routing functionality of security appliance including OSPF, RIP
- Configure security appliance to pass multi-cast traffic
- Configure ICMP on the security appliance
Configure a modular policy on a security appliance
- Configure a class-map
- Configure a policy-map
- Configure a service-policy
- Configure a ftp-map
- Configure a http-map
- Configure an inspection protocol
- Explain the function of protocol inspection
- Explain DNS guard feature
- Describe the AIP-SSM HW and SW
- Load IPS SW on the AIP-SSM
- Verify AIP-SSM
- Configure an IPS modular policy
Monitor and manage an installed security appliance
- Obtain and apply OS updates
- Backup and restore configurations and software
- Explain the security appliance file management system
- Perform password/lockout recovery procedures
- Obtain and upgrade license keys
- Configure passwords for various access methods: Telnet, serial, enable, SSH
- Configure various access methods: Telnet, SSH, PDM
- Configure command authorization and privilege levels
- Configure local username database
- Verify access control methods
- Enable ASDM functionality
- Verify a security appliance configuration via ASDM
- Verify the licensing available on a security appliance
|
