ccsp思科认证网络安全专家 题库.pdf

642-501
Section A contains 105 questions. Section B contains 80 questions.

Missing Explanations & Answers will be provided in the next update.
Missing Answers: Q: 96 & 99-105
Missing Explanations: Q: 15,23,67,73-80,83,85,87,89 & 91-105

Section A

QUESTION 1
You are the administrator for Certkiller, Inc. Your job today is to configure a start accounting record for a
Point-to-Point session to be sent to a TACACS+ server. Which mand will do this?
A. aaa work default start-stop tacacs+
B. aaa authentication ppp start tacacs+
C. aaa authorization exec default tacacs+
D. aaa work default tacacs+
E. aaa work default stop-only tacacs+
Answer: A
Explanation:
aaa accounting {system | network | exec | command level} {start-stop |
wait-start | stop-only} {tacacs+ | radius}
no aaa accounting {system | network | exec | command level}
network Runs accounting for work-related service requests, including SLIP, PPP, PPP NCPs, and ARAP.
start-stop Sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of
a process. The start accounting record is sent in the background. The requested user process begins regardless of
whether or not the start accounting notice was received by the accounting server. tacacs+ Enables the
TACACS-style accounting.
Reference:
/US/products/sw/iosswrel/ps1826/mand_summary_chapter09186a00800


QUESTION 2
John at Certkiller Inc. just finished configuring multiple transform sets. Where does he have to specify the
transform sets?
A. router interface
B. crypto map entry
C. ACL
D. ISAKMP policy
Answer: B
Explanation:
Crypto map set transform-mand:
Specifies which transform sets can be used with the crypto map entry. List multiple transform sets in order of
priority, with the highest-priority transform set first.
Reference:
Cisco Secure PIX Firewall (Cisco press) page 217
QUESTION 3
Exhibit:

You are the administ