Q1
Which two features are supported by Cisco IronPort Security Gateway? (Choose two.)

A. spam protection
B. outbreak intelligence
C. HTTP and HTTPS scanning
D. email encryption
E. DDoS protection

Answer: A,D

Q2
Which option is a feature of Cisco ScanSafe technology?

A. spam protection
B. consistent cloud-based policy
C. DDoS protection
D. RSA Email DLP

Answer: B

Q3
Which two characteristics represent a blended threat? (Choose two.)

A. man-in-the-middle attack
B. trojan horse attack
C. pharming attack
D. denial of service attack
E. day zero attack

Answer: B,E

640-554 Prüfungsfragen, 640-554 Examensfragen Implementing Cisco IOS Network Security (IINS v2.0) (ICND2 v3.0) www.it-pruefungen.de

Q4
Under which higher-level policy is a VPN security policy categorized?

A. application policy
B. DLP policy
C. remote access policy
D. compliance policy
E. corporate WAN policy

Answer: C

Q5
Refer to the exhibit.

What does the option secret 5 in the username global configuration mode command indicate about the user password?

A. It is hashed using SHA.
B. It is encrypted using DH group 5.
C. It is hashed using MD5.
D. It is encrypted using the service password-encryption command.
E. It is hashed using a proprietary Cisco hashing algorithm.
F. It is encrypted using a proprietary Cisco encryption algorithm.

Answer: C

Prüfungsvorbereitung Studienmaterial 640-554 deutsch Implementing Cisco IOS Network Security (IINS v2.0) www.it-pruefungen.de

Q6
What does level 5 in this enable secret global configuration mode command indicate?
router#enable secret level 5 password

A. The enable secret password is hashed using MD5.
B. The enable secret password is hashed using SHA.
C. The enable secret password is encrypted using Cisco proprietary level 5 encryption.
D. Set the enable secret command to privilege level 5.
E. The enable secret password is for accessing exec privilege level 5.

Answer: D