Exam Number: 646-562
Duration: 60 minutes (60 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics
Exam Description
The Advanced Security for Account Managers 646-562 ASAM is the exam associated with the Cisco Security Advanced Sales Specialist certification. Candidates can prepare for this exam by taking the Security Advanced Sales e-learning course. This exam tests a candidate’s knowledge of Cisco security products and product positioning as well as ability to influence key customer decision makers.

Exam Topics
The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Describe and identify the capabilities of Cisco security technologies
Describe the value proposition of the Self Defending Network Strategy.
Describe the business relevance of the Self Defending Network Strategy.
Describe the principal characteristics of the Self Defending Network Strategy.
Describe the business benefits of an integrated, collaborative, and adaptive network security solution.
Describe secure management solutions.
Describe Treat Defense solutions.
Describe Trust & Identity solutions.
Describe Secure Connectivity solutions.

Qualify an opportunity with a customer
Analyze customer current security posture.
Assess customer security needs.
Describe total cost of ownership benefits of security implementations.
Evaluate business risk.

Develop and recommend the appropriate Cisco solutions and services
Develop a Self Defending Network solutions recommendation.
Describe how security standards and/or regulations affect markets.

Develop a value proposition for a Cisco security solution
Describe how solution leverages customers’ existing infrastructure.
Describe how solution aligns with customers’ current and future business needs.
Free 646-562 Exams’s PDF Download
Free Testking offers free demo for 646-562 PDF(Advanced Security for Account Managers (ASAM)). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Advanced Security for Account Managers (ASAM).

Recommended Training about 646-562 exam PDF
The following courses are the recommended training for 646-562 exam PDF.
646-562 Q & A with Explanations
646-562 Audio Exam
646-562 Study Guide
646-562 Preparation Lab

Testking 646-562 ASAM
Interactive Testing Engine Included!
120 Questions
Updated : 09/18/2008
Price : $87.99 $79.99

Free download?testking 646-562 ASAM
Free download?pass4sure 646-562 ASAM

Related posts:

1. Testking cisco 646-563
2. Testking Cisco 646-363 CXFA
3. Testking Cisco 646-003 ARSAM

Exam Number: 642-591
Associated Certifications: CCSP/ Cisco Network Admission Control Specialist
Duration: 75 minutes (60 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The 642-591 CANAC Implementing Cisco NAC Appliance exam is associated with both the Cisco Certified Security Professional and the Cisco Network Admission Control Specialist certifications. Candidates can prepare for this exam by taking the Implementing Cisco NAC Appliance course. This exam tests a candidate’s knowledge of the Cisco NAC Appliance solution.

Exam Topics
The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Implement Cisco NAC Appliance
Identify the components and features used for Cisco NAC Appliance
Configure and verify NAM and NAS to support the Cisco NAC Appliance In-Band server solutions
Configure and verify NAM and NAS to support the Cisco NAC appliance Out-of-Band server solutions
Configure Single Sign on
Configure and verify Cisco Switches as network access devices
Configure and verify user roles
Implement and verify rule based policies
Configure Cisco NAC Appliance network scanning
Configure NAM to implement NAA on user devices
Implement and verify an HA solution
Administer and monitor a Cisco NAC Appliance solution

Free 642-591 Exams’s PDF Download
Free Testking offers free demo for 642-591 PDF(Implementing Cisco NAC Appliance). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Implementing Cisco NAC Appliance.

Recommended Training about 642-591 exam PDF
The following courses are the recommended training for 642-591 exam PDF.
642-591 Q & A with Explanations
642-591 Audio Exam
642-591 Study Guide
642-591 Preparation Lab

Testking 642-591 CANAC
Interactive Testing Engine Included!
60 Questions
Updated : 09/23/2008
Price : $87.99 $79.99

Free download?testking 642-591 CANAC
Free download?pass4sure 642-591 CANAC

Related posts:

1. Testking Cisco ccsp 642-524 SNAF
2. Testking Cisco ccsp 642-544 MARS
3. Testking Cisco 642-515 SNAA

Exam Number: 642-565
Duration: 75 minutes (70 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The 642-565 SSSE exam tests a candidate’s knowledge of Cisco security products and product positioning and where each technology fits in the Cisco Self-Defending Network strategy. Topics covered include Cisco Security Appliance (ASA), PIX Firewall, IDS/IPS, VPN, Security Management, CS-MARS and NAC Appliance.

Exam Topics
The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Describe the technical functionality of Cisco security products
Identify and describe the functionality of key features included with the Cisco Secure Connectivity Products.
Identify and describe the functionality of key features included with the Security Feature Set of Integrated Services Routers and Catalyst Switches.
Identify and describe the functionality of key features included with the Cisco Threat Defense Products.
Identify and describe the functionality of key features included with the Cisco Security Management Products.
Identify and describe the functionality of key features included with the Cisco Trust & Identity Products.

Describe the technical benefits of Cisco security products to meet business requirements
Describe the benefits of key features included with the Cisco Secure Connectivity Products.
Describe the benefits of key features included with the Security Feature Set of Integrated Services Routers and Catalyst Switches.
Describe the benefits of key features included with the Cisco Threat Defense Products.
Describe the benefits of key features included with the Cisco Security Management Products.
Describe the benefits of key features included with the Cisco Trust & Identity Products.

Describe an appropriate design methodology for Cisco Security Products
Describe the design methodology for the Cisco Secure Connectivity Products.
Describe the design methodology for the Security Feature Set of Integrated Services Routers and Catalyst Switches.
Describe the design methodology for the Cisco Threat Defense Products.
Describe the design methodology for the Cisco Security Management Products.
Describe the design methodology for the Cisco Trust & Identity Products.

Assess customer’s technical and business requirements
Assess customer security needs at different BDM & TDM levels.
Describe the importance for completing a security posture assessment.
Analyze results of security posture assessment.
Identify security products that can mitigate a given threat.
Identify security solutions that can help an organization meet international security standards and/or regulations.

Develop and present an integrated security solution
Describe the benefits for a system-level approach for security solutions.
Prepare a detail design document.
Establish a systems acceptance plan.
Describe the security benefits of the Cisco Self Defending Network.

Free 642-565 Exams’s PDF Download
Free Testking offers free demo for 642-565 PDF(Security Solutions for Systems Engineers(SSSE)). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Security Solutions for Systems Engineers(SSSE).

Recommended Training about 642-565 exam PDF
The following courses are the recommended training for 642-565 exam PDF.
642-565 Q & A with Explanations
642-565 Audio Exam
642-565 Study Guide
642-565 Preparation Lab

Testking 642-565 SSSE
Interactive Testing Engine Included!
70 Questions
Updated : 09/18/2008
Price : $87.99 $79.99

Free download?testking 642-565 SSSE
Free download?pass4sure 642-565 SSSE

Related posts:

1. Testking Cisco 646-562 ASAM
2. Testking Cisco 646-011 CSSS
3. Testking Cisco 642-176 SMBE

Exam Number: 642-523
Associated Certifications: CCSP/Cisco Firewall Specialist
Duration: 90 minutes (63 questions)
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The 642-523 Securing Networks with PIX and ASA exam is one of the exams associated with the Cisco Certified Security Professional and the Cisco Firewall Specialist certifications. Candidates can prepare for this exam by taking the SNPA v5.0 course. This exam includes simulations and tests a candidate’s knowledge and ability to describe, configure, verify and manage the Cisco PIX and ASA Security Appliance products.

Exam Topics
The following topics are general guidelines for the content likely to be included on the Remote Access exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

Install and configure a Security Appliance for basic network connectivity
Describe the Security Appliance hardware and software architecture
Determine the Security Appliance hardware and software configuration and verify if it is correct
Use setup or the CLI to configure basic network settings, including interface configurations
Use appropriate show commands to verify initial configurations
Configure NAT and global addressing to meet user requirements
Configure DHCP client option
Set default route
Configure logging options
Describe the firewall technology
Explain the information contained in syslog files
Configure static address translations
Configure Network Address Translations: PAT
Verify network address translation operation

Configure a Security Appliance to restrict inbound traffic from untrusted sources
Configure access-lists to filter traffic based on address, time, and protocols
Configure object-groups to optimize access-list processing
Configure Network Address Translations: Nat0
Configure Network Address Translations: Policy NAT
Configure java/activeX filtering
Configure URL filtering
Verify inbound traffic restrictions
Configure static port redirection
Configure a net static
Set embryonic and connection limits on the Security Appliance

Configure a Security Appliance to provide secure connectivity using site-to-site VPNs
Explain the basic functionality of IPsec
Configure IKE with preshared keys
Differentiate between the types of encryption
Configure IPsec parameters
Configure crypto-maps and ACLs

Configure a Security Appliance to provide secure connectivity using remote access VPNs
Explain the functions of EasyVPN
Configure IPsec using EasyVPN Server/Client
Configure the Cisco Secure VPN client
Explain the purpose of SSL VPN
Configure WebVPN services: Server/Client
Verify VPN operations
Install and Configure SVCs
Install and Configure Cisco Secure Desktop

Configure transparent firewall, virtual firewall, and high availability firewall features on a Security Appliance
Explain differences between L2 and L3 operating modes
Configure Security Appliance for transparent mode (L2)
Explain purpose of virtual firewalls
Configure Security Appliance to support virtual firewall
Monitor and maintain virtual firewall
Explain the types, purpose and operation of fail-over
Install appropriate topology to support cable-based or LAN-based fail-over
Explain the hardware, software and licensing requirements for high-availability
Configure the Security Appliance for active/standby fail-over
Configure the Security Appliance for stateful fail-over
Configure the Security Appliance for active-active fail-over
Verify fail-over operation
Recover from a fail-over
Allocate resources to virtual firewalls

Configure AAA services for the Security Appliance
Configure ACS for Security Appliance support
Configure Security Appliance to use AAA feature
Configure authentication using both local and external databases
Configure authorization using an external database
Configure the ACS server for downloadable ACLs
Configure accounting of connection start/stop
Verify AAA operation

Configure routing and switching on a Security Appliance
Enable DHCP server and relay functionality
Configure VLANs on a Security Appliance interface
Configure Security Appliance to pass multi-cast traffic

Configure Security Appliance advanced application layer and modular policy features
Configure a class-map
Configure a policy-map
Configure a service-policy
Configure a ftp-map
Configure a http-map
Configure an inspection protocol
Explain the function of protocol inspection
Explain DNS guard feature
Describe the AIP-SSM HW and SW
Load IPS SW in the AIP-SSM
Verify AIP-SSM
Configure an IPS modular policy
Describe the CSC-SSM HW and SW
Configure a typed class map
Configure a typed policy map
Use typed policy maps to specify granular inspection parameters for a policy map
Configure regex class maps
Create regular expressions
Load CSC SW on the SSM
Verify the CSC-SSM
Divert traffic to the CSC-SSM
Initialize the CSC-SSM

Monitor and manage an installed Security Appliance
Obtain and apply OS updates
Backup and restore configurations and software
Explain the Security Appliance file management system
Perform password/lockout recovery procedures
Obtain and upgrade license keys
Configure passwords for various access methods: Telnet, serial, enable, SSH
Configure various access methods: Telnet, SSH, ASDM
Configure command authorization and privilege levels
Configure local username database
Verify access control methods
Enable ASDM functionality
Verify a Security Appliance configuration via ASDM
Verify the licensing available on a Security Appliance
Add, delete, and modify syslog messages

Free 642-523 Exams’s PDF Download
Free Testking offers free demo for 642-523 PDF(Securing Networks with PIX and ASA). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Securing Networks with PIX and ASA.

Recommended Training about 642-523 exam PDF
The following courses are the recommended training for 642-523 exam PDF.
642-523 Q & A with Explanations
642-523 Audio Exam
642-523 Study Guide
642-523 Preparation Lab

Testking 642-523 SNPA
Interactive Testing Engine Included!
181 Questions
Updated : 09/23/2008
Price : $87.99 $79.99

Free download?testking 642-523 SNPA
Free download?pass4sure 642-523 SNPA

Related posts:

1. Testking Cisco ccsp 642-522 SNPA
2. Testking Cisco ccsp 642-523 SNPA
3. Testking Cisco ccsp 642-524 SNAF

Last day to test November 17, 2008
Exam Number: 642-552
Associated Certifications: CCSP/Cisco Firewall Specialist/Cisco IPS Specialist/Cisco VPN Specialist
Duration: 75 minutes
Available Languages: English
Click Here to Register: Pearson VUE
Exam Policies: Read current policies and requirements
Exam Tutorial: Review type of exam questions

Exam Description Exam Topics Recommended Training Additional Resources
Exam Description
The Securing Cisco Network Devices 642-552 SND is the exam associated with the Cisco Certified Security Professional, Cisco Firewall Specialist, Cisco IPS Specialist, and Cisco VPN Specialist certifications. Candidates can prepare for this exam by taking the Securing Cisco Network Devices v2.0 (SND) course. This exam tests a candidate’s knowledge of securing Cisco routers and switches and their associated networks. Topics covered include; Security threats facing modern network infrastructures, Securing Cisco routers, Implementing basic AAA, Using ACLs to mitigate router and network threats, Implementing secure management and reporting, Mitigating common Layer 2 attacks, and Implementing Cisco IOS Firewall features, Cisco IOS IPS features, and IPsec VPN features using Cisco Security Device Manager

Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.

Describe the security threats facing modern network infrastructures
Describe and mitigate the common threats to the physical installation
Describe and list mitigation methods for common network attacks
Describe and list mitigation methods for Worm, Virus, and Trojan Horse attacks
Describe the main activities in each phase of a secure network lifecycle
Explain how to meet the security needs of a typical enterprise with a comprehensive security policy
Describe the Cisco Self Defending Network architecture

Secure Cisco routers
Secure Cisco routers using the SDM Security Audit feature
Use the One-Step Lockdown feature in SDM to secure a Cisco router
Secure administrative access to Cisco routers by setting strong encrypted passwords, exec timeout, login failure rate and using IOS login enhancements
Secure administrative access to Cisco routers by configuring multiple privilege levels
Secure administrative access to Cisco routers by configuring role based CLI
Secure the Cisco IOS image and configuration file

Implement basic AAA using Cisco routers
Explain the functions and importance of AAA
Describe the features of TACACS+ and RADIUS AAA protocols
Describe the methods of authentication that are used to provide access through a router (packet mode) and to provide access to the router (character mode)

Mitigate threats to Cisco routers and networks using ACLs
Explain the functionality of standard, extended, and named IP ACLs used by routers to filter packets
Configure and verify IP ACLs to mitigate given threats (filter IP traffic destined for Telnet, SNMP, and DDoS attacks) in a network using CLI
Configure IP ACLs to prevent IP address spoofing using CLI
Discuss the caveats to be considered when building ACLs

Implement secure network management and reporting
Describe the factors to be considered when planning for secure management and reporting of network devices
Use CLI to configure SSH on Cisco routers to enable secured management access
Use CLI to configure Cisco routers to send Syslog messages to a Syslog server
Describe SNMPv3 and NTPv3

Mitigate common Layer 2 attacks
Describe the common Layer 2 attacks and how to mitigate them (VLAN hopping, STP attacks, ARP spoofing, MAC spoofing, CAM overflow)
Describe the function and benefit of the security features in Cisco Catalyst switches (IBNS, PVLAN, SPAN port)
Describe common threats to WLANs
Describe the security features of the 802.11 protocol

Implement the Cisco IOS firewall feature set using SDM
Describe the operational strengths and weaknesses of the different firewall technologies
Explain stateful firewall operations and the function of the state table
Explain the types of NAT that can be implemented in a firewall
Configure and verify basic and advanced firewall on a Cisco router using SDM

Implement the Cisco IOS IPS feature set using SDM
Define network based vs. host based intrusion detection and prevention
Explain IPS technologies, attack responses, and monitoring options
Enable and verify Cisco IOS IPS operations using SDM

Implement IPsec VPN on Cisco routers using SDM
Explain IKE protocol functionality and phases
Describe the building blocks of IPsec and the security functions it provides
Explain hash-based message authentication code (HMAC) operations
Explain the different methods of encryption
Explain the purpose of the Diffie-Hellman key agreement protocol
Describe how IPsec establishes origin authentication
Describe the PKI environment at a high level
Describe the different types of IPsec VPN implementations
Configure and verify an IPsec site-to-site VPN with pre-shared key authentication using SDM
Explain Cisco Easy VPN Server and Cisco Easy VPN Remote
Configure and verify remote access VPNs using the Cisco Easy VPN Server feature of Cisco SDM

Free 642-552 Exams’s PDF Download
Free Testking offers free demo for 642-552 PDF(Securing Cisco Networking Devices (SND)). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Securing Cisco Networking Devices (SND).

Recommended Training about 642-552 exam PDF
The following courses are the recommended training for 642-552 exam PDF.
642-552 Q & A with Explanations
642-552 Audio Exam
642-552 Study Guide
642-552 Preparation Lab

testking 642-552 SND
Interactive Testing Engine Included!
128 Questions
Updated : 09/18/2008
Price : $87.99 $79.99

Free download?testking 642-552 SND

Free download?pass4sure 642-552 SND

Related posts:

1. Testking Cisco ccsp 642-503 SNRS
2. Testking Cisco ccsp 642-502 SNRS
3. Testking Cisco ccsp 642-522 SNPA