Cisco 642-544 Exam
Exam 642-544: Implementing Cisco Security MARS (MARS)
Related Certifications:? CCSP
Number of Questions: 40-50
Duration: 60 minutes
Exam Topics Include:
Install and configure the Cisco Security MARS product
Identify the components, features and functions of the Cisco Security MARS product
Installing the Cisco Security MARS appliance
Add Cisco reporting devices into the Cisco Security MARS appliance
Investigate events that the Cisco Security MARS appliance collects from configured security devices
Configure the Cisco Security MARS appliance to send alerts
Configure rules to detect interesting patterns of network activity and other anomalous network behavior
Configure the Cisco Security MARS appliance hardware maintenance activities
The 642-544 MARS Implementing Cisco Security Monitoring, Analysis and Response System exam is associated with the Cisco Certified Security Professional certification. This is one of the optional exams required for the CCSP.
Let TestKing help you get your CCSP certification.? The TestKing 642-544 exam products are designed to maximize your learning productivity and focus only on the important aspects that will help you to pass your exam, the first time.? We will provide you with exam questions and verified answers, with detailed explanations, that reflect the actual exam. These questions and answers provide you with the experience of taking the actual test. Our exam guides are not just questions and answers. Our questions have detailed explanations provided by our certified industry experts, ensuring that you fully understand the questions and the concept behind the questions.
| Cisco TopCerts 642-544 v2 73 48q.vce | 1.4 MB | 11-Apr-2008 |
Files from PDF Store available for converting:
| File | Size | Last Modified |
| Cisco TopCerts 642-544 v2 73 48q.pdf | 456.75 KB | 11-Apr-2008 |
QUESTION 30
Which statement best describes the case management feature of Cisco Security MARS?
A. It is used to conjunction with the Cisco Security MARS incident escalation feature for
incident reporting
B. It is used to capture, combine and preserve user-selected Cisco Security MARS data
within a specialized report
C. It is used to automatically collect and save information on incidents, sessions, queries
and reports dynamically without user interventions
D. It is used to very quickly evaluate the state of the network
QUESTION 31
Which three statements are correct about the Cisco Security MARS global and local
controller architecture? (Choose three.)
A. Incidents can be viewed on the global controller based on a Selected local Controller
B. The global controller can correlate events from different local controllers into a
common session
C. Each zone can have one local controller
D. The global controller and the local controllers can be running different Cisco Security
MARS OS versions
E. All local controllers events are propagated to the global controller for correlations
F. One global controller can support multiple local controllers
No comments:
Post a Comment