Cisco 642-564
Description:
In the 642-564 SSSE exam you can expect that your knowledge regarding Cisco security products and product positioning and where each technology fits in the Cisco Self-Defending Network strategy will be tested. Of the key topics covered in the 642-564 exam you should place special emphasis on Cisco Security Appliance (ASA), PIX Firewall, IDS/IPS, VPN, Security Management, CS-MARS and NAC Appliance.
Exam Details:
Th2 642-564 exam is scheduled to run over 75 minutes with a total of between 65 and 75 questions. As a prospective candidate you may register at any Prometric or Pearson VUE Cisco authorized examination center world wide to sit for the exam. Be prepared to fork out between $65 and $300 USD per exam for registration.
Key Topics:
The following information provides more detail regarding the content likely to be included on the exam.
Describe the technical functionality of Cisco security products: i.e. the identification and description of the functionality of key features included with the:
- Cisco firewall products
- Cisco Secure Connectivity Products
- Integrated Security Router
- Cisco IPS/IDS Products
- Cisco Security Management Products (VMS & MARS)
- Cisco Guard Products
- Cisco End Point Security Products
- Cisco AAA Security Products
- Cisco Security Modules
- Cisco NAC
Describe the technical benefits of Cisco security products to meet business requirements. I.e. the description of benefits of key features that are included with:
- the Cisco firewall products
- the Cisco Secure Connectivity Products
- the Integrated Security Router
- the Cisco IPS/IDS Products
- the Cisco Security Management Products
- the Cisco Guard Products
- the Cisco End Point Security Products
- the Cisco AAA Security Products
- the Cisco Security Modules
Describe the security benefits of the Cisco Self Defending Network
- Collaboration to provide application security
- Collaboration to provide anti-x
- Collaboration to provide containment & control
- Collaboration to provide secure connectivity
- Collaboration to provide trust and identity
- Collaboration to provide security management
Assess customer's technical and business requirements
- Assess customer security needs at different BDM & TDM levels
- Importance for completing a security posture assessment
- Analyze results of security posture assessment
- Identify applicable lifecycle services requirements
- Identify security drivers
Develop and present an integrated systems solution
- Required lifecycle services and benefits for proposed security solution
- Prepare a detail design document
- Establish a systems acceptance plan
Describe router hardening
- How USB eToken provides for storage of secure configurations and certificate credentials
- How the AIM module can be utilized to meet customer security requirements
- How Embedded Encryption can be utilized to meet customer security requirements
- How Cisco ISR routers provide enhanced software hardening features and Control Plane Policing to deter DOS attacks
- When additional router processing power is required to support NAC, IPS, Firewall, and SDNI capabilities
Describe the CSA product
- Features and functionality
- CSA product usage to secure various customer environments
Describe the CS MARS product
- Features, and functions in context to the issues of security incidents and security information in an enterprise network
- CS MARS software and hardware appliance physical installation process
- How to add Cisco reporting devices into the CS MARS appliance
- How to add non-Cisco reporting devices into the CS MARS appliance
- How to use configured security devices to generate interesting events that constitute an attack scenario and have CS MARS collect the interesting events for incident investigation
- How to configure the CS MARS appliance to send alerts
- How to create and view a long-duration query on the CS MARS appliance
- How to configure a rule (or rules) that detect interesting patterns of network activity and other anomalous network behavior
- How to use the management features in the CS MARS to assign event, addressing, service, and user information
- How to configure the CS MARS appliance hardware maintenance chores
- Global Controller architecture, features and functions
Preparing for the Exam:
Security Solutions for Systems Engineers (SSSE) is the recommended training for this exam. It is only human to feel jittery about the impending 642-564 examination. Do not fret; help is at hand in various forms online. Take a 642-564 practice test or a 642-564 brain dump exam or 642-564 practice exams. 642-564 transcender will also allay many jitters. Ensure that you have checked the 642-564 exam review, 642-564 test exam as well as the available 642-564 exam prep.
