Title of Exam: 642-522 SNPA (Securing Networks with PIX and ASA) Exam

Who is the vendor for 642-522?

CISCO

When completing 642-522 you would have earned credit towards : Cisco Certified Security Professional also known as CCSP.

642-522 Exam Description

The 642-522 SNPA exam is the only exam required to achieve a CCSP (Cisco Certified Security Professional) certification. Once a student has successfully passed the Cisco 642-522 SNPA exam you will be more than able to describing and implementing effective troubleshooting strategies, troubleshooting IP unicast and multicast routing, troubleshooting multi-layer switched networks, and troubleshooting WANs and remote access connections. A main concern of the Cisco 642-522 SNPA exam, which should be is heavily emphasized Cisco Training Guides.

What are the fields covered by 642-522?

The 642-522 Securing Networks with PIX and ASA examination covers six broad areas which are discussed in detail below:

Exam area 1 Install and configure a security appliance for basic network connectivity

Describe the Security Appliance hardware and software architecture

Determine the Security Appliance hardware and software configuration and verify if it is correct

Use setup or the CLI to configure basic network settings, including interface configurations

Use appropriate show commands to verify initial configurations

Configure NAT and global addressing to meet user requirements

Configure DHCP client option

Set default route

Configure logging options

Describe the firewall technology

Explain the information contained in syslog files

Configure static address translations

Configure Network Address Translations: PAT

Configure static port redirection

Configure a net static

Set embryonic and connection limits on the security appliance

Verify network address translation operation

Exam area 2 Configure a security appliance to restrict inbound traffic from untrusted sources

Configure access-lists to filter traffic based on address, time, and protocols

Configure object-groups to optimize access-list processing

Configure Network Address Translations: Nat0

Configure Network Address Translations: Policy NAT

Configure java/activeX filtering

Configure URL filtering

Cisco 642-522 Certification - Sponsored by Real-Exams - 642-522

Exam area 3 Configure a security appliance to provide secure connectivity using site-to-site VPNs

Explain certificates, certificate authorities and how they are used

Explain the basic functionality of IPSec

Configure IKE with preshared keys

Configure IKE to use certificates

Differentiate between the types of encryption

Configure IPSec parameters

Configure crypto-maps and ACLs

Exam area 4 Configure a security appliance to provide secure connectivity using remote access VPNs

Explain the functions of EasyVPN

Configure IPSec using EasyVPN Server/Client

Configure the Cisco Secure VPN client

Explain the purpose of WebVPN

Configure WebVPN services: Server/Client

Verify VPN operations

Exam area 5 Configure transparent firewall, virtual firewall, and high availability firewall features on a security appliance

Explain differences between L2 and L3 operating modes

Configure security appliance for transparent mode (L2)

Explain purpose of virtual firewalls

Configure security appliance to support virtual firewall

Monitor and maintain virtual firewall

Explain the types, purpose and operation of fail-over

Install appropriate topology to support cable-based or LAN-based fail-over

Explain the hardware, software and licensing requirements for high-availability

Configure the SA for active/standby fail-over

Configure the SA for stateful fail-over

Configure the SA for active-active fail-over

Verify fail-over operation

Recover from a fail-over

Exam area 6 Configure AAA services for access through a security appliance

Configure ACS for security appliance support

Configure security appliance to use AAA feature

Configure authentication using both local and external databases

Configure authorization using an external database

Configure the ACS server for downloadable ACLs

Configure accounting of connection start/stop

Verify AAA operation

Exam area 7 Configure routing and switching on a security appliance

Enable DHCP server and relay functionality

Configure VLANs on a security appliance interface

Configure routing functionality of security appliance including OSPF, RIP

Configure security appliance to pass multi-cast traffic

Configure ICMP on the security appliance

Exam area 8 Configure a modular policy on a security appliance

Configure a class-map

Configure a policy-map

Configure a service-policy

Configure a ftp-map

Configure a http-map

Configure an inspection protocol

Explain the function of protocol inspection

Explain DNS guard feature

Describe the AIP-SSM HW and SW

Load IPS SW on the AIP-SSM

Verify AIP-SSM

Configure an IPS modular policy

Exam area 9 Monitor and manage an installed security appliance

Obtain and apply OS updates

Backup and restore configurations and software

Explain the security appliance file management system

Perform password/lockout recovery procedures

Obtain and upgrade license keys

Configure passwords for various access methods: Telnet, serial, enable, SSH

Configure various access methods: Telnet, SSH, PDM

Configure command authorization and privilege levels

Configure local username database

Verify access control methods

Enable ASDM functionality

Verify a security appliance configuration via ASDM

Verify the licensing available on a security appliance

Difficulty rating : this examination rates 4 on a scale of 1 - 5 difficulty rating.

How long do I have to complete 642-522?

75 minutes

How many questions will I be required to answer?

55 - 65 questions

How much will 642-522 cost?

125 USD - Contact the Examination Test Centre directly for information regarding course availability, registration information and cost. Remember that costs may vary from vendor to vendor and from examination to examination.

642-522 Study Tips:

Testking has several products that include excellent materials that will aid in preparation for this exam. Their materials include detailed 640-522 study notes and guides, questions and answers with detailed explanations, even practice tests, which were compiled by experts in their respective field. For this examination you can check 640-522 Test King and the 640-522 practice tests.

Internet websites like the Testking and the mcsebraindumps offer a number of study aids for the 642-522 SNPA exam, including the 642-522 Study Guide, the 642-522 Study Notes and the 642-522 Practice Exam. Other Cisco Training includes the Cisco Bootcamp and the 642-522 Braindumps.

Cisco 642-522 Certification - Sponsored by Real-Exams - 642-522