Cisco_Router ,Catalyst Switch Guide 2009
Cisco Catalyst Switches
Scalable, intelligent LAN switching for Campus, Branch,and Data Center networks of all sizes.This is your guide to Cisco® Catalyst® switches, the industry’s most advanced and versatile portfolio of modular and fixed-configuration LAN switches.
free download Cisco Catalyst Switch Guide 2009:
http://www.ziddu.com/download/8327219/CiscoCatalystSwitchGuide2009.pdf.html
Cisco Router Guide
For Medium-sized Businesses, Enterprise Branches,Head Offices, and the Service Provider EdgeThis is your guide to Cisco® Services Aggregation Routers and Cisco Integrated Services Routers, the broadest and most versatile portfolio of products for enabling the deployment of multiple advanced services.
Cisco_Router_Guide 2009:
http://www.ziddu.com/download/8327220/Cisco_Router_Guide2009.pdf.html
new 640-802 emerging drag and drop questions
1.Firewall isolate two or more physical network of a system (or a combination of many systems); Firewall with centralized management, implementation, monitoring the characteristics of security policy; general firewall can be open (unTrust, Internet), risk (DMZ, WAN) the domain with the private, trusted (Trust, LAN) domain segregated; be regarded as the network firewall, goalkeeper, but they can provide protection is very limited. The biggest problem is that the firewall can not check the contents of packets passed.
IDS / IPS (Intrusion Detection and Prevention System) intrusion detection systems can help identify at an early stage attacks, provides organizations with rapid analysis of information security incidents with more response time, and the deployment of defense mechanisms to guard against further attacks. To check the contents of the packet, enterprises must deploy in the security by adding intrusion detection mechanisms.
Anti-Spyware is only being installed / had installed spy software role; to the file system and registry files for protection.
Anti-Virus not been able to focus on control-spyware can detect a small fraction of known spyware (spy tens of thousands of kinds of software); Basically, the signature detection method has its limitations; anti-virus tools, only protect a single desktop system, and use a limited subscription-based update method.
2.
LMI -provides starts messages between DTE and DCE device
PVC -the most common type of virtor urcult
DLCI -identifies the virtval connection between the DTE the switch
DTE -a router is this type of device
640-802 Emerging drag and drop a question
bandwith efficient moreflexible cost delay load
|
advantage |
disadvantages |
|
|
point-to point line |
||
|
circuit exchange |
||
|
packet exchange |
answer:
|
advantage |
disadvantages |
|
|
point-to point line |
moreflexible |
load |
|
circuit exchange |
cost |
bandwith |
|
packet exchange |
efficient |
delay |
free download 640-802 bible
The safer , easier way to help you pass exam : 640-802!
free download link:
|
http://www.ziddu.com/download/8020841/640-802V19.02.pdf.html |
Ccie Voice Lab Blueprint, Please read
Ccie Voice Lab Blueprint, Please read
Basic Campus Design
DHCP, TFTP
Catalyst voice and data VLAN configuration
Catalyst VTP configuration
Call Manager and Call Manager Express Configuration
Phone registration
Phone configuration
Voice Gateway and Signaling
Analog and digital voice protocols: analog FXS, FXO-M1, T1, E1, PRI, CAS, R2
VoIP protocols: H323, MGCP, SCCP, SIP, RAS
Call Routing
CCM route patterns (@ wildcard not tested)
CCM route preference and redundancy
IOS dial peers
Digit manipulation and translation
Voice CODEC
G711ulaw, G711alaw, G729, G723
Call Admission Control
Location-based
RAS-based
High Availability Features
SRST
AAR
Media Resource Management
Conference bridge software and hardware
Transcoder
MTP
MOH
QoS Considerations
L2/L3 classifications and policing
Queuing mechanisms
LFI
Catalyst switch QoS
Unified Messaging
Unity voicemail integration
Unity administration
CRS/IPCC Express Application
Default script configuration and integration
Custom script configuration and integration
Call Manager Voice Applications
Any native applications to Call Manager, examples are extension mobility, attendant console, IPMA
Supplementary Services
Directory Services and Integration
Fax
Fax pass-through
Fax relay
Ccie Service Provider Lab Blueprint, Please read
Ccie Service Provider Lab Blueprint, Please read
Bridging and Switching
VTP, VLAN, Trunk, Spanning tree
Frame Relay, DLCI, FR multilink
ATM PVC, SVC, FR/ATM interworking
PPPoE
IGP Routing
IS-IS, Level 1/2, Metric
OSPF, LSA, Area
Redistribution, Summarization, Filtering
Policy routing
EGP Routing
IBGP, EBGP
BGP attributes
Confederation, Route reflector
Synchronization, Aggregation, Stability
Redistribution, Filtering
Multipath
SP Multicast
PIM-SM, PIM-DM, SSM, PIM-BIDIR, IGMP
Auto RP, Static RP, BSR, Anycast RP
MP-BGP for multicast, MSDP
MPLS
Label distribution, LDP/ TDP
Label filtering, Label merging, Multipath
MPLS COS
MPLS Netflow
MPLS over ATM
MPLS Traffic Engineering
L3/L2 VPN
MPLS VPN, MP-iBGP
PE-CE routing, RIPv2, OSPF, EIGRP, Static, ISIS, EBGP
BGP Extended Community
Inter AS MPLS VPN
Carrier Supporting Carrier
VRF-Lite, VRF Select
Multicast MPLS VPN
GRE, multipoint GRE
L2TPv3
802.QinQ
SP QoS and Security
DSCP/EXP, TOS, NBAR
Marking, Shaping, Policing
CAR, FRTS
WRQ, CBWFQ, LLQ, PQ, CQ
RED, WRED
LFI, cRTP
RSVP
ACL, RPF, Filtering
Routing update security
Common attacks
High Availability
NSF, GLBP
Fast reroute, Link/Node protection
HSRP, VRRP
Management
SNMP, SYSLOG, RMON
Accounting
Netflow
NTP
Ccie Security Lab Blueprint, Please read
Ccie Security Lab Blueprint, Please read
Firewall
PIX and ASA Firewall
Basic Initialization
Access Management
Address Translation
ACLs
IP Routing
Object Groups
VLANs
AAA
VPNs
Filtering
Failover
Layer 2 Transparent Firewall
Security Contexts (Virtual Firewall)
Modular Policy Framework
Application-Aware Inspection
High Availability Scenarios
QoS Policies
Other Advanced Features
IOS Firewall
CBAC
Audit
Auth Proxy
PAM
Access Control
Performance Tuning
Advanced Features
VPN
IPSec LAN-to-LAN
SSL VPN
DMVPN
CA (PKI)
Remote Access VPN
VPN3000 Concentrator
VPN3000 IP Routing
Unity Client
WebVPN
EzVPN Hardware Client
XAuth, Split-tunnel, RRI, NAT-T
High Availability
QoS for VPN
GRE, mGRE
L2TP
PPTP
Advanced VPN Features
Intrusion Prevention System (IPS)
IPS 4200 Series Sensor Appliance
Basic Initialization
Sensor Configuration
Sensor Management
Promiscuous and Inline Monitoring
Signature Tuning
Custom Signatures
Blocking
TCP Resets
Rate Limiting
Signature Engines
IDM
Event Action
Event Monitoring
IOS IPS
PIX IDS
SPAN, RSPAN
Advanced Features
Identity Management
Security Protocols (RADIUS and TACACS+)
Cisco Secure ACS Configuration
Access Management (Telnet, SSH, Pwds, Priv Levels)
Proxy Authentication
Service Authentication (FTP, Telnet, HTTP, other)
Network Admission Control (NAC Framework solution)
802.1x
Advanced Features
Advanced Security
Mitigation Techniques
Packet Marking Techniques
Security RFCs (RFC1918, RFC2827, RFC2401)
Service Provider Security
Black Holes, Sink Holes
RTBH Filtering (Remote Triggered Black Hole)
Traffic Filtering using Access-lists
NAT
TCP Intercept
uRPF
CAR
NBAR
NetFlow
Flooding
Spoofing
Policing
Fragmentation
Sniffer Traces
Catalyst Management and Security
Traffic Control and Congestion Management
Catalyst Features and Advanced Configuration
IOS Security Features
Network Attacks
Network Reconnaissance
IP Spoofing Attacks
MAC Spoofing Attacks
ARP Spoofing Attacks
Denial of Service (DoS)
Distributed Denial of Service (DDoS)
Man-in-the-Middle (MiM) Attacks
Port Redirection Attacks
DHCP Attacks
DNS Attacks
Fragment Attacks
Smurf Attacks
SYN Attacks
MAC Attacks
VLAN Hopping Attacks
Other Layer2 and Layer3 Attacks
Ccie Rs Lab Blueprint, Please read
Ccie Rs Lab Blueprint, Please read
Bridging and Switching
Frame relay
Catalyst configuration: VLANs, VTP, STP, trunk, management, features, advanced configuration, Layer 3
IP IGP Routing
OSPF
EIGRP
RIPv2
IPv6: Addressing, RIPng, OSPFv3
GRE
ODR
Filtering, redistribution, summarization and other advanced features
BGP
IBGP
EBGP
Filtering, redistribution, summarization, synchronization, attributes and other advanced features
IP and IOS Features
IP addressing
DHCP
HSRP
IP services
IOS user interfaces
System management
NAT
NTP
SNMP
RMON
Accounting
IP Multicast
PIM, bi-directional PIM
MSDP
Multicast tools, source specific multicast
DVMRP
Anycast
QoS
Quality of service solutions
Classification
Congestion management, congestion avoidance
Policing and shaping
Signaling
Link efficiency mechanisms
Modular QoS command line
Security
AAA
Security server protocols
Traffic filtering and firewalls
Access lists
Routing protocols security, catalyst security
CBAC
Other security features
free download Cisco 350-001
1. Into which two types of areas would an area border router (ABR) inject a default route?(Choose two.)Select 2 response(s).
A. the autonomous system of a different interior gateway protocol (IGP)
B. area 0
C. totally stubby
D. NSSA
E. stub
F. the autonomous system of an exterior gateway protocol (EGP)
Answer: CE
2. Refer to the exhibit. If VLAN 21 does not exist before typing the commands, what is the result of the configuration applied on switch SW1?
Select the best response.
SW1#config t
Enter configuration commands,one per line.End with VNTL/Z.
SW1(config)#int fa0/8
SW1#(config-if)#switchport access vlan 21
A. A new VLAN 21 is created and port 0/8 is assigned to that VLAN.
B. A new VLAN 21 is created, but no ports are assigned to that VLAN.
C. No VLAN 21 is created and no ports are assigned to that VLAN.
D. Configuration command vlan database should be used first to create the VLAN 21.
Answer: A
3. Which three statements are true regarding Cisco IOS Firewall configurations? (Choose three.)Select 3 response(s).
A. An IP inspection rule can be applied in the inbound direction on a secured interface.
B. An IP inspection rule can be applied in the outbound direction on an unsecured interface.
C. An ACL that is applied in the outbound direction on an unsecured interface must be an extended ACL.
D. An ACL that is applied in the inbound direction on an unsecured interface must be an extended ACL.
E. For temporary openings to be created dynamically by Cisco IOS Firewall, the access list for the returning traffic must be a standard ACL.
F. For temporary openings to be created dynamically by Cisco IOS Firewall, an IP inspection rule must be applied to the secured interface.
Answer: ABD
4. The ip inspect inspection-name {in | out} command is used to configure which IOS security feature?Select the best response.
A. IPS
B. IPsec site-to-site VPN
C. Cisco IOS Firewall
D. Cisco AutoSecure
E. IDS
F. Easy VPN
Answer: C
free download link:http://www.ziddu.com/download/7959916/Cisco350-001.pdf.html
free download Cisco 646-227
1.Within the prepare phase, which two tasks are required to begin the prepare for business requirements workshop
activity? (Choose two.)
A. Document User-Level Functionality Requirements
B. Document Vertical Business Initiatives Requirements
C. Identify key stakeholders for the Business Requirements Development Workshop
D. Conduct a Solution Value Assessment
E. Send Invitations
F. Document Corporate Business Initiatives Requirements
Answer:CE
2.Within the prepare phase, which task is associated with the conduct business requirements workshop?
A. Identify Decision Making Criteria
B. Determine Critical Timelines
C. Complete Competitive Analysis
D. Conduct User Community Adoption Absorption Analysis
E. Identify Budget and Stage of Buying Cycle
F. Determine Vertical Approach and Strategy
Answer:D
3.Which two tasks are performed during the technical strategy meeting within the prepare phase? (Choose two.)
A. Document Logical-Level Functionality Requirements
B. Document Security Requirements for Overall System and Contact Center
C. Document System-Level Functionality Requirements
D. Provide Audience with a Vision of IPC Current and Future Capabilities
E. Build Preliminary Logical Network Topology Map
F. Map Defined Business Requirements to the Customer’s Current and Future
Technology Projects
Answer:BF
4.Which task is performed during the site readiness assessment gap analysis activity in the plan phase?
A. Assess and Document Infrastructure Requirements for the Proposed Solution.
B. Document Location of Legacy Equipment.
C. Gather Existing Documentation into the Preliminary Discovery Document.
D. Document Bandwidth Requirements for each Site.
E. Compare Systems Requirements Specifications to Site Survey.
F. Determine if Circuit can Support Required Concurrent Calls.
Answer:E
free download link:http://www.ziddu.com/download/7959915/Cisco646-227.pdf.html