Cisco Security Solutions for Systems Engineers - 642-566 Exam Questions [2026]

QUESTION NO: 1
Which one of the following Cisco Security Management products is able to perform (syslog) events normalization?

A. Cisco Security MARS B. Cisco ASDM C. Cisco IME D. Cisco Security Manager

Correct Answer: A

QUESTION NO: 2
The Cisco Security Monitoring, Analysis and Response System (Cisco Security MARS) is an appliance-based, all-inclusive solution that provides unmatched insight and control of your existing security deployment. What is not the advantage of Cisco Security MARS?

A. Contains scalable, distributed event and analysis architecture B. Performs automatic Mitigation on Layer 2 devices C. Is network topologyaware D. Provides rapid profile-based provisioning capabilities

Correct Answer: D

QUESTION NO: 3
See the Exhibit:
Exhibit:

In order to support IPSec VPN, which three traffic types should ACL1 permit on the firewall in front of the IPSec VPN gateway? (Choose three.)

A. UDP port 4500 B. UDP Port 10000 C. IP Protocol 50 D. UDP Port 5000

Correct Answer: A,C,D

QUESTION NO: 4
Which functions can be provided by Cisco SSL VPN solution by use of the Cisco Secure Desktop? (Select All that apply.)

A. Secure Vault B. Cache Cleaner C. Pre-login assessment D. Advanced Endpoint Assessment

Correct Answer: A,B,C,D

QUESTION NO: 5
Which two key criteria will be used while sizing Cisco Security MARS model to deploy? (Choose two.)

A. Auto-mitigation requirements B. Using a one-, two-, or three-tier Cisco Security MARS architecture C. Incoming events per second rate D. Events-storage requirements

Correct Answer: C,D

QUESTION NO: 6
Which two of these statements describes features of the NAC Appliance architecture? (Choose two.)

A. NAC Appliance High Availability uses VRRP B. NAC Appliance Agent has the auto-upgrade feature C. NAC Appliance Servers managed by the same NAC Appliance Manager can run in mixed mode (inline or out-of-band) D. The standard NAC Appliance Managercan mange up to 40 NAC Appliance Servers failover pairs E. The NAC Appliance Agent is bundled with the NAC Appliance Server Software

Correct Answer: B,C

QUESTION NO: 7
What is the security issue in classic packet filtering of active FTP sessions?

A. Allowing data sessions to the clientopens up all the high ports on the client B. The control session can't be adequately filtered C. The established keyword can't be used for control or data sessions D. Allowing control sessions to the client opens up all the high ports on the client

Correct Answer: A

QUESTION NO: 8
Which item is correct about the relationship between the VPN types and their descriptions?
1.DMVPN
2.GET VPN
3.DGVPN
4.Dynamic VTI
5.Crypto maps
a.supported on Cisco IOS routers and ASAs
b.provides on-demand virtual access interface cloned from a virtual template configuration
c.combines two VPN technologies
d.provides tunnel-less any-to-any connectivity
e.supports routing protocol over VPN tunnels

A. a-5,b-3,c-2,d-4,e-1 B. a-5,b-4,c-1,d-2,e-3 C. a-5,b-4,c-3,d-1,e-2 D. a-5,b-4,c-3,d-2,e-1

Correct Answer: D

QUESTION NO: 9
Which statement is true about the Cisco Security MARS Global Controller?

A. Rules that are created on a Local Controller can be pushed to the Global Controller B. Most data archiving is done by the Global Controller C. The Global Controller receives detailed incidents information from the Local Controllers and correlates the incidents between multiple Local Controllers D. The Global Controller Centrally Manages of a group of Local Controllers

Correct Answer: D

QUESTION NO: 10
Your company, wants to implement the PCI Data Security Standard to protect sensitive cardholder information. They are planning to use RSA to ensure data privacy, integrity and origin authentication. Which two of these statements describe features of the RSA keys? (Choose two.)

A. The public key only encrypts B. The private key only encrypts C. The public key only decrypts D. The private key only decrypts E. The public key both encrypts and decrypts F. The private key both encrypts and decrypts

Correct Answer: E,F

QUESTION NO: 11
Which two components should be included in a detailed design documents for a security solution? (Choose two.)

A. Proof of concept B. Weak-link description C. Traffic growth forecast D. Organizational Chart E. Data Source F. Existing Network Infrastructure

Correct Answer: A,F

QUESTION NO: 12
Which three of these security products complement each other to achieve a secure-e-banking solution? (Choose three.)

A. Cisco Trust Agent B. Cisco Security Agent C. CCA Agent D. Cisco Adaptive Security Appliance E. Cisco IOS DMVPN F. Cisco Intrusion Prevention System

Correct Answer: B,D,F