Cisco Security Solutions for Systems Engineers - 642-583 Exam Questions [2026]

QUESTION NO: 1
Which three statements regarding Virtual Tunnel Interface (VTI) are correct ? (Choose three.)

A. There are two types of VTIs: Static and Dynamic. B. Traffic that requires protection is routed to VTIs by using static routing or routing protocols C. VTIs are supported on Cisco IOS routers and on Cisco ASA security appliances. D. QoS services can be deployed on VTIs. E. VTIs have more encapsulation overhead than GRE tunnels do.

Correct Answer: A,B,D

QUESTION NO: 2
DRAG DROP

Correct Answer:

Explanation:

QUESTION NO: 3
What is used at the access layer to provide logical separation between the voice and data traffic?

A. port security B. auxiliary VLAN C. private VLAN (PVLAN) D. firewall E. ACL F. protected ports

Correct Answer: B

QUESTION NO: 4
Which methods are used when implementing a proxy component within a firewall system?

A. routed or bridged B. inline or tap mode C. in-band or out-of-band D. Layer 2 or Layer 3 E. transparent or non-transparent

Correct Answer: E

QUESTION NO: 5
Which function can the Cisco Security Agent data access control feature perform?

A. detects attempts to modify the file registry B. detects malformed HTTP requests by examining the URI in the HTTP request C. enables trustedQoS marking at the end host D. provides the ability for administrators to write scripts to perform a subset of configuration actions on the management console E. detects changes to system files by examining the file signature F. detectsrootkit by examining attempts to modify the kernel functionality

Correct Answer: B

QUESTION NO: 6
Which series of steps illustrates how a challenge-and-response authentication protocol functions?

A. Exhibit A B. Exhibit C C. Exhibit B

Correct Answer: A

QUESTION NO: 7
Which solution stops new web threats the earliest?

A. McAfee Antivirus B. URL category database, malware category C. Webroot AntiMalware D. Web Reputation Filtering with Exploit prevention

Correct Answer: D

QUESTION NO: 8
Which three security components can be found in today's typical single-tier firewall system? (Choose three.)

A. IPS B. Network Admission Control C. Stateful Packet Filtering with Application Inspection and Control D. application proxy E. server load balancing F. cache engine

Correct Answer: A,C,D

QUESTION NO: 9
Which feature of the Cisco IronPort S-Series allows administrators to control which users get access to gambling sites?

A. malware scanning B. HTTPS inspection C. web reputation filters D. authentication with Active Directory

Correct Answer: D

QUESTION NO: 10
Which Cisco Security Management product can perform (syslog) events normalization?

A. Cisco Security MARS B. Cisco ASDM C. Cisco Secure ACS D. Cisco IME E. Cisco Security Manager F. Cisco Secure ACS View

Correct Answer: A