Designing Cisco Network Service Architectures (ARCH) v2.1

1.Which of these Layer 2 access designs does not support VLAN extensions?
A. FlexLinks
B. loop-free U
C. looped square
D. looped triangle
Answer: B

2.As a critical part of the design for the Enterprise Campus network, which of the following two are true
concerning intrusion detection and prevention solution.? (Choose two)
A. IDS is capable of both inline and promiscuous monitoring, while IPS is only capable of promiscuous
monitoring
B. IDS will stop malicious traffic from reaching its intended target for certain types of attacks.
C. IPS processes information on Layer 3 and 4 as well as analyzing the contents and payload of the
packets for more sophisticated embedded attacks (Layers 3 to 7)
D. IPS inspects traffic statefully and needs to see both sides of the connection to function properly
E. IDS placement at the perimeter of Data Center outside the firewall generates many warnings that have
relatively low value because no action is likely to be taken on this information
Answer: C,E
We took the Cisco Designing Cisco Network Service Architectures (ARCH) v2.1 642-874 exam, but when we saw the large quantities of study materials, we became a little anxious. We studied day and light till someday I felt that we could not capture the main points of the real test, so I entered the professional Cisco forum to copy others experience.