Exam Code: 642-532

Course Name: Securing Networks Using Intrusion Prevention Systems Exam

Vendor: Cisco

Passing Score: 700

642-532 is vital and famous certification from the Cisco. Cisco 642-532 or Securing Networks Using Intrusion Prevention Systems certification Exam is recommended for the people who wish to become the professional network security Administrator and want to get expertise in the network security. Cisco 642-532 or Securing Networks Using Intrusion Prevention Systems certification Exam teaches you about configuring, verification, and management of the Cisco IPS Appliance products.

The 642-532 exam, Securing Networks Using Intrusion Prevention Systems exam, is one of the exams associated with the Cisco Certified Security Professional and the Cisco IPS Specialist certifications . 642-532 exam assists you in setting up how Cisco IDS/IPS sensors are used to mitigate network security threats. Security is a major threat especially in networking and by taking 642-532 exam you get latest knowledge about security threat prevention. In order to install Cisco IDS/IPS sensors and configure essential system parameters, you must take 642-532 exam. This Cisco certification trains you to describe Cisco IDS/IPS sensor advanced system parameters. By doing this Cisco certification, you can configure Cisco IDS/IPS sensor advanced system parameters to optimize attack mitigation performance. The 642-532 exam facilitates you with the abilities to analyze Cisco IDS/IPS sensor events to determine the appropriate response to network attacks and upgrade and maintain Cisco IDS/IPS sensors. Moreover, it trains you to most important part and that is troubleshooting. In addition, with the help of this 642-532 exam, you can become an expert in troubleshooting Cisco IDS/IPS sensor operation and configuration errors.

There are many websites on the internet that provide you the quality study material for the preparation of your Cisco 642-532 exam or Securing Networks Using Intrusion Prevention Systems Exam. But the major problem is that there is a few websites that provide you the quality and up-to-date study material for the preparation of your Cisco 642-532 or Securing Networks Using Intrusion Prevention Systems certification Exam. Testking provide you the precise question with their detail answer relevant to your certification. Testking provide you the guidance books and the guidance of the well educated and qualified persons. Testking provide you the every thing that you need to clear your certification. With the help of the Testking study material and guidance you can clear your certification in your first attempt. Testking provide you the practice exam and also provide you the facility of the audio exam. Testking provide you the detail of every thing that you need to clear your certification.

Testking study material is composed by the senior and qualified persons after a great research in respect to produce a meaningful study material for you. Testking study material and guidance is available in a reasonable price on the internet.

Course Outline: Securing Networks Using Intrusion Prevention Systems Exam

Describe how Cisco IDS/IPS sensors are used to mitigate network security threats

Select the best sensor platform to protect a given network

Describe the features of the IDSM-2

Describe the features of the NM-CIDS

List sensor requirements for inline operations

List platforms on which the 50 image will run

Explain the difference between inline and promiscuous mode sensor operations

Select the most effective location for the sensor and other defense-in-depth components

Explain how Cisco IDS/IPS protects network devices from attacks (Describe signatures, alerts, and actions)

Explain the similarities and differences among the various intrusion detection technologies

Explain the evasive techniques used by hackers and how Cisco IDS defeats those techniques

Explain the differences between HIPS and Network IPS

Describe the network sensors that are currently available and their features

Describe the considerations necessary for selection, placement, and deployment of a network intrusion prevention system

Explain the features, benefits, and system requirements of the IDM

Describe traffic that is not inspected by the NM-CIDS

Define intrusion detection

Define intrusion prevention

Explain the Cisco IDS/IPS signature features

Install Cisco IDS/IPS sensors and configure essential system parameters

Install a sensor appliance in the network

Use the IDM to configure SSH and TLS communications

Use the CLI to install the sensor's software image

Select the appropriate image file for a sensor

Select a router to host the NM-CIDS

Configure communications between the router and the NM-CIDS

Describe the functions of the various IDSM-2 ports

Describe the tasks for configuring the NM-CIDS

Describe the interfaces and components of the NM-CIDS

Explain how the NM-CIDS works

Explain how the IDSM-2 obtains access to network traffic

Explain the importance of accurate time on the NM-CIDS and how the NM-CIDS should obtain the accurate time

Explain the importance of accurate time on the IDSM-2 and how the IDSM-2 should obtain the accurate time

Install the IDSM-2 in a switch

Install the NM-CIDS in a router

Select a switch to host the IDSM-2

Use the CLI to initialize the sensor

Describe user accounts and how they provide sensor security

Use the IDM to configure and manage user accounts

Use the IDM to verify secure management access to the sensor

Obtain management access to the sensor appliance

Obtain management access to the NM-CIDS

Obtain management access to the IDSM-2

Describe allowed hosts

Use the IDM to configure allowed hosts

Describe sensor interfaces and interface pairs

Use the IDM to configure the sensor's interfaces (enable, create pairs, assign to virtual sensor)

Describe software bypass mode

Use the IDM to configure software bypass mode

Use the IDM to configure the sensor's network settings (IP address, netmask, default gateway, etc)

Describe sensor communications with external management and monitoring systems

Launch, navigate, and use the IDM to manage and monitor the sensor

Use the IDM to set the sensor's time

Define traffic flow notification

Use the IDM to configure traffic flow notification

Describe the various CLI modes

Navigate the sensor CLI

List the tasks for installing and configuring the IDSM-2

Describe Cisco IDS/IPS sensor advanced system parameters

Plan the mitigation of specific network vulnerabilities and exploits

Describe sensor tuning

Describe sensor tuning methods

Explain IP fragment and TCP stream reassembly options

Describe the IP logging capabilities of the sensor

Explain how IP logging should be used

Explain the use of Event Variables

Determine the need for a custom signature

Describe the signature engines and their functionality

Describe the types of signatures supported by each engine

Describe common engine parameters and their effects on signatures

Describe engine-specific parameters and their effects on signatures

Describe the device management capability of the sensor and how it is used to perform blocking with a Cisco device

Determine which response actions need to be configured for a given scenario

Determine the need for Event Action Filters in a given scenario

Describe the purpose of the Meta Event Generator

Explain Target Value Ratings and how they are used

Determine the need for Event Action Rules in a given scenario

Explain event Risk Ratings and how they are used

Explain the sensor's SNMP support

Determine if the sensor's application policy enforcement feature is needed in a given scenario

Tune Cisco IDS/IPS sensor advanced system parameters to optimize attack mitigation performance

Use the IDM to tune the sensor to work optimally in the network

Use the IDM to tune signatures to provide maximum protection for a network

Use the IDM to create custom signatures as needed

Configure response actions for a signature

Configure the sensor to take response actions based on a risk rating

Configure the sensor to minimize false alerts

Use the IDM to create a Meta signature and disable alert production for the component signatures

Use the IDM to configure the sensor to support SNMP

Configure Event Action Filters

Configure Event Action Overrides

Configure Target Value Ratings

Configure general settings for Event Action Rules

Use the IDM to configure IP logging

Configure Event Variables

Use the IDM to configure blocking for a given scenario

Use the IDM to configure the sensor to use a Master Blocking Sensor

Use the IDM to configure IP fragment and TCP stream reassembly options

Use the sensor's application policy enforcement feature

Analyze Cisco IDS/IPS sensor events to determine the appropriate response to network attacks

Configure the IDM events display

Analyze alerts and make configuration changes to respond to attacks

Use the CLI and the IDM to monitor events

Classify an alarm as true, false, positive or negative

Explain the fields in a Cisco IDS/IPS alert

Describe the various types of events generated by the sensor

Explain the difference between true and false and positive and negative alarms

Upgrade and maintain Cisco IDS/IPS sensors

Configure the sensor to allow an SNMP NMS to obtain its health and welfare information

Use the CLI to recover the sensor's software image

Use the IDM to install signature updates and service packs

Use the IDM to configure automatic signature and service pack updates

Move software images/upgrades and configuration files via HTTP, HTTPS, SCP, and FTP

Use the IDM to restore the default configuration to the sensor

Select the correct software update file for a sensor

Use the CLI to upgrade the software image

Describe the various types of image files

Apply the appropriate system image to the sensor

Describe maintenance tasks specific to the NM-CIDS

Use the CLI to obtain PEP information from the sensor

Use the IDM to install a sensor license

Describe PEP information and its purpose

Explain the purpose of service packs and signature updates

Describe service pack and signature update file names

Explain why a sensor license is needed

Obtain a license key

Troubleshoot Cisco IDS/IPS sensor operation and configuration errors

Use the packet command to display and capture packets from the data interfaces

Copy (to a location off the sensor) packets that have been captured from the data interfaces

Use the IDM to verify the sensor's configuration

Use the CLI to back up the sensor configuration

View IP logs for troubleshooting purposes

Troubleshoot communications between the NM-CIDS and its host router

Reset and power down the sensor

Determine when resetting or powering down the sensor is necessary

Describe the main components of the IPS 50 software architecture

Verify functionality of the NM-CIDS

Verify the Catalyst 6500 switch and Catalyst IDSM-2 functionality

Use the IDM and the CLI to obtain sensor statistics

Use the IDM to obtain a sensor diagnostic report

Use the IDM to obtain sensor system information

Use general troubleshooting commands

Use the IDM to shut down and reboot the sensor

Describe Cisco IDS/IPS configuration file format