1. Stateful active/standby failover
2. Global Access Control Lists
3. Cluster load balancing
4. Server load balancing

The correct answers are 1, 3, and 4.

With Stateful Active/Standby failover, VPN users do not have to reconnect or reauthenticate should the Active ASA fail. With Cluster Load balancing a group of ASAs will work cooperatively to share the VPN load. With Server Based Load Balancing a Cisco Application Control Engine (ACE) is installed in a Cisco 7600/6500 series device and is used as an SSL VPN front end to multiple ASA servers running in parallel.

Service Provider Certification

CCIP

Cisco Certified Internetwork Professional (CCIP) validates advanced knowledge and skills required to manage service provider infrastructures. With a CCIP certification, a network professional working in a service provider organization demonstrates competencies in infrastructure IP networking solutions.

Prerequisite: Valid CCNA certification, or any CCIE certification.

Required Cisco Exams: 
642–902 ROUTE
642–642 QOS
642–611 MPLS
642–661 BGP

CCIE Service Provider

Achieving CCIE Service Provider certification declares your expert-level ability to perform large-scale maintenance, troubleshoot implementation, and manage support of applications. It demonstrates that you have the skills to build extensible service provider infrastructures that deliver managed services.

Prerequisite: While there are no formal prerequisites for CCIE Service Provider certification, you are expected to have an in-depth understanding of the topics in the exam blueprints and are strongly encouraged to have three to five years of job experience before attempting certification.

Required Cisco Exams: 
Step One: CCIE Service Provider Written Exam
You must pass the two-hour written exam that tests your knowledge of implementing, troubleshooting, and optimizing features and technologies, such as Packet over SONET, IP over DWDM, GE/10GE, BGP, IGP Routing, LDP, MPLS and MPLS TE, Multicast, HA, QoS, and Layer 2 and 3 VPNs, before scheduling the lab exam.

Step Two: CCIE Service Provider Lab Exam
The CCIE Service Provider lab exam is an eight-hour, hands-on exam which requires you to configure a series of networks to given specifications.

It is similar to the CCIE Routing and Switching lab, with more emphasis on BGP, OSPF, ISIS, multicast, and Quality of Service. Knowledge of troubleshooting is an important skill, and you are expected to diagnose and solve issues during the lab exam. You must make an initial attempt of the CCIE Service Provider lab exam within 18 months of passing the CCIE Service Provider written exam.

CCNA Service Provider Operations

Cisco’s Certified Network Associate in Service Provider Operations (CCNA SP Operations) certification validates basic knowledge and skills in a prescriptive troubleshooting environment within carrier class IP NGN core network infrastructure.

These skills are comparable to those of a Tier I support engineer, and include incident (event), fault, configuration, change, and performance management procedures, along with NMS tools and protocols.

Prerequisite: Valid CCENT, CCNA, or any CCIE certification.

Required Cisco Exam: 640–760 SSPO

CCNP Service Provider Operations

The Cisco Certified Network Professional in Service Provider Operations (CCNP SP Operations) program validates knowledge and skills required to troubleshoot and maintain service provider IP NGN core (PE-PE and PE-CE) network infrastructures.

With a CCNP SP Operations certification, you have proven that you have the skills required to isolate network performance problems, implement proactive fault measures using operations management processes, frameworks, and network management systems.

Covering topics that should be familiar to any Tier II or Tier III support engineer, the curriculum includes maintaining carrier class routing protocol environments, MPLS VPN and TE deployments, and QoS mechanisms using Cisco IOS and IOS XR.

Prerequisite: Valid CCNA SP Operations certification, or any CCIE certification.

Required Cisco Exams: 
642–770 OFCN
642–775 MSPRP
642–780 MSPVM
642–785 MSPGS

CCIE Service Provider Operations

Certifies expert-level and skills of an expert-level (Tier III or Tier IV support) operations engineer to troubleshoot and maintain complex service provider IP NGN core (PE-PE and PE-CE) network infrastructures in both IOS and IOS XR operating environments, plus validate broad theoretical knowledge of operations management processes, frameworks, and network management systems.

Exam topics generally cover SP technologies, Operations Process Management, and NMS tools. There are also questions guided by ITIL v3 Core Service Lifecycle Framework, and other related topic areas may also appear.

Prerequisite: CCNP SP Operations is strongly recommended, as is 3–5 years of related job experience.

Required Cisco Exams
Step One: CCIE Service Provider Operations Written Exam
You must pass the two-hour written exam covering concepts and equipment commands related to packet-based networking infrastructure before you are eligible to schedule the lab exam.

Step Two: CCIE Service Provider Operations Lab Exam
The eight-hour practical exam tests your ability to configure actual equipment and get a service provider network running in a timed test situation.

Related Courses
Cisco Certifications

Routing and Switching Certifications

CCNP

The Cisco Certified Network Professional (CCNP) certification confirms your familiarity with the daily job tasks of professional network engineers who work on complex security, voice, wireless and video network solutions. Emphasizing the skills required to plan, implement, verify and troubleshoot local and wide-area enterprise networks, the initials “CCNP” after your name are more valuable now than ever.

Prerequisite: At least one year of networking experience and a valid CCNA certification or any CCIE certification.

Required Cisco Exams: 
642–902 ROUTE
642–813 SWITCH
642–832 TSHOOT

CCIE

Cisco Certified Internetwork Expert (CCIE®) certifies the expert-level skills required of network engineers to plan, prepare, operate monitor, and troubleshoot complex, converged network infrastructure. Professionals who achieve CCIE have demonstrated their technical skills at the highest level.

Prerequisite: There are no formal prerequisites for CCIE certification but candidates are expected to have an in-depth understanding of the topics in the exam blueprints and strongly encouraged to have three to five years of job experience before attempting certification.

Required Cisco Exams: 
Step One: CCIE Routing and Switching Written Exam
You must pass the two-hour, written qualification exam which covers networking concepts and some equipment commands before you are eligible to schedule the lab exam. The written exam now includes new scenario-based questions.

Step Two: CCIE Routing and Switching Lab Exam
The eight-hour lab exam tests your ability to configure actual equipment and troubleshoot the network in a timed test situation. You must pass the lab within three years of passing the written to achieve certification. Your first lab attempt must be made within 18 months of the written exam. The lab now requires hands-on troubleshooting, in addition to configuration.

Storage Certifications

CCIE Storage Networking certification designates expert-level knowledge of intelligent storage solutions using multiple transport options over long distances. It certifies that you have the in-depth experience to manage, deploy, and interconnect multiple types of data storage devices and data servers that enterprise users rely on today.

Success on the CCIE Storage Networking written exam and the CCIE Storage Networking lab exam declares that you have expert knowledge implementing and troubleshooting storage area networks, including LANs, MANs, and WANs over Fibre Channel, iSCSI, FCIP, and FICON and that you can demonstrate in-depth understanding of Layer 2 and 3 network infrastructure.

Prerequisite: While there are no formal prerequisites for CCIE Storage Networking certification, you are expected to have an in-depth understanding of the topics in the exam blueprints and are strongly encouraged to have three to five years of job experience before attempting certification.

Required Cisco Exams: 
Step One: CCIE Storage Networking Written Exam
You must pass the two-hour written exam covering topics such as storage device protocols, troubleshooting tools, and storage networking design, applications, and advanced management before you are eligible to schedule the lab exam.

Step Two: CCIE Storage Networking Lab Exam
The CCIE Storage Networking lab exam is an eight-hour, hands-on exam which requires you to configure a series of storage area networks to given specifications. Knowledge of troubleshooting is an important skill, and you are expected to diagnose and solve issues as part of the lab exam. You must make an initial attempt of the CCIE Storage Networking lab exam within 18 months of passing the CCIE Storage Networking written exam.

Related Courses
Cisco Certifications

1. They are evaluated after the user successfully authenticates.
2. They are evaluated before the user successfully authenticates.
3. They contain the same checks as Host Scan provides to the DAPs.
4. You can only have a single prelogin policy.

The correct answer is 2.

As the name implies, prelogin policies are used prior to user authentication to determine which Cisco Secure Desktop (CSD) policy to apply to the session. Prelogin policies can check for the presence of specific files, digital certificates, operating systems, IP addresses, and/or registry keys.

Related Courses:
ASAE — ASA Essentials
FIREWALL — Deploying Cisco ASA Firewall Solutions
VPN — Deploying Cisco ASA VPN Solutions
CCNP Security — Cisco Certified Network Professional Security

Unified Communications Certifications

CCNA Voice

Cisco’s CCNA Voice certification is one of three technical “concentrations” released in 2008 in response to a Cisco study that found 69% of IT managers expect to have a dedicated voice specialist role in their IT organization within five years, while only 40% have them today.

CCNA Voice confirms validates your skills in VoIP technologies such as

• IP PBX and telephony
• Call control
• Voicemail solutions

Through the course of preparing for the exam, you’ll also get exposure to the Cisco Unified Communications architecture and design covering mobility, presence, and TelePresence applications. CCNA Voice proves that you are committed to your career, and prepared for these job roles:

• Voice Administrators
• Voice Engineers
• Voice Managers

Prerequisite: Valid CCNA certification or any CCIE certification.

Required Cisco Exam: 642–461 ICOMM v8.0

CCNP Voice

Cisco recently completed a significant upgrade to their CCVP program, including a new name: Cisco Certified Network Professional Voice (CCNP Voice). The topics covered on these new exams better reflect the daily job tasks of Cisco Unified Communications and VoIP professionals and have streamlined the process of getting certified by eliminating the enterprise/commercial option.

Prerequisite: Valid CCNA Voice certification, or any CCIE certification.

Required Cisco Exams:
642–437 CVOICE v8
642–447 CIPT1 v8.0
642–457 CIPT2 v8.0
642–427 TVOICE v8.0
642–467 CAPPS v8.0

CCIE Voice

Achieving CCIE Voice certification declares your expert-level knowledge of Voice over IP (VoIP) solutions in an enterprise environment and informs that you have the skills to help companies accelerate business processes, increase productivity, and speed innovation. Success on the CCIE Voice written exam and the CCIE Voice lab exam means that you are capable of building and configuring complex end-to-end telephony networks, troubleshooting and resolving VoIP-related problems, and ensuring Quality of Service using in-depth understanding of Layer 2 and 3 network infrastructure.

Prerequisite: While there are no formal prerequisites for CCIE Voice certification, you are expected to have an in-depth understanding of the topics in the exam blueprints and are strongly encouraged to have three to five years of job experience before attempting certification.

Required Cisco Exam:
Step One: CCIE Voice Written Exam
You must pass the two-hour written exam covering those technologies and applications that comprise a Cisco enterprise VoIP solution before you are eligible to schedule the lab exam.

Step Two: CCIE Voice Lab Exam
The CCIE Voice lab exam is an eight-hour, hands-on exam which requires you to configure a Cisco enterprise voice solution over an IP network. Although basic network connectivity is provided, you will be responsible for configuring the pre-installed applications to satisfy the requirements of the lab and for troubleshooting important parameters of a voice network, such as Quality of Service, VLANs, gateways, and gatekeepers.

You must pass the lab exam within three years of passing the written exam to achieve CCIE Voice certification. Your first lab attempt must be made within 18 months.

Wireless Certification

CCNA Wireless

Cisco’s CCNA Wireless certification is one of three technical “concentrations” released in 2008 in response to a Cisco study that found that by 2013 the number of companies with a dedicated wireless role is expected to increase by 30%.

The CCNA Wireless certification validates your skills in configuring, implementing, monitoring, supporting, and troubleshooting wireless LANs in small to medium-sized business (SMB) and enterprise networks.

Prerequisite: Valid CCNA certification, or any CCIE certification.

Required Cisco Exam: 640–721 IUWNE

CCNP Wireless

CCNP Wireless certification recognizes the critical importance of professionals who support and manage Cisco wireless LANs and networks. Driven by the need for professionals responsible for the design, implementation, security, and operation of wireless networks and mobility infrastructures, CCNP Wireless certification emphasizes wireless networking principles and theory.

It also recognizes the expertise of wireless professionals who can assess and translate business requirements into technical specifications for successful installations.

Value of CCNP Wireless Certification to Professionals

• Recognizes and validates your professional-level wireless design expertise
• Demonstrates your ability to configure, implement, and manage all aspects of Cisco wireless LANs
• Prepares individuals interested in pursuing a Cisco Certified Internetwork Expert (CCIE) Wireless certification

Prerequisite: Valid CCNA Wireless certification, or any CCIE certification.

Required Cisco Exams: 
642–746 IUWMS
642–731 CUWSS
642–741 IUWVN
642–736 IAUWS

CCIE Wireless

Passing the CCIE Wireless certification exams demonstrates your broad theoretical knowledge of wireless networking and your solid understanding of Cisco Wireless LAN technologies. CCIE Wireless certification validates that you have the expertise to design and manage wireless networks and to make mission-critical and business-critical wireless network decisions.

Prerequisite: While there are no formal prerequisites for CCIE Wireless certification, you are expected to have an in-depth understanding of the topics in the exam blueprints and are strongly encouraged to have three to five years of job experience before attempting certification.

Required Cisco Exams:
Step One: CCIE Wireless Written Exam
You must pass the two-hour written exam covering planning, designing, implementing, operating, and troubleshooting Enterprise WLAN networks before you are eligible to schedule the lab exam.

Step Two: CCIE Wireless Lab Exam
The CCIE Wireless lab exam is an eight-hour, hands-on exam which focuses on implementing Enterprise WLAN solutions, including the autonomous infrastructure, unified infrastructure, unified controllers and APs, unified WCS and location, and implementing Voice over Wireless.

Knowledge of troubleshooting is an important skill, and you are expected to diagnose and solve issues as part of the CCIE Wireless lab exam. You must pass the lab exam within three years of passing the written exam to achieve CCIE Wireless certification. Your first lab exam attempt must be made within 18 months.

Related Courses
Cisco Certifications

Design Certifications

CCDA — Cisco Certified Design Associate

CCDA certification indicates a foundation or apprentice knowledge of network design for the Cisco converged network. CCDA certification designates professionals who can design routed and switched network infrastructures and services involving LAN, WAN, and broadband access for businesses and organizations. The exam topics were recently updated to include design methodology, network structure, campus design, enterprise edge, and more.

Prerequisite: CCNA-level knowledge and SWITCH knowledge are needed to prepare for the CCDA certification exam.

Required Cisco Exam: 640–864 DESGN

CCDP — Cisco Certified Design Professional

The CCDP certification indicates advanced journeyman knowledge of intelligent network design concepts and principles. A network professional with CCDP certification can discuss, design, and create advanced addressing and routing, security, network management, data center, and IP multicast complex multilayered enterprise architectures that include virtual private networking and wireless domains.

Prerequisite: Valid CCNA certification and CCDA certification, or any CCIE certification.

Required Cisco Exams:
642–902 ROUTE
642–813 SWITCH
642–874 ARCH

CCDE — Cisco Certified Design Expert

Cisco Certified Design Expert (CCDE) validates advanced network infrastructure design principles and fundamentals for large networks. With a CCDE certification, a network professional demonstrate an ability to develop solutions which address planning, design, integration, optimization, operations, security and ongoing support focused at the infrastructure level for customer networks.

Prerequisite: There are no formal prerequisites for CCDE certification, but it is expected that the candidate will have an in-depth understanding of the topics in the exam blueprints, a minimum of seven years job experience, and a thorough understanding of networking infrastructure principles.

Required Cisco Exams:
Step One: CCDE Written Exam
You must pass the two-hour, written qualification exam which covers advanced networking infrastructure design principles and concepts. Once you pass the written exam, you are then eligible to schedule the practical exam.

Step Two: CCDE Practical Exam
The CCDE Practical exam is a design-scenario exam that tests your ability to perform design analysis, justify design requirements, and develop a design implementation based on best practices. The exam will assess your ability to apply your specific body of knowledge into current business problems of technical network design. The topics covered in the Practical exam are located within the exam blueprint. The exam scenarios will change each instance the exam is delivered, however, the topics will remain the same.

Security Certifications

CCNA Security

More than any other area, security and risk management skills are some of the highly sought across the network, and demand is continuing to grow. The CCNA Security confirms your competency for job roles such as network security specialists or support engineers and security administrators. It also validates installation and troubleshooting skills, as well as monitoring network devices for integrity, confidentiality, and availability. Through your exam preparation, you will get an introduction to core security technologies and also learn how to develop security policies and mitigate risks. These skills will enable you to develop a security infrastructure, recognize vulnerabilities in networks, and detect potential security threats.
Prerequisite: Valid CCNA certification or any CCIE certification.
Required Cisco Exam: 640–553 IINS

CCNP Security – Cisco Certified Network Professional Security

Last year Cisco completed a significant upgrade to their CCSP program, including a new name: Cisco Certified Network Professional Security (CCNP Security). Key changes to the program include:

• Focus on daily job tasks of experienced network security professionals and engineers
• More emphasis on defining service, service levels, and quality of service
• Streamlined process eliminates elective requirements

Prerequisite: Valid CCNA Security certification, valid CCSP certification, or valid CCNA certification plus SND exam pass.
Required Cisco Exams:
642–637 SECURE v1.0
642–627 IPS v7.0
642–647 VPN v1.0
642–617 FIREWALL v1.0

CCIE Security

CCIE Security certification is the industry standard for recognizing network security engineers who have demonstrated expert-level performance implementing, configuring, and troubleshooting Cisco network security solutions.

To earn the CCIE Security certification, you must not only prove your theoretical knowledge of security best practices in the CCIE Security written exam, but you must also demonstrate your skill in the CCIE Security lab exam using real equipment in real-world scenarios. Because of this rigorous process and the expert-level knowledge and skill it requires, CCIE Security certification is one of the most advanced network security certifications available and qualifies you to manage, lead, and design the most complex network security teams and projects.
Prerequisite: While there are no formal prerequisites for CCIE Security certification, you are expected to have an in-depth understanding of the topics in the exam blueprints and are strongly encouraged to have three to five years of job experience before attempting certification.

Required Cisco Exams:
Step One: CCIE Security Written Exam
You must pass the two-hour written exam covering areas such as security protocols, operating systems, application protocols, security technologies, and Cisco security applications before you are eligible to schedule the lab exam.

Step Two: CCIE Security Lab Exam
The CCIE Security lab exam is an eight-hour, hands-on exam which requires you to configure a series of secure networks to given specifications. Knowledge of troubleshooting is an important skill, and you are expected to diagnose and solve issues as part of the CCIE Security lab exam. Your first lab attempt must be made within 18 months.

Related Courses
Cisco Certifications

The answer is True

To make modifications to the XML file, use the template that appears after installing AnyConnect on a workstation: \Documents and Settings\All Users\Application Data\Cisco\Cisco AnyConnect VPN Client\Profile\AnyConnectProfile.tmpl

1. ASDM
2. Frontpage
3. Full customization
4. There is no full customization; you are limited on what you can customize on the web interface

The correct answers are 1 and 3.

The clientless SSL VPN portal can be modified from within ASDM using the options in the GUI. In addition, a complete customization specification can be created and invoked to replace the portal altogether (Full Customization).

Related Courses:
ASAE — ASA Essentials
FIREWALL — Deploying Cisco ASA Firewall Solutions
VPN — Deploying Cisco ASA VPN Solutions
CCNP Security — Cisco Certified Network Professional Security

1. AAA
2. CRL
3. OCSP
4. Not available

The correct answer is 2.

A Certificate Authority (CA) will publish its Certificate Revocation List (CRL) to identify the serial numbers of certificates that are no longer valid. The Fully Qualified Domain Name (FQDN) with the location of the CRL is placed into the CA root certificate. A host that chooses to trust the CA can use that information to periodically poll the CRL to determine which certificates have been revoked and should no longer be used.

Related Courses:
ASAE — ASA Essentials
FIREWALL — Deploying Cisco ASA Firewall Solutions
VPN — Deploying Cisco ASA VPN Solutions
CCNP Security — Cisco Certified Network Professional Security

1. Enable IPsec over TCP
2. Disable group authentication
3. Enable DTLS
4. Change the port number that the IPsec tunnel listens on at the head end ASA

The correct answer is 1.

In many environments, Port Address Translation (PAT) is used to connect users to the internet. IPSec and PAT are not compatible without using either NAT-T (NAT Traversal) on UDP port 4500, or the Cisco proprietary solution of IPSec over TCP (usually to port 10,000).

Related Courses:
ASAE — ASA Essentials
FIREWALL — Deploying Cisco ASA Firewall Solutions
VPN — Deploying Cisco ASA VPN Solutions
CCNP Security — Cisco Certified Network Professional Security