Proper study guides for Renovate Cisco Designing for Cisco Internetwork Solutions certified begins with Cisco 640-864 preparation products which designed to deliver the Pinpoint 640-864 questions by making you pass the 640-864 test at your first time. Try the free 640-864 demo right now.
Q151. A company is implementing an Identity Management solution with these characteristics:
1) existing AAA Server 2) Cisco Catalyst switches 3) minimal added investments
Which Cisco Trust and Identity Management solution would you recommend?
A. NAC Appliance
B. Cisco IBNS
D. Cisco Security MARS
Q152. RAG DROP
Q153. Which is a factor in enterprise campus design decisions?
A. network application characteristics
B. routing protocol characteristics
C. switching latency characteristics
D. packet filtering characteristics
Q154. What are the three modes of unicast reverse path forwarding? (Choose three.)
Q155. WAN backup over the Internet is often used to provide primary connection redundancy. Which is the most important consideration when passing corporate traffic over the public Internet?
B. static versus dynamic routing
WAN Backup over the Internet Another alternative for WAN backup is to use the Internet as the connectivity transport between sites. However, keep in mind that this type of connection does not support bandwidth guarantees. The enterprise also needs to work closely with the ISP to set up the tunnels and advertise the company's networks internally so that remote offices have reachable IP destinations. Security is of great importance when you rely on the Internet for network connectivity, so a secure tunnel using IPsec needs to be deployed to protect the data during transport.
Q156. Which statement describes the recommended deployment of DNS and DHCP servers in the Cisco Network Architecture for the Enterprise?
A. Place the DHCP and DNS servers in the Enterprise Campus Access layer and Enterprise branch.
B. Place the DHCP and DNS servers in the Enterprise Campus Server Farm layer and Enterprise branch.
C. Place the DHCP server in the Enterprise Campus Core layer and Remote Access_VPN module with the DNS server in the Internet Connectivity module.
D. Place the DHCP server in the Enterprise Campus Distribution layer with the DNS server in the Internet Connectivity module.
Explanation: For the Enterprise Campus, DHCP and internal DNS servers should be located in the Server Farm and they should be redundant. External DNS servers can be placed redundantly at the service provider facility and at the Enterprise branch.
Q157. Which three options are valid Cisco STP tools used to ensure best-practice access layer design for the enterprise campus? (Choose three.)
A. Port fast
C. Root Guard
D. BPDU Guard
E. Flex Links
G. Ether Channel
Access layer Limit VLANs to a single closet when possible to provide the most deterministic and highly available topology.
Use RPVST+ if STP is required. It provides the best convergence.
Set trunks to ON and ON with no-negotiate
Manually prune unused VLANs to avoid broadcast propagation.
Use VTP Transparent mode, because there is little need for a common VLAN database in hierarchical networks.
Disable trunking on host ports, because it is not necessary. Doing so provides more security and speeds up Port Fast.
Consider implementing routing in the access layer to provide fast convergence and Layer 3 load balancing.
Use Cisco STP Toolkit, which provides Port Fast, Loop Guard, Root Guard, and BPDU Guard.
Q158. RAG DROP
Q159. To what Layer 2 technology does VRF closely compare?
Q160. Which three terms describe the primary functions of the distribution layer of the campus network design hierarchy? (Choose three.)
A. provides end-user connectivity
B. provides high speed transport
C. provides QoS services
D. enforces security policies
E. provides WAN connections
F. connects access devices to the core backbone
Explanation: Link: http://www.cisco.com/en/US/docs/solutions/Enterprise/Campus/campover.html#wp708979
To know more about the 640-864, click here.