
Vendor: |
Cisco |
|---|---|
Exam : |
642-513 |
Title : |
Securing Hosts Using Cisco Security Agent |
Certification : |
CCSP |
No of Questions : |
69 Q & A with Explanation |
Updated : |
13/05/2013 |
Price |
|
| |
642-513 HIPS
Securing Hosts Using Cisco Security Agent Exam
Associated Certifications: CCSP
Available Languages: English
Exam Description
The Securing Hosts Using Cisco Security Agent exam 642-513 HIPS is one of the exams associated with the Cisco Certified Security Professional certification. Candidates can prepare for this exam by taking the HIPS v3.0 course. This exam tests a candidate's knowledge and ability to describe, configure, and verify the Cisco Security Agent product.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice.
Describe and deploy the CSA and CSA MC products
* Explain the concept of network defense in depth
* Describe Cisco Security Agent architecture
* Describe the life cycle of an attack
* Explain how Cisco Security Agent protects against attacks
* Identify the CSA MC and CSA system requirements
* Identify the administration workstation requirements
* Install the CSA MC
* Configure basic settings on the CSA MC
* Install the CSA using a default group
Use CSA MC to configure groups, manage hosts, and build policies
* Describe various components of the menu bar and its function in the CSA MC interface
* Create, save, and delete data on the CSA MC
* Create groups to ease host management and security policy deployment
* Build Agent kits for the newly created groups
* View host status and modify host configuration
* Distribute software updates to hosts
* Discuss components of a policy
* Configure policies and rule modules
Use CSA MC to configure rules
* Describe the basics of rule construction and functionality
* Configure rules common to Windows and UNIX systems
* Configure Windows-Only rules
* Configure UNIX-Only rules
* Describe the individual rules you can add to your policies that allow CSA MC to categorize processes and correlate events across multiple systems
* Describe and configure the system API Control Rule
* Describe and configure the Network Shield Rule
* Describe and configure the Buffer Overflow Control Rule
* Describe and configure the Email Worm Protection Rule module
* Describe and configure the Installation Applications Policy
* Describe and configure Global Event Correlation
Define application classes and work with variables
* Explain the use of application classes in creating security policies
* Discuss the preconfigured application classes included in the CS AMC
* Configure a static application class
* Create a dynamic application class and an application-builder rule
* Discuss how events sets are used to ease administration of security policies
* Configure data, file and network address sets
* Create registry, COM component and network services sets
* Use the COM extraction utility to gather PROGIDs and CLSIDs for the software installed on a system
* Configure Query Settings variables to be used with Query rules
Use CSA Analysis and define and generate reports
* Understand and configure application deployment investigation
* Understand and configure product associations for application deployment investigation
* Configure and run application deployment reports
* Understand and configure application behavior investigation
* Understand and use behavior analysis reports
* Import and use behavior analysis rule modules
* Explain the features of the Event Log and Event Monitor
* Configure filtering of events for logging, reports, and alerts
* Create event-based alerts
* Generate reports on events selected by sorting criteria
Make The Best Choice Chose - Actualkey
Make yourself more valuable in today's competitive computer industry Actualkey's
preparation material includes the most excellent features, prepared by the same
dedicated experts who have come together to offer an integrated solution. We
provide the most excellent and simple method to pass your CCSP 642-513
exam on the first attempt "GUARANTEED".
Our Unlimited Access Package will prepare you for your exam with guaranteed
results, 642-513 Study Guide. Your exam will download as a single 642-513 PDF or
complete 642-513 testing engine as well as over +1500 other technical exam PDF
and exam engine downloads. Forget buying your prep materials separately at three
time the price of our unlimited access plan - skip the 642-513 audio exams and
select the one package that gives it all to you at your discretion: 642-513
Study Materials featuring the exam engine.
Actualkey 642-513 Exam Preparation Tools
Actualkey CCSP preparation begins and ends with your accomplishing
this credential goal. Although you will take each CCSP online test one
at a time - each one builds upon the previous. Remember that each CCSP
exam paper is built from a common certification foundation.
642-513 Exam Testing Engines
Beyond knowing the answer, and actually understanding the 642-513 test questions
puts you one step ahead of the test. Completely understanding a concept and
reasoning behind how something works, makes your task second nature. Your
642-513 quiz will melt in your hands if you know the logic behind the concepts.
Any legitimate CCSP prep materials should enforce this style of
learning - but you will be hard pressed to find more than a CCSP
practice test anywhere other than Actualkey.
642-513 Exam Questions and Answers with Explanation
This is where your CCSP 642-513 exam prep really takes off, in the
testing your knowledge and ability to quickly come up with answers in the
642-513 online tests. Using Specialist 642-513 practice exams is an excellent
way to increase response time and queue certain answers to common issues.
642-513 Exam Study Guides
All CCSP online tests begin somewhere, and that is what the EMC
Specialist training course will do for you: create a foundation to build on.
Study guides are essentially a detailed CCSP 642-513 tutorial and are
great introductions to new CCSP training courses as you advance. The
content is always relevant, and compound again to make you pass your 642-513
exams on the first attempt. You will frequently find these 642-513 PDF files
downloadable and can then archive or print them for extra reading or studying
on-the-go.
642-513 Exam Video Training
For some, this is the best way to get the latest CCSP 642-513
training. However you decide to learn 642-513 exam topics is up to you and your
learning style. The Actualkey CCSP products and tools are designed to
work well with every learning style. Give us a try and sample our work. You'll
be glad you did.
642-513 Other Features
* Realistic practice questions just like the ones found on certification exams.
* Each guide is composed from industry leading professionals real CCSP
notes, certifying 100% brain dump free.
* Study guides and exam papers are guaranteed to help you pass on your first
attempt or your money back.
* Designed to help you complete your certificate using only
* Delivered in PDF format for easy reading and printing Actualkey unique CBT
642-513 will have you dancing the CCSP jig before you know it..
* Specialist 642-513 prep files are frequently updated to maintain accuracy.
Your courses will always be up to date.
Get Specialist ebooks from Actualkey which contain real 642-513 exam
questions and answers. You WILL pass your Specialist exam on the first attempt
using only Actualkey's Specialist excellent preparation tools and tutorials.