Exam Title

: Nortel 920-242 : Nncds-contivity vpn switch

Version : R6.1

www.prepking.com

Prepking - King of Computer Certification Important Information, Please Read Carefully

Other Prepking products A) Offline Testing engine Use the offline Testing engine product to practice the questions in an exam environment. B) Study Guide (not available for all exams) Build a foundation of knowledge which will be useful also after passing the exam. Latest Version We are constantly reviewing our products. New material is added and old material is updated. Free updates are available for 90 days after the purchase. You should check your member zone at Prepking and update 3-4 days before the scheduled exam date. Here is the procedure to get the latest version: 1.Go towww.Prepking.com 2.Click on Member zone/Log in (right side) 3. Then click My Account 4.The latest versions of all purchased products are downloadable from here. Just click the links. For most updates,it is enough just to print the new questions at the end of the new version, not the whole document. Feedback If you spot a possible improvement then please let us know. We always interested in improving product quality. Feedback should be send to feedback@Prepking.com. You should include the following: Exam number, version, page number, question number, and your login ID. Our experts will answer your mail promptly. Copyright Each PDF file contains a unique serial number associated with your particular name and contact information for security purposes. So if we find out that a particular PDF file is being distributed by you, Prepking reserves the right to take legal action against you according to the International Copyright Laws. Explanations This product does not include explanations at the moment. If you are interested in providing explanations for this exam, please contact feedback@Prepking.com..

www.prepking.com

1. A company has purchased a large number of Contivity 2700 switches. They have decided that the management and configuration of these Contivity switches will be contracted out to another company who specializes in network management. What is the most efficient way to prevent the contracted company from accessing any networks on the private side, yet allow them full access to manage and configure the Contivity switches? A. Set up control tunnels to prevent access to the private side B. Set up public interface packet filters to prevent access to the private side C. Set up the Contivity Statefull Firewall to prevent access to the private side D. Set up private interface packet filters to prevent access to the private side Answer: A

2. In order to use FTP, HTTP, and SNMP for Contivity management, what IP address must be used? A. Public interface B. Private interface C. Management Address D. FTP, HTTP, and SNMP are not supported Answer: C

3. A company wants to replace its existing core VPN device with a Contivity product in a remote access infrastructure. They have 2500 VPN remote access simultaneous users with a variety of dial and Which Contivity model would be appropriate to meet their criteria?

broadband connectivity. A. Contivity 1050 B. Contivity 2700 C. Contivity 1700 D. Contivity 4600 Answer: D

4. A customer has a 2700 that has averaged 1000 active tunnels for the last few months.

They are now The

adding another phase of their plan where average active tunnels is expected to approach 2500.
www.prepking.com

 customer requires high availability for remote users to be able to connect. This must be transparent to the remote user. What would you suggest as a resolution?

A. Install a second 2700 and configure VRRP. B. Replace the 2700 with two 1700's and configure failover. C. Install another LAN card in the 2700, and configure failover. D. Install a second 2700 and configure failover and load balancing. Answer: D

5. A customer wants to use IPX protocol to traverse the network. What protocol would be necessary? A. IP B. PPP C. PPTP D. IPSec Answer: C

6. A customer has two Contivity 2700's at corporate headquarters. remote user connections.

The switches have been used for

They want to allow their partners to connect by Branch Office tunnel, and want What do you suggest for the remote offices for

some fail-over when one of the 2700's is down. redundancy? A. 600 at each end, running OSPF, and VRRP B. 600 at the SOHO with route policies configured

C. 600 at the SOHO with static branch failover configured D. 600 at the remote offices configured as Control Tunnels Answer: C

7. A customer plans to purchase a Contivity solution and has the following requirements: ? Support for ten branch offices over a public Frame Relay network ? Support for up to 500 tunnels for remote access telecommuters Which Contivity solution would you recommend? A. The Contivity 1700 with VPN bundle and ten branch office trunks running over SVC's on the public side for interoffice connections.
www.prepking.com

 B. The Contivity 1700 with VPN bundle and ten branch office trunks running over PVC's on the private side for interoffice connections. C. The Contivity 2700 with the VPN bundle and ten branch office trunks running over PVC's on the public side for interoffice connectivity. D. The Contivity 2700 without the VPN bundle and ten branch office trunks running over PVC's on the public side for interoffice connectivity. Answer: B 8. A company uses toll-free number dial-up service for its remote sales force. Why would this be a good candidate for a Contivity VPN solution? A. Contivity still requires toll-free numbers B. Toll-free numbers are no longer needed C. Contivity can act as a termination device for toll-free numbers D. Toll-free numbers for data access are inherently too expensive Answer: D

9. A customer would like to encrypt traffic on their wireless network and guarantee that only designated employees have access to the corporate LAN. What key customer information is required to design the solution? (Choose two.) A. The wireless protocol that is being used. B. The number of servers on the corporate LAN. C. The number of subnets on the corporate LAN. D. The number of nodes on the wireless network. E. The network location of the wireless access point. Answer: DE

10. A customer is using RIP to dynamically share routes. routing updates to meet their needs. meet the need for faster convergence? A. OSPF B. Stateful Firewall

The network does not respond quickly enough to

What needs to be added to the Contivity gateways in this design to

www.prepking.com

 C. Use Static Routes D. Additional Contivity Units Answer: A

11. A customer has a dial-up solution but now wants to add broadband remote access services. Contivity be used to provide broadband remote access? A. Implement Contivity RAS server B. Use Contivity to terminate direct dial sessions C. Contivity cannot facilitate a move to broadband D. Use Contivity at the main site(s) to terminate VPN client tunnels Answer: D

How can

12. A customer currently has a Contivity VPN solution that includes 100 Contivity switches.

After a

company re-organization, they have decided to go with an out-source company to manage the switches. What is the best option for the out-source Network Operations Center (NOC) to manage this? A. Dual Contivity 600 at the NOC. B. Contivity 2700 at the NOC with control tunnels to each site. C. Install the Contivity VPN Client on all NOC computers and configure user control tunnel to each site. D. Contivity 1700 at NOC and Contivity VPN Client at the customer site with user control tunnel to NOC Answer: B

13. On what basis are queues defined on Contivity? A. User LDAP Groups B. Physical Interfaces C. Branch Office LDAP Groups D. Branch Office LDAP Connections Answer: B

14. An engineer planning a customer's Contivity configuration has recommended deployment of the Contivity 1700 model switch. Which customer requirement would support this recommendation?
www.prepking.com

 A. Need to support up to 512 MB of memory B. Need to support up to 400 firewall tunnels C. Need to support up to 200 office-to-office tunnels D. Need to support up to 1,600 office-to-office tunnels Answer: C

15. A customer with branch offices has a need to send secure traffic to certain networks and other traffic to the Internet. To support this requirement Contivity will be used in a branch-to-branch configuration for the secure traffic. What configuration information must be determined about the branch office switches to

ensure proper operation? A. Encryption settings must be identical for all switches B. End points of the tunnels must be on the same subnet C. Stateful firewall settings must be identical for all switches D. Usernames and Passwords must be identical for all switches Answer: A

16. A startup company is looking to add a VPN solution with as much redundancy as possible in a single box. Which Contivity model would you recommend? A. Contivity 1100 B. Contivity 1700 C. Contivity 2700 D. Contivity 4600 Answer: D

17. A customer has a Contivity 1700, with two private interfaces and one public. Interface filters are enabled, and the interface filters allow devices on the two private LANS to access each other. The customer now

has a requirement for a more complex security policy. What is the best option for the customer that will be most efficiency on the Contivity? A. Add rules to the current interface filters B. Use the Contivity Stateful Firewall and disable tunnel filters
www.prepking.com

 C. Use the Contivity Stateful Firewall and enable tunnel filters D. Add rules to the current interface filters and disable tunnel filters Answer: B

18. A customer has two private networks with the first behind a local switch and the second behind a remote switch. Contivity will be used to provide an asymmetric branch office tunnel connections between the

networks. What configuration information is essential to set up this branch-to-branch configuration? A. Stateful firewall settings B. Operational parameters for RIP and OSPF if used C. Only one tunnel end-point IP address needs to be configured D. Both the Local and remote tunnel end-point IP address needs to be configured Answer: C

19. A manufacturing company is preparing to deploy a Contivity VPN solution to address their need to protect trade secrets during transactions. An engineer planning the deployment has chosen to terminate To ensure security, how should

the Contivity switch in parallel with the firewall in the customer's network. the Contivity be configured to handle VPN packets in this arrangement? A. to drop all non-VPN packets B. to accept all non-VPN packets C. to direct all VPN packets to the screening router D. to direct all non-VPN packets to the screening router Answer: A

20. A customer has high volume real-time transactions that need to be secured. The data contained in the transactions is only usable for a five minute time period. After the time has elapsed the data no longer needs to be secured. Which Contivity encryption algorithm would meet the design criteria while giving the customer the best performance possible? A. DES B. 3DES C. Blowfish
www.prepking.com

 D. CAST128 Answer: A

21. Which two of the following criteria can be used to classify traffic flows in Contivity? A. IP ToS Field B. TCP Ack Flag C. Current DSCP D. IP Version Field E. Source IP Address Answer: CE

(Choose two.)

22. A company has a large Netware installation running NDS and LDAP services. The lead network manager wants to configure the Contivity gateway in such a way to leverage the existing LDAP services through the Netware infrastructure. Remote users obtain IP addressing from DHCP services running on the Netware servers. Additionally there are two groups of ten remote access users. Each group requires distinct connection attributes that include the following: ? Filtering profile ? Encryption strength ? Quality of service attributes ? Profile association on the basis of IP address Which configuration would you recommend? A. Internal LDAP Database using a group profile mechanism B. External LDAP proxy services using an individual profile mechanism C. Radius Server with proxy services referencing External LDAP using user profile mechanism D. External LDAP proxy services using a group profile mechanism on the basis of userid rather than IP address association Answer: D

23. A company has some small international sites with point-to-point connections. considerations must a Contivity design consider? A. IEEE Standards B. ISO 9000 requirements C. Domestic encryption restrictions
www.prepking.com

What legal

 D. Import and export restrictions on encryption and security devices Answer: D

24. How many tunnels run from a PPTP Access Concentrator to a PPTP Network Server for a user community of 5000? A. 2 B. 1 C. 5000 D. 10000 Answer: B

25. A company wants to use a single device to allow both tunneled and untunneled traffic for a remote office. What can be implemented on the Contivity to allow both types of packets to pass between public and private interfaces? (Choose two.) A. Split-tunneling B. Branch Office Tunnel C. Contivity Tunnel Filters D. Contivity Interface Filters E. Contivity Stateful Firewall Answer: DE

26. A government agency wants to add an additional layer of authentication for Web management of the Contivity. How can this be accomplished? A. Only allow management via Bulk Load B. Require RADIUS authentication of users C. Force management to be done via the serial port D. Place the Contivity in "restricted" mode and force management through a tunnel Answer: D

27. A service provider wishes to manage customers' remote Contivity 1700s over the Internet. Which
www.prepking.com

100% Pass Guaranteed or Full Refund Word to Word Real Exam Questions from Real Test Buy full version of exam from this link below http://www.prepking.com/920-242.htm