how many questions of 648-247 examcollection?

Q1. A gateway recently has been added to the network but does not appear in Cisco PAM. The gateway can be pinged from the user's laptop as well as the Cisco PAM server. Which of the following might cause this issue?

A. The gateway does not have the correct Cisco PAM Server IP address.

B. The gateway is not on the same network segment as the access control server.

C. The gateway has a different firmware version than the server.

D. The gateway does not have the correct Cisco PAM Server IP address, and the gateway has a different firmware version than the server.

View Answer

Q2. Refer to the exhibit.

In the event of a loss of connectivity from the Cisco Access Gateway to the expansion modules on the CAN bus, with DC power still connected, what will happen if an access card was presented to a card reader that is connected to one of the Reader Modules?

A. Reader Module will first try to authenticate the user by attempting to contact the Cisco Access Gateway. Because connectivity is lost, Reader Module will not be able to authenticate, and no access will be granted.

B. Reader Module will first try to authenticate the user by attempting to contact the Cisco Access Gateway. Because connectivity is lost, Reader Module will fall back to its locally cached credentials and grant access if the card is valid.

C. Reader Module will first try to authenticate the user using its locally cached credentials. If the credentials are in the local database, access will be granted. If the credentials are not present, Reader Module will attempt to contact the Cisco Access Gateway, time out, and deny access to the user.

D. Reader Module will sound an audible alarm.

View Answer

Q3. A Cisco Access Gateway is not getting autodiscovered by the Cisco PAM Server. Which two of the following actions are not possible resolutions for this issue? (Choose two.)

A. Enable SSL on both the Cisco Access Gateway and Cisco PAM Server.

B. Disable SSL on both the Cisco Access Gateway and Cisco PAM Server.

C. Configure DHCP and put the Cisco Access Gateway and Cisco PAM Server in the same Layer 2 network.

D. For Cisco Access Gateways and Cisco PAM Servers that are in the same time zone physically, configure the same time zone names on the Cisco Access Gateway and Cisco PAM Server and use NTP.

E. Configure DNS to resolve IP and hostname translation issues.

View Answer

Q4. Which of the following capabilities will cease to function if network connectivity is lost between the Cisco PAM Server and the Cisco Access Gateway?

A. global I/O

B. authenticating a valid badge that is presented to a reader that is connected to the Cisco Access Gateway

C. caching events such as an REX request or a valid card read

D. Global I/O, badge authentication, and caching of events will cease to function if network connectivity is lost between the Cisco PAM Server and Cisco Access Gateway

View Answer

Q5. Which of the following is a true statement that describes the differences between device I/O and global I/O?

A. Device I/O rules are triggered between different devices that are configured in the system.

Global I/O rules are triggered across all I/Os in the system.

B. Global I/O rules should be used when response time is critical. Device I/O rules should be used in all other cases.

C. Global I/O rules are configured by the Cisco PAM Server web GUI. Device I/O rules are configured by the Cisco PAM client GUI.

D. Device I/O rules affect a single gateway. Global I/O rules can affect multiple gateways.

View Answer

Q6. In Cisco PAM, how do you configure items such as DNS, system upgrades, and rebooting of the server?

A. via a web browser and logging into the Cisco PAM Server Administration web page

B. by using the Cisco PAM Java Client

C. Cisco PAM is configured using Cisco VSOM

D. by using the Cisco PAM EDI Studio application

View Answer

Q7. You need to design a 31-door, networked Cisco Physical Access Control Gateway system. Each door will be controlled by a Cisco Access Gateway, and each Cisco Access Gateway will require its own IP address. Due to the limited number of available IP addresses, the network admin has decided to implement variable-length subnet mask (VLSM) in order to better allocate the available address space. What is the most efficient subnet mask that can be used to handle the 31 IP addresses that are needed for the Cisco Access Gateways?

A. 255.255.255.128: /25

B. 255.255.255.192: /26

C. 255.255.255.224: /27

D. 255.255.255.240: /28

View Answer

Q8. In the event of a loss in network connectivity, what is the maximum number of credentials and events that can be cached on board the Cisco Physical Access Control Gateway module?

A. 25,000 credentials and 10,000 events

B. 25,000 credentials and 15,000 events

C. 250,000 credentials and 100,000 events

D. 250,000 credentials and 150,000 events

View Answer

Q9. You trigger an event and expect to see video in a pop-up window on a Cisco PAM client graphical map, but the video did not pop up. This could have been caused by all of the following, except which one?

A. You do not see the video pop-up window because you are in the graphical map editor.

B. You do not see the video pop-up window because you are logged in with the default admin account.

C. You do not see the video pop-up window because there are existing alarms that have not been acknowledged.

D. You do not see the video pop-up window because the "Show live video" and/or "Show recorded video" options are disabled.

View Answer