Free 648-385 Questions for Cisco CXFF-Cisco Express Foundation for Field Engineers 648-385 Exam as PDF & Practice Test Engine

Exam Code/Number: 648-385
Exam Name/Title: CXFF-Cisco Express Foundation for Field Engineers
Certification Provider: Cisco
Corresponding Certification: Cisco Express Foundation Field Specialist

Exam Questions: 86
Updated On: Jul 23, 2026

Question #1

Which three of the following statements are correct regarding security features available on Cisco Catalyst switches? (Choose three.)

A. IP Source Guard prevents ARP spoofing attacks.

B. DHCP snooping prevents rogue DHCP servers from being placed on the network.

C. Private VLAN prevents client to client communication.

D. Port security prevents MAC address flooding.

E. MACsec provides end-to-end encryption.

Discussion 0

Correct Answer: B,C,D Vote an answer

Question #2

Which two options show the correct associations of use cases with VPN technologies? (Choose two.)

A. client access: SSL VPN, EZ-VPN, FlexVPN, MPLS

B. site-to-site VPN: OTV, DMVPN, GRE, GET-VPN, IPsec

C. SP or large enterprise: MPLS, VPLS, OTV

D. site-to-site VPN: GRE, DMVPN, FlexVPN, GET-VPN, IPsec

E. SP or large enterprise: MPLS, VPLS, SSL VPN

Discussion 0

Correct Answer: C,D Vote an answer

Question #3

Which three are valid Cisco VPN design options for teleworkers? (Choose three.)

A. Cisco Secure ACS

B. Cisco SSL VPN

C. Cisco GET Easy VPN Remote

D. Cisco AnyConnect VPN

E. Cisco Mobile VPN

Discussion 0

Correct Answer: B,D,E Vote an answer

Question #4

Which statement about the capabilities of the Cisco AnyConnect 3.0 Secure Mobility Client for Windows is true?

A. It is supported on Windows 7 and above.

B. It is exclusively configured by central policies; no local configuration is possible.

C. Only local policy configuration is supported.

D. User must select the nearest network access point to connect to.

E. It supports session persistence after hibernation or standby.

Discussion 0

Correct Answer: E Vote an answer

Question #5

Which three of the following are valid steps when building an architectural roadmap for a customer? (Choose three.)

A. Assess the current infrastructure, financial data, and operational management capabilities.

B. Identify configuration flaws on individual devices.

C. Deliver business case documentation, detailed technical solution scenarios, and TCO report.

D. Understand the business objectives, current environment, and pain points of the customer.

E. Analyze collected data, identify potential savings, and develop TCO and ROI.

Discussion 0

Correct Answer: A,D,E Vote an answer

Question #6

Which two statements correctly describe the Cisco router portfolio? (Choose two.)

A. The Cisco 800 and 1900 router series offer service module and integrated services module slots.

B. All Cisco ISR G2 routers provide network automation, consolidated VPN, and security features.

C. The Cisco 800 and 1900 router series supports Cisco Business Edition 6000.

D. The Cisco 2900 and 3900 router series support Cisco UCS Express.

E. The Cisco 800, 1900, and 3200 router series provide video and collaboration features.

Discussion 0

Correct Answer: B,D Vote an answer

Question #7

Which two of the following need to be considered when designing QoS in a Cisco Borderless Network? (Choose two.)?

A. In order to maintain DSCP values end-to-end, inbound traffic from the SP cloud needs to be reclassified if it was sent through a tunnel.

B. RFC 4594 describes how to classify and mark traffic at the campus and branch LAN using 12 different classifications.

C. According to RFC 4594, voice and video traffic should be sent through two separate priority queues.

D. In order to receive priority treatment for mission-critical traffic across the SP cloud, the higher number of locally used classes of service have to be mapped to the fewer number service classes that are usually offered by service providers.

Discussion 0

Correct Answer: B,D Vote an answer

Question #8

Which two of the following are unique advantages of the PD/PSE Cisco Catalyst Compact Switches? (Choose two.)

A. They support 16 PoE output ports.

B. Due to the fanless design, they can be placed in the workplace and drastically reduce in-house cabling needs.

C. They diminish the power infrastructure by supporting PoE+ input and PoE output at the same time.

D. They support PoE+ output.

Discussion 0

Correct Answer: B,C Vote an answer

Question #9

What are two reasons you would add Cisco WAAS to the branch router? (Choose two.)

A. Cisco WAAS Mobile on Cisco SRE is a cost-effective solution to optimize bandwidth.

B. Cisco WAAS on Cisco SRE is a good solution to optimize application performance.

C. Cisco WAAS Mobile on Cisco ISR G2 is an effective solution to achieve application acceleration.

D. Cisco WAAS Express is a cost-effective solution to optimize bandwidth.

E. Cisco yWAAS on Cisco ISR G2 is a solution to optimize services consolidation.

Discussion 0

Correct Answer: B,D Vote an answer

Free 648-385 Questions for Cisco CXFF-Cisco Express Foundation for Field Engineers 648-385 Exam as PDF & Practice Test Engine

Download Free Cisco 648-385 Demo