Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v1.0) - 642-617무료 덤프문제 풀어보기

A. ARP inspection must be enabled on both the inside and outside interfaces using the arp-inspection interface-name enable flood command.

B. Both the inside and outside interfaces must be configured with the same security level.

C. IP routing must be disabled on the Cisco ASA using the no ip routing global configuration command.

D. An inbound EtherType ACL is required on the inside and outside interfaces to permit
ARP traffic.

E. The Cisco ASA must be configured to use the same MAC address on its outside and inside interfaces.

F. The management IP address of the Cisco ASA configured with the ip address global configuration command must belong in the 10.0.1.0/24 subnet.

A. Specify the static route as the default tunnel gateway for VPN traffic.

B. Change the default metric (admin distance) from 1 to some other value.

C. Enable route tracking.

D. Specify a tag value to the static route that can be used as a "match" value for controlling redistribution via route maps

E. Specify that the static route will not be removed, even if the interface shuts down.

A. Many HTTP connections to the 10.1.1.50 web server have successfully completed the three-way TCP handshake

B. The 10.1.1.50 host is triggering SYN flood attacks against random hosts on the outside.

C. Many embryonic connections are made from random sources to the 10.1.1.50 web server.

D. The output is showing normal activity to the inside 10.1.1.50 web server.

E. The 10.1.1.50 web server is terminating all the incoming HTTP connections.

A. 6000 seconds

B. 3600 seconds

C. 600 seconds

D. 1200 seconds

E. 120 seconds

A. threat detection

B. TCP normalizer

C. cut-thru proxy

D. botnet traffic filtering

E. transparent firewall

A. SKINNY

B. ESMTP

C. ICMP

D. SIP

E. TFTP

F. HTTP

A. The Cisco ASA is setup as the DHCP server for hosts on the inside and outside interfaces

B. Access to the CLI in privileged mode will be authenticated using the LOCAL database on the Cisco ASA

C. The ASA is using a persistent self-signed certificated so users can authenticate the
Cisco ASA when accessing it via Cisco ASDM

D. NAT Control is enabled

E. All IP traffic is permitted from the inside host to the outside

F. All hosts on the inside and on the outside can access Cisco ASDM

A. The CTX context is the standby context on the Cisco ASA.

B. The CTX context contains the system configurations.

C. The CTX context is the active context on the Cisco AS

D. The CTX context has the admin role.

A. threat detection

B. security contexts

C. transparent firewall

D. traffic shaping

E. stateless active/standby failover