Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) - 642-618무료 덤프문제 풀어보기

A. DNS inspection in the global policy.

B. Periodic download of the dynamic botnet database from Cisco.

C. Manual botnet black and white lists.

D. DNS snooping

E. Botnet traffic filtering on atleast one of the Cisco ASA interface.

A. Verify the interface status in the user context.

B. Verify the resource classes configuration by accessing the admin context.

C. Verify the mac-address-table on the Cisco ASA.

D. Verify the interface status in the system execution space.

E. Verify that unique MAC addresses are configured if the contexts are using nonshared interfaces.

A. only HTTP traffic input to the inside interface

B. only HTTP traffic output from the inside interface

C. No input traffic is permitted on the inside interface.

D. No output traffic is permitted on the inside interface.

E. any IP traffic input to the inside interface

F. any IP traffic input to the inside interface destined to any lower security level interfaces

A. security context resource management

B. NAT

C. failover

D. shared interface

E. Layer 7 inspections

A. No inspection will be applied to the TCP port 21 traffic, because the http class map configuration conflicts with the ftp class map.

B. both HTTP and FTP inspections will be applied to the TCP port 21 traffic.

C. Only FTP inspection will be applied to the TCP port 21 traffic.

D. All FTP traffic will be denied, because the FTP traffic will fail the HTTP inspection.

E. Only HTTP inspection will be applied to the TCP port 21 traffic.

A. http 10.1.16.0 0.0.0.0 inside

B. http 10.1.16.0 255.255.255.255

C. http 10.1.16.0 255.255.240.0 inside

D. http 10.1.16.0 0.0.15.255 inside

A. 1. Create a service policy rule.
2.Identify which traffic to match.
3.Apply action(s) to the traffic.

B. 1. Create a class map to identify which traffic to match.
2.Create a policy map and apply action(s) to the traffic class(es).
3.Apply the policy map to an interface or globally using a service policy.

C. 1. Create a Layer 3 and 4 type inspect policy map.
2.Create class map(s) within the policy map to identify which traffic to match.
3.Apply the policy map to an interface or globally using a service policy.

D. 1. Identify which traffic to match.
2.Apply action(s) to the traffic.
3.Create a policy map.
4.Apply the policy map to an interface or globally using a service policy.

A. Use redundant interfaces.

B. Decrease the default unit failover polltime to 300 msec and the unit failover holdtime to 900 msec.

C. Enable the stateful failover interface between the primary and secondary Cisco ASA.

D. Decrease the default number of monitored interfaces to 1.