Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0)의 출제 기준은 시험 주관사의 정책에 따라 수시로 조정됩니다. Fast2test은 2026년에도 642-618 연습문제를 꾸준히 검토하고 갱신하여, 137문항 전체가 최신 시험 기준을 반영하도록 관리하고 있습니다.

Cisco 642-618 시험 개요:

Cisco 642-618 시험 요강 주제:

Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0)에 대해 수험생이 가장 많이 묻는 질문

최신 CCNP Security 642-618 무료샘플문제

문제 #1

Which other match command is used with the match flow ip destination-address command within the class map configurations of the Cisco ASA MPF?

A. match tunnel-group
B. match port
C. match access-list
D. match default-inspection-traffic
E. match dscp

문제 #2

Refer to the exhibit.

What is a reasonable conclusion?

A. The 10.1.1.99 host on the inside is under a SYN flood attack.
B. All the connections from the 10.1.1.99 have completed the TCP three-way handshake.
C. The 10.1.1.99 host operations on the inside look normal.
D. The 10.1.1.99 hosts are generating a vast number of outgoing connections, probably due to a virus.
E. The maximum number of TCP connections that the 10.1.1.99 host can establish will be 146608.

문제 #3

With Cisco ASA active/active or active/standby stateful failover, which state information or table is not passed between the active and standby Cisco ASA by default?

A. UDP connection states
B. HTTP connection table
C. TCP connection states
D. NAT translation table
E. ARP table

문제 #4

Refer to the exhibit.

Which Cisco ASA configuration has the minimum number of the required configuration commands to enable the Cisco ASA appliance to establish EIGRP neighborship with its two neighboring routers?

A. router eigrp 1 network 0.0.0.0 255.255.255.255
B. router eigrp 1 network 10.1.1.0 255.255.255.0 network 10.2.2.0 255.255.255.0
C. router eigrp 1 network 10.0.0.0 255.0.0.0
D. router eigrp 1 network 10.0.0.0 255.0.0.0 network 192.168.1.0 255.255.255.0
network 192.168.2.0 255.255.255.0
E. router eigrp 1 network 10.1.1.0 255.255.255.0 network 10.2.2.0 255.255.255.0 network 192.168.1.0 255.255.255.0 network 192.168.2.0 255.255.255.0

문제 #5

Which configuration step (if any) is necessary to enable FTP inspection on TCP port 2121?

A. Edit default-inspection-traffic to match FTP on port 2121.
B. Add a new traffic class using the match protocol FTP option within the inspect_default class map.
C. Create a new class map to match TCP port 2121, then edit the global policy to inspect FTP for traffic matched by the new class map.
D. None. FTP inspection is enabled by default using the global policy.

질문과 대답: