Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0)

Question 1

Which additional active/standby failover feature was introduced in Cisco ASA Software Version 8.4?

A. OSPF and EIGRP routing protocol stateful failover

B. IPsec VPN stateful failover

C. SSL VPN stateful failover

D. NAT stateful failover

E. HTTP stateful failover

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

On Cisco ASA Software Version 8.4.1 and later, when you configure the Cisco ASA appliance in transparent firewall mode, which configuration is mandatory?

A. EtherType access-list

B. ARP inspections

C. bridge group(s)

D. dynamic MAC address learning

E. static routes

F. NAT

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

How many interfaces can a Cisco ASA bridge group support and how many bridge groups can a Cisco ASA appliance support?

A. up to 2 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance

B. up to 8 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance

C. up to 8 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance

D. up to 2 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance

E. up to 4 interfaces per bridge group and up to 8 bridge groups per Cisco ASA appliance

F. up to 4 interfaces per bridge group and up to 4 bridge groups per Cisco ASA appliance

Correct Answer: E

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

Which three Cisco ASA configuration commands are used to enable the Cisco ASA to log only the debug output to syslog? (Choose three.)

A. logging trap test

B. logging list test message 711001

C. logging message 711001 level 7

D. logging debug-trace

E. logging trap debugging

Correct Answer: A,B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

DRAG DROP
Click and drag the supported ASA QoS option on the left to the correct description on the right. (Some of the options on the left are not used)

Correct Answer:

Explanation:

Question 6

Which statement about the Cisco ASA 5585-X appliance is true?

A. All IPS traffic (except the IPS management interface traffic) must flow through the firewall/VPN SSP first before it can be redirected to the IPS SSP.

B. The ASA 5585-X appliance with the firewall/VPN SSP-60 has a maximum firewall throughput of 10 Gb/s.

C. The IPS SSP operates independently. The firewall/VPN SSP is not necessary to support the IPS SSP.

D. The IPS SSP must be installed in slot 0 (bottom slot) and the firewall/VPN SSP must be installed in slot 1 (top slot).

E. The ASA 5585-X appliance supports three types of SSP (the firewall/VPN SSP, the IPS SSP, and the CSC SSP).

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

Which option describes the problem with this botnet traffic filter configuration on the Cisco ASA appliance?

A. The threat level range for the traffic to be dropped is not defined.

B. The static black and white list entries should use domain name instead of IP address.

C. DNS snooping is not enabled.

D. The traffic classification ACL is not defined.

E. The use of the dynamic database is not enabled.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

Refer to the exhibit.

What can be determined about the connection status?

A. Many HTTP connections to the 10.1.1.50 web server have successfully completed the three-way TCP handshake.

B. The 10.1.1.50 host is triggering SYN flood attacks against random hosts on the outside.

C. The output is showing normal activity to the inside 10.1.1.50 web server.

D. The 10.1.1.50 web server is terminating all the incoming HTTP connections.

E. Many embryonic connections are made from random sources to the 10.1.1.50 web server.

Correct Answer: E

Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) - 642-618 Exam Practice Test

Latest Update

Useful Links

Contact Us