最新的Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) - 642-618免費考試真題

A. The connection is a DNS connection.

B. The connection is an incomplete TCP connection.

C. The connection is active and has received inbound and outbound data.

D. The connection is awaiting outside ACK to SYN.

E. The connection is initiated from the inside.

A. The Cisco ASA authenticates itself to the administrator using a one-time password.

B. The Cisco ASA and the administrator use a mutual password to authenticate each other.

C. The Cisco ASA automatically creates and uses a persistent self-signed X.509 certificate to authenticate itself to the administrator.

D. The administrator validates the Cisco ASA by examining the factory built-in identity certificate thumbprint of the Cisco AS

E. The Cisco ASA automatically creates a self-signed X.509 certificate on each reboot to authenticate itself to the administrator.

A. extended ACL on the outside and inside interface to permit the multicast traffic

B. static MAC address mapping

C. static ARP mapping

D. EtherType ACL on the outside and inside interface to permit the multicast traffic

E. stateful packet inspection

A. All the connections from the 10.1.1.99 have completed the TCP three-way handshake.

B. The 10.1.1.99 host on the inside is under a SYN flood attack.

C. The 10.1.1.99 host operations on the inside look normal.

D. The 10.1.1.99 hosts are generating a vast number of outgoing connections, probably due to a virus.

E. The maximum number of TCP connections that the 10.1.1.99 host can establish will be 146608.

A. Auto NAT also is referred to as Object NAT.

B. Twice NAT is required for hosts on the inside to be accessible from the outside.

C. The order of the NAT entries in the NAT table is not relevant to how the packets are matched against the NAT table.

D. The NAT table has four sections.

E. Auto NAT configurations are found only in the first (top) section of the NAT table.

F. Manual NAT configurations are found in the first (top) and/or the last (bottom) section(s) of the NAT table.

A. nat (outside) 1 192.168.1.1 global (inside 1 10.1.1.10

B. access-list outside_access_in line 1 extended permit tcp any object 192.168.1.1 eq http access-group outside_access_in in interface outside

C. static(inside,outside) 192.168.1.1 10.1.1.10 netmask 255.255.255.255 tcp 0 0 udp 0

D. object network 192.168.1.1 nat (inside,outside) static 10.1.1.10

E. nat (inside) 1 10.1.1.10 global (outside) 1 192.168.1.1

F. access-list outside_access_in line 1 extended permit tcp any object 10.1.1.10 eq http access-group outside_access_in in interface outside

G. object network 10.1.1.10 nat (inside,outside) static 192.168.1.1

H. static(inside,outside) tcp 192.168.1.1 80 10.1.1.10 80

A. HTTP inspection is enabled in the global policy.

B. All input traffic on the inside interface is denied by the global ACL.

C. ICMP echo-request traffic is permitted from the inside to the outside, and ICMP echo-reply will be permitted from the outside back to inside.

D. Traffic between two hosts connected to the same interface is permitted.

E. All input and output traffic on the outside interface is denied by the global ACL.

A. The Cisco ASA appliance verifies each fragment and performs virtual IP re-assembly before the full IP packet is forwarded out.

B. The Cisco ASA appliance forwards the packet out as soon as all of the fragments of the packet have been received.

C. Each fragment passes through the Cisco ASA appliance without any inspections.

D. Each fragment is blocked by the Cisco ASA appliance.

A. source dynamic insidenatted insidenet destination static Partner-internal-subnets outnatted

B. source dynamic insidenet insidenatted interface destination static Partner-internal-subnets outnatted

C. source dynamic insidenet interface destination static Partner-internal-subnets outnatted

D. source dynamic insidenatted interface destination static Partner-internal-subnets outnatted

E. source dynamic insidenet insidenatted destination static Partner-internal-subnets outnatted interface

F. source dynamic insidenet insidenatted destination static Partner-internal-subnets outnatted