Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v1.0) - 642-617 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which statement about the Cisco ASA 5505 configuration is true?

A. With the default factory configuration, Cisco ASDM access is not enabled. B. With the default factory configuration, the management interface (management 0/0) is configured with the 192.168.1.1/24 IP address C. With the default factory configuration, both the inside and outside interface will use
DHCP to acquire its IP address. D. The switchport access vlan command can be used to assign the VLAN to each physical interface (ethemet 0/0 to ethemet 0/7). E. The IP address is configured under the physical interface (ethemet 0/0 to ethemet 0/7).

Discussion 0

Correct Answer: D Vote an answer

Question 2

By default, how does the Cisco ASA authenticate itself to the Cisco ASDM users?

A. The administrator validates the Cisco ASA by examining the factory built-in identity certificate thumbprint of the Cisco AS B. The Cisco ASA and the administrator use a mutual password to authenticate each other. C. The Cisco ASA automatically creates a self-signed X.509 certificate on each reboot to authenticate itself to the administrator. D. The Cisco ASA automatically creates and uses a persistent self-signed X.509 certificate to authenticate itself to the administrator E. The Cisco ASA authenticates itself to the administrator using a one-time password.

Discussion 0

Correct Answer: C Vote an answer

Question 3

On the Cisco ASA, tcp-map can be applied to a traffic class using which MPF CLI configuration command?

A. sysopt connection B. tcp-options C. parameters D. inspect E. set connection advanced-options

Discussion 0

Correct Answer: E Vote an answer

Question 4

Which Cisco ASA feature enables the ASA to do these two things?
1) Act as a proxy for the server and generate a SYN-ACK response to the client SYN request.
2) When the Cisco ASA receives an ACK back from the client, the Cisco ASA authenticates the client and allows the connection to the server.

A. TCP state bypass B. TCP intercept C. TCP normalize D. botnet traffic filter E. advanced threat detection F. basic threat detection

Discussion 0

Correct Answer: B Vote an answer

Question 5

Which Cisco ASA object group type offers the most flexibility for grouping different services together based on arbitrary protocols?

A. ICMP B. service C. protocol D. network E. TCP-UDP

Discussion 0

Correct Answer: B Vote an answer

Question 6

CORRECT TEXT
Instructions
This item contains a simulation task. Refer to the scenario and topology before you start.
When you are ready, open the Topology window and click the required device to open the
GUI window on a virtual terminal. Scroll to view all parts of the Cisco ASDM screens.
Scenario
Click the PC icon to launch Cisco ASDM. You have access to a Cisco ASA 5505 via Cisco
ASDM. Use Cisco ASDM to edit the Cisco ASA 5505 configurations to enable Advanced
HTTP Application inspection by completing the following tasks:
1. Enable HTTP inspection globally on the Cisco ASA
2. Create a new HTTP inspect Map named: http-inspect-map to:
a. Enable the dropping of any HTTP connections that encounter HTTP protocol violations b. Enable the dropping and logging of any HTTP connections when the content type in the
HTTP response does not match one of the MIME types in the accept filed of the HTTP request
Note: In the simulation, you will not be able to test the HTTP inspection policy after you complete your configuration. Not all Cisco ASDM screens are fully functional.

Discussion 0

Correct Answer:

Here are the step by step Solution for this:

Question 7

Which Cisco ASA feature enables the ASA to do these two things? 1) Act as a proxy for the server and generate a SYN-ACK response to the client SYN request. 2) When the Cisco
ASA receives an ACK back from the client, the Cisco ASA authenticates the client and allows the connection to the server.

A. TCP state bypass B. TCP intercept C. TCP normalizer D. botnet traffic filter E. advanced threat detection F. basic threat detection

Discussion 0

Correct Answer: B Vote an answer

Question 8

A Cisco ASA is operating in transparent firewall mode, but the MAC address table of the
Cisco ASA is always empty, which causes connectivity issues. What should you verify to troubleshoot this issue?

A. if BPDU traffic is explicitly allowed using EtherType ACL B. if NAT has been disabled C. if MAC learning has been disabled D. if ARP inspection has been disabled E. if ARP traffic is explicitly allowed using EtherType ACL

Discussion 0

Correct Answer: C Vote an answer

Question 9

A Cisco ASA requires an additional feature license to enable which feature?

A. threat detection B. cut-thru proxy C. transparent firewall D. TCP normalizer E. botnet traffic filtering

Discussion 0

Correct Answer: E Vote an answer