Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) - 642-618 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Refer to the partial Cisco ASA configuration and the network topology shown in the exhibit.

Which two Cisco ASA configuration commands are required so that any hosts on the Internet can HTTP to the WEBSERVER using the 192.168.1.100 IP address? (Choose two.)

A. nat (inside,outside) static interface B. access-list outside_access_in extended permit tcp any object 192.168.1.100 eq http C. access-list outside_access_in extended permit tcp any object 172.31.0.100 eq http D. access-list outside_access_in extended permit tcp any object 192.168.1.1 eq http E. nat (inside,outside) static 172.31.0.100 F. nat (inside,outside) static 192.168.1.100

Discussion 0

Correct Answer: C,F Vote an answer

Question 2

On Cisco ASA Software Version 8.4.1 and later, which three EtherChannel modes are supported? (Choose three.)

A. passive mode, which responds to LACP negotiation from the peer B. auto mode, which automatically responds to either PAgP or LACP negotiation from the peer C. on mode, which enables static port-channel mode D. active mode, which initiates LACP negotiation E. off mode, which disables dynamic negotiation

Discussion 0

Correct Answer: A,C,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit and to the four HTTP inspection requirements and the Cisco ASA configuration.

Which two statements about why the Cisco ASA configuration is not meeting the specified HTTP inspection requirements are true? (Choose two.)
1.All outside clients can use only the HTTP GET method on the protected 10.10.10.10 web server.
2.All outside clients can access only HTTP URIs starting with the "/myapp" string on the protected
10.10.10.10 web server.
3.The security appliance should drop all requests that contain basic SQL injection attempts (the string "SELECT" followed by the string "FROM") inside HTTP arguments.
4.The security appliance should drop all requests that do not conform to the HTTP protocol.

A. The MY-URI regular expression is not configured correctly. B. The policy-map type inspect http MY-HTTP-POLICY configuration is missing the references to the class maps. C. The WEB-SERVER-ACL ACL is not configured correctly. D. Both instances of match not request should be changed to match request. E. The BASIC-SQL-INJECTION regular expression is not configured correctly.

Discussion 0

Correct Answer: A,C Vote an answer

Question 4

Scenario: To access Cisco ASDM, click the PC icon in the Topology window, ASDM and answer the following question as:

Which statement about the Cisco ASA configuration is true?

A. ICMP echo-request traffic is permitted from the inside to the outside, and ICMP echo-reply will be permitted from the outside back to inside. B. All input traffic on the inside interface is denied by the global ACL. C. Traffic between two hosts connected to the same interface is permitted. D. All input and output traffic on the outside interface is denied by the global ACL. E. HTTP inspection is enabled in the global policy.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

By default, which access rule is applied inbound to the inside interface?

A. All IP traffic sourced from any source to any less secure network destinations is permitted. B. All IP traffic sourced from any source to any more secure network destinations is permitted C. All IP traffic is denied. D. All IP traffic is permitted.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Which option lists the main tasks in the correct order to configure a new Layer 3 and 4 inspection policy on the Cisco ASA appliance using the Cisco ASDM Configuration > Firewall > Service Policy Rules pane?

A. 1. Create a service policy rule.
2.Identify which traffic to match.
3.Apply action(s) to the traffic. B. 1. Identify which traffic to match.
2.Apply action(s) to the traffic.
3.Create a policy map.
4.Apply the policy map to an interface or globally using a service policy. C. 1. Create a class map to identify which traffic to match.
2.Create a policy map and apply action(s) to the traffic class(es).
3.Apply the policy map to an interface or globally using a service policy. D. 1. Create a Layer 3 and 4 type inspect policy map.
2.Create class map(s) within the policy map to identify which traffic to match.
3.Apply the policy map to an interface or globally using a service policy.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Which two statements about Cisco ASA 8.2 NAT configurations are true? (Choose two.)

A. If nat-control is enabled and a connection does not need a translation, then an identity NAT configuration is required. B. NAT configurations can use the any keyword as the input or output interface definition. C. The NAT table is read and processed from the top down until a translation rule is matched. D. Auto NAT links the translation to a network object. E. NAT operations can be implemented using the NAT, global, and static commands.

Discussion 0

Correct Answer: A,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).