Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) 認定 642-618 試験問題:
1. Which statement about access list operations on Cisco ASA Software Version 8.3 and later is true?
A) Interface and global access lists can be applied in the input or output direction.
B) If the global and interface access lists are both configured, the global access list is matched first before the interface access lists.
C) When adding an access list entry in the global access list using the Cisco ASDM Add Access Rule window, choosing "any" for Interface applies the access list entry globally.
D) In the inbound access list on the outside interface that permits traffic to the inside interface, the destination IP address referenced is always the "mapped-ip" (translated) IP address of the inside host.
2. Scenario: To access Cisco ASDM, click the PC icon in the Topology window, ASDM and answer the following question as:
Which statement about the Cisco ASA configuration is true?
A) All input and output traffic on the outside interface is denied by the global ACL.
B) Traffic between two hosts connected to the same interface is permitted.
C) ICMP echo-request traffic is permitted from the inside to the outside, and ICMP echo-reply will be permitted from the outside back to inside.
D) All input traffic on the inside interface is denied by the global ACL.
E) HTTP inspection is enabled in the global policy.
3. Refer to the exhibit.
Which command enables the stateful failover option?
A) failover lan unit primary
B) failover link MYFAILOVER GigabitEthernet0/2
C) failover interface ip MYFAILOVER 172.16.5.1 255.255.255.0 standby 172.16.5.10
D) failover lan interface MYFAILOVER GigabitEthernet0/2
E) preempt
F) failover group 1 primary
4. Which two statements about traffic shaping capability on the Cisco ASA appliance are true? (Choose two.)
A) Traffic shaping can cause jitter and delay.
B) Traffic shaping can be applied to all outgoing traffic on a physical interface or, in the case of the Cisco ASA 5505 appliance, on a VLAN.
C) You can configure traffic shaping and priority queuing on the same interface.
D) With traffic shaping, when traffic exceeds the maximum rate, the security appliance drops the excess traffic.
E) Traffic shaping can be applied in the input or output direction.
5. DRAG DROP
Drag the Cisco ASR modes from the left to the correct description on the right.
質問と回答：
| 質問 # 1 正解： C | 質問 # 2 正解： A | 質問 # 3 正解： B | 質問 # 4 正解： A、B | 質問 # 5 正解： メンバーにのみ表示されます |
1215 お客様のコメント
品質保証JPexamはIT認定試験のシラバスに従って、試験問題の範囲を正確に絞って、的中率が99％の最新問題集を捧げます。
1年間の無料更新サービスJPexamは1年以内に問題集の無料更新サービスを提供し、お客様がいつでも最新版の問題集を持つことを保証いたします。もし試験の内容が変更されたら、弊社は直ちにお客様にお知らせします。それに、弊社の問題集が更新されたら、早速メールで最新バージョンを送付いたします。
全額返金JPexamの問題集を利用すると、短時間で勉強しても試験に合格できるのを保証いたします。試験に不合格になってしまった場合、弊社は全額返金いたします。(
ご購入前のお試しJPexamは問題集のサンプルを無料で提供いたします。ご購入前にサンプルを試用して製品の品質を確認することができます。ご遠慮なく利用してください。
