500-260 試験問題を無料オンラインアクセス

In one custom dynamic application, the inside client connects to an outside server using TCP port 4444 and negotiates return client traffic in the port range of 5000 to 5500. The server then starts streaming UDP data to the client on the negotiated port in the specified range. Which Cisco ASA feature or command supports this custom dynamic application?

• A.established command
• B.tcp-map and tcp-options commands
• C.ip verify command
• D.set connection advanced-options command
• E.TCP intercept
• F.TCP normalizer

On Cisco ASA Software Version 8.3 and later, which two statements correctly describe the NAT table or NAT operations? (Choose two.)

• A.The NAT table has four sections.
• B.The order of the NAT entries in the NAT table is not relevant to how the packets are matched against the NAT table.
• C.Twice NAT is required for hosts on the inside to be accessible from the outside.
• D.Auto NAT also is referred to as Object NAT.
• E.Manual NAT configurations are found in the first (top) and/or the last (bottom) section(s) of the NAT table.
• F.Auto NAT configurations are found only in the first (top) section of the NAT table.

Refer to the exhibit.

A NOC engineer needs to tune some postlogin parameters on an SSL VPN tunnel. From the information shown, where should the engineer navigate to, in order to find all the postlogin session parameters?

• A.DefaultRAGroup Group Policy
• B."engineering" Group Policy
• C.DefaultWEBVPNGroup Group Policy
• D."contractor" Connection Profile
• E."engineer1" AAA/Local Users

Which application is required to enable Microsoft Active Directory identity integration for FirePOWER services?

• A.Sourcefire User Agent
• B.Cisco Directory Agent
• C.Microsoft Active Directory Agent
• D.Microsoft Active Directory Manager

Which license is required on the Cisco ASA NGFW for an administrator to manage it securely from a remote laptop?

• A.AnyConnect Premium
• B.AnyConnect Endpoint Assessment
• C.AnyConnect for Mobile
• D.Cisco Secure Desktop
• E.AnyConnect for Cisco VPN phone