642-617 試験問題を無料オンラインアクセス

When troubleshooting redundant interface operations on the Cisco ASA, which configuration should be verified?

• A.The nameif configuration on the member physical interfaces are identical.
• B.The active interface is sending periodic hellos to the standby interface.
• C.The MAC address configuration on the member physical interfaces are identical.
• D.The IP address configuration on the logical redundant interface is correct.
• E.The duplex and speed configuration on the logical redundant interface are correct.

With Cisco ASA active/active or active/standby stateful failover, which state information or table is not passed between the active and standby Cisco ASA by default?

• A.HTTP connection table
• B.NAT translation table
• C.ARP table
• D.TCP connection states
• E.UDP connection states

Which statement about SNMP support on the Cisco ASA running version 8.2.2 is true?

• A.Support both read-only and read-write access.
• B.Only support running SNMP versions 1 and 2c simultaneously.
• C.The Cisco ASA can send SNMP traps to the network management station only using
  SNMPv2.
• D.Support three SNMPv3 groups: Authentication and Encryption, Authentication Only, and
  No Authentication.

Which Cisco ASA feature enables the ASA to do these two things?
1) Act as a proxy for the server and generate a SYN-ACK response to the client SYN request.
2) When the Cisco ASA receives an ACK back from the client, the Cisco ASA authenticates the client and allows the connection to the server.

• A.TCP intercept
• B.TCP state bypass
• C.advanced threat detection
• D.botnet traffic filter
• E.basic threat detection
• F.TCP normalize

Which Cisco ASA object group type offers the most flexibility for grouping different services together based on arbitrary protocols?

• A.ICMP
• B.service
• C.protocol
• D.TCP-UDP
• E.network