642-617 試験問題を無料オンラインアクセス

What is the first configuration step when using Cisco ASDM to configure a new Layer 3/4 inspection policy on the Cisco ASA?

• A.Create a new firewall access rule.
• B.Create a new class map.
• C.Create a new policy map and apply actions to the traffic classes.
• D.Create a new service policy rule.
• E.Disable the default global inspection policy.
• F.Create the ACLs to be referenced by any of the new class maps.

A Cisco ASA requires an additional feature license to enable which feature?

• A.cut-thru proxy
• B.botnet traffic filtering
• C.threat detection
• D.transparent firewall
• E.TCP normalizer

Refer to the Exhibit.

Which statement about the NAT/PAT configuration is true?

• A.Static NAT is used for any IP traffic that is sourced from the dmz_webserver to the outside.
• B.Dynamic NAT is used for any IP traffic that is sourced from any host on the guest network to the outside.
• C.Dynamic PAT is used for any IP traffic that is sourced from any host on the inside network to the outside.
• D.Static PAT is used for any IP traffic that is sourced from the dmz_ emailserver to the outside.
• E.Dynamic PAT is used for any IP traffic that is sourced from the dmz_emailserver to the outside.
• F.Dynamic NAT is used for any IP traffic that is sourced from the dmz_emailserver to the outside.

Which five options are valid logging destinations for the Cisco ASA? (Choose five.)

• A.LDAP server
• B.TCP-based secure syslog server
• C.buffer
• D.Cisco ASDM
• E.email
• F.AAA server
• G.SNMP traps

Refer to the exhibit. Which two CLI commands will result? (Choose two. )

• A.aaa authorization exec authentication-server LOCAL
• B.aaa authorization command LOCAL
• C.aaa authorization network LOCAL
• D.aaa authorization exec authentication-server
• E.aaa authorization exec LOCAL
• F.aaa authorization network default authentication-server LOCAL