642-617 試験問題を無料オンラインアクセス

Refer to the Exhibit.

Which statement about the NAT/PAT configuration is true?

• A.Static NAT is used for any IP traffic that is sourced from the dmz_webserver to the outside.
• B.Static PAT is used for any IP traffic that is sourced from the dmz_ emailserver to the outside.
• C.Dynamic PAT is used for any IP traffic that is sourced from the dmz_emailserver to the outside.
• D.Dynamic NAT is used for any IP traffic that is sourced from the dmz_emailserver to the outside.
• E.Dynamic NAT is used for any IP traffic that is sourced from any host on the guest network to the outside.
• F.Dynamic PAT is used for any IP traffic that is sourced from any host on the inside network to the outside.

What mechanism is used on the Cisco ASA to map IP addresses to domain names that are contained in the botnet traffic filter dynamic database or local blacklist?

• A.DNS inspection and snooping
• B.static blacklist
• C.static white list
• D.WebACL
• E.dynamic botnet database fetches (updates)
• F.HTTP inspection

Refer to the exhibit. A Cisco ASA in transparent firewall mode generates the log messages seen in the exhibit. What should be configured on the Cisco ASA to allow the denied traffic?

• A.stateful packet inspection
• B.static MAC address mapping
• C.extended ACL on the outside and inside interface to permit the multicast traffic
• D.static ARP mapping
• E.EtherType ACL on the outside and inside interface to permit the multicast traffic

Review the image below.

What configuration would be accomplished by configuring the "Set ASDM Defined User
Roles"?

• A.Allows remote access users to connect only when they have been assigned privileges of level 15
• B.ASDM privileges authorizes management connection on the ASA
• C.It authorizes remote sites to connect via VPN.
• D.Allows the configuration of predefined user account privileges.
• E.Anyone listed under users account and with any privilege can access ASDM and make changes

Which Cisco ASA object group type offers the most flexibility for grouping different services together based on arbitrary protocols?

• A.ICMP
• B.network
• C.protocol
• D.service
• E.TCP-UDP