500-258 무료 덤프문제 온라인 액세스

Refer to the exhibit.

Which Cisco ASA CLI commands configure these static routes in the Cisco ASA routing table?

• A.route dmz 10.2.2.0 255.255.255.0 172.16.1.10 1 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 1
• B.route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 2
• C.route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11
• D.route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11
• E.route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 2
• F.route dmz 10.2.2.0 0.0.0.255 172.16.1.10 1 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 1

The "HTTPS decryption" feature is enabled with the default settings and decryption and IPS policies have been applied to the traffic.
Which statement describes what happens when a client connects to a server with an untrusted certificate?

• A.The HTTPS traffic is forwarded to the client but is not decrypted or inspected.
• B.The HTTPS traffic is not decrypted but is inspected by the IPS and dropped if a threat is identified.
• C.The HTTPS traffic is decrypted but not inspected by the IPS.
• D.The HTTPS traffic is decrypted, inspected by the IPS, and dropped if a threat is identified.
• E.The HTTPS traffic is dropped and is not decrypted or inspected by the IPS.

Refer to the exhibit.

Which traffic is permitted on the inside interface without any interface ACLs configured?

• A.any IP traffic input to the inside interface
• B.any IP traffic input to the inside interface destined to any lower security level interfaces
• C.only HTTP traffic input to the inside interface
• D.No input traffic is permitted on the inside interface.
• E.only HTTP traffic output from the inside interface
• F.No output traffic is permitted on the inside interface.

Which three options are characteristics of WebType ACLs? (Choose three.)

• A.They are assigned per-user or per-group policy.
• B.They support URL pattern matching.
• C.They can be defined in the Cisco AnyConnect Profile Editor.
• D.They support standard and extended WebType ACLs.
• E.They support implicit deny all at the end of the ACL.
• F.They are assigned per-connection profile.

In one custom dynamic application, the inside client connects to an outside server using TCP port 4444 and negotiates return client traffic in the port range of 5000 to 5500. The server then starts streaming UDP data to the client on the negotiated port in the specified range. Which Cisco ASA feature or command supports this custom dynamic application?

• A.established command
• B.ip verify command
• C.TCP intercept
• D.set connection advanced-options command
• E.tcp-map and tcp-options commands
• F.TCP normalizer