642-617 무료 덤프문제 온라인 액세스

Using the default modular policy framework global configuration on the Cisco ASA, how does the Cisco ASA process outbound HTTP traffic?

• A.HTTP flows are not permitted through the Cisco ASA, because HTTP is not inspected by default.
• B.HTTP flows match the inspection_default traffic class and are inspected using HTTP inspection.
• C.HTTP outbound traffic is permitted, but all return HTTP traffic is denied.
• D.HTTP flows are statefully inspected using TCP stateful inspection.

The Cisco ASA is configured in multiple mode and the security contexts share the same outside physical interface. Which two packet classification methods can be used by the
Cisco ASA to determine which security context to forward the incoming traffic from the outside interface? (Choose two.)

• A.routing table lookup
• B.unique interface MAC address
• C.unique global mapped IP addresses
• D.MAC address table lookup
• E.unique interface IP address

When troubleshooting a Cisco ASA that is operating in multiple context mode, which two verification steps should be performed if a user context does not pass user traffic? (Choose two.)

• A.Verify the resource classes configuration by accessing the admin context.
• B.Verify that unique MAC addresses are configured if the contexts are using nonshared interfaces.
• C.Verify the interface status in the user context.
• D.Verify the interface status in the system execution space.
• E.Verify the mac-address-table on the Cisco ASA.

A Cisco ASA is operating in transparent firewall mode, but the MAC address table of the
Cisco ASA is always empty, which causes connectivity issues. What should you verify to troubleshoot this issue?

• A.if ARP inspection has been disabled
• B.if NAT has been disabled
• C.if ARP traffic is explicitly allowed using EtherType ACL
• D.if BPDU traffic is explicitly allowed using EtherType ACL
• E.if MAC learning has been disabled

Which Cisco ASA feature enables the ASA to do these two things? 1) Act as a proxy for the server and generate a SYN-ACK response to the client SYN request. 2) When the Cisco
ASA receives an ACK back from the client, the Cisco ASA authenticates the client and allows the connection to the server.

• A.TCP intercept
• B.TCP state bypass
• C.basic threat detection
• D.botnet traffic filter
• E.advanced threat detection
• F.TCP normalizer