642-617 무료 덤프문제 온라인 액세스

What mechanism is used on the Cisco ASA to map IP addresses to domain names that are contained in the botnet traffic filter dynamic database or local blacklist?

• A.WebACL
• B.dynamic botnet database fetches (updates)
• C.static white list
• D.static blacklist
• E.DNS inspection and snooping
• F.HTTP inspection

With Cisco ASA active/standby failover, what is needed to enable subsecond failover?

• A.Decrease the default unitfailover polltime to 300 msec and the unitfailover holdtime to
  900 msec
• B.Enable the stateful failover interface between the primary and secondary Cisco ASA.
• C.Use redundant interfaces.
• D.Decrease the default number of monitored interfaces to 1.

What is the default interval for how often the dynamic database of the Cisco ASA botnet traffic filter is updated from Cisco/lronPort?

• A.every 12 hours
• B.every 5 minutes
• C.every 30 minutes
• D.every 24 hours
• E.every 15 minutes
• F.every 1 hour

CORRECT TEXT
Instructions
This item contains a simulation task. Refer to the scenario and topology before you start.
When you are ready, open the Topology window and click the required device to open the
GUI window on a virtual terminal. Scroll to view all parts of the Cisco ASDM screens.
Scenario
Click the PC icon to launch Cisco ASDM. You have access to a Cisco ASA 5505 via Cisco
ASDM. Use Cisco ASDM to edit the Cisco ASA 5505 configurations to enable Advanced
HTTP Application inspection by completing the following tasks:
1. Enable HTTP inspection globally on the Cisco ASA
2. Create a new HTTP inspect Map named: http-inspect-map to:
a. Enable the dropping of any HTTP connections that encounter HTTP protocol violations b. Enable the dropping and logging of any HTTP connections when the content type in the
HTTP response does not match one of the MIME types in the accept filed of the HTTP request
Note: In the simulation, you will not be able to test the HTTP inspection policy after you complete your configuration. Not all Cisco ASDM screens are fully functional.

정답:

Here are the step by step Solution for this:

Refer to the exhibit. Which two options will result from the Cisco ASA configuration?
(Choose two.)

• A.The inside web client will use the 209.165.200.230 IP address to reach the web server and the Cisco ASA will translate the 209.165.200.230
  IP address to the 192.168.100.1 IP address.
• B.The Cisco ASA will translate the DNS A-Record reply from the DNS server to any inside client for the web server (web server IP =192.168.100.1).
• C.The outside hosts can use the 192.168.100.1 IP address to reach the web server on the inside network.
• D.The global IP address of the web server is 209.165.200.230.
• E.The web server will be reachable only from the outside.
• F.The web server will be reachable only from the inside.