642-617 무료 덤프문제 온라인 액세스

Refer to the exhibits. Which five options should be entered into the five fields in the Cisco
ASDM Add Static Policy NAT Rule screen? (Choose five.)
access-list POLICY_NAT_ACL extended permit ip host 172.16.0.10 10.0.1.0
255.255.255.0 static (dmz,outside) 192.168.2.10 access-list POLICY_NAT_ACL

• A.outside = Translated Interface
• B.172.16.0.10 = Translated Use IP Address
• C.172.16.0.10 = Original Source
• D.10.0.1.0/24 = Original Destination
• E.dmz = Translated Interface
• F.192.168.2.10 = Translated Use IP Address
• G.outside = Original Interface
• H.dmz = Original Interface
• I.192.168.2.10 = Original Source
• J.192.168.2.10 = Original Destination

Which Cisco ASA object group type offers the most flexibility for grouping different services together based on arbitrary protocols?

• A.TCP-UDP
• B.service
• C.ICMP
• D.network
• E.protocol

When troubleshooting a Cisco ASA that is operating in multiple context mode, which two verification steps should be performed if a user context does not pass user traffic? (Choose two.)

• A.Verify the interface status in the system execution space.
• B.Verify the resource classes configuration by accessing the admin context.
• C.Verify that unique MAC addresses are configured if the contexts are using nonshared interfaces.
• D.Verify the interface status in the user context.
• E.Verify the mac-address-table on the Cisco ASA.

Which feature is not supported on the Cisco ASA 5505 with the Security Plus license?

• A.security contexts
• B.transparent firewall
• C.traffic shaping
• D.stateless active/standby failover
• E.threat detection

Which two statements about Cisco ASA failover troubleshooting are true? (Choose two.)

• A.With active/active failover, user data passing interfaces troubleshooting should be done within the context execution space.
• B.Syslog level 1 messages will be generated on the standby unit only if the logging standby command is used.
• C.The failed interface threshold is set to 1. Using the show monitor-interface command, if one of the monitored interfaces on both the primary and secondary Cisco ASA appliances is in the unknown state, a failover should occur.
• D.With active/active failover, failover link troubleshooting should be done in the system execution space.
• E.With active/active failover, ASR groups must be enabled.