Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) - 642-618 Free Exam Questions

A. With the default factory configuration, Cisco ASDM access is not enabled.

B. The switchport access vlan command can be used to assign the VLAN to each physical interface (ethernet 0/0 to ethernet 0/7).

C. With the default factory configuration, the management interface (management 0/0) is configured with the 192.168.1.1/24 IP address.

D. With the default factory configuration, both the inside and outside interface will use DHCP to acquire its IP address.

E. The IP address is configured under the physical interface (ethernet 0/0 to ethernet 0/7).

A. With active/active failover, user data passing interfaces troubleshooting should be done within the context execution space.

B. Syslog level 1 messages will be generated on the standby unit only if the logging standby command is used.

C. With active/active failover, failover link troubleshooting should be done in the system execution space.

D. The failed interface threshold is set to 1. Using the show monitor-interface command, if one of the monitored interfaces on both the primary and secondary Cisco ASA appliances is in the unknown state, a failover should occur.

E. With active/active failover, ASR groups must be enabled.

A. advanced threat detection

B. botnet traffic filter

C. basic threat detection

D. TCP intercept

E. TCP normalizer

F. TCP state bypass

A. Apply an EtherType ACL to the inside and outside interfaces to permit OSPF multicast traffic.

B. Configure OSPF stateful packet inspection using MPF.

C. Apply an extended ACL to the inside and outside interfaces to permit OSPF multicast traffic.

D. Map the R1 and R2 MAC address in the Cisco ASA MAC address table using the mac-addresstable static if_name MAC_address command.

E. Enable Advanced Application Inspection using MPF.

A. if NAT is configured

B. if the destination is more than a hop away from the Cisco ASA

C. if dynamic ARP inspection is configured

D. if the destination MAC address is unknown

E. if multiple context mode is configured

A. The standby ASA eventually becomes the active ASA after three times the hold-down timer interval expires.

B. Both ASAs go to the "unknown" state until the LAN interface becomes operational again.

C. The standby ASA runs network activity tests, including ARP and ping, to determine if the active ASA has failed.

D. The standby ASA sends additional hellos packets on all monitored interfaces, including the LAN failover interface, to determine if the active ASA has failed.

E. The standby ASA immediately becomes the active AS

A. all

B. any

C. interface

D. global

E. auto