Cisco 642-617 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Management & Troubleshooting | - High availability troubleshooting - Logging, monitoring and packet capture |
| Topic 2: Initial Setup and Connectivity | - Configure interfaces and basic routing - Initialize ASA using CLI/ASDM |
| Topic 3: Inspection and Traffic Control | - Stateful traffic inspection - Modular Policy Framework (MPF) |
| Topic 4: Access Control and NAT | - NAT/PAT implementations - Configure ACLs and security levels |
| Topic 5: High Availability & Contexts | - Active/Standby and Active/Active failover - Multiple security contexts |
| Topic 6: Advanced Features | - Threat detection and botnet filtering - Transparent firewall mode |
| Topic 7: Cisco Adaptive Security Appliance (ASA) Overview | - Choose ASA model and licenses - Cisco ASA architecture and technology |
Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v1.0) Sample Questions:
Question #1
A Cisco ASA requires an additional feature license to enable which feature?
A. TCP normalizer
B. threat detection
C. transparent firewall
D. cut-thru proxy
E. botnet traffic filtering
Question #2
When enabling a Cisco ASA to send syslog messages to a syslog server, which syslog level will produce the most messages?
A. debugging
B. informational
C. emergencies
D. alerts
E. errors
F. notifications
Question #3
By default, how does the Cisco ASA authenticate itself to the Cisco ASDM users?
A. The administrator validates the Cisco ASA by examining the factory built-in identity certificate thumbprint of the Cisco AS
B. The Cisco ASA automatically creates a self-signed X.509 certificate on each reboot to authenticate itself to the administrator.
C. The Cisco ASA and the administrator use a mutual password to authenticate each other.
D. The Cisco ASA authenticates itself to the administrator using a one-time password.
E. The Cisco ASA automatically creates and uses a persistent self-signed X.509 certificate to authenticate itself to the administrator
Question #4
Refer to the exhibit. Which statement about the policy map named test is true?
A. Only HTTP inspection will be applied to the TCP port 21 traffic.
B. Only FTP inspection will be applied to the TCP port 21 traffic.
C. No inspection will be applied to the TCP port 21 traffic, because the http class map configuration conflicts with the ftp class map
D. both HTTP and FTP inspections will be applied to the TCP port 21 traffic.
E. All FTP traffic will be denied, because the FTP traffic will fail the HTTP inspection.
Question #5
On the Cisco ASA, tcp-map can be applied to a traffic class using which MPF CLI configuration command?
A. parameters
B. inspect
C. set connection advanced-options
D. tcp-options
E. sysopt connection
Solutions:
| Question #1 Correct Answer: E | Question #2 Correct Answer: A | Question #3 Correct Answer: B | Question #4 Correct Answer: A | Question #5 Correct Answer: C |
723 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
