Cisco 642-618 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Access Control and Traffic Inspection | 25% | - Modular Policy Framework (MPF) - ACL and object groups - Application inspection and protocols |
| Network Address Translation | 20% | - NAT configuration pre-8.3 and post-8.3 - Policy NAT and PAT - NAT concepts and operation |
| ASA Management and Monitoring | 15% | - Software upgrades and licensing - CLI and ASDM access - Logging, monitoring, and reporting |
| Firewall Modes and Virtualization | 12% | - Multiple context mode - Routed vs Transparent firewall mode |
| High Availability and Advanced Features | 13% | - Service modules and integration - Active/Standby and Active/Active failover - Redundant interfaces and EtherChannel |
| ASA Architecture and Interfaces | 15% | - Interface configuration and modes - ASA hardware and software architecture - IP connectivity and routing |
Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) Sample Questions:
Question 1
When troubleshooting redundant interface operations on the Cisco ASA, which configuration should be verified?
A. The name if configuration on the member physical interfaces are identical.
B. The IP address configuration on the logical redundant interface is correct.
C. The active interface is sending periodic hellos to the standby interface.
D. The MAC address configuration on the member physical interfaces are identical.
E. The duplex and speed configuration on the logical redundant interface are correct.
Question 2
On the Cisco ASA Software Version 8.3 and later, which type of NAT configuration can be used to translate the source and destination IP addresses of the packet?
A. identity NAT
B. auto NAT
C. many-to-one NAT
D. object NAT
E. manual NAT
F. one-to-one NAT
Question 3
Which Cisco ASA feature is implemented by the ip verify reverse-path interface interface_name command?
A. botnet traffic filter
B. scanning threat detection
C. TCP intercept
D. uRPF
E. IPS (IP audit)
Question 4
With Cisco ASA active/active or active/standby stateful failover, which state information or table is not passed between the active and standby Cisco ASA by default?
A. NAT translation table
B. TCP connection states
C. UDP connection states
D. ARP table
E. HTTP connection table
Question 5
Which other match command is used with the match flow ip destination-address command within the class map configurations of the Cisco ASA MPF?
A. match access-list
B. match dscp
C. match port
D. match default-inspection-traffic
E. match tunnel-group
Solutions:
| Question 1 Answer: B | Question 2 Answer: E | Question 3 Answer: D | Question 4 Answer: E | Question 5 Answer: E |
1115 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
