Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0) - 642-618 Exam Practice Test

A. static ARP mapping

B. static MAC address mapping

C. extended ACL on the outside and inside interface to permit the multicast traffic

D. stateful packet inspection

E. EtherType ACL on the outside and inside interface to permit the multicast traffic

A. 1 = outside local, 2 = outside global, 3 = inside global, 4 = inside local

B. 1 = inside local, 2 = inside global, 3 = outside global, 4 = outside local

C. 1 = outside global, 2 = outside local, 3 = inside global, 4 = inside local

D. 1 = inside local, 2 = inside global, 3 = outside local, 4 = outside global

E. 1 = outside local, 2 = outside global, 3 = inside local, 4 = inside global

A. Dynamic PAT is used for any traffic that is sourced from the dmz_emailserver to the outside

B. Dynamic NAT is used for any traffic that is sourced from the dmz_emailserver to the outside

C. Static NAT is used for any traffic that is sourced from the dmz_emailserver to the outside

D. Dynamic NAT is used for any traffic that is sourced from and host on the guest-network to the outside

E. Static PAT is used for any traffic that is sourced from the dmz_emailserver to the outside

F. Dynamic PAT is used for any traffic that is sourced from any host on the inside network to the outside

A. Verify the interface status in the system execution space.

B. Verify the resource classes configuration by accessing the admin context.

C. Verify that unique MAC addresses are configured if the contexts are using nonshared interfaces.

D. Verify the mac-address-table on the Cisco ASA.

E. Verify the interface status in the user context.

A. the implicit global access rule that permits all IP traffic from high security level to low security level interfaces

B. the implicit global deny ip any any access rule

C. the implicit permit all IP traffic from high security level to low security level access rule on the global and interface access lists

D. the implicit interface access rule that permits all IP traffic from high security level to low security level interfaces

E. the implicit deny ip any any rule on the global and interface access lists

A. nat (dmz, outside) 1 source dynamic any interface destination dynamic outside outside

B. nat (dmz, outside) 1 source static any interface destination static any any

C. nat (dmz, outside) 1 source static any any

D. nat (dmz, outside) 1 source dynamic any outside destination static any any

E. nat (dmz,outside) 1 source dynamic any interface

F. nat (dmz, outside) 1 source static any outside

A. ip verify command

B. TCP normalizer

C. TCP intercept

D. tcp-map and tcp-options commands

E. established command

F. set connection advanced-options command

A. With active/active failover, failover link troubleshooting should be done in the system execution space.

B. With active/active failover, user data passing interfaces troubleshooting should be done within the context execution space.

C. With active/active failover, ASR groups must be enabled.

D. The failed interface threshold is set to 1. Using the show monitor-interface command, if one of the monitored interfaces on both the primary and secondary Cisco ASA appliances is in the unknown state, a failover should occur.

E. Syslog level 1 messages will be generated on the standby unit only if the logging standby command is used.