Online Access Free 642-583 Practice Test

Using Cisco ASA active/active stateful failover, what happens if the return packet of an existing connection is not found in the local Cisco ASA connection table?

• A.The local Cisco ASA will examine the copy of the other Cisco ASA's connection table and, if a match is found, will forward the packet to the other Cisco ASA.
• B.The local Cisco ASA will perform a reverse path forwarding check to determine whether to forward or drop the packet.
• C.The local Cisco ASA will forward the packet if it is permitted by the inbound ACL.
• D.The local Cisco ASA will determine, based on its routing table, whether to forward or drop the packet.
• E.If the local Cisco ASA is the active Cisco ASA, then it will forward the packet.
• F.The local Cisco ASA will drop the packet.

Which three security components can be found in today's typical single-tier firewall system? (Choose three.)

• A.cache engine
• B.IPS
• C.application proxy
• D.server load balancing
• E.Network Admission Control
• F.Stateful Packet Filtering with Application Inspection and Control

Pharming attacks, which are used to fool users into submitting sensitive information to malicious servers, typically involve which attack method?

• A.ARP poisoning
• B.IP spoofing
• C.DHCP server spoofing
• D.DNS cache poisoning
• E.DHCP exhaustion

Which platform can support the highest number of SSL sessions?

• A.Cisco ASR1000-5G
• B.Cisco ASA 5580
• C.Cisco 7200 NPE-GE+VSA
• D.Cisco 3845 with AIM-VPN/SSL-3
• E.Cisco 6500/7600 + VPN SPA
• F.Cisco 7200 NPE-GE+VAM2+

An OSPF router (routerA) on the network is running at an abnormally high CPU rate. Using various OSPF debug commands on routerA, the network administrator determines that routerA is receiving many OSPF link state packets from an unknown OSPF neighbor, thus forcing many OSPF path recalculations and affecting routerA's CPU usage. Which OSPF configuration should the administrator enable to prevent this kind of attack on routerA?

• A.OSPF not-so-stubby area
• B.OSPF link state advertisement (LSA) filtering
• C.multi-area OSPF
• D.OSPF stub area
• E.OSPF MD5 authentication