Online Access Free 642-583 Practice Test

Which statement regarding the Cisco ASA encrypted voice inspection capability is correct?

• A.TLS proxy applies to the encryption layer and is configured by using a Layer 3/4 inspection policy on the Cisco AS
• B.The Cisco ASA acts as a non-transparent TLS proxy between the Cisco IP Phone and Cisco Unified Communications Manager.
• C.The Cisco ASA does not support PAT and NAT for SCCP inspection.
• D.The Cisco ASA serves as a proxy for both client and server, with the Cisco IP Phone and the Session Border Controller.
• E.The Cisco ASA decrypts, inspects, then re-encrypts voice-signaling traffic; all of the existing VoIP inspection functions for SCCP and SIP protocols are preserved.

Using Cisco ASA active/active stateful failover, what happens if the return packet of an existing connection is not found in the local Cisco ASA connection table?

• A.The local Cisco ASA will forward the packet if it is permitted by the inbound ACL.
• B.The local Cisco ASA will determine, based on its routing table, whether to forward or drop the packet.
• C.If the local Cisco ASA is the active Cisco ASA, then it will forward the packet.
• D.The local Cisco ASA will perform a reverse path forwarding check to determine whether to forward or drop the packet.
• E.The local Cisco ASA will examine the copy of the other Cisco ASA's connection table and, if a match is found, will forward the packet to the other Cisco ASA.
• F.The local Cisco ASA will drop the packet.

DRAG DROP

Correct Answer:

Explanation:

Which additional security control can be used in multi-tier applications and multi-tier firewall designs to force an attacker to compromise the exposed server before the attacker can attempt to penetrate the more protected domains?

• A.Implement host IPS on the exposed servers in the DMZs.
• B.Use a different firewall platform at each tier.
• C.At each tier, implement a transparent proxy component within the firewall system.
• D.Make exposed servers in the DMZs dual homed.
• E.Implement in-band network admission control at the first tier.
• F.Use zone-based firewalling and assign each exposed server in the DMZs to a unique security zone.

Cisco IOS Control Plane Protection can be used to protect traffic to which three router control plane subinterfaces? (Choose three.)

• A.host
• B.cpu
• C.fast-switched
• D.aggregate
• E.CEF-exception
• F.transit