Online Access Free 642-617 Practice Test

Which Cisco ASA object group type offers the most flexibility for grouping different services together based on arbitrary protocols?

• A.network
• B.service
• C.ICMP
• D.TCP-UDP
• E.protocol

By default, how does the Cisco ASA authenticate itself to the Cisco ASDM users?

• A.The Cisco ASA automatically creates a self-signed X.509 certificate on each reboot to authenticate itself to the administrator.
• B.The Cisco ASA and the administrator use a mutual password to authenticate each other.
• C.The administrator validates the Cisco ASA by examining the factory built-in identity certificate thumbprint of the Cisco AS
• D.The Cisco ASA authenticates itself to the administrator using a one-time password.
• E.The Cisco ASA automatically creates and uses a persistent self-signed X.509 certificate to authenticate itself to the administrator

When the Cisco ASA detects scanning attacks, how long is the attacker who is performing the scan shunned?

• A.600 seconds
• B.120 seconds
• C.6000 seconds
• D.3600 seconds
• E.1200 seconds

Which three statements about traffic shaping capability on the Cisco ASA are true?
(Choose three.)

• A.Traffic shaping can be applied to all outgoing traffic on a physical interface or in the case of the Cisco ASA 5505, on a VLAN
• B.Traffic shaping is not supported on the Cisco ASA 5580.
• C.Traffic shaping can be applied in the input or output direction.
• D.Traffic shaping can cause jitter and delay.
• E.You can configure both traffic shaping and priority queueing on the same interface.

Refer to the exhibit. Which three CLI configuration commands result from this configuration? (Choose three.

• A.access-group outside_access_in outside in
• B.nat (inside) 110.16.1.1
• C.global (outside) 1 192.168.11
• D.access-list outside_access_in line 1 extended permit tcp any host 10.16.1.1 eq http
• E.access-group outside_access_in inside in
• F.static(inside.outside) 192.168.1.1 10.16.1.1 netmask 255.255.255.255 tcp 0 0 udp 0
• G.static(inside,outside) tcp 192.168.1.1 80 10.16.1.1 80
• H.access-list outside_access_in line 1 extended permit tcp any host 192.168.1.1 eq http