Online Access Free 642-617 Practice Test

Which Cisco ASA feature enables the ASA to do these two things? 1) Act as a proxy for the server and generate a SYN-ACK response to the client SYN request. 2) When the Cisco
ASA receives an ACK back from the client, the Cisco ASA authenticates the client and allows the connection to the server.

• A.basic threat detection
• B.TCP state bypass
• C.advanced threat detection
• D.TCP normalizer
• E.botnet traffic filter
• F.TCP intercept

Which three configuration options are available when configuring static routes on the Cisco
ASA? (Choose three.)

• A.Change the default metric (admin distance) from 1 to some other value.
• B.Enable route tracking.
• C.Specify a tag value to the static route that can be used as a "match" value for controlling redistribution via route maps
• D.Specify the static route as the default tunnel gateway for VPN traffic.
• E.Specify that the static route will not be removed, even if the interface shuts down.

Refer to the exhibit. Which command enables the stateful failover option?

• A.failover group 1 primary
• B.failover Ian interface MYFAILOVER GigabitEthernetO/2
  C failover interface ip MYFAILOVER 172.16.5.1 255.255.255.0 standby 172.16.5.10
• C.failover Ian unit primary
• D.failover link MYFAILOVER GigabitEthernetO/2
• E.preempt

Refer to the exhibit. Which two CLI commands will result? (Choose two. )

• A.aaa authorization exec authentication-server
• B.aaa authorization exec LOCAL
• C.aaa authorization exec authentication-server LOCAL
• D.aaa authorization network default authentication-server LOCAL
• E.aaa authorization command LOCAL
• F.aaa authorization network LOCAL

Refer to the exhibit. Which three CLI configuration commands result from this configuration? (Choose three.

• A.nat (inside) 110.16.1.1
• B.access-group outside_access_in inside in
• C.global (outside) 1 192.168.11
• D.access-list outside_access_in line 1 extended permit tcp any host 10.16.1.1 eq http
• E.access-list outside_access_in line 1 extended permit tcp any host 192.168.1.1 eq http
• F.static(inside,outside) tcp 192.168.1.1 80 10.16.1.1 80
• G.access-group outside_access_in outside in
• H.static(inside.outside) 192.168.1.1 10.16.1.1 netmask 255.255.255.255 tcp 0 0 udp 0