Online Access Free 642-617 Practice Test

When troubleshooting a Cisco ASA (running 8.2.2) that is operating in transparent firewall mode, what should you verify to ensure proper operation?

• A.The Cisco ASA is using a dedicated management interface for management access.
• B.The outside and inside interface are connected to different Layer 3 subnets.
• C.The Cisco ASA is configured for ARP inspection.
• D.The Cisco ASA has not been configured for inside static or dynamic NAT.
• E.The Cisco ASA global IP address belongs to the same subnet as the directly connected interfaces.

When the Cisco ASA detects scanning attacks, how long is the attacker who is performing the scan shunned?

• A.6000 seconds
• B.600 seconds
• C.1200 seconds
• D.3600 seconds
• E.120 seconds

With Cisco ASA active/active or active/standby stateful failover, which state information or table is not passed between the active and standby Cisco ASA by default?

• A.UDP connection states
• B.NAT translation table
• C.TCP connection states
• D.HTTP connection table
• E.ARP table

Refer to the exhibit. The Cisco ASA is dropping all the traffic that is sourced from the internet and is destined to any security context inside interface. Which configuration should be verified on the Cisco ASA to solve this problem?

• A.The Cisco ASA has NAT control disabled on each security context.
• B.The Cisco ASA is using a unique dynamic routing protocol process on each security context.
• C.The Cisco ASA is using inside dynamic NAT on each security context.
• D.The Cisco ASA is using a unique MAC address on each security context outside interface.
• E.The Cisco ASA packet classifier is configured to use the outside physical interface to assign the packets to each security context.

Which flags should the show conn command normally show after a TCP connection has successfully been established from an inside host to an outside host?

• A.aB
• B.F
• C.saA
• D.slO
• E.UIO
• F.AIO