Online Access Free 642-617 Exam Questions

Refer to the exhibit. Which two configurations are required on the Cisco ASAs so that the return traffic from the 10.10.10.100 outside server back to the 10.20.10.100 inside client can be rerouted from the Active CtxB context in ASA Two to the Active Ctx A context in
ASA One? (Choose two.)

• A.no NAT-control
• B.ASR-group
• C.dynamic routing (EIGRP or OSPF or RIP)
• D.stateful active/active failover
• E.policy-based routing
• F.TCP/UDP connections replication

Refer to the Exhibit.

Which statement about the NAT/PAT configuration is true?

• A.Dynamic NAT is used for any IP traffic that is sourced from the dmz_emailserver to the outside.
• B.Static PAT is used for any IP traffic that is sourced from the dmz_ emailserver to the outside.
• C.Dynamic PAT is used for any IP traffic that is sourced from any host on the inside network to the outside.
• D.Static NAT is used for any IP traffic that is sourced from the dmz_webserver to the outside.
• E.Dynamic NAT is used for any IP traffic that is sourced from any host on the guest network to the outside.
• F.Dynamic PAT is used for any IP traffic that is sourced from the dmz_emailserver to the outside.

Which Cisco ASA platform should be selected if the requirements are to support 35,000 connections per second, 600,000 maximum connections, and traffic shaping?

• A.5550
• B.5580-40
• C.5580-20
• D.5540

Which three configuration options are available when configuring static routes on the Cisco
ASA? (Choose three.)

• A.Change the default metric (admin distance) from 1 to some other value.
• B.Specify a tag value to the static route that can be used as a "match" value for controlling redistribution via route maps
• C.Specify that the static route will not be removed, even if the interface shuts down.
• D.Enable route tracking.
• E.Specify the static route as the default tunnel gateway for VPN traffic.

On the Cisco ASA, where are the Layer 5-7 policy maps applied?

• A.inside the Layer 5-7 class map
• B.inside the Layer 3-4 policy map
• C.inside the Layer 3-4 service policy
• D.inside the Layer 3-4 class map
• E.inside the Layer 5-7 service policy