Online Access Free 642-617 Exam Questions

CORRECT TEXT

Correct Answer:

Here are step by Step Configuration:

In one custom dynamic application, the inside client connects to an outside server using
TCP port 4444 and negotiates return client traffic in the port range of 5000 to 5500. The server then starts streaming UDP data to the client on the negotiated port in the specified range. Which Cisco ASA feature or command supports this custom dynamic application?

• A.established command
• B.ip verify command
• C.tcp-map and tcp-options commands
• D.set connection advanced-options command
• E.TCP intercept
• F.TCP normalizer

Which Cisco ASA object group type offers the most flexibility for grouping different services together based on arbitrary protocols?

• A.service
• B.TCP-UDP
• C.ICMP
• D.protocol
• E.network

On the Cisco ASA, what is the default access rule if no user-defined access lists are defined on the interfaces?

• A.All IP traffic is denied.
• B.All inbound connections from the lower-security interfaces to the higher-security interface are permitted.
• C.All IP traffic between interfaces with the same security level are permitted
• D.All IP traffic in and out of the same interface is permitted.
• E.All outbound connections from the higher-security interfaces to the lower-security interface are permitted.

When configuring security contexts on the Cisco ASA, which three resource class limits can be set using a rate limit? (Choose three.)

• A.syslog messages rate
• B.connections rate
• C.stateful packet inspections rate
• D.address translation rate
• E.Cisco ASDM session rate
• F.MAC-address learning rate (when in transparent mode)