Online Access Free 642-618 Exam Questions

A Cisco ASA appliance running software version 8.4.1 has an active botnet traffic filter license with 1 month left on the time-based license. Which option describes the result if a new botnet traffic filter with a 1 year time-based license is activated also?

• A.The time-based license for the botnet traffic filter is valid only for another month.
• B.The time-based license for the botnet traffic filter is valid for another 13 months.
• C.The time-based license for the botnet traffic filter is valid for another 12 months.
• D.The new 1 year time-based license for the botnet traffic filter cannot be activated until the current botnet traffic filter license expires in a month.

On Cisco ASA Software Version 8.4.1 and later, which three EtherChannel modes are supported? (Choose three.)

• A.off mode, which disables dynamic negotiation
• B.passive mode, which responds to LACP negotiation from the peer
• C.auto mode, which automatically responds to either PAgP or LACP negotiation from the peer
• D.on mode, which enables static port-channel mode
• E.active mode, which initiates LACP negotiation

Refer to the exhibit.

Which command enables the stateful failover option?

• A.failover lan unit primary
• B.preempt
• C.failover link MYFAILOVER GigabitEthernet0/2
• D.failover group 1 primary
• E.failover lan interface MYFAILOVER GigabitEthernet0/2
• F.failover interface ip MYFAILOVER 172.16.5.1 255.255.255.0 standby 172.16.5.10

Which Cisco ASA configuration is used to configure the TCP intercept feature?

• A.the set connection command with the embryonic-conn-max option
• B.an access list
• C.a TCP map
• D.the established command
• E.a type inspect policy map

Which two statements about Cisco ASA failover troubleshooting are true? (Choose two.)

• A.The failed interface threshold is set to 1. Using the show monitor-interface command, if one of the monitored interfaces on both the primary and secondary Cisco ASA appliances is in the unknown state, a failover should occur.
• B.With active/active failover, user data passing interfaces troubleshooting should be done within the context execution space.
• C.With active/active failover, failover link troubleshooting should be done in the system execution space.
• D.Syslog level 1 messages will be generated on the standby unit only if the logging standby command is used.
• E.With active/active failover, ASR groups must be enabled.