642-617 無料問題集「Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v1.0)」

（A）The Telnet session should be successful.

（B）The Telnet session should fail because the inside interface inbound access list will block it

（C）The Telnet session should fail because the route lookup to the destination fails.

（D）The Telnet session should fail because no matching flow was found.

（E）The Telnet session should fail because inside NAT has not been configured.

（A）set connection advanced-options

（B）parameters

（C）sysopt connection

（D）inspect

（E）tcp-options

（A）Create a new class map.

（B）Disable the default global inspection policy.

（C）Create a new policy map and apply actions to the traffic classes.

（D）Create a new service policy rule.

（E）Create a new firewall access rule.

（F）Create the ACLs to be referenced by any of the new class maps.

（A）The maximum number of TCP connections that the 10.1.1.99 host can establish will be
146608.

（B）All the connections from the 10.1.1.99 have completed the TCP three-way handshake.

（C）The 10.1.1.99 hosts are generating a vast number of outgoing connections, probably due to a virus

（D）The 10.1.1.99 host operations on the inside look normal.

（E）The 10.1.1.99 host on the inside is under a SYN flood attack.

（A）every 24 hours

（B）every 12 hours

（C）every 5 minutes

（D）every 15 minutes

（E）every 30 minutes

（F）every 1 hour

（A）The Cisco ASA is using a unique dynamic routing protocol process on each security context.

（B）The Cisco ASA has NAT control disabled on each security context.

（C）The Cisco ASA is using inside dynamic NAT on each security context.

（D）The Cisco ASA is using a unique MAC address on each security context outside interface.

（E）The Cisco ASA packet classifier is configured to use the outside physical interface to assign the packets to each security context.

（A）The 10.1.1.50 web server is terminating all the incoming HTTP connections.

（B）The output is showing normal activity to the inside 10.1.1.50 web server.

（C）The 10.1.1.50 host is triggering SYN flood attacks against random hosts on the outside.

（D）Many embryonic connections are made from random sources to the 10.1.1.50 web server.

（E）Many HTTP connections to the 10.1.1.50 web server have successfully completed the three-way TCP handshake

（A）Change the default metric (admin distance) from 1 to some other value.

（B）Specify the static route as the default tunnel gateway for VPN traffic.

（C）Specify that the static route will not be removed, even if the interface shuts down.

（D）Enable route tracking.

（E）Specify a tag value to the static route that can be used as a "match" value for controlling redistribution via route maps