642-618 無料問題集「Cisco Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0)」

（A）route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 2

（B）route dmz 10.2.2.0 0.0.0.255 172.16.1.10 1 route dmz 10.3.3.0 0.0.0.255 172.16.1.11 1

（C）route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 2

（D）route dmz 10.2.2.0 255.255.255.0 172.16.1.10 route dmz 10.3.3.0 255.255.255.0 172.16.1.11

（E）route dmz 10.2.2.0 0.0.0.255 172.16.1.10 route dmz 10.3.3.0 0.0.0.255 172.16.1.11

（F）route dmz 10.2.2.0 255.255.255.0 172.16.1.10 1 route dmz 10.3.3.0 255.255.255.0 172.16.1.11 1

（A）These class maps are Layer 3/4 class maps.

（B）These class maps are used within the inspection_default class map for matching the default inspection traffic.

（C）These class maps classify traffic using regular expressions.

（D）These class maps are all type inspect http class maps.

（E）These class maps are referenced within the global policy by default for HTTP inspection.

（A）With the default factory configuration, the management interface (management 0/0) is configured with the 192.168.1.1/24 IP address.

（B）The switchport access vlan command can be used to assign the VLAN to each physical interface (ethernet 0/0 to ethernet 0/7).

（C）With the default factory configuration, Cisco ASDM access is not enabled.

（D）The IP address is configured under the physical interface (ethernet 0/0 to ethernet 0/7).

（E）With the default factory configuration, both the inside and outside interface will use DHCP to acquire its IP address.

（A）failover lan interface MYFAILOVER GigabitEthernet0/2

（B）failover link MYFAILOVER GigabitEthernet0/2

（C）failover group 1 primary

（D）preempt

（E）failover interface ip MYFAILOVER 172.16.5.1 255.255.255.0 standby 172.16.5.10

（F）failover lan unit primary

（A）telnet 192.168.1.1 22

（B）ssh -l username 192.168.1.1

（C）ping tcp 192.168.1.1 22

（D）traceroute 192.168.1.1 22

（E）packet-tracer input inside tcp 10.0.1.1 2043 192.168.4.1 ssh

（A）The Cisco ASA generates system message 106023 for each packet that matched an ACE.

（B）No ACL logging is enabled by default.

（C）The Cisco ASA generates system message 106100 only for the first packet that matched an ACE.

（D）The Cisco ASA generates system message 106023 for each denied packet when a deny ACE is configured.

（E）The Cisco ASA generates system message 106100 for each packet that matched an ACE.

（A）a TCP map

（B）a type inspect policy map

（C）an access list

（D）the set connection command with the embryonic-conn-max option

（E）the established command

（A）addresses that are unknown

（B）addresses that are associated with multiple domain names, but not all of these domain names are on the blacklist

（C）addresses that are blacklisted by the dynamic database but also are identified by the static whitelist

（D）addresses that are on the greylist identified by the dynamic database