passguide 642-515 demo

Cisco 642-515

Securing Networks with ASA Advanced

Q&A V3.20

www.PassGuide.com

(C) Copyright 2006-2009 CertBible Tech LTD,All Rights Reserved.
Important Note
Please Read Carefully

Study Tips

This product will provide you questions and answers carefully compiled and written by our experts. Try to understand the concepts behind the questions instead of cramming the questions.

Go through the entire document at least twice so that you make sure that you are not
missing anything.

Latest Version

We are constantly reviewing our products. New material is added and old material is
revised. Free updates are available for 120 days after the purchase. You should check your
member zone at PassGuide an update 3-4 days before the scheduled exam date.

Feedback

If you spot a possible improvement then please let us know. We always interested in
improving product quality.
Feedback should be send to feedback@passguide.com. You should include the following:
Exam number, version, page number, question number, and your login ID.
Our experts will answer your mail promptly.

Be Prepared. Be Confident. Get Certified.
————————————————————————————————————————-
Sales and Support Manager
Sales Team: sales@passguide.com Support Team: support@passguide.com
———————————————————————————————————————

Copyright

Each pdf file contains a unique serial number associated with your particular name and
contact information for security purposes. So if we find out that a particular pdf file is
being distributed by you, CertBible reserves the right to take legal action against you
according to the International Copyright Laws.
QUESTION: 1
Refer to the exhibit. You are configuring a Cisco ASA security appliance to participate in a VPN cluster. Based on the exhibit, to which value would you set the priority to increase the chances of this Cisco ASA security appliance becoming the cluster master?

A. 0
B. 1
C. 10
D. 100

Answer: C

QUESTION: 2
Refer to the exhibit. You are the administrator of multiple remote Cisco ASA security appliances, which are administered through Cisco ASDM. You recently configured one of these Cisco ASA security appliances for SSL VPNs and are requiring a client certificate, as shown. How would this configuration affect your next ASDM connection to this Cisco ASA security appliance?

A. You would be asked to present an identity certificate. If you did not have one, the Cisco ASA security appliance would prompt you for authentication credentials, consisting of a username and password.
B. Your connection would be handled the way it is always handled by this Cisco ASA security appliance.
C. You would be required to download the identity certificate of the remote Cisco ASA security appliance.
D. You would be required to have an identity certificate that the Cisco ASA security appliance can use for authentication.

Answer: D

QUESTION: 3
Refer to the exhibit. You are the administrator of a corporate Cisco ASA security appliance with a Cisco ASA AIP-SSM. You have been tasked to deploy the AIP-SSM to protect corporate DMZ web servers. The AIP-SSM has been configured, and a service policy has been configured to identify the traffic that is to be passed to the AIP-SSM. On which two interfaces would application of the service policy for the AIP-SSM be most effective while causing the least amount of impact to Cisco ASA security appliance performance? (Choose two.)

A. Inside interface
B. Dmz interface
C. Internet interface
D. Globally on all interfaces
E. Outside interface

Answer: B, E

QUESTION: 4
Refer to the exhibit. You are configuring the Cisco ASA security appliance as the hub in a hub- and-spoke site-to-site VPN. Which of these configurations will enable traffic to flow between spokes?

A.
B.

C.

D

Answer: D

QUESTION: 5
Refer to the exhibit. You have configured a Layer 7 policy map to match the size of HTTP header fields that are traversing the network. Based on this configuration, will HTTP headers that are greater than 200 bytes be logged?

A. No, because the reset action for headers greater than 100 bytes would be the first match.
B. Yes, because the reset action for headers greater than 100 bytes and the log action for headers greater than 200 bytes would both be applied.
C. No, because reset or log actions are a part of the service policy and the Layer 7 policy map.
D. Yes, because the log action for headers greater than 200 bytes would be the last match.

Answer: A

QUESTION: 6
Refer to the exhibit. The network security administrator for XYZ Corporation wants to configure the corporate Cisco ASA security appliance to take the following actions on its outside interface:
–rate limit all IP traffic from telecommuting system engineers to the insidehost
–drop all HTTP requests from the Internet to the web server that have a body length greater than 1000 bytes

–prevent users on network 192.168.6.0/24 from using the FTP PUT command to store .exe files on the FTP server Which set of Modular Policy Framework components will be involved in accomplishing this goal?

A. One Layer 7 class map, two Layer 7 policy maps, three Layer 3/4 class maps, one Layer

PassGuide Cisco Exams Questions & Training Materials

1. Free passguide Cisco CCSP 642-515 SNAA 2.93
2. Free PassGuide jncia jn0-331 pdf demo
3. Free PassGuide cisco ccnp wireless 642-746 pdf demo
4. Free passguide cisco CCSP 642-524
5. Free Cisco CCSP Snaf 642-524
6. Free passguide cicso 642-631 demo
7. Free CCSP SNPA Official Exam Certification Guide, 3rd E
8. Free passguide cisco 646-671 demo
9. Free passguide 642-832 v3.23
10. Free CCNA 2 – Module 2 Exam Answers
11. Free passguide 642-384 dumps
12. Free CCNA 2 – Module 1 Exam Answers