Cisco 642-515 Online Practice Questions and Exam Preparation

Cisco 642-515 Online Questions & Answers

• Question 41:

  Modular Policy Framework provides a consistent and flexible way to configure security appliance features in a manner similar to Cisco IOS software QoS CLI. Your company asked you to examine the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) by use of the Cisco Adaptive Security Device Manager (ASDM).

  Which step will be taken by the Cisco Adaptive Security Appliance on FTP traffic entering its outside interface?

  

  A. Masks the FTP greeting banner.
  B. Translates embedded IP addresses.
  C. Blocks the FTP request commands APPE, GET, RNFR, RNTO, DELE, MKD, and RMD.
  D. Prevents all users except "root" from accessing the path/root.
  B. Translates embedded IP addresses.

• Question 42:

  Which three commands can display the contents of flash memory on the Cisco ASA adaptive security appliance? (Choose three.)

  A. show disk0:
  B. dir
  C. show flash:
  D. show memory
  A. show disk0:
  B. dir
  C. show flash:

• Question 43:

  Which three commands can display the contents of flash memory on the Cisco ASA adaptive security appliance? (Choose three.)

  A. show disk0:
  B. dir
  C. show flash:
  D. show memory
  A. show disk0:
  B. dir
  C. show flash:

• Question 44:

  Cisco Secure Desktop, an innovative feature found in Cisco's WebVPN solutions, can help organizations respond to government regulations for data protection by safeguarding the privacy and security of confidential information. After configuring Cisco Secure Desktop on your Cisco ASA security appliance, you should configure Cisco Secure Desktop to run Host Scan checks on the remote endpoint. Which three available Basic Host Scan checks can be configured? (Choose three.)

  A. Process
  B. File
  C. Groups
  D. Registry
  E. User rights
  A. Process
  B. File
  D. Registry

• Question 45:

  In the default global policy, which three traffic types are inspected by default? (Choose three.)

  A. TFTP
  B. FTP
  C. ESMTP
  D. ICMP
  A. TFTP
  B. FTP
  C. ESMTP

• Question 46:

  For configuring VLAN trunking on a security appliance interface, which three actions are mandatory? (Choose three.)

  A. associating a logical interface with a physical interface
  B. specifying a VLAN ID for asubinterface
  C. specifying a name for asubinterface
  D. specifying the maximum transmission unit for asubinterface
  A. associating a logical interface with a physical interface
  B. specifying a VLAN ID for asubinterface
  C. specifying a name for asubinterface

• Question 47:

  While using IPsec VPN tunnels, which primary benefit is provided by digital certificates?

  A. Scalability
  B. Obfuscation
  C. Resiliency
  D. Simplification
  A. Scalability

• Question 48:

  Which three features can the Cisco ASA adaptive security appliance support? (Choose three.)

  A. 802.1Q VLANs
  B. OSPF dynamic routing
  C. static routes
  D. BGP dynamic routing
  A. 802.1Q VLANs
  B. OSPF dynamic routing
  C. static routes

• Question 49:

  In the default global policy, which three traffic types are inspected by default? (Choose three.)

  A. TFTP
  B. FTP
  C. ESMTP
  D. ICMP
  A. TFTP
  B. FTP
  C. ESMTP

• Question 50:

  The P4S security department would like to apply specific restrictions to one network user, Bob, because he works from home and accesses the corporate network from the outside interface of the security appliance. P4S decides to control network access for this user by using the downloadable ACL feature of the security appliance. Authentication of inbound traffic is already configured on the security appliance, and Bob already has a user account on the Cisco Secure ACS. Which three tasks should be completed in order to achieve the goal of limiting network access for Bob via downloadable ACLs? (Choose three.)

  A. Configure the security appliance to use downloadable ACLs.
  B. Configure the downloadable ACLs on the Cisco Secure ACS.
  C. Attach the downloadable ACL to the user profile for Bob on the Cisco Secure ACS.
  D. Configure the Cisco Secure ACS to use downloadable ACLs.
  B. Configure the downloadable ACLs on the Cisco Secure ACS.
  C. Attach the downloadable ACL to the user profile for Bob on the Cisco Secure ACS.
  D. Configure the Cisco Secure ACS to use downloadable ACLs.