Cisco 642-515 Online Practice Questions and Exam Preparation

Cisco 642-515 Online Questions & Answers

• Question 61:

  For configuring VLAN trunking on a security appliance interface, which three actions are mandatory? (Choose three.)

  A. associating a logical interface with a physical interface
  B. specifying a VLAN ID for asubinterface
  C. specifying a name for asubinterface
  D. specifying the maximum transmission unit for asubinterface
  A. associating a logical interface with a physical interface
  B. specifying a VLAN ID for asubinterface
  C. specifying a name for asubinterface

• Question 62:

  You are a senior Cisco ASA security appliance administrator. Now, a new employee of your company asks you to help to configure a Cisco ASA security appliance for an identity certificate to be used for IPsec VPNs. Refer to the two Cisco ASDM configuration screens presented, which is a requirement for configuring the Cisco ASA security appliance for an identity certificate?

  

  A. To retrieve an identity certificate, the Cisco ASA security appliance must have the certificate of the CA.
  B. Because of the lack of a CA certificate, the administrator must import the identity certificate from a file.
  C. To retrieve an identity certificate, the common name must be an FQDN.
  D. The Cisco ASA security appliance doesn't need to retrieve an identity certificate. It can use a self- signed identity certificate for IPsec.
  E. To retrieve an identity certificate, a new pair of RSA keys must be created.
  A. To retrieve an identity certificate, the Cisco ASA security appliance must have the certificate of the CA.

• Question 63:

  According to the following exhibit. When a host on the inside network attempted an HTTP connection to a host at IP address 172.26.10.100, which address pool will be used by the Cisco ASA security appliance for the NAT?

  

  A. 192.168.8.101 - 192.168.8.105
  B. 192.168.8.20 - 192.168.8.100
  C. 192.168.8.106 - 192.168.8.110
  D. 192.168.8.20 - 192.168.8.110
  B. 192.168.8.20 - 192.168.8.100

• Question 64:

  You are configuring bookmarks for the clientless SSL VPN portal on your Cisco ASA security appliance. Which four of these choices are supported bookmark types? (Choose four.)

  A. RDP
  B. HTTP
  C. SSH
  D. HTTPS
  E. TELNET
  F. FTP
  G. CIFS
  B. HTTP
  D. HTTPS
  F. FTP
  G. CIFS

• Question 65:

  An SSL VPN (Secure Sockets Layer virtual private network) is a form of VPN that can be used with a standard Web browser. After configuring port forwarding for a clientless SSL VPN connection, if port forwarding is to work, which end user privilege level is required at the endpoint?

  A. System level
  B. Guest level
  C. User level
  D. Administrator level
  D. Administrator level

• Question 66:

  Study the exhibit below carefully. Apply the FTP inspection map named L7FTPPOLICY to the outside interface of the security appliance. Because of this configuration, which action will the security appliance take on FTP traffic entering its outside interface?

  

  A. resets and logs connections from abc.com users when they attempt to retrieve files via FTP; resets all FTP connections from xyz.com users; resets any user connections that attempt to deliver files via FTP
  B. resets and logs connections from abc.com users only when they attempt to retrieve files via FTP: resets connections from xyz.com users only when they attempt to deliver files via FTP
  C. resets and logs connections from any user who attempts to retrieve files via FTP; resets connections from xyz.com users who attempt to deliver files via FTP
  D. resets connections from abc.com and xyz.com users when they attempt to retrieve files via FTP; logs any user connections that attempt to deliver files via FTP
  A. resets and logs connections from abc.com users when they attempt to retrieve files via FTP; resets all FTP connections from xyz.com users; resets any user connections that attempt to deliver files via FTP

• Question 67:

  Multimedia applications transmit requests on TCP, get responses on UDP or TCP, use dynamic ports, and use the same port for source and destination, so they can pose challenges to a firewall. Which three items are true about how the Cisco ASA adaptive security appliance handles multimedia applications? (Choose three.)

  A. It dynamically opens and closes UDP ports for secure multimedia connections, so you do not need to open a large range of ports.
  B. It supports SIP with NAT but not with PAT.
  C. It supports multimedia with or without NAT.
  D. It supports RTSP, H.323, Skinny, and CTIQBE.
  A. It dynamically opens and closes UDP ports for secure multimedia connections, so you do not need to open a large range of ports.
  C. It supports multimedia with or without NAT.
  D. It supports RTSP, H.323, Skinny, and CTIQBE.

• Question 68:

  Which two of these choices are types of queues available on the Cisco ASA security appliance when implementing QoS? (Choose two.)

  A. Weighted fair queue
  B. Last in first out queue
  C. Policing queue
  D. Low latency queue
  E. Custom queue
  F. Best effort queue
  G. Round robin queue
  D. Low latency queue
  F. Best effort queue

• Question 69:

  Charles is a network administrator for his company. He has configured Cisco ASA security appliance for SSL VPNs. What will happen when the remote user has successfully authenticated according to the following exhibit?

  

  A. The Cisco ASA security appliance will open the clientless SSL VPN portal if no Cisco AnyConnect VPN Client is installed on the remote system.
  B. The Cisco ASA security appliance will push the Cisco AnyConnect VPN Client down to the remote system, install the client, and ask the user to authenticate again.
  C. The Cisco ASA security appliance will wait indefinitely for the user to select clientless SSL VPN portal or an SSL VPN client to use for the SSL VPN connection.
  D. The Cisco ASA security appliance will push the Cisco AnyConnect VPN Client down to the remote system, install the client, and use it to complete the SSL VPN connection.
  D. The Cisco ASA security appliance will push the Cisco AnyConnect VPN Client down to the remote system, install the client, and use it to complete the SSL VPN connection.

• Question 70:

  John works as a network engineer for your company. Study the following exhibit carefully. John is asked to configure Cisco ASA security appliance for port forwarding access to the internal e-mail server running POP3 (TCP port 110) and SMTP (TCP port 25). Which two configurations of the port forwarding list will allow remote users to access the internal email server through port forwarding? (Choose two.)

  

  A. B. C. D.
  A. B. C. D.