Cisco 642-515 Online Practice Questions and Exam Preparation

Cisco 642-515 Online Questions & Answers

• Question 71:

  An SSL VPN (Secure Sockets Layer virtual private network) is a form of VPN that can be used with a standard Web browser. SSL VPNs can provide increased flexibility over IPsec VPNs, on the basis of the location of the client and ownership of the endpoint. But, security of the endpoint is a potential problem. Which three potential security issues could the Cisco ASA security appliance address through SSL VPN policies or features? (Select three.)

  A. Phishing
  B. Spyware
  C. Viruses
  D. Malware
  E. SSL attacks
  F. Spoofing
  B. Spyware
  C. Viruses
  D. Malware

• Question 72:

  Refer to the exhibit. The HTTP inspection map named HTTP_POLICY is applied to the partnernet interface of the security appliance. Which of these actions does the security appliance take as a result of its configuration for HTTP traffic that enters its partnernet interface?

  

  A. Drops and logs HTTP request messages for which the request method is put or the request header host field contains either the string example1.com or the string example2.com
  B. Drops and logs HTTP request messages for which the request method is put and the request header host field contains either the string example1.com or the string example2.com
  C. Drops and logs HTTP request messages for which the request method is put and the request header host field contains the strings example1.com and example2.com
  D. Drops and logs HTTP request messages for which the request method is put or the request header host field contains the strings example1.com and example2.com
  E. Drops HTTP request messages for which the request method is put, and logs HTTP request messages for which the request header host field contains either the string example1.com or the string example2.com
  F. Logs HTTP request messages for which the request method is put, and drops HTTP request messages for which the request header host field contains either the string example1.com or the string example2.com
  B. Drops and logs HTTP request messages for which the request method is put and the request header host field contains either the string example1.com or the string example2.com

• Question 73:

  Modular Policy Framework provides a consistent and flexible way to configure security appliance features in a manner similar to Cisco IOS software QoS CLI. Your company asked you to examine the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) by use of the Cisco Adaptive Security Device Manager (ASDM).

  Which two impacts are of the policy map named PARTNERNET-POLICY on FTP traffic entering the partnernet interface?

  

  A. Prevents all users except "root" from accessing the path /root.
  B. Logs all attempts to download files from the FTP server on the inside interface.
  C. Blocks the FTP request commands DELE, MKD, PUT, RMD, RNFR, and RNTO.
  D. Resets connections that send embedded commands.
  C. Blocks the FTP request commands DELE, MKD, PUT, RMD, RNFR, and RNTO.
  D. Resets connections that send embedded commands.

• Question 74:

  You have been tasked to configure your Cisco ASA security appliance for multiple VLANs that use one physical interface. You must make sure that the switch in which the physical Cisco ASA security appliance interface is connected has been configured for the appropriate VLAN tagging protocol. Which VLAN tagging protocol will the Cisco ASA security appliance use to communicate with this switch?

  A. IEEE 802.1X
  B. IEEE 802.1Q
  C. IEEE 802.1AE
  D. ISL
  E. IEEE 802.3
  B. IEEE 802.1Q

• Question 75:

  Refer to the exhibit. What does Reverse Route Injection enable in this configuration?

  

  A. The Cisco ASA security appliance will advertise routes that are at the distant end of the site-to-site VPN tunnel.
  B. The Cisco ASA security appliance will advertise its default routes to the distant end of the site-to-site VPN tunnel.
  C. The Cisco ASA security appliance will advertise routes that are on its side of the site-to-site VPN tunnel to the distant end of the site-to-site VPN tunnel.
  D. The Cisco ASA security appliance will advertise routes from the dynamic routing protocol that is running on the Cisco ASA security appliance to the distant end of the site-to-site VPN tunnel.
  A. The Cisco ASA security appliance will advertise routes that are at the distant end of the site-to-site VPN tunnel.

• Question 76:

  Observe the exhibit below carefully. You have been tasked to configure the Cisco ASA security appliance as the hub in a hub-and-spoke site-to-site VPN. Which configurations can enable traffic to flow between spokes?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 77:

  On the basis of the Configuration > Device Setup > Interfaces pane displayed in the following exhibit, which is the model number of this Cisco ASA security appliance?

  

  A. Cisco ASA 5505 Adaptive Security Appliance
  B. Cisco ASA 5550 Adaptive Security Appliance
  C. Cisco ASA 5580 Adaptive Security Appliance
  D. Cisco ASA 5540 Adaptive Security Appliance
  A. Cisco ASA 5505 Adaptive Security Appliance

• Question 78:

  For the following commands, which one causes the Cisco CSC-SSM to load a new software image from a remote TFTP server, via the CLI?

  A. hw module 1 recover reload
  B. copy tftp hardware:module1
  C. hw module 1 recover config
  D. hw module 1 recover boot
  D. hw module 1 recover boot

• Question 79:

  Refer to the exhibit. You are configuring a laptop with the Cisco VPN Client, which will use digital certificates for authentication. Which protocol will the Cisco VPN client use to retrieve the digital certificate from the CA server?

  

  A. HTTPS
  B. TFTP
  C. LDAP
  D. SCEP
  E. FTP
  D. SCEP

• Question 80:

  You work as a network administrator for your company. You are in charge of a Cisco ASA security appliance for remote access IPsec VPNs, you are assisting a user who has a digital certificate configured for the Cisco VPN Client. How to find the MD5 and SHA-1 thumb print of the certificate on the basis of the following exhibit?

  

  A. Choose the certificate and then click the Certificate drop-down menu.
  B. Choose the certificate and then click the Verify button.
  C. Choose the certificate and then click Options > Properties.
  D. Choose the certificate and then click the View button.
  D. Choose the certificate and then click the View button.