Download Free Actualtests 642-523 Dumps | Latest Cisco Certification Exams

Actualtests 642-523

642-523 : Securing Networks with PIX and ASA Last Updated Monday, September 08, 2008 with 181 Questions
Securing Networks with PIX and ASA
Exam Number: 642-523 Exam
Associated Certifications: Securing Networks with PIX and ASA
Duration: 63 Q&As

Free 642-523 Exams’s PDF Download
Free Actualtests offers free demo for 642-523 PDF(Securing Networks with PIX and ASA). You can check out the interface, question quality and usability of our practice exams . We are the only one site can offer demo for almost all Securing Networks with PIX and ASA.

Recommended Training about 642-523 exam PDF
The following courses are the recommended training for 642-523 exam PDF.
642-523 Q & A with Explanations
642-523 Audio Exam
642-523 Study Guide
642-523 Preparation Lab
642-523 Exam Preparation from Actualtests with FULL explanations include:
Comprehensive questions with complete details
Detailed explanations of all the questions
Questions accompanied by exhibits
Verified Answers Researched by Industry Experts
Drag and Drop questions as experienced in the Actual Exams
Questions updated on regular basis
These questions and answers are backed by our GUARANTEE.
Like actual certification exams our product is in multiple-choice questions (MCQs).
642-523 Exam: Actualtests’s Securing Networks with PIX and ASA PDF
The Securing Networks with PIX and ASA PDF for preparing for the 642-523 exam – Actualtests’s Securing Networks with PIX and ASA.Actualtests is your premier source for practice tests, and true testing environment. Nothing will prepare you for your next exam like a Actualtests. You find it all here at ciscoexams.org.

QUESTION 1:
Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. syslog community string
B. message.text
C. triggering packet copy
D. logging device ip
E. default ASA gateway
F. logging level
Answer: B,D,F
QUESTION 2:
Exhibit:
You work as a network technician at Certkiller .com. Please study the exhibit carefully.
What does the inspect http HTTP_TRAFFIC command do in this policy map?
A. It adds HTTP traffic inspection to the OUTSIDE_POLICY policy map
B. It adds HTTP traffic limits to the OUTSIDE_POLICY policy map
C. It adds HTTP traffic inspection on TCP port 8080 to the OUTSIDE_POLICY policy
map
D. It adds HTTP traffic inspection to the inspection-default global class map
Answer: A
642-523
Actualtests.com – The Power of Knowing
QUESTION 3:
An Administrator wants to protect a DMZ web server from SYN Flood attacks. Which
three of these commands, used individually would allow the administrator to place limits
on the number of embryonic connections? (choose three.)
A. http redirect
B. nat
C. http-proxy
D. static
E. set connection
F. access-list
Answer: B,D,E
QUESTION 4:
Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. triggering packet copy
B. message.text
C. syslog community string
D. logging level
E. default ASA gateway
F. logging device ip
Answer: B,D,F
QUESTION 5:
Exhibit:
642-523
Actualtests.com – The Power of Knowing
You work as a network technician at Certkiller .com. Please study the exhibit carefully.
An administrator wants to permanently map host addresses on the DMZ subnet to the
same host addresses, but a different subnet on the outside interface. Which command or
commands should the administrator use to accomplish this?
A. access-list server_map permit tcp any 192.168.1.0.0 255.255.255.0
nat(outside) 10 access-list server_map
global (dmz) 10 172.16.1.9-10 netmask 255.255.255.0
B. static (dmz,outside) 192.168.10.0 172.16.1.0 netmask 255.255.255.0
C. nat (dmz) 1 172.16.1.0 netmask 255.255.255.0
global (outside) 1 192.168.10.9-10 netmask 255.255.255.0
D. NAT (dmz) 0 172.16.1.0 netmask 255.255.255.0
Answer: C
QUESTION 6:
Exhibit:
642-523
Actualtests.com – The Power of Knowing
You work as a network technician at Certkiller .com. Please study the exhibit carefully.
This adaptive security appliance is configured for which two types of failover? (Choose
two.)
A. Stateful Failover
B. LAN-Based Failover
C. Active/Standby Failover
D. Active/Active failover
E. Context/Group failover
F. Cable-based failover
Answer: B,D
QUESTION 7:
Which these commands displays the status of the CSC SSM on the Cisco ASA?
A. show module 1 CSC details
B. show hw 1 details
C. show module 1 details
D. show interface GigabitEthernet 1/0
Answer: C
QUESTION 8:
Which command both verifies that NAT is working properly and displays active NAT
translations?
A. show nat translation
B. show running-confugration nat
C. show ip nat all
D. show xlate
Answer: D
QUESTION 9:
The Cisco VPN Client supports which three of these tunneling protocols and methods?
(Choose three.)
A. AH
B. LZS
642-523
Actualtests.com – The Power of Knowing
C. IPSec over TCP
D. IPSec over UDP
E. SCEP
F. ESP
Answer: C,D,F
QUESTION 10:
What does the nat 0 command do?
A. The nat 0 command, followed by an access list, specifies the addresses that are not to
be translated
B. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that
are to be translated using network address translations
C. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that
are to be translated when used for IPSec
D. The nat 0 command, followed by an access list, specifies the addresses that are to be
used in translations only once
Answer: A