Download Free TestInside 642-522 Dumps | Latest Cisco Certification Exams

TestInside 642-522

Securing Networks with PIX and ASA Exam(SNPA) : 642-522 Exam
Exam Number/Code: 642-522
Exam Name: Securing Networks with PIX and ASA Exam(SNPA)
Questions and Answers: 63 Q&As
Price: $79.00
Update Time: 2008-6-22

“Securing Networks with PIX and ASA Exam(SNPA)”, also known as 642-522 exam, is a Cisco certification.
Preparing for the 642-522 exam? Searching 642-522 Test Questions, 642-522 Practice Exam, 642-522 Dumps?

Free 642-522 Demo Download
TestInside offers free demo for 642-522 exam ( Securing Networks with PIX and ASA Exam(SNPA)). You can check out the interface, question quality and usability of our practice exams before you decide to buy it. We are the only one site can offer demo for almost all products.

1.Drag Drop question

Drag and drop question. Drag the items to the proper locations.

Correct Answers:

2.What is displayed as a result of entering the command syntax show aaa-server group1 host 192.168.30.60 in the

security appliance?

A: aaa-server configuration for a particular host in server group group1

B: aaa-server statistics for a particular host in server group group1

C: aaa-server configuration for server group group1

D: aaa-server statistics for the host group1 at IP address 192.168.30.60

Correct Answers: B

3.What are the two purposes of the network area subcommand? (Choose two.)

A:It defines the interfaces on which OSPF runs. B:It defines the interfaces on which RIP runs.
C:It defines the OSPF area the interface belongs to. D:It separates the public area from the private area. E:It defines the OSPF area type.
Correct Answers: A, C

4.Refer to the exhibit. Users on the DMZ are complaining that they cannot gain access to the insidehost via HTTP. What did the network administrator determine after reviewing the network diagram and partial configuration?

A: The static (inside,dmz) command is not configured correctly.

B: The global (dmz) command is not configured correctly. C: The nat (dmz) command is missing.
D: The dmzin access list is not configured correctly.

Correct Answers: D

5.Refer to the exhibit. An administrator is configuring the failover link on the secondary unit, pix2 and needs to

configure the IP addresses of the failover link. At pix2, which of these additional commands should be entered?

A: pix2(config)# failover lan ip 172.17.2.1 255.255.255.0 standby 172.17.2.7

B: pix2(config)# failover link 172.17.2.7 255.255.255.0 standby 172.17.2.1

C: pix2(config)# failover interface ip LANFAIL 172.17.2.1 255.255.255.0 standby 172.17.2.7

D: pix2(config)# interface ethernet3

pix2(config-if)# failover ip address 172.17.2.7 255.255.255.0 standby 172.17.2.1

Correct Answers: C

6.In the Cisco ASA 5500 series, what is the flash keyword aliased to? A: Disk0
B: Disk1

C: both Disk0 and Disk1

D: Flash0

E: Flash1

Correct Answers: A

7.Refer to the exhibit. In the network diagram there are four servers on the DMZ-two web servers and two FTP

servers. According to the group configuration in the ny_acs server, when a remote user accesses the security appliance and is authenticated, the user is authorized to perform which two actions? (Choose 2.)

A:access any server on the DMZ

B:access any FTP server

C:access FTP1 server only

D:utilize FTP and HTTP protocol to attach to the server E:utilize HTTP protocol only to attach to the server F:utilize FTP protocol only to attach to the server Correct Answers: C, F

8.Refer to the exhibit. An administrator wants to add a comment about access-list aclin line 2. What command should the administrator enter to accomplish this addition?

A: pix1(config)# access-list aclin line 1 remark partner server http access

B: pix1(config)# access-list aclin line 2 remark partner server http access

C: pix1(config)# access-list aclin line 1 comment partner server http access D: pix1(config)# access-list aclin line 2 comment partner server http access Correct Answers: B

9.Which is a hybrid protocol that provides utility services for IPSec, including authentication of the IPSec peers, negotiation of IKE and IPSec SAs, and establishment of keys for encryption algorithms?
A: 3DES B: ESP
C: IKE D: MD5
Correct Answers: C

10.During failover, which security appliance attribute does not change? A: failover unit status-active and standby
B: active and standby interfaces-IP address

C: failover unit type-primary and secondary

D: active and standby interfaces-MAC address

Correct Answers: C

Free download?pass4sure 642-522
Free download?testking 642-522