Author: newcertskey
Flydumps Cisco 642-359 exam questions and answers in PDF are prepared by our expert,Moreover,they are based on the recommended syllabus covering all the Adobe exam objectives. You will find them to be very helpful and precise in the subject matter since all the Cisco 642-359 exam content is regularly updated and has been checked for accuracy by our team of Adobe expert professionals.
QUESTION 20
A customer with multiple vendor switches establishes an ISL between a non-Cisco switch and an E_Port
on a Cisco MDS 9000 switch.
Which three statements are true about the interop behavior between the two switches? (Choose three.)
A. Exchange-based load balancing is supported in all interop modes.
B. Interop mode affects all VSANs.
C. Only E_Ports can be used to connect to non-Cisco MDS switches.
D. The non-Cisco switch must have matching FC timers with the VSAN containing the E_Port on the Cisco MDS 9000 Series switch.
E. Adding another ISL between the switches will allow a PortChannel to be configured for HA.
F. Interop mode 1 allows full featured communication between all combinations of MDS and non- MDS switches
Correct Answer: ACD Section: (none) Explanation
Explanation/Reference:
QUESTION 21
Which license is required on switches that are going to implement LUN zoning?
A. Storage Services Enabler
B. Enterprise license
C. Fabric Manager Server license
D. SAN Extension over IP license
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 22
DRAG DROP
Drop
Match the definition on the left with its appropriate word or phrase about switch interoperability on the right.
“Pass Any Exam. Any Time.” – www.actualtests.com 11
Cisco 642-359: Practice Exam
Drag and drop question. Drag the items to the proper locations.
A. 1=2, 2=1, 3=4, 4=5, 5=3
B.
C.
D.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
Explanation:
“Pass Any Exam. Any Time.” – www.actualtests.com 12 Cisco 642-359: Practice Exam
QUESTION 23
Which two of these logging statements are true? (Choose two.)
A. Call Home message level 0 is most urgent and level 7 is least urgent, whereas the syslog level 9 is most urgent and level 0 is least urgent.
B. Syslog message level 0 is most urgent and level 7 is least urgent, whereas the Call Home message level 9 is most urgent and level 0 is least urgent,
C. Syslog message level 7 is most urgent and level 0 is least urgent, whereas the Call Home message level 9 is most urgent and level 0 is least urgent.
D. Accounting logs can be stored locally and sent to remote AAA servers.
E. Go to logs > syslog > setup in Device Manager to view the local accounting log.
Correct Answer: BD Section: (none) Explanation
Explanation/Reference:
QUESTION 24
Which of these Cisco Fabric Manager debugging tools can compare the current configuration with a previously saved configuration file?
A. Switch Health Analysis
B. Fabric Configuration Analysis
C. EnD.to-End Connectivity Analysis
D. Zone Merge Analysis
Correct Answer: B Section: (none) Explanation Explanation/Reference:
QUESTION 25
Choose the correct list of tasks to configure Remote Spanning.
A. Create a VSAN interface. Enable a Fibre Channel tunnel. Initiate the Fibre Channel tunnel. Configure the ST_Port in the source switch. Configure the SD_Port in the destination switch. Configure a SPAN session in the source switch.
B. Create a VSAN interface. Enable a Fibre Channel tunnel. Initiate the Fibre Channel tunnel. Configure the ST_Port in the source switch. Configure the SD_Port in the destination switch. Configure an RSPAN session in the source switch.
C. Create an RSPAN interface. Enable a Fibre Channel tunnel. Initiate the Fibre Channel tunnel. Configure the SD_Port in the destination switch. Configure the ST_Port in the source switch. Configure an RSPAN session in the source switch.
D. Create a VSAN interface. Enable a Fibre Channel tunnel. Initiate the Fibre Channel tunnel. Configure the ST_Port in the destination switch. Configure the SD_Port in the source switch. “Pass Any Exam. Any Time.” – www.actualtests.com 13 Cisco 642-359: Practice Exam Configure an RSPAN session in the source switch.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 26
When creating an Inter-VSAN routing topology, which type of World Wide Name (WWN) must be used?
A. Port WWN
B. Switch WWN
C. Fabric Port WWN
D. VSAN WWN
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 27
Your company has a multiswitch fabric including Switch A and Switch B. An administrator of Switch A creates the following zone set and successfully activates it: zoneset name ZoneSetl vsan 1 zone name Zonel vsan 1 pwwn 21:01:00:e0:8b:3c:03:b6 pwwn 21:01:00:e0:8b:3c:55:bb Later in the day, a second administrator creates the following zone set on Switch B: zoneset name ZoneSet2 vsan 1 zone name Zonel vsan 1 pwwn 21:01:00:e0:8b:3c:03:b6 pwwn 21:01:00:e0:8b:3c:55:aa What happens when the administrator of Switch B attempts to activate ZoneSet2?
A. ZoneSet2 becomes the active zone set for both Switches A and
B.
C. The fabric segments and ZoneSet2 become the active zone set for Switch B only.
D. The fabric segments and ZoneSet2 become the active zone set for Switch A only.
E. The fabric segments and ZoneSetl remain the active zone set for Switch B, while ZoneSet2 becomes the active zone set for Switch A.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 28
“Pass Any Exam. Any Time.” – www.actualtests.com 14 Cisco 642-359: Practice Exam
You have been asked to configure a port on your Cisco MDS switch so that a host can join your fabric. Which of these switch port types should the port be set to?
A. N_Port
B. NL_Port
C. F_Port
D. E_Port
E. TE_Port
F. SD Port
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 29
DRAG DROP
Drop The IT director wants to standardize the process that the SAN team follows when troubleshooting the SAN. IT director wants to leverage the tools that are provided by Cisco Fabric Manager so that each member of the team executes the samesteps when faced with a problem in the SAN. Click and drag the Cisco Fabric Manager troubleshooting tool to the purpose it serves in the repair strategy.
Drag and drop question. Drag the items to the proper locations.
A. 1=2, 2=4, 3=3, 4=1
B.
C.
D.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
“Pass Any Exam. Any Time.” – www.actualtests.com 15 Cisco 642-359: Practice Exam
Explanation:
QUESTION 30
Which of the following tools would you use to view SCSI error count statistics?
A. Cisco Performance Manager
B. RMON
C. Cisco Traffic Analyzer
D. Cisco Fabric Analyzer
Correct Answer: C Section: (none)
Explanation
Explanation/Reference:
QUESTION 31
A customer would like to implement a low-cost traffic engineering solution that provides a primary data path, and a secondary data path that will only be used in the event of a failure in the primary path. Which of these solutions best meets the customer needs?
A. VSAN allowed list pruning
B. FCC
C. QoS “Pass Any Exam. Any Time.” – www.actualtests.com 16 Cisco 642-359: Practice Exam
D. FSPF link costs
E. VOQ
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 32
The output from the switch show interface command indicates that the link from a host comes up as an FL_Port. The switch port is configured as auto. Which three of these HBA configurations could cause this scenario? (Choose three.)
A. the HBA is configured as an N_Port
B. the HBA is configured as an NL_Port
C. the HBA supports only NL mode
D. the HBA is configured as a TE_Port
E. the HBA supports only FC.AL technology
F. the HBA is configured as an TL_Port
Correct Answer: BCE Section: (none) Explanation
Explanation/Reference:
QUESTION 33
Refer to the exhibit. Which of the following statements is true?
A. All users belonging to the sangroup role are allowed to perform all configuration commands except fspf commands because the deny config feature fspf is listed first.
B. All users are allowed to perform all configuration commands because the permit config command is listed last and that will globally override all other rules.
C. All users belonging to the sangroup role to perform all configuration commands except fspf commands because it does not matter what order the rules are entered.
D. The configuration is not valid because rules are entered at the switch (config-role-vsan)# level.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 34
Which three types of network statistics can be captured with the Cisco Traffic Analyzer? (Choose three.)
“Pass Any Exam. Any Time.” – www.actualtests.com 17 Cisco 642-359: Practice Exam
A. historical reporting
B. total bandwidth used
C. Tx/Rx bandwidth per VSAN
D. Tx/Rx bandwidth per N_Port
E. class-based traffic breakdown
Correct Answer: BCD Section: (none) Explanation
Explanation/Reference:
QUESTION 35
Which two security protocols are supported in the Cisco iSCSI implementation? (Choose two.)
A. IPSec
B. FC.SP
C. SLAP
D. CHAP
E. PAP
Correct Answer: AD Section: (none) Explanation
Explanation/Reference:
QUESTION 36
Which feature requires the Cisco MDS 9000 Series Enterprise license?
A. PortChannels
B. virtual output queues
C. port security
D. centralized AAA services
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 37
Which three of these steps are required to configure IVR? (Choose three.)
A. Enable IVR in the border switches.
B. Configure interop mode 1.
C. Configure NAT.
D. Configure the IVR topology.
E. Create and activate IVR zone sets.
F. Configure a transit VSAN. “Pass Any Exam. Any Time.” – www.actualtests.com 18 Cisco 642-359: Practice Exam
Correct Answer: ADE Section: (none) Explanation
Explanation/Reference:
QUESTION 38
What is the default policy when defining role-based access for a VSAN?
A. Deny
B. Permit
C. Permit only for the default VSAN.
D. There is no default role policy for a VSAN.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 39
Which two features help you verify connectivity between host and storage devices? (Choose two.)
A. fcanalyzer
B. Cisco Traffic Analyzer
C. EnD.to-End Connectivity Analysis
D. Zone Merge Analysis
E. fcping
Correct Answer: CE Section: (none) Explanation
Explanation/Reference:
QUESTION 40
Which two of these features are characteristic of out-of-band management for the Cisco MDS 9000 Series switches? (Choose two.)
A. CUP management of the switch for FICON
B. 10/100/1000 Ethernet connection C. IPFC
C. FCIP
D. logical interface VSAN 1
E. configuration during the initial switch setup
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 41
“Pass Any Exam. Any Time.” – www.actualtests.com 19 Cisco 642-359: Practice Exam
A customer has reported performance degradation in the SAN. The system administrator would like to track reaD.write I/O and LUN use on several devices. The devices are directly connected to various switches and belong to different VSANs. The administrator wants to gather information for the last 72 hours. Which of the following Cisco MDS 9000 Series tools is needed to track SCSI I/O and LUN statistics?
A. Cisco Fabric Manager
B. Cisco Traffic Analyzer and PAA
C. Cisco Performance Manager
D. Cisco Fabric Analyzer
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 42
Reference the exhibit.
A customer has configured an FCIP connection between two sites. The customer issues an extended IP
ping command to determine path availability, MTU, and rounD.trip time.
According to the output in the exhibit, which parameter in the extended ping needs adjustment in order to
increase the chances of establishing enD.to-end connectivity?
A. timeout in seconds
B. repeat count
C. datagram size
D. nothing, enD.to-end connectivity cannot be established
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
“Pass Any Exam. Any Time.” – www.actualtests.com 20 Cisco 642-359: Practice Exam
QUESTION 43
The HBA on your storage server only supports the NL_Port mode. Which interface type on the Cisco MDS 9000 Series fabric switches can support this HBA?
A. F
B. TE
C. FL
D. N
E. E
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 44
While examining the output of a show run command on the Cisco MDS 9000 Series, you notice that the statement interface GigabitEthernet2/1.2 appears in the output. What does this mean?
A. It refers to the second FCIP tunnel that is configured on port GigabitEthernet2/1.
B. It refers to a VLAN subinterface on port GigabitEthernet2/1.
C. It means that port GigabitEthernet2/1 is assigned to VSAN 2.
D. It is a mistake in the interface configuration.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 45
Refer to the exhibit. What is the effect of executing the commands shown in the exhibit?
A. Host A will not be able to communicate with interface mgmtO. “Pass Any Exam. Any Time.” – www.actualtests.com 21 Cisco 642-359: Practice Exam
B. Host B will not be able to communicate with interface mgmtO.
C. All hosts will be able to communicate with interface mgmtO.
D. No hosts will be able to communicate with interface mgmtO.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 46
A host is unable to access the storage network after its HBA is replaced. Which of these switch configurations could be preventing access?
A. port-based zoning
B. port-mode security
C. port security
D. port VSAN membership
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 47
Which Cisco MDS feature can be used to notify an administrator or call center that a serious event has occurred in the fabric?
A. Call Home
B. syslog
C. FLOGI
D. SNMP
E. SPAN
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 48
Why would you use the fcanalyzer command?
A. to ensure that Fibre Channel configuration settings are synchronized across all switches in the fabric
B. to identify common configuration errors in the fabric
C. to nondisruptively capture and decode Fibre Channel control frames
D. to decode and analyze Fibre Channel frames and ordered sets on a link “Pass Any Exam. Any Time.” -www.actualtests.com 22 Cisco 642-359: Practice Exam
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 49
What is the recommended minimum clearance between chassis when installing the Cisco MDS 9500 Series in a standard telco rack?
A. 2.5 inches
B. 3 inches
C. 6 inches
D. 9 inches
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 50
Your company is planning a SAN deployment using Fibre Channel connections from a central, highly secure data center to several less secure branch offices. Which of these security features would allow you to disable all branch office switch management ports and yet still maintain the complete suite of TCP/IP-based SAN management utilities?
A. IPSec
B. Port Mode Security
C. Port Security
D. Overlay VSAN
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 51
What information does the command showflogi database provide?
A. verifies connectivity for attached devices
B. verifies that attached devices are in the correct zone
C. displays a list of the host ports that have logged into each storage port
D. displays fabric login errors
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 52
“Pass Any Exam. Any Time.” – www.actualtests.com 23
Cisco 642-359: Practice Exam
You have set up a session to the SD_Portto enable the investigation of a problem on a particular Fibre
Channel port. You need to check whether this has been correctly set up for the desired port.
Which command should you use?
A. show span session
B. showfcflow
C. showtlport
D. show fcanalyzer
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 53
Which feature detects hardware faults and attempts recovery actions?
A. Switch Health Analysis
B. Fabric Configuration Analysis
C. Online Health Management System
D. EnD.to-End Connectivity Analysis
E. Cisco Fabric Services
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 54
Hosti and Storagel are in VSAN 10 and have been communicating successfully. An administrator creates and activates an IVR zoneset enabling Hosti and Storage2 to communicate. Unexpectedly, after this new IVR zoneset is activated, Hosti loses connectivity with Storagel. “Pass Any Exam. Any Time.” – www.actualtests.com 24 Cisco 642-359: Practice Exam Why did this happen?
A. The default zone policy in VSAN 10 is set to permit.
B. The local zoneset distribution policy for VSAN 20 is set to allow.
C. The zoneset distribution policy for VSAN 10 is set to full.
D. Standard zones and IVR zones cannot coexist in the same VSAN.
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 55
You are implementing an FCIP solution for SAN extension between two data centers using the Cisco MDS 9000 Series platform. For redundancy, there are two Metro Ethernet paths between the data centers. How can you specify primary and secondary paths for each FCIP tunnel?
A. Configure OSPF routing on the IPS-8. .
B. Configure EIGRP routing on the IPS-8.
C. Configure FSPF link costs on the MDS switch.
D. Configure QoS on the MDS switch.
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
“Pass Any Exam. Any Time.” – www.actualtests.com 25 Cisco 642-359: Practice Exam
QUESTION 56
In order to allow access to a switch using Telnet, which three settings should be configured during the initial setup of a Cisco 9000 Series switch using SAN-OS Release 2.0? (Choose three.)
A. assign an admin password
B. accept auto for the switchport trunk mode
C. configure the IP address for the VSAN 1 interface
D. configure the netmask for the IP address
E. configure the IP address for the MgmtO interface F – Configure SSH with an RSA1 key
Correct Answer: ADE Section: (none) Explanation
Explanation/Reference:
QUESTION 57
What are four valid protocols for copying software to the MDS 9000 family switches? (Choose four.)
A. Remote Copy Service
B. Secure Copy Protocol
C. Trivial File Transfer Protocol
D. File Transfer Protocol
E. Secure Trivial File Transfer Protocol
F. Secure File Transfer Protocol
Correct Answer: BCDF Section: (none) Explanation
Explanation/Reference:
QUESTION 58
On a Class C IP network, how many bits in the IPv4 address are used to identify the network?
A. 8
B. 16
C. 24
D. 32
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 59
“Pass Any Exam. Any Time.” – www.actualtests.com 26 Cisco 642-359: Practice Exam
After performing the initial switch configuration by running the setup utility, an administrator notices that ports configured to connect to other Cisco MDS 9000 switches invariably come up as E_Ports rather than TE_Ports. Which error was made at initial configuration?
A. VSAN capabilities were not enabled.
B. Default switchport trunk mode was set to auto.
C. Full zoneset distribution was not enabled.
D. Default switchport trunk mode was set to on.
Correct Answer: B Section: (none)
Explanation Explanation/Reference:
QUESTION 60
Which three of these terms are valid Fibre Channel topologies? (Choose three.)
A. point-to-point
B. switched backbone
C. Gigabit Ethernet
D. arbitrated loop
E. switched fabric
F. autonomous region
Correct Answer: ADE Section: (none) Explanation
Explanation/Reference:
QUESTION 61
Which two Cisco MDS 9000 Series Switches are used in small- and medium-sized SAN topologies? (Choose two.)
Select 2 response(s).
A. Cisco MDS 9124
B. Cisco MDS 9222i
C. Cisco MDS 9506
D. Cisco MDS 9509
E. Cisco MDS 9513
Correct Answer: AB Section: (none) Explanation
Explanation/Reference:
“Pass Any Exam. Any Time.” – www.actualtests.com 27 Cisco 642-359: Practice Exam
QUESTION 62
Which second-generation Fibre Channel module offers a full 4Gb/s line rate on all ports? Select the best response.
A. 12-port 1/2/4 Gb/s Fibre Channel module
B. 24-port 1/2/4 Gb/s Fibre Channel module
C. 24-port 1/2/4/8 Gb/s Fibre Channel module
D. 48-port 1/2/4 Gb/s Fibre Channel module
Correct Answer: A Section: (none) Explanation
Explanation/Reference: QUESTION 63
Which Cisco MDS 9000 Series Switch has non-field-replaceable fans? Select the best response
A. Cisco MDS 9124
B. Cisco MDS 9134
C. Cisco MDS 9222i
D. Cisco MDS 9506
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 64
When using the Cisco MDS 9000 Switches, which protocol provides in-band management? Select the best response.
A. FCIP
B. IPFC
C. iSCSI
D. SNMP
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 65
What is a benefit of using the Cisco Fabric Manager Software Install Wizard instead of using the CLI-based software upgrade?
“Pass Any Exam. Any Time.” – www.actualtests.com 28 Cisco 642-359: Practice Exam
Select the best response.
A. can be used to upgrade multiple switches with a single procedure
B. shows the upgrade procedure progress
C. upgrades kickstart and system images in a single step
D. notifies when upgrade procedure has finished
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 66
A junior SAN engineer is asked to prepare the configuration for the NPV edge switch. The NPV edge switch will be connected to the NPV core switch via the fc 1/24 interface. The end device will be connected to the fc 1/1 interface and should be placed in VSAN 10. Which configuration for the NPV edge switch accomplishes this request?
Select the best response.
A. feature npv interface fcl/24 switchport mode F interface fcl/1 switchport mode F vsan database vsan 10 interface fcl/1 vsan 10 interface fcl/24 153373-15
B. feature npv interface fcl/24 switchport mode F interface fcl/1 switchport mode F vsan database vsan 10 interface fcl/1 vsan 10 interface fcl/24 153373-7
C. feature npv interface fcl/24 switchport mode F interface fcl/1 switchport mode F vsan database vsan 10 interface fcl/1 vsan 10 interface fcl/24 153373-3 “Pass Any Exam. Any Time.” – www.actualtests.com 29 Cisco 642-359: Practice Exam
D. feature npv interface fcl/24 switchport mode F interface fcl/1 switchport mode F vsan database vsan 10 interface fcl/1 vsan 10 interface fcl/24 153373-11
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 67
Which two options can be used to enable flex-attach when automatic assignment is used? (Choose two.) Select 2 response(s).
A. global across all NPV switches
B. global across all NPIV-enabled switches
C. per interface or interface range
D. per server WWN
E. per server FC-ID
Correct Answer: AC Section: (none) Explanation
Explanation/Reference:
QUESTION 68
Refer to the exhibit. When looking at the Cisco Fabric Manager, you notice that one of the switches has this symbol superimposed on it. What is the reason?
Select the best response.
A. The device is manageable but there are operational problems.
B. The device is online but not working properly.
C. The device is not manageable.
D. The device is Down.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
“Pass Any Exam. Any Time.” – www.actualtests.com 30 Cisco 642-359: Practice Exam
QUESTION 69
Which command can be used to determine whether device aliases in VSAN 5 are configured for fabric-wide distribution?
A. show fcalias distribution vsan 5
B. show cfs application name device-alias
C. show vsan 5 device-alias status
D. show vsan 5 device-alias status
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 70
Issuing the show role command to check a defined role in an MDS 9000 Series switch will produce the following output:
Role : Manage VSAN Description : vsan policy : deny Permitted vsans: 2-4
Rule Type Command-type Feature
1.
permit config *
2.
deny config fspf
3.
permit debug zone
4.
permit exec fcping
Which of the following two functions can a user with role Manage undertake? (Choose two.)
A. change fspf parameters
B. configure FC port parameters for VSAN 3
C. issue a debug command for a port
D. heck connectivity for VSAN 2
Correct Answer: BD Section: (none) Explanation Explanation/Reference:
With the products Cisco 642-359 for training and preparation of testing you would not only significantly reduce your fees, but pass your exam. We obtain our products from Authorities experts from test center.We give you the best path to successful completion of your exam to the real and original exam questions and answers for Cisco 642-359 .
Flydumps Cisco 642-359 exam questions and answers in PDF are prepared by our expert, Moreover, they are based on the recommended syllabus covering all the Cisco 642-359 exam objectives. You will find them to be very helpful and precise in the subject matter since all the Cisco 642-359 exam content is regularly updated and has been checked for accuracy by our team of Microsoft expert professionals.
QUESTION 16
What is a benefit of enhanced zoning?
A. fabric locked during configuration changes
B. larger zoning database size
C. database rollback in case of failure
D. zones allowed to span VSANs
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 17
While examining the output of a show run command on the CiscoMDS9000Series, you notice that the statement interface GigabitEthernet2/1.2 appears in the output. What does this mean?
A. It refers to these condFCIP tunnel that is configured on port GigabitEthernet2/1.
B. It refers to a VLAN subinterface on port GigabitEthernet2/1.
C. It means that port GigabitEthernet2/1is assigned to VSAN2.
D. It is a mistake in the interface configuration.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 18
The HBA on your storage server only supports the NL_Port mode. Which interface type on the Cisco MDS9000Series fabrics witches can support this HBA?
A. F
B. TE
C. FL
D. N E. E
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 19
For purposes of granting restricted access to statically configure iSCSI virtual targets, which three of these can be used to identify iSCSI initiators?(Choose three.)
A. iSCS Inodename
B. hostname
C. IPv4 address and subnet
D. MAC address
E. IPv6 address
F. iSCSI WWN
Correct Answer: ACE Section: (none) Explanation
Explanation/Reference:
QUESTION 20
What is a benefit of enhanced zoning?
A. fabriclockedduringconfigurationchanges
B. largerzoningdatabasesize
C. databaserollbackincaseoffailure
D. zonesallowedtospanVSANs
Correct Answer: A Section: (none) Explanation
Explanation/Reference:
QUESTION 21
How many ports are address able on a fabric arbitrated loop?
A. 126
B. 127
C. 255
D. 256
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 22
Which three of the following a repossible reasons why aline card module does not come online?
(Choose three.)
A. Port index es have been taken offline.
B. Available port indexes are non contiguous.
C. Not enough power is available in the chassis.
D. An invalid interoperability mode has been configured.
E. Unsupported SFP shave been installed.
F. Not enough port indexes are available.
Correct Answer: BCF Section: (none) Explanation
Explanation/Reference:
QUESTION 23
Which of the following tools would you use to view SCSI error count statistics?
A. CiscoPerformanceManager
B. RMON
C. CiscoTrafficAnalyzer
D. CiscoFabricAnalyzer
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 24
Why would you use the fc analyzer command?
A. to ensure that FibreChannel configuration settings are synchronized across all switches in the fabric
B. to identify common configuration errors in the fabric
C. to non disruptively capture and decode FibreChannel control frames
D. to decode and analyze FibreChannel frames and ordered sets on alink
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
QUESTION 25
Which two features help you verify connectivity between host and storage devices?(Choose two.)
A. fcanalyzer
B. CiscoTrafficAnalyzer
C. End-to-End Connectivity Analysis
D. Zone Merge Analysis
E. fcping
Correct Answer: CE Section: (none) Explanation Explanation/Reference:
QUESTION 26
Which feature detects hardware fault san dattempts recovery actions?
A. SwitchHealthAnalysis
B. FabricConfigurationAnalysis
C. OnlineHealthManagementSystem
D. End-to-EndConnectivityAnalysis
E. CiscoFabricServices
Correct Answer: C Section: (none) Explanation
Explanation/Reference:
Flydumps offers the most comprehensive Trainingexam with full of wonderful concepts and learning skills. The training tools on the site Flydumps.com prepares you with the same questions and answers for Cisco 642-359 from the test center.You may have seen our products.Without hesitate to procure our products. Because it is the best choice for you and even for your career in the future.We promise you 100% pass guarantee.
Flydumps Apple 9L0-007 exam material details are researched and created by the Most Professional Certified Authors who are regularly using current exams experience to create precise and logical dumps.You can get questions and answers from many other websites or books, but logic is the main key of success, and Flydumps will give you this key of success.
QUESTION 11
The basis for the component isolation troubleshooting technique is an undertanding of ____________ and __________ within computers.? ( Select two )
A. network flow
B. coolant flow
C. power flow
D. fan air flow
E. signal flow
Correct Answer: CE
QUESTION 12
Which of the following is NOT one of the steps of the Apple recommended troubleshooting process?
A. Vertify repair
B. Vertify problem
C. Clean plastics
D. Try quick fixes
E. Run diagnostics
Correct Answer: C
QUESTION 13
A customer states that he cannot open an AppleWorks file. What is the most productive question to ask him FIRST?
A. Can you open any files?
B. Is your MAC connected to a network?
C. Can you open other Apple Work Files?
D. What version of Apple Works are you using?
Correct Answer: C
QUESTION 14
You require additional information about a specific problem with a customer’s Mac. Which one of the following resources is the Apple-recommended choice for researching the problem?
A. Downloads
B. Discussions
C. User’s manual
D. Knowledge Base
Correct Answer: D QUESTION 15
Examine the exhibit. What is the correct name for this type of pixel anomaly?
A. Dark dot effect
B. Stuck sub-pixel
C. Bright dot defect
D. Vertical TAB fault
Correct Answer: D
QUESTION 16
When removing or replacing the heat sink or processor on the Mac Pro (8x), what is the maximum acceptable amount of time for the heat sink to be separated from the processor?
A. Five (5) minutes
B. Fifteen (15) minutes
C. Thirty (30) minutes
D. Sixty (60) mintues
Correct Answer: B
QUESTION 17
Which of the following can permanently damage an LCD display?
A. Rubbing the display
B. Using a screen saver
C. Not using a screen saver
D. Turning brightness up to high
Correct Answer: A
QUESTION 18
Which FOUR of the following actions helps reduce the risk of damage from ESD? SELECT FOUR
A. Ground yourself and the equipment you are working on
B. Always place ESD-sensitive components on metal surfaces
C. Handle all ESD-sensitive boards by the connections, not the edges
D. Use static-shielding storage bags for ESD-sensitive components
E. Do not touch anyone who is working on ESD-sensitive components
F. Do not bring plastic, vinyl or foamed polystyrene near ESD-sensitive components
Correct Answer: ADEF
QUESTION 19
Which THREE of the following are symptoms of a ‘no power’ condition? SELECT THREE
A. You don’t hear a startup chime
B. You can’t connect to the internet
C. You don’t hear any fan or drive noise
D. The cursor is frozen and the system is unresponsive
E. The power button or power indicator doesn’t light up at all
Correct Answer: ACE
QUESTION 20
Which of the following is ALMOST CERTAINLY a hardware-related problem?
A. No video at startup
B. Error beep at startup
C. Distorted at startup
D. Blinking question mark at startup
Correct Answer: B
Flydumps.com is the absolute way to pass your Apple 9L0-007 exam within no time. An authentic and comprehensive Apple 9L0-007 exam solution is available at Flydumps.com. With our exclusive online Apple 9L0-007 braindump you will pass Apple 9L0-007 exam easily.Flydumps.com guarantees 100% success rate
Where to free download the new Cisco 642-515 exam questions to pass the exam easily? Now,Flydumps has publised the new version of Cisco 642-515 exam dumps with new added exam questions.you can also get free VCE and PDF, and the new Cisco 642-515 practice tests ensure your exam 100% pass. Visit Flydumps.com to get the 100% pass ensure!
QUESTION 60
Modular Policy Framework provides a consistent and flexible way to configure security appliance features in a manner similar to Cisco IOS software QoS CLI. Your company asked you to examine the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) by use of the Cisco Adaptive Security Device Manager (ASDM).
What is the impact of the FTP inspection policy named MY-FTP-MAP on FTP traffic entering the partnernet interface?
A. Masks the FTP banner.
B. Tracks each FTP command and response sequence for certain anomalous activity.
C. Has no effect on the behavior of the Cisco Adaptive Security Appliance.
D. Prevents web browsers from sending embedded commands in FTP requests.
Correct Answer: C Section: Firewall/Policys Explanation
Explanation/Reference:
QUESTION 61
Modular Policy Framework provides a consistent and flexible way to configure security appliance features in a manner similar to Cisco IOS software QoS CLI. Your company asked you to examine the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) by use of the Cisco Adaptive Security Device Manager (ASDM).
Which two impacts are of the policy map named PARTNERNET-POLICY on FTP traffic entering the partnernet interface?
A. Prevents all users except “root” from accessing the path /root.
B. Logs all attempts to download files from the FTP server on the inside interface.
C. Blocks the FTP request commands DELE, MKD, PUT, RMD, RNFR, and RNTO.
D. Resets connections that send embedded commands.
Correct Answer: CD Section: Firewall/Policys Explanation
Explanation/Reference: QUESTION 62
Modular Policy Framework provides a consistent and flexible way to configure security appliance features in a manner similar to Cisco IOS software QoS CLI. Your company asked you to examine the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) by use of the Cisco Adaptive Security Device Manager (ASDM).
Which option is correct with regard to HTTP inspection on the Cisco Adaptive Security Appliance?
A. HTTP traffic is inspected as it enters or exits the outside interface.
B. HTTP traffic is inspected only as it enters any interface.
C. Advanced HTTP inspection is applied to traffic entering the outside interface, and basic HTTP inspection is applied to traffic entering any interface.
D. HTTP traffic is inspected as it enters or exits any interface.
Correct Answer: A Section: Firewall/Policys Explanation
Explanation/Reference: QUESTION 63
Modular Policy Framework provides a consistent and flexible way to configure security appliance features in a manner similar to Cisco IOS software QoS CLI. Your company asked you to examine the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) by use of the Cisco Adaptive Security Device Manager (ASDM).
Which step will be taken by the Cisco Adaptive Security Appliance on FTP traffic entering its outside interface?
A. Masks the FTP greeting banner.
B. Translates embedded IP addresses.
C. Blocks the FTP request commands APPE, GET, RNFR, RNTO, DELE, MKD, and RMD.
D. Prevents all users except “root” from accessing the path/root.
Correct Answer: B Section: Firewall/Policys Explanation Explanation/Reference:
QUESTION 64
Which options can a clientless SSL VPN user access from a web browser without port forwarding, smart tunnels, or browser plug-ins?
A. web-enabled applications
B. Microsoft Outlook Web Access
C. files on the network, via FTP or the CIFS protocol
D. internal websites
Correct Answer: ABCD Section: VPN Explanation
Explanation/Reference:
QUESTION 65
While implementing QoS, which two types of queues are available on the Cisco ASA security appliance? (Choose two.)
A. best effort queue
B. round robin queue
C. weighted fair
D. low latency queue
Correct Answer: AD Section: Firewall/Policys Explanation
Explanation/Reference:
QUESTION 66
Which three statements correctly describe protocol inspection on the Cisco ASA adaptive security appliance? (Choose three.)
A. The protocol inspection feature of the security appliance securely opens and closes negotiated ports and IP addresses for legitimate client-server connections through the security appliance.
B. For the security appliance to inspect packets for signs of malicious application misuse, you must enable advanced (application layer) protocol inspection.
C. If inspection for a protocol is notenabled, traffic for that protocol may be blocked.
D. If you want to enable inspection globally for a protocol that is not inspected by default or if you want to globally disable inspection for a protocol, you can edit the default global policy.
Correct Answer: ACD Section: Firewall/Policys Explanation
Explanation/Reference:
QUESTION 67
Multimedia applications transmit requests on TCP, get responses on UDP or TCP, use dynamic ports, and use the same port for source and destination, so they can pose challenges to a firewall. Which three items are true about how the Cisco ASA adaptive security appliance handles multimedia applications? (Choose three.)
A. It dynamically opens and closes UDP ports for secure multimedia connections, so you do not need to open a large range of ports.
B. It supports SIP with NAT but not with PAT.
C. It supports multimedia with or without NAT.
D. It supports RTSP, H.323, Skinny, and CTIQBE.
Correct Answer: ACD Section: Firewall/Policys Explanation
Explanation/Reference:
QUESTION 68
Reverse route injection (RRI) is the ability for static routes to be automatically inserted into the routing process for those networks and hosts protected by a remote tunnel endpoint. These protected hosts and networks are known as remote proxy identities. Study the following exhibit carefully. What does Reverse Route Injection enable in this configuration?
A. The Cisco ASA security appliance will advertise its default routes to the distant end of the site- to-site VPN tunnel.
B. The Cisco ASA security appliance will advertise routes that are at the distant end of the site-to- site VPN tunnel.
C. The Cisco ASA security appliance will advertise routes that are on its side of the site-to-site VPN tunnel to the distant end of the site-to-site VPN tunnel.
D. The Cisco ASA security appliance will advertise routes from the dynamic routing protocol that is running on the Cisco ASA security appliance to the distant end of the site-to-site VPN tunnel.
Correct Answer: B Section: Other Explanation
Explanation/Reference: QUESTION 69
Which two options are correct about the threat detection feature of the Cisco ASA adaptive security appliance? (Choose two.)
A. The security appliance scanning threat detection feature is based on traffic signatures.
B. The threat detection feature can help you determine the level of severity for packets that are detected and dropped by the security appliance inspection engines.
C. Because of their impact on performance, both basic threat detection and scanning threat detection are disabled by default.
D. Scanning threat detection detects network sweeps and scans and optionally takes appropriate preventative action.
Correct Answer: BD Section: Firewall/Policys Explanation
Explanation/Reference:
QUESTION 70
For configuring VLAN trunking on a security appliance interface, which three actions are mandatory? (Choose three.)
A. associating a logical interface with a physical interface
B. specifying a VLAN ID for asubinterface
C. specifying a name for asubinterface
D. specifying the maximum transmission unit for asubinterface
Correct Answer: ABC Section: Other Explanation
Explanation/Reference:
QUESTION 71
Which three features can the Cisco ASA adaptive security appliance support? (Choose three.)
A. 802.1Q VLANs
B. OSPF dynamic routing
C. static routes
D. BGP dynamic routing
Correct Answer: ABC Section: Other Explanation
Explanation/Reference:
QUESTION 72
What is the reason that you want to configure VLANs on a security appliance interface?
A. for use in multiple contextmode, where you can map only VLAN interfaces to contexts
B. for use in conjunction with device-level failover to increase the reliability of your security appliance
C. to increase the number of interfaces available to the network without adding additional physical interfaces or security appliances D. for use in transparent firewall mode, where only VLAN interfaces are used
Correct Answer: C Section: Other Explanation
Explanation/Reference:
QUESTION 73
The P4S security department would like to apply specific restrictions to one network user, Bob, because he works from home and accesses the corporate network from the outside interface of the security appliance. P4S decides to control network access for this user by using the downloadable ACL feature of the security appliance. Authentication of inbound traffic is already configured on the security appliance, and Bob already has a user account on the Cisco Secure ACS. Which three tasks should be completed in order to achieve the goal of limiting network access for Bob via downloadable ACLs? (Choose three.)
A. Configure the security appliance to use downloadable ACLs.
B. Configure the downloadable ACLs on the Cisco Secure ACS.
C. Attach the downloadable ACL to the user profile for Bob on the Cisco Secure ACS.
D. Configure the Cisco Secure ACS to use downloadable ACLs.
Correct Answer: BCD Section: Firewall/Policys Explanation
Explanation/Reference:
QUESTION 74
The security department of the P4S company wants to configure cut-through proxy authentication via RADIUS to require users to authenticate before accessing the corporate DMZ servers. Which three tasks are needed to achieve this goal? (Choose three.)
A. Configure a rule that specifies which traffic flow to authenticate.
B. Designate an authentication server.
C. Specifya AAA server group.
D. Configure per-user override.
Correct Answer: ABC Section: Other Explanation
Explanation/Reference:
QUESTION 75
Which two statements correctly describe the local user database in the security appliance? (Choose two.)
A. You can create user accounts with or without passwords in the local database.
B. You cannot use the local database for network access authentication.
C. You can configure the security appliance to lock a user out after the user meets a configured maximum number of failed authentication attempts.
D. The default privilege level for a new user is 15.
Correct Answer: AC Section: Other Explanation
Explanation/Reference: QUESTION 76
Which one of the following commands can provide detailed information about the crypto map configurations of a Cisco ASA adaptive security appliance?
A. show run ipsec sa
B. show run crypto map
C. show ipsec sa
D. show crypto map
Correct Answer: B Section: VPN Explanation
Explanation/Reference:
QUESTION 77
Which three commands can display the contents of flash memory on the Cisco ASA adaptive security appliance? (Choose three.)
A. show disk0:
B. dir
C. show flash:
D. show memory
Correct Answer: ABC Section: Other Explanation
Explanation/Reference:
QUESTION 78
Which two statements about the downloadable ACL feature of the security appliance are correct? (Choose two.)
A. Downloadable ACLs enable you to store full ACLs on a AAA server and download them to the security appliance.
B. Downloadable ACLs are supported using TACACS+ or RADIUS.
C. The downloadable ACL must be attached to a user or group profile on a AAA server.
D. The security appliance supports only per-user ACL authorization.
Correct Answer: AC Section: Other Explanation
Explanation/Reference:
QUESTION 79
In the default global policy, which three traffic types are inspected by default? (Choose three.)
A. TFTP
B. FTP
C. ESMTP
D. ICMP
Correct Answer: ABC Section: Firewall/Policys Explanation
Explanation/Reference:
QUESTION 80
What does the redundant interface feature of the security appliance accomplish?
A. to increase the number of interfaces available to your network without requiring you to add additional physical interfaces or security appliances
B. to increase the reliability of your security appliance
C. to allow a VPN client to sendIPsec-protected traffic to another VPN user by allowing such traffic in and out of the same interface
D. to facilitate out-of-band management
Correct Answer: B Section: Other Explanation
Explanation/Reference:
Preparing Cisco 642-515 exam is not difficult now.You can prepare from Cisco 642-515 Certification or Cisco 642-515 dumps.Here we have mentioned some sample questions.You can use our Cisco 642-515 study material notes for test preparation.Latest Cisco 642-515 study material available.
[The Newest Dumps] Real Cisco 642-515 exam dumps revised by experts, they were updated with the change of the Cisco 642-515 ,covering all the whole aspects of Cisco 642-515 exam. Just have a training of Flydumps Cisco 642-515 exam questions to guarantee your 100% pass
QUESTION 51
The IT department of your company must perform a custom-built TCP application within the clientless SSL
VPN portal configured on your Cisco ASA security appliance. The application should be run by users who
have either guest or normal user mode privileges.
In order to allow this application to run, how to configure the clientless SSL VPN portal?
A. configure a smart tunnel for the application
B. configure a bookmark for the application
C. configure the plug-in that best fits the application
D. configure port forwarding for the application
Correct Answer: A Section: VPN Explanation
Explanation/Reference:
QUESTION 52
Which major benefit do digital certificates provide when deploying IPsec VPN tunnels?
A. Resiliency
B. Obfuscation
C. Simplification
D. Scalability
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 53
Refer to the exhibit. As the administrator of a Cisco ASA security appliance for remote access IPsec VPNs,
you are assisting a user who has a digital certificate that is configured for the Cisco VPN Client.
Based on the exhibit, how would you find the MD5 and SHA-1 thumb print of the certificate?
A. Choose the certificate and then click the Certificate drop-down menu.
B. Choose the certificate and then click Options > Properties.
C. Choose the certificate and then click the View button.
D. Choose the certificate and then click the Verify button.
Correct Answer: C Section: Cert Authentication Explanation
Explanation/Reference:
QUESTION 54
Refer to the exhibit. You are configuring a laptop with the Cisco VPN Client, which will use digital certificates for authentication. Which protocol will the Cisco VPN client use to retrieve the digital certificate from the CA server?
A. FTP
B. HTTPS
C. TFTP
D. LDAP
E. SCEP
Correct Answer: E Section: Cert Authentication Explanation
Explanation/Reference:
QUESTION 55
Refer to the exhibit. A junior Cisco ASA security appliance administrator has asked for your help in configuring a Cisco ASA security appliance for an identity certificate to be used for IPsec VPNs. Based on the two Cisco ASDM configuration screens that are shown, what is needed to configure the Cisco ASA security appliance for an identity certificate?
Exhibit:
A. To retrieve an identity certificate, a new pair of RSA keys must be created.
B. To retrieve an identity certificate, the Cisco ASA security appliance must have the certificate of the CA.
C. To retrieve an identity certificate, the common name must be an FQDN.
D. The Cisco ASA security appliance doesn’t need to retrieve an identity certificate. It can use a self-signed identity certificate for IPsec.
E. Because of the lack of a CA certificate, the administrator must import the identity certificate from a file.
Correct Answer: B Section: (none) Explanation
Explanation/Reference:
QUESTION 56
SSL VPNs can provide increased flexibility over IPsec VPNs, based on the location of the client and ownership of the endpoint. However, security of the endpoint is a potential problem. Which three of these potential security issues can the Cisco ASA security appliance address through SSL VPN policies or features? (Select three.)
A. SSL attacks
B. Malware
C. Phishing
D. Spoofing
E. Viruses
F. Spyware
Correct Answer: BEF Section: (none) Explanation
Explanation/Reference:
QUESTION 57
You have been tasked with configuring access for development partners using the clientless SSL VPN portal on your Cisco ASA security appliance. These partners need access to the desktop of internal development servers. Which three of these configurations for the clientless SSL VPN portal would allow these partners to access the desktop of remote servers? (Choose three.)
A. RDP bookmark using the RDP plug-in
B. Xwindows bookmark using the Xwindows plug-in
C. Telnet bookmark using the Telnet plug-in
D. Citrix plugin using the Citrix plug-in
E. SSH bookmark using the SSH plug-in
F. VNC bookmark using the VNC plug-in
Correct Answer: ADF Section: (none) Explanation
Explanation/Reference:
QUESTION 58
You are the administrator for Cisco ASA security appliances that are used for site-to-site VPNs between remote and corporate offices. You have used the Service Policy Rule Wizard within ASDM to configure low-latency queuing for unified communications on all the appropriate ASAs. Users are still having issues with unified communications between the remote and corporate offices. Assuming that the Cisco Unified Communications equipment is functioning properly and that the VPN configurations are correct, which of these choices is most likely the cause of the problems?
A. The DSCP, expedite forward, ef (46), was used to determine unified communications traffic within the Service Policy Rule Wizard.
B. The tunnel group and DSCP traffic matching criteria were configured within the Service Policy Rule Wizard.
C. Both a policing and priority queue must be applied on the interface to expedite the voice and control data flows.
D. A priority queue must be created on the interface where the site-to-site VPN tunnel is terminated.
Correct Answer: D Section: (none) Explanation
Explanation/Reference:
QUESTION 59
You have been tasked with examining the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) using the Cisco Adaptive Security Device Manager (ASDM). Answer the multiple-choice questions in this simulation using the appropriate Cisco ASDM configuration screens.
Which two actions does the Cisco Adaptive Security Applicance take on HTTP traffic entering its outside interface? (Choose two.)
A. Drops HTTP request messages whose request method is post and whose user-agent field contains either the string Some_New_P2P_Client1 or the string Some_New_P2P_Client2.
B. Logs HTTP request messages whose request method is post and whose user-agent field contains either the string Some_New_P2P_Client1 or the string Some_New_P2P_Client2.
Correct Answer: AB Section: Case Study Explanation
Explanation/Reference:
QUESTION 60
You have been tasked with examining the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) using the Cisco Adaptive Security Device Manager (ASDM). Answer the multiple-choice questions in this simulation using the appropriate Cisco ASDM configuration screens.
What is the effect of the FTP inspection policy named MY-FTP-MAP on FTP traffic entering the partnernet interface?
A. Has no effect on the behavior of the Cisco Adaptive Security Appliance.
Correct Answer: A Section: Case Study Explanation
Explanation/Reference:
QUESTION 61
You have been tasked with examining the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) using the Cisco Adaptive Security Device Manager (ASDM). Answer the multiple-choice questions in this simulation using the appropriate Cisco ASDM configuration screens.
What are the two effects of the policy map named PARTNERNET-POLICY on FTP traffic entering the partnernet interface?
A. Resets connections that send embedded commands.
B. Blocks the FTP request commands DELE, MKD, PUT, RMD, RNFR, and RNTO.
Correct Answer: AB Section: Case Study Explanation
Explanation/Reference:
QUESTION 62
You have been tasked with examining the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) using the Cisco Adaptive Security Device Manager (ASDM). Answer the multiple-choice questions in this simulation using the appropriate Cisco ASDM configuration screens.
Which statement is true about HTTP inspection on the Cisco Adaptive Security Appliance?
A. HTTP traffic is inspected as it enters or exits the outside interface.
Correct Answer: A Section: Case Study Explanation
Explanation/Reference:
QUESTION 63
You have been tasked with examining the current Cisco Modular Policy Framework configurations on the LA-ASA Cisco Adaptive Security Appliance (ASA) using the Cisco Adaptive Security Device Manager (ASDM). Answer the multiple-choice questions in this simulation using the appropriate Cisco ASDM configuration screens.
Which action does the Cisco Adaptive Security Appliance take on FTP traffic entering its outside interface?
A. Translates embedded IP addresses.
Correct Answer: A Section: Case Study Explanation
Explanation/Reference:
Well-regarded for its level of detail, assessment features, and challenging review questions and hands-on exercises, Cisco 642-515 helps you master the concepts and techniques that will enable you to succeed on the Cisco 642-515 exam the first time.