642-522 Exam

It can be downloaded after you paying for it without any delay!

Free 642-522 Dumps Download

VisualExams offer 642-522 practice test,it will help you pass the exam.Also we offer free 642-522 test demo. They are a part of the full questions,you can view the question on our test engine before you decide to purchase.Click the link below to download our test engine,install it,search 642-522,then click download demo.

Free download Test Engine

Free download 642-522 PDF

　
　
Exam : Cisco 642-522
Title : Securing Networks with PIX and ASA Exam(SNPA)


1. Refer to the exhibit.
An administrator wants to permanently map host addresses on the DMZ subnet to the same host addresses, but a different subnet, on the outside interface. Which command should the administrator use to accomplish this?
A. NAT (dmz) 0 172.16.1.0 netmask 255.255.255.0
B. access-list server_map permit tcp any 192.168.10.0 255.255.255.0
Nat (outside) 10 access-list server_map
Global (dmz) 10 172.16.1.9-10 netmask 255.255.255.0
C. static (dmz,outside) 192.168.10.0 172.16.1.0 netmask 255.255.255.0
D. NAT (dmz) 1 172.16.1.0 netmask 255.255.255.0
　Global (outside) 1 192.168.10.9-10 netmask 255.255.255.0
Answer: C

2. An administrator is defining a modular policy. As part of the policy, the administrator wants to define a traffic flow between Internet hosts and a specific web server on the DMZ. Which commands should the administrator use?
A. class-map http_traffic
　match port tcp eq www
B. class-map http_traffic
　match flow ip destination address 192.168.1.11
C. class-map http_traffic
　match set 192.168.1.11
D. access-list 150 permit tcp any host 192.168.1.11 eq www
class-map http_traffic
match access-list 150
Answer: D

3. Refer to the exhibit.
The network administrator for this small site has chosen to authenticate HTTP cut-through proxy traffic via a local database on the Cisco PIX Security Appliance. Which command strings should the administrator enter to accomplish this?
A. pix1(config)# static (dmz,outside) 192.168.16.6 172.16.16.6
pix1(config)# access-list 150 permit tcp any host 172.16.16.6 eq www
pix1(config)# aaa authentication match 150 outside LOCAL
B. pix1(config)# static (dmz,outside) 192.168.16.6 172.16.16.6
pix1(config)# access-list 150 permit tcp any host 192.168.16.6 eq www
pix1(config)# aaa authentication match 150 outside pix1
C. pix1(config)# static (dmz,outside) 192.168.16.6 172.16.16.6
pix1(config)# access-list 150 permit tcp any host 172.16.16.6 eq www
pix1(config)# aaa authentication match 150 outside pix1
D. pix1(config)# static (dmz,outside) 192.168.16.6 172.16.16.6
pix1(config)# access-list 150 permit tcp any host 192.168.16.6 eq www
pix1(config)# aaa authentication match 150 outside LOCAL
Answer: D

4. Refer to the exhibit.
An administrator wants a user on the inside network to access two sites on the Internet and present two different source IP addresses. When the user is accessing Company A web servers, the source IP address is translated to 192.168.0.9. When the user is accessing Company B web servers, the source address is translated to 192.168.0.21.
Which of these can the security appliance administrator configure to accomplish this application?
A. inside NAT
B. identity NAT
C. static
D. policy NAT
Answer: D

5. When an outside FTP client accesses a corporation's dmz FTP server through a security appliance, the administrator wants the security appliance to restrict ftp commands that can be performed by the client. Which security appliance commands enable the administrator to restrict the ftp client to performing a specific set of ftp commands.
A. ftp-map inbound_ftp
　request-cmd deny appe dele rmd
B. ftp-map inbound_ftp
　request-cmd permit get put cdup
C. policy-map inbound
class inbound_ftp_traffic
inspect ftp strict get put cdup
D. policy-map inbound
class inbound_ftp_traffic
inspect ftp strict appe dele rmd
Answer: A

VisualExams 642-522 Exam Description

642-522 exam training is available in various formats to best suit your needs and learning style from VisualExams. Whether you are a hands-on tactile learner, visually or even a textbook training veteran, we has the 642-522 resources that will guarantee you to pass your 642-522 practice exam at the first time!

Guarantee to Pass Your 642-522 Exam

We provide the latest high quality 642-522 practice exam for the customers,we guarantee your success at the first attempt with only our 642-522 exam questions, if somehow you do not pass the exam at the first time, we will Free update for you!

The Tenet Of VisualExams

Our on-site online training experts create all of the Cisco 642-522 exam products available through Actual-Exams. Our main goal is that you get more kownleage with less money.You will find our price is very cheap.

After-sales Service

Once you purchase our products,we will offer you the best service.After you purchase our product, we will offer free update in time for 90 days.Whatever you have any questions,we will help you solve it. And in 3 weeks we will offer you free updates,so please pay attention our site at all times.

Acquiring Cisco CCSP certifications are becoming a huge task in the field of I.T. More over these exams like 642-522 exam are now continuously updating and accepting this challenge is itself a task. This 642-522 practice test is an important part of Cisco certifications and at CCSP braindumps we have the resources to prepare you for this. The 642-522 exam is essential and core part of Cisco certifications and once you clear the exam you will be able to solve the real time problems yourself.Wamt to take advantage of the Real 642-522 Value Pack and save time and money while developing your skills to pass your Cisco Certified Network Associate (CCSP) Exam'? Let VisualExams help you climb that ladder of success and pass your 642-522 now!