642-524 Exam

It can be downloaded after you paying for it without any delay!

Free 642-524 Dumps Download

VisualExams offer 642-524 practice test,it will help you pass the exam.Also we offer free 642-524 test demo. They are a part of the full questions,you can view the question on our test engine before you decide to purchase.Click the link below to download our test engine,install it,search 642-524,then click download demo.

Free download Test Engine

Free download 642-524 PDF

　
　
Exam : Cisco 642-524
Title : Securing Networks with ASA Foundation


1. Refer to the exhibit. Given the configuration that is shown, what traffic will be logged to the AAA server?
A. All connection information will be logged in the accounting database.
B. All outbound TCP connection information will be logged in the accounting database.
C. Only authenticated and authorized console connection information will be logged in the accounting database.
D. No information will be logged. This is not a valid configuration because TACACS+ connection information cannot be captured and logged.
Answer: B

2. Refer to the exhibit. A network administrator wants to authenticate remote users who are accessing the WEB1 server from the Internet. When a remote user initiates a session to the WEB1 server, the ASA1 security appliance will verify the credentials of the user with the TX_ACS AAA server via RADIUS. To accomplish this, the administrator must load and configure Cisco Secure ACS software on the TX_ACS AAA server. During the process, the administrator must correctly configure the AAA client information in the Cisco Secure ACS network configuration window.
What must the administrator place in field A (AAA Client Hostname) and field B (AAA Client IP Address)?
A. ATX_ACS
B10.0.1.10
B. AWEB1
B172.16.1.2
C. AASA1
B10.0.1.1
D. ABOB
B192.168.2.10
Answer: C

3. Which two statements accurately describe the downloadable ACL feature of the security appliance? (Choose two.)
A. Downloadable ACLs are the only supported authorization method that works without authentication.
B. Downloadable ACLs enable you to store full ACLs on a AAA server and download them to the security appliance.
C. Downloadable ACLs are supported using TACACS+ or RADIUS.
D. The downloadable ACL must be attached to a user or group profile on a AAA server.
E. The security appliance supports only per-user ACL authorization.
F. Downloadable ACLs cannot be manually removed; they must expire based on the configured timeout.
Answer: BD

4. To require users to authenticate before accessing the corporate DMZ servers, the network security administrator needs to configure cut-through proxy authentication via RADIUS. Which three tasks are required to accomplish this goal? (Choose three.)
A. Specify a AAA server group.
B. Designate an authentication server.
C. Add users to the local user database.
D. Configure per-user override.
E. Configure a rule that specifies which traffic flow to authenticate.
F. Assign ACLs to users or groups.
Answer: ABE

5. The network security administrator for XYZ Corporation wants to apply specific restrictions to one network user, Bob, who works from home and accesses the corporate network from the outside interface of the security appliance. The administrator decides to use the downloadable ACL feature of the security appliance to control network access for this user. Authentication of inbound traffic is already configured on the security appliance, and Bob already has a user account on the Cisco Secure ACS. Which three tasks does the administrator need to complete in order to accomplish the goal of limiting network access for Bob via downloadable ACLs? (Choose three.)
A. Enable inbound authorization on the security appliance.
B. Configure the security appliance to use downloadable ACLs.
C. Attach the downloadable ACL to the user profile for Bob on the Cisco Secure ACS.
D. In the authorization configuration of the security appliance, specify the RADIUS server where the user account for Bob resides.
E. Configure the Cisco Secure ACS to use downloadable ACLs.
F. Configure the downloadable ACLs on the Cisco Secure ACS.
Answer: CEF

VisualExams 642-524 Exam Description

642-524 exam training is available in various formats to best suit your needs and learning style from VisualExams. Whether you are a hands-on tactile learner, visually or even a textbook training veteran, we has the 642-524 resources that will guarantee you to pass your 642-524 practice exam at the first time!

Guarantee to Pass Your 642-524 Exam

We provide the latest high quality 642-524 practice exam for the customers,we guarantee your success at the first attempt with only our 642-524 exam questions, if somehow you do not pass the exam at the first time, we will Free update for you!

The Tenet Of VisualExams

Our on-site online training experts create all of the Cisco 642-524 exam products available through Actual-Exams. Our main goal is that you get more kownleage with less money.You will find our price is very cheap.

After-sales Service

Once you purchase our products,we will offer you the best service.After you purchase our product, we will offer free update in time for 90 days.Whatever you have any questions,we will help you solve it. And in 3 weeks we will offer you free updates,so please pay attention our site at all times.

Acquiring Cisco Others certifications are becoming a huge task in the field of I.T. More over these exams like 642-524 exam are now continuously updating and accepting this challenge is itself a task. This 642-524 practice test is an important part of Cisco certifications and at Others braindumps we have the resources to prepare you for this. The 642-524 exam is essential and core part of Cisco certifications and once you clear the exam you will be able to solve the real time problems yourself.Wamt to take advantage of the Real 642-524 Value Pack and save time and money while developing your skills to pass your Cisco Certified Network Associate (Others) Exam'? Let VisualExams help you climb that ladder of success and pass your 642-524 now!