642-524 test dump
642-524 Exam
Securing Networks with ASA Foundation
* Exam Number/Code : 642-524
* Exam Name : Securing Networks with ASA Foundation
* Questions and Answers : 62 Q&As
* Update Time: 2010-06-08
* Price: $ 112.00
1. Refer to the exhibit. Which two statements accurately describe the effect of the configuration that is shown in the exhibit? (Choose two.)
A. Users will be prompted for a username and password when they start HTTP connections to host 192.168.1.11 from the outside.
B. Users will be prompted for a username and password when they start HTTP connections from the inside to host 192.168.1.11 on the outside interface.
C. The security appliance will first contact host 10.0.1.2 on the inside interface for verification of credentials; if host 10.0.1.2 is unavailable, the security appliance will attempt to authenticate the user via the local user database.
D. The security appliance will contact a AAA server in the AUTHIN server group for verification of credentials.
Answer: AD
2. To require users to authenticate before accessing the corporate DMZ servers, the network security administrator needs to configure cut-through proxy authentication via RADIUS. Which three tasks are required to accomplish this goal? (Choose three.)
A. Specify a AAA server group.
B. Designate an authentication server.
C. Add users to the local user database.
D. Configure per-user override.
E. Configure a rule that specifies which traffic flow to authenticate.
F. Assign ACLs to users or groups.
Answer: ABE
3. Which two statements accurately describe the downloadable ACL feature of the security appliance? (Choose two.)
A. Downloadable ACLs are the only supported authorization method that works without authentication.
B. Downloadable ACLs enable you to store full ACLs on a AAA server and download them to the security appliance.
C. Downloadable ACLs are supported using TACACS+ or RADIUS.
D. The downloadable ACL must be attached to a user or group profile on a AAA server.
E. The security appliance supports only per-user ACL authorization.
F. Downloadable ACLs cannot be manually removed; they must expire based on the configured timeout.
Answer: BD
To execute Testinside.com, it is necessary to have providing latest 642-524 exam information and you can download 642-524 demo for free. Testinside 642-524 Exam is written to coincide with the real test by the experienced IT experts and specialists. With the complete collection of Questions and Answers, Testinside 642-524 is high enough to help the candidates to pass 642-524 exam easily without any other study materials and no need to attend the expensive training class.
Testinside is fully equipped with resources and Cisco 642-524 exam questions. It also contains Cisco 642-524 practice test, 642-524 test dump, which can help a candidate for 642-524 test preparation pass an examination. Your training is made a lot easier as you can download 642-524 braindump exams and testing software from the Testinside site.
We at Testinside 642-524 exam are I.T. experts and are highly experienced in the field of exam braindumps and study notes as our team is continuously working for the more accomplished 642-524 exam guide and test questions. At Cisco 642-524 IBM certification, 642-524 braindumps page all the necessary 642-524 exam guide is available which not only includes free 642-524 but it also contains 642-524 study guide and 642-524 practice exam.
No related posts.
Related posts brought to you by Yet Another Related Posts Plugin.