PrepAway - Latest Free Exam Questions & Answers

Category: 642-524 (v.1)

Exam 642-524: Securing Networks with ASA Foundation (update November 8th, 2015)

Which command would redirect HTTP traffic bound for the DMZ web server to its real IP address of 10.10.11.4?

The Hypertext Transfer Protocol (HTTP) is an application-level protocol for distributed,
collaborative, hypermedia information systems. An internet customer is sending HTTP traffic to a
DMZ server with the external address of 192.168.1.4. Which command would redirect HTTP traffic
bound for the DMZ web server to its real IP address of 10.10.11.4?

How to set the following values?

The network security department wants to adjust the default DoS drop rate thresholds for basic
threat detection to trigger logs properly for its network environment. This can give more accurate
information about the possibility of a DoS attack. How to set the following values?
-Rate interval: 600 sec -Average rate: 50 drops per sec -Burst rate: 100 drops per sec

What is the inspect http HTTP_TRAFFIC command used for in this policy map presented as follows?

What is the inspect http HTTP_TRAFFIC command used for in this policy map presented as
follows?
hostname(config)# class-map inspection_default hostname(config-cmap)# match
default_inspection_traffic hostname(config)# class-map HTTP_TRAFFIC hostname(config-cmap)#
match porttcp eq 80 hostname(config)# class-map HTTP_PROXY_TRAFFIC_8080
hostname(config-cmap)# match porttcp eq 8080
hostname(config)# policy-map OUTSIDE_POLICY -hostname(config-pmap)# class
inspection_default -hostname(config-pmap-c)# inspect http HTTP_TRAFFIC -hostname(configpmap-c)# inspect http HTTP_PROXY_TRAFFIC_8080 -hostname(config-pmap)# class
HTTP_TRAFFIC -hostname(config-pmap-c)# set connection timeout tcp 0:10:0 -hostname(configpmap)# class HTTP_PROXY_TRAFFIC -hostname(config-pmap-c)# set connection timeout tcp
0:10:0


Page 14 of 15« First...1112131415