Which command both verifies that NAT is working properly and displays active NAT translations?
A. show nat translation
B. show running-confugration nat
C. show ip nat all
D. show xlate
Answer: D

Which three of these are Cisco ASA syslog message fields? (Choose three.)
A. syslog community string
B. message.text
C. triggering packet copy
D. logging device ip
E. default ASA gateway
F. logging level
Answer: B,D,F

An Administrator wants to protect a DMZ web server from SYN Flood attacks. Which three of these commands, used individually would allow the administrator to place limits on the number of embryonic connections? (choose three.)
A. http redirect
B. nat
C. http-proxy
D. static
E. set connection
F. access-list
Answer: B,D,E

Which of these commands displays the status of the CSC SSM on the Cisco ASA?
A. show module 1 CSC details
B. show hw 1 details
C. show module 1 details
D. show interface GigabitEthernet 1/0
Answer: C

The Cisco VPN Client supports which three of these tunneling protocols and methods? (Choose three.)
A. AH
B. LZS
C. IPSec over TCP
D. IPSec over UDP
E. SCEP
F. ESP
Answer: C,D,F

What does the nat 0 command do?
A. The nat 0 command, followed by an access list, specifies the addresses that are not to be translated
B. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that are to be translated using network address translations
C. The nat 0 command, followed by a range of IP Addresses, specifies the addresses that are to be translated when used for IPSec
D. The nat 0 command, followed by an access list, specifies the addresses that are to be used in translations only once
Answer: A

What does the activation-key command in the Cisco ASA do?
A. Applies the activation key to the Cisco ASDM so the Cisco ASA can be managed using a web interface
B. Applies the activation key to the Cisco ASA operating system, so that the Cisco ASA is licensed and all features are available
C. Activates the SSM module in the Cisco ASA, providing intrusion protection and content filtering
D. Automatically activates the Cisco ASA, allowing it to be configured right out of the box
Answer: B

Related posts:

1. Practice Questions for Exam 642-523 – Part 2
2. Practice Questions for Exam 642-523 – Part 3
3. Cisco ASA version 8.3 is here
4. Passing non-IP Traffic over IPSEC VPN using GRE over IPSEC
5. ASA Firewall NAT Control Feature
6. How to upgrade Cisco ASA Firewall License
7. Cisco IOS Router Operation-CCNA Exam Prep