Free Cisco 642-618 Exam Dumps Questions & Answers


Exam Code/Number:	642-618Join the discussion
Exam Name:	Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0)
Certification:	Cisco
Free Question Number:	137
Publish Date:	Aug 18, 2026
# of views:	3036
Rating 100%

Page: 1 / 28
Total 137 questions

Question 1

When will a Cisco ASA that is operating in transparent firewall mode perform a routing table lookup instead of a MAC address table lookup to determine the outgoing interface of a packet?

A.if the destination MAC address is unknown
B.if dynamic ARP inspection is configured
C.if multiple context mode is configured
D.if NAT is configured
E.if the destination is more than a hop away from the Cisco ASA

Question 2

Which five options are valid logging destinations for the Cisco ASA? (Choose five.)

A.SNMP traps
B.AAA server
C.buffer
D.TCP-based secure syslog server
E.email
F.Cisco ASDM
G.LDAP server

Question 3

Scenario: To access Cisco ASDM, click the PC icon in the Topology window, ASDM and answer the following question as:

Which statement about the Cisco ASA configuration is true?

A.Traffic between two hosts connected to the same interface is permitted.
B.All input traffic on the inside interface is denied by the global ACL.
C.ICMP echo-request traffic is permitted from the inside to the outside, and ICMP echo-reply will be permitted from the outside back to inside.
D.HTTP inspection is enabled in the global policy.
E.All input and output traffic on the outside interface is denied by the global ACL.

Question 4

Refer to the exhibit.

Which reason explains why the Cisco ASA appliance cannot establish an authenticated NTP session to the inside 192.168.1.1 NTP server?

A.The ntp server 192.168.1.1 command is incomplete.
B.The trusted-key number should be 1 not 2.
C.The ntp access-group peer command and the ACL to permit 192.168.1.1 are missing.
D.The ntp source inside command is missing.

Question 5

Refer to the exhibit.

Which three CLI commands are generated by these Cisco ASDM configurations? (Choose three.)

A.nat (outside,inside) static 192.168.1.0 dns
B.ip address 10.1.1.0 255.255.255.0
C.object network testobj
D.subnet 10.1.1.0 255.255.255.0
E.nat (inside,any) static 192.168.1.0 dns
F.nat (any,any) static 192.168.1.0 dns
G.object-group network testobj
H.nat (any,inside) static 192.168.1.0 dns
I.nat (inside,outside) static 192.168.1.0 dns