Free Cisco 642-618 Exam Dumps Questions & Answers


Exam Code/Number:	642-618Join the discussion
Exam Name:	Deploying Cisco ASA Firewall Solutions (FIREWALL v2.0)
Certification:	Cisco
Free Question Number:	137
Publish Date:	Oct 29, 2026
# of views:	3235
Rating 100%

Page: 1 / 28
Total 137 questions

Question 1

DRAG DROP
Drag the correct three access list entries (from the left) and drop them (on the right) in the order that is used when the interface ACL and global ACL are configured. Not all access list entries are required.

Question 2

When troubleshooting a Cisco ASA that is operating in multiple context mode, which two verification steps should be performed if a user context does not pass user traffic? (Choose two.)

A.Verify the interface status in the system execution space.
B.Verify the resource classes configuration by accessing the admin context.
C.Verify the interface status in the user context.
D.Verify that unique MAC addresses are configured if the contexts are using nonshared interfaces.
E.Verify the mac-address-table on the Cisco ASA.

Question 3

Refer to the exhibit.

Which statement about the Telnet session from 10.0.0.1 to 172.26.1.200 is true?

A.The Telnet session should be successful.
B.The Telnet session should fail because no matching flow was found.
C.The Telnet session should fail because the route lookup to the destination fails.
D.The Telnet session should fail because the inside interface inbound access list will block it.
E.The Telnet session should fail because inside NAT has not been configured.

Question 4

Scenario: To access Cisco ASDM, click the PC icon in the Topology window, ASDM and answer the following question as:

The Cisco ASA administration must enable the Cisco ASA to automatically drop suspicious botnet traffic. After the Cisco ASA administrator entered the initial configuration, the Cisco ASA is not automatically dropping the suspicious botnet traffic. What else must be enabled in order to make it work?

A.DNS snooping
B.DNS inspection in the global policy.
C.Botnet traffic filtering on atleast one of the Cisco ASA interface.
D.Periodic download of the dynamic botnet database from Cisco.
E.Manual botnet black and white lists.

Question 5

By default, not all services in the default inspection class are inspected. Which Cisco ASA CLI command do you use to determine which inspect actions are applied to the default inspection class?

A.show service-policy global
B.show policy-map global_policy
C.show class-map default-inspection-traffic
D.show policy-map inspection_default
E.show class-map inspection_default