Free Cisco 642-648 Exam Dumps Questions & Answers

Refer to the exhibit.

While troubleshooting a remote-access application, a new NOC engineer received the logging message that is shown in the exhibit.
Which configuration is most likely to be mismatched?

• A.extended authentication configuration
• B.IKE configuration
• C.digital certificate configuration
• D.IPsec configuration

Refer to the exhibit.

After a remote user established a Cisco AnyConnect session from a wireless card through the Cisco ASA appliance of a partner to a remote server, the user opened the Cisco AnyConnect VPN Client Statistics Details screen.
What are the two sources of the IP addresses that are marked A and B? (Choose two.)

• A.IP address of the default gateway router of the partner
• B.IP address that is assigned to the wireless Ethernet adapter of the remote user
• C.IP address that is assigned to the remote user from the Cisco ASA address pool
• D.IP address of the Cisco ASA physical interface of the partner
• E.IP address of the Cisco ASA virtual HTTP server of the partner
• F.IP address of the default gateway router of the remote user

What are three methods for VPN address assignment? (Choose three.)

• A.LDAP server
• B.internal address pool
• C.RADIUS authentication server
• D.RSA SecureID authentication server
• E.Kerberos server

Refer to the exhibit.

In the CLI snippet that is shown, what is the function of the deny option in the access list?

• A.When set in conjunction with outbound connection-type bidirectional, its function is to prevent the specified traffic from being protected by the crypto map entry.
• B.When set in conjunction with connection-type originate-only, its function is to instruct the Cisco ASA to deny specific inbound traffic if it is not encrypted.
• C.When set in conjunction with connection-type originate-only, its function is to cause all IP traffic that matches the specified conditions to be protected by the crypto map.
• D.When set in conjunction with outbound connection-type answer-only, its function is to instruct the Cisco ASA to deny specific outbound traffic if it is not encrypted.

Which statement is true about configuring the Cisco ASA for Active/Standby failover?

• A.VPN images, profiles, and plug-ins must be manually provisioned to both devices.
• B.Both devices perform load sharing until a failure occurs.
• C.All VPN-related configurations and files are automatically replicated.
• D.All versions of Cisco ASA software need to have the same licensing on both devices.